last executing test programs: 5.005026582s ago: executing program 2 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2e0c0}, 0x44000801) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x460100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x88840, 0x104) close_range(r1, 0xffffffffffffffff, 0x0) 4.248269205s ago: executing program 3 (id=504): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) connect$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x0, 0x8, 0x1, "64e22a4a21573e8e1a4ee5ffa09bec9d21a5077b6066048644e4f861ce10cb67612ca19c73d0917f5b6fb8bfb0812c8d48fd679a53a4e9425d56ddb10255a3", 0x4001e}, 0x60) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x141002, 0x0) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x40800) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) close_range(r6, r5, 0x2) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) 4.117100133s ago: executing program 3 (id=505): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x4, @raw_data="c5d338ded919da97ae93477cc58b32e58c690e61d975a5f8bdc8f83daab2c64959676f3bfe6ce3cf2f58affd1633ab3602489c118e6b964f384f8a604e2d6927e0b853cf0cc4cfb1a7bc36b001afe299a57ef91e95723b0b95506acf533e4ddf668b98f890bdc8b841864546c8eb5457e22749496cd2f88581ec4c5fdb258712ab79830ef5390f7eb519605ec4e04e3d395341cf19eea173f120c53eee1558e3d67a1d0d5effbb3235f6c55ab7b4d867a72223d346fef80833deff5e186b4c7ae1bfc1bc9023d7bf"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2000000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000340), 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendto$packet(r6, &(0x7f0000000040)="682273302d32d6ec00c1a7b22cac966fc07f4bf92153b181c202aa7909afc53f2e1597d3a535b24fdbc145bc34f0338b3101d9bc499707b9f6b7136668a5d7cb64687e378bc953b888cfc4cb3f24", 0x4e, 0x2004c050, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000300)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r8}}, 0x18) 3.493374249s ago: executing program 0 (id=512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a0103000000000000000fea0000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 3.492868348s ago: executing program 0 (id=513): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='stack\x00') pread64(r4, &(0x7f0000000400)=""/15, 0xf, 0x2) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 3.455519728s ago: executing program 0 (id=514): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) lseek(r2, 0x1000000005, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000400)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r6, @ANYRESHEX, @ANYRESDEC=r1, @ANYRES16=r4, @ANYRES16=r3, @ANYBLOB="c188c44fb3e7bcb3ee7ae1ad5fc164b11010642246380ed04401ac5557e20f37298b1355d37e3f206922bdf1b06522fd1f01eaf5c432fde2b2e25401c1d6c3ac03fd22c2010090804143bdcc3f23c51ebfcb5743c570de6737d8a18c1028d353f1b24224fd77bd495f5987f0c6ce82302eb7034ba6fcf444344471beb075b97da2a47c793d7f7bf27bd5910f548eb50e74bc61a6098f", @ANYRES32=r0], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000280), 0x3000000000b, 0x84102) ioctl$VIDIOC_QUERYMENU(r8, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100c}) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x80000000, 0x4) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) write$binfmt_register(r9, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = socket(0x2a, 0x80000, 0x3e4b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x83, &(0x7f00000011c0)={r12}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000200)={0x3, 0x0, 0x100, 0xa, r12}, 0x10) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="040013000a00060008021100000100000600100028060000060012"], 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0xc0) 3.35275257s ago: executing program 2 (id=515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800800024000000006180003006c7200006c7200000001000000000100070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 3.209399176s ago: executing program 2 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x0, 0x3}]}) 3.122527657s ago: executing program 2 (id=517): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000005c0)=[0x401, 0x200]) mq_unlink(&(0x7f0000000000)='eth0\x00') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00&%'], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000540)={{r2}, 0x4, &(0x7f0000000000)=[0x6, 0x0, 0x8001, 0x1], 0x1fffe00, 0xd}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000500), 0x2480, 0x0) setuid(0xee01) r3 = shmget$private(0x0, 0x2000, 0x442, &(0x7f00002a5000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e7, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000340)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x125, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001979eff2104810459a7000000010902d904020800d0fc0904aa02000202ff060904970908ad28387f0a24010500050201020b240602010208000200060d2407040500038ad365346e440b2407030600007e1a0000092403010703040602082404050951d0510c240201000105bd03007009ca075122aec9eadc2d09ba238f1ff2cc406274a122ef1d73b192b9353116aecabcd36efb2113fa171c35caf862fb90bb36a8100471c3b4a5b58e917b396afd03fc9f7177bdf569155770428ed294aa5be2d969d505def21f060ccefb1da72e3c827ddf75957ebcf6d2b59482186eef15f9afb8c092c2df6b6b8358aa8229b4c774f63bd809d525641f7f60ef3d41549a4a02e5a6a2e9432394f78b843d30a2c045799a441e02b12b9bcb97cf452ca710e99fbd9e116628c31e8af46b1c1aa7e6fe48470dec555dcec3b309050500080080fc0702050905040010000300ff07250182010d000725010301020009050d1008000700440201bcdd3fa0ea4384242123f3b9afc608352ef7c75e21f562c5abfea69cea009d7664055532a227d3dd8348241314e233bedd7dc09c6289c2d1195632edc360a04fd1bdc00d6b979d4ab22044b0d189d56a84359c1c85e07ddf737fb608a3fbf9995ffb1754f859b3ee6a36a47c944a2f5cd051ac96c01d3251533e04163b43cff9fcdccc1d4511e95d976975c02a37619ab2e4cecee128aacc1f6f647f9844d16f5cc02e0d992f265a3405c94f9803683d5f5a704c06d86ddea1958b28c54ac70a8f897799938125d42a1ab5cc7e621c902e5ee97783625addcf1a4d00000000000000005ba8d1a0034dde3821a32aac9b22ab47d5211f55c6361dcbde4d079da4efd8a3a035954f55bf59fdd1de804030e41666c6e72baff699388f4e860bf739444e527570a5d9f5f54d6009c616f277e0a48da7e847c9ad32d010f66803bf93d3e76608673f8ccde30905080300040580f8ba11297b21b6686bc1d94a5849256fa9c2a5f60881e41e975f7697f1c89c7b8b3402c91390bc956669d49b68ac23c01464d49643cfd7550f036edbe80d98de958c182113f4970c13494498137889bd95a56d3c7ac7bb79b1ad9c0c577e3b3d50bdb111010000000100000051166a608d3817241c9b7a61a4c7aa601c3cf2dbb966a1e676dd1ac0472a716767b4f1206200b32546642945de80c5663b87cf6f16ff6cc5678db9e9875b60c8582fc12bdd567c61aaf4f8590ca29ed1084cd48e51381c128e1d198a45eb8d03469437261d27ec074a7bd8ce9ca8c6ad3066a3bc8724a778a6b491011e6a4c1c805d87f9acfaf4ee00f700546e811798497dac8b75f0b3eb5309863d46fecd79ed9effd198fca0617daa40907b7a68623c7e87d59c162eab8b03a4a155e284817c8186b430848ed47c4752e5234feee400c5e8b6b7df41ae2fe6dae556923de57fa3285ecf3d4ea3254ceeda60a78a8c8552d88680ba4dfe03a54776406cebd888795de48202651f47102a6047c5b58f1375022cacd1e6cd1bcdc7c5d04b5ba309050a03ff03030880072501028006000725010309010009050804000200100807250100050e003103798144690eb07b5087e47e28f50f66ee802856bb786f961a8255483b2277e5399b322f28070c032e39f099035b4b13090580100004010d01090505001000c40208"], 0x0) 1.224907825s ago: executing program 1 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800800024000000008180003006c7200006c7200000001000000000100070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 1.033155534s ago: executing program 1 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x6, 0xffffffffffffffff, 0x334, 0x1, 0x0, 0x8, 0xb4fbd, 0x344f64, 0xffffffffffffff7b}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000003b0007010000000000000000027c00000400fc800c0001"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000040)={0x40, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001100)=""/4105, &(0x7f00000010c0)=0xfffffffffffffd31) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x7fffffff, 0x7, 0x4000000000000e52, 0x7, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x0, 0x800040068], 0x2000, 0x40110}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.032313136s ago: executing program 3 (id=526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0xe0, 0x11, 0xf720b6c5c733ef9d, 0x70bd29, 0x25dfdbfc, {0x2}, [@nested={0xc9, 0x28, 0x0, 0x1, [@nested={0x4, 0xa0}, @generic="1e108813e26f5e64b8dde63e7e568233732f65d65ea9d6861078446939505f72e565658ac621b3c382d690b12728b56905152170f3d39b7dfe82e0392316ad499bb51601a6dd0fa575ff02b507f689ef878cd209223dc3d58fcce4197cdd86e6e0bc07f0951503dcdecfc14904276753ba952bf37d77da106bfa6789ac2f5da32871969b2393a6a1c8a3216810b92e2118d6a80ec909b9fbd2e2676152b09de57bec1c2eadd4d4848382327b85a2cb31eb2417abd935e50200f2f4c96b8f33c7aa"]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x20044010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x221100, 0x240, 0x806, 0x40, 0x548c, 0x0, 0x0, 0x40, 0x7f}}, 0x50) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) ioctl$PPPIOCCONNECT(r9, 0x4004743a, &(0x7f0000000100)=0x1) (async) write$FUSE_ATTR(r9, &(0x7f0000000480)={0x78, 0xffffffffffffffda, r7, {0x2, 0xd, 0x0, {0x0, 0x4000000007, 0x8, 0x4, 0x83d, 0x4eb1, 0x9bed, 0x4, 0x4, 0xa000, 0x9, r8, 0x0, 0x6, 0x6}}}, 0x78) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup(r10) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d6163000500010007000000140007800800134000000000080012"], 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd2a, 0x25dfdbfb, 0x81}, 0x14}}, 0x40800) 969.163582ms ago: executing program 3 (id=527): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 896.903133ms ago: executing program 1 (id=528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000110000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 813.067263ms ago: executing program 1 (id=529): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) (async) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000300)={0x2, 0x5}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200), 0x2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_connect$uac1(0x4, 0xd6, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x5, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5d, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x1, 0x5b, 0x85e, 0x81, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x100, 0x4, 0x3, 0x4d}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0xb, "576f58a38f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x400, 0xe6, "e844e648"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x49, 0x7, {0x7, 0x25, 0x1, 0x80, 0xb5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0x6, "a67cd555500cc9ce"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x40, 0x2, 0x0, 0x3, "7a93"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xfa, 0x1, 0xcc, 0x79, "279e42", "63104e"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x5, "", "c675"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xa, 0x0, 0x8, {0x7, 0x25, 0x1, 0x80, 0x80, 0xd3}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x45, 0xfc, 0x40, 0x18}, 0x48, &(0x7f0000000240)={0x5, 0xf, 0x48, 0x2, [@generic={0x1f, 0x10, 0x1, "90956c2847671a300d1ee9d557b283f56459a970ea4248a6ff8663c3"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x9, 0xf000, 0xc000, [0x3f00, 0x3f00, 0x3f00, 0xc0, 0x3f00, 0xff3f00]}]}, 0xa, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc1a}}, {0xb2, &(0x7f0000000400)=@string={0xb2, 0x3, "a043541a44d556b74ca7253014b6890127aea962bc1d3a70082fc52936db86dbd9bf5402dd8fd627ebf01f3ab836cdf30dd899b9ead18e12e0bd9e56c95c6db7f3f4cdcc02981f07dea71b437e126cab46327206c216eb80a245fd56a278c39de7e96cb18700cf6e15c7c51bf075d0223a8cb18d7efdd22e8a68dcc607ff8b224718d42871683f703c648d4178e6021b9cec1874bbf4b483b208cbdaace2a8d0c64508fb1861e8737a42076c31ce35e2"}}, {0x84, &(0x7f0000000540)=@string={0x84, 0x3, "16e4c18760c3db8153363ed4ee78ff2d199249a5fd23c39c8448d2c3e575eed7a1f7dc4c7c9873832ef43e729195231eb6a5f172c0ed8a7763fde41977cd1c64061be8958ab8d04472587257fb61e498cce6a7854ddc0a23801bb0f050e3212312600caba06c1121f29b405cff6cb4f895357640ec09f0786051ff566d7576b04279"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41a}}, {0x35, &(0x7f0000000640)=@string={0x35, 0x3, "1ffc990ff3f46b45403eff41b769d48ba6e69f57582609b2762618d95f781eb1afa29edddfdf1be4cfc285db3dc907a3e625da"}}]}) 812.898086ms ago: executing program 3 (id=530): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x55, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={0xffffffffffffffff, 0x60}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES64=r2], 0x104}, 0x1, 0x0, 0x0, 0x811}, 0x40040) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 747.713999ms ago: executing program 1 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$FIONREAD(r3, 0x7040, 0x0) timerfd_gettime(r3, &(0x7f0000000240)) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r0, @ANYBLOB="ec68a0456350eaf02a336711be9b68f1fe3e227d73da916013e72aae871a3d998ca31b475d76b25fa5a756e8529d254635f8de5d151bf50dcd6f30e2b0baa0b5e58708f9109714a7aac686d2436446107559d785e6bd0ff862814773834cc7c03e861de5b830ecb7c56c6158fa18bf86c8075df398c6450991ac42c4e914d1833fedde18ffcfb71146e3d7e482f297033362c04ad346515051e3c5c2a33372d6c80f8a62a82fefb96e58cf531e91bc99d38c", @ANYRESDEC=r0, @ANYBLOB="4d9e018d26ce3d896ffa7a49402fcd8f484af679dce637e1524802a47d246065d00a8c99a6b8daaf5f4cfa6ca77a4d1be1dff58bf2c8fa58fa0a1f39d2e5f0e8f203badd3b1d66e350305dc0e525e466da919d11", @ANYBLOB="c0a3b79fdc7c0fae9b66f1d49ff749b6f255a2e1bef7bb4e66ea4d168218c7bc14978cefe1b533cc76fe852f52025b97abad9406e8b9e7edebef935d3aee0b64723db51b1e90cdf4df01a1ee0e9b3f14a23bebeca144ac473a3a51b791735ac0f4b097b919ff625ea32c44df6a88e0b1edfc40cf1df47cd8758f291594e67c29e580b655680d8a92b9ebf53c43663a720c12fa8affaf27cd305be545b54ebb99504399b10627eb15954797d7715c4f5dd90003c7680f7979e6b84508ed7cc04a63a6e1b63b224736615997eca195843870c23a0a9da45d4dd94478b45580"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r6, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}], 0x1, 0x2000000, 0x0) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000004a80)=0xffff8000, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000000)=0x5, 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)) syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x8000f766, 0x101f, 0xffffffff, 0x1f3, 0x0, 0x0}, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='2'}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3258ad, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_blocks=m']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='children\x00') 703.630303ms ago: executing program 3 (id=532): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x24, r3, 0x1, 0xfffffffd, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x20040010) bind$pptp(r1, &(0x7f0000001080)={0x18, 0x2, {0x0, @remote}}, 0x1e) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "1a29b98c"}]}}, 0x0}, 0x0) 585.134058ms ago: executing program 1 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2e0c0}, 0x44000801) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x460100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x1000000000ff, 0x0, 0x0, 0x0, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x88840, 0x104) close_range(r1, 0xffffffffffffffff, 0x0) 417.70276ms ago: executing program 0 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800800024000000009180003006c7200006c7200000001000000000100070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 346.717956ms ago: executing program 0 (id=535): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000280), 0x100000003, 0x711080) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x109c43, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) (async) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000000c0)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{}, {r2}, 0x2}) 241.249069ms ago: executing program 0 (id=536): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0xa00, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000740)=0x7f) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0xa00, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000740)=0x7f) (async) 62.358111ms ago: executing program 2 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000130000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 0s ago: executing program 2 (id=538): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0x127b, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='bbr', 0x3) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) kernel console output (not intermixed with test programs): F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.472567][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.622520][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 91.629532][ T5878] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 91.656759][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.662908][ T5878] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 91.678623][ T5878] usb 4-1: config 1 interface 0 has no altsetting 0 [ 91.691664][ T5878] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.695549][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.703812][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.718389][ T892] cfg80211: failed to load regulatory.db [ 91.718456][ T5878] usb 4-1: Product: Љ [ 91.729729][ T5878] usb 4-1: Manufacturer: 끵悋୤禎縭Ꚅㆇ譤戱럯鐣Ԓꏊ錺橋ऊऩ×Ꜹັᖝ듁䡽勞뺄䎽鵢ʴ뮧赐ꪸꔪ꘮ⰿ˜䈩徧═ꩣ豱嘮囥䝅❡珀ㆱ볌䇉㌞寃挽䟮闄椅뿯⛃﫬ྦྷ娂쩣ꔋᮇ䟛ꓚ꽻ῴ㤰漰繠Ѥ쇔㏪۫၂넟ㅩ궯楴鯻펧歪纸譄ꆃ䕮규꽮נּ츫霫䒻좎鮷ڪ螓䮒㼍ꩼﵽ걎䌂戽ⱍⰮ됺⊸ [ 91.778412][ T5878] usb 4-1: SerialNumber: ы [ 91.826744][ T5992] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.834730][ T5992] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.137625][ T6023] binder: 6022:6023 ioctl 4014563c 200000000000 returned -22 [ 92.262504][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.276616][ T5878] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 92.294378][ T5878] usb 4-1: USB disconnect, device number 2 [ 92.415663][ T5891] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 92.424805][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.433041][ T5891] usb 1-1: Product: syz [ 92.437243][ T5891] usb 1-1: Manufacturer: syz [ 92.441884][ T5891] usb 1-1: SerialNumber: syz [ 92.443304][ T5896] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.449828][ T5891] usb 1-1: config 0 descriptor?? [ 92.463163][ T5891] hub 1-1:0.0: bad descriptor, ignoring hub [ 92.469100][ T5891] hub 1-1:0.0: probe with driver hub failed with error -5 [ 92.583151][ T5896] usb 3-1: device descriptor read/64, error -71 [ 92.667756][ T5891] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 92.679610][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 92.689665][ T5891] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 92.698236][ T5891] usb 1-1: media controller created [ 92.712797][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.755731][ T5891] DVB: Unable to find symbol dib7000p_attach() [ 92.763884][ T5891] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 92.822503][ T5891] rc_core: IR keymap rc-dib0700-rc5 not found [ 92.822559][ T5896] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.828613][ T5891] Registered IR keymap rc-empty [ 92.846480][ T5891] dvb-usb: could not initialize remote control. [ 92.852813][ T5891] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 92.877615][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.903615][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.914265][ T6021] process 'syz.0.39' launched './file0' with NULL argv: empty string added [ 92.964567][ T5896] usb 3-1: device descriptor read/64, error -71 [ 93.082913][ T5896] usb usb3-port1: attempt power cycle [ 93.223585][ T6037] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 93.417391][ T43] usb 2-1: USB disconnect, device number 2 [ 93.432664][ T5896] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.463105][ T5896] usb 3-1: device descriptor read/8, error -71 [ 93.703696][ T5896] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 93.743113][ T5896] usb 3-1: device descriptor read/8, error -71 [ 93.855887][ T5896] usb usb3-port1: unable to enumerate USB device [ 94.323293][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.512504][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 94.524626][ T43] usb 4-1: config 252 has an invalid interface number: 116 but max is 0 [ 94.534850][ T43] usb 4-1: config 252 has no interface number 0 [ 94.541177][ T43] usb 4-1: too many endpoints for config 252 interface 116 altsetting 61: 51, using maximum allowed: 30 [ 94.556733][ T43] usb 4-1: config 252 interface 116 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 94.570765][ T43] usb 4-1: config 252 interface 116 has no altsetting 0 [ 94.578064][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 94.587711][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.805362][ T43] usb 4-1: string descriptor 0 read error: -71 [ 94.818619][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 94.832261][ T43] pvrusb2: ********** [ 94.836714][ T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 94.846889][ T43] pvrusb2: Important functionality might not be entirely working. [ 94.854735][ T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 94.866392][ T43] pvrusb2: ********** [ 94.870810][ T43] usb 4-1: selecting invalid altsetting 0 [ 94.877464][ T2343] pvrusb2: Invalid write control endpoint [ 94.879678][ T43] usb 4-1: USB disconnect, device number 3 [ 94.939868][ T2343] pvrusb2: Invalid write control endpoint [ 94.947232][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 94.957015][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 94.967789][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 94.978109][ T2343] pvrusb2: Device being rendered inoperable [ 94.978119][ T1541] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.987359][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 94.998992][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 95.008774][ T2343] pvrusb2: Attached sub-driver cx25840 [ 95.015949][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 95.026239][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 95.027396][ T6021] dib0700: could not acquire lock [ 95.077984][ T5891] usb 1-1: USB disconnect, device number 3 [ 95.144757][ T1541] usb 2-1: Using ep0 maxpacket: 16 [ 95.156421][ T5891] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 95.159063][ T1541] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.179065][ T1541] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.192876][ T1541] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 95.209533][ T1541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.244425][ T1541] usb 2-1: config 0 descriptor?? [ 95.412123][ T6089] netlink: 256 bytes leftover after parsing attributes in process `syz.3.63'. [ 95.672976][ T5896] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.693974][ T5878] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.708360][ T1541] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 95.822790][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 95.829856][ T5896] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 95.840300][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.852253][ T5896] usb 4-1: config 0 descriptor?? [ 95.861959][ T5896] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 95.872204][ T5878] usb 3-1: config 1 interface 0 has no altsetting 0 [ 95.888031][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.40 [ 95.897549][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.905611][ T5878] usb 3-1: Product: 䐊 [ 95.909800][ T5878] usb 3-1: Manufacturer: Ј [ 95.914384][ T5878] usb 3-1: SerialNumber: Ѝ [ 96.060328][ T5896] usb 4-1: Detected FT232B [ 96.090766][ T43] usb 2-1: USB disconnect, device number 3 [ 96.262301][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.271093][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.344613][ T5878] usbhid 3-1:1.0: can't add hid device: -71 [ 96.351784][ T5878] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 96.354449][ T6107] netlink: 256 bytes leftover after parsing attributes in process `syz.3.63'. [ 96.367910][ T5878] usb 3-1: USB disconnect, device number 7 [ 96.369625][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.394649][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.452216][ T5896] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 96.470998][ T5896] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 96.487176][ T5896] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 96.510562][ T5896] usb 4-1: USB disconnect, device number 4 [ 96.520279][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 96.530982][ T5896] ftdi_sio 4-1:0.0: device disconnected [ 96.703398][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 96.748932][ T6118] overlay: filesystem on ./file0 not supported as upperdir [ 97.033345][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.192537][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 97.206077][ T5896] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 97.224562][ T5896] usb 4-1: can't read configurations, error -22 [ 97.363580][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.412742][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.535325][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 97.547669][ T5896] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 97.577927][ T5896] usb 4-1: can't read configurations, error -22 [ 97.593420][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 97.593574][ T5896] usb usb4-port1: attempt power cycle [ 97.605934][ T43] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 97.636051][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.672904][ T43] usb 2-1: config 0 has no interface number 0 [ 97.682161][ T43] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 97.698170][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.713902][ T43] usb 2-1: Product: syz [ 97.729897][ T43] usb 2-1: Manufacturer: syz [ 97.735727][ T43] usb 2-1: SerialNumber: syz [ 97.751370][ T43] usb 2-1: config 0 descriptor?? [ 97.765502][ T43] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 97.962567][ T5878] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 97.972622][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.996651][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 98.007805][ T5896] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 98.017853][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.026336][ T5896] usb 4-1: can't read configurations, error -22 [ 98.037979][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.115653][ T5878] usb 3-1: device descriptor read/64, error -71 [ 98.163923][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.179720][ T10] usb 2-1: USB disconnect, device number 4 [ 98.214467][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 98.222006][ T5896] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 98.234999][ T5896] usb 4-1: can't read configurations, error -22 [ 98.241746][ T5896] usb usb4-port1: unable to enumerate USB device [ 98.362517][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.502513][ T5878] usb 3-1: device descriptor read/64, error -71 [ 98.621573][ T5878] usb usb3-port1: attempt power cycle [ 98.662498][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.817540][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.834439][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.844595][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.857548][ T892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.866040][ T43] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 98.875304][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.894059][ T43] usb 1-1: config 0 descriptor?? [ 98.962625][ T5878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 98.983285][ T5878] usb 3-1: device descriptor read/8, error -71 [ 99.056816][ T892] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 99.066222][ T892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.074311][ T892] usb 2-1: Product: syz [ 99.078618][ T892] usb 2-1: Manufacturer: syz [ 99.083342][ T892] usb 2-1: SerialNumber: syz [ 99.099250][ T892] usb 2-1: config 0 descriptor?? [ 99.116542][ T892] hub 2-1:0.0: bad descriptor, ignoring hub [ 99.132756][ T892] hub 2-1:0.0: probe with driver hub failed with error -5 [ 99.157387][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.168250][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.187399][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 99.201846][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 99.222700][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 99.223299][ T43] usb 1-1: USB disconnect, device number 4 [ 99.263089][ T5878] usb 3-1: device descriptor read/8, error -71 [ 99.321784][ T892] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 99.341171][ T892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.357879][ T892] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 99.367982][ T892] usb 2-1: media controller created [ 99.372831][ T5878] usb usb3-port1: unable to enumerate USB device [ 99.387109][ T892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.456691][ T892] DVB: Unable to find symbol dib7000p_attach() [ 99.466904][ T892] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 99.522297][ T6194] dib0700: tx buffer length is larger than 4. Not supported. [ 99.572708][ T892] rc_core: IR keymap rc-dib0700-rc5 not found [ 99.584261][ T892] Registered IR keymap rc-empty [ 99.589789][ T892] dvb-usb: could not initialize remote control. [ 99.596817][ T892] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 99.622825][ T892] usb 2-1: USB disconnect, device number 5 [ 99.680836][ T892] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 99.902617][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.971450][ T6242] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 99.984155][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.997126][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.026101][ T6242] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 100.073299][ T43] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 100.102560][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.132576][ T43] usb 4-1: Product: syz [ 100.136846][ T43] usb 4-1: Manufacturer: syz [ 100.158026][ T43] usb 4-1: SerialNumber: syz [ 100.174772][ T43] usb 4-1: config 0 descriptor?? [ 100.185591][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 100.367878][ T6252] loop4: detected capacity change from 0 to 524287936 [ 100.383358][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 100.544180][ T10] usb 1-1: config 4 has an invalid interface number: 6 but max is 1 [ 100.552287][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 100.564229][ T10] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 100.577408][ T10] usb 1-1: config 4 has no interface number 0 [ 100.584067][ T10] usb 1-1: too many endpoints for config 4 interface 6 altsetting 60: 100, using maximum allowed: 30 [ 100.595010][ T10] usb 1-1: config 4 interface 6 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.615154][ T6225] syzkaller1: entered allmulticast mode [ 100.622197][ T10] usb 1-1: config 4 interface 6 has no altsetting 0 [ 100.634643][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 100.661008][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.669424][ T10] usb 1-1: Product: syz [ 100.673826][ T10] usb 1-1: Manufacturer: syz [ 100.678433][ T10] usb 1-1: SerialNumber: syz [ 100.865915][ T43] gspca_sunplus: reg_r err -71 [ 100.870928][ T43] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 100.899481][ T43] usb 4-1: USB disconnect, device number 9 [ 100.930085][ T6265] Zero length message leads to an empty skb [ 100.945664][ T10] usb 1-1: USB disconnect, device number 5 [ 100.985207][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.6/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.155475][ T5927] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 101.172343][ T6275] loop4: detected capacity change from 0 to 524287936 [ 101.336259][ T5927] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 101.345917][ T5927] usb 3-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 101.356439][ T5927] usb 3-1: config 0 has no interface number 0 [ 101.363473][ T5927] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 511 [ 101.383274][ T5927] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.398478][ T5927] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 101.409015][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.417574][ T5927] usb 3-1: Product: syz [ 101.421847][ T5927] usb 3-1: Manufacturer: syz [ 101.426824][ T5927] usb 3-1: SerialNumber: syz [ 101.453386][ T5927] usb 3-1: config 0 descriptor?? [ 101.459109][ T6261] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 101.493135][ T5927] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 101.514514][ T5927] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 101.526630][ T5927] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 101.707695][ T10] usb 3-1: USB disconnect, device number 12 [ 101.736684][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 101.770736][ T10] cyberjack 3-1:0.69: device disconnected [ 101.851078][ T6296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.113'. [ 101.920184][ T6300] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 101.959273][ T6302] loop4: detected capacity change from 0 to 524287936 [ 101.966707][ T5896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 102.064141][ T6304] ======================================================= [ 102.064141][ T6304] WARNING: The mand mount option has been deprecated and [ 102.064141][ T6304] and is ignored by this kernel. Remove the mand [ 102.064141][ T6304] option from the mount to silence this warning. [ 102.064141][ T6304] ======================================================= [ 102.122536][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 102.134804][ T5896] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 102.160287][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.170371][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 102.179831][ T5896] usb 4-1: config 0 has no interface number 0 [ 102.196968][ T5896] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.232497][ T5896] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.262127][ T5896] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 102.301577][ T5896] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.329076][ T5896] usb 4-1: config 0 interface 52 has no altsetting 0 [ 102.345246][ T5896] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 102.358831][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.370697][ T5896] usb 4-1: config 0 descriptor?? [ 102.586807][ T5896] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input9 [ 102.753786][ T5927] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 102.788626][ T5896] usb 4-1: USB disconnect, device number 10 [ 102.946079][ T5927] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 102.958588][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.971850][ T5832] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 102.979765][ T5832] Bluetooth: Wrong link type (-22) [ 102.985148][ T5927] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 102.995069][ T5927] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 103.003301][ T5927] usb 3-1: Manufacturer: syz [ 103.010655][ T5927] usb 3-1: config 0 descriptor?? [ 103.019038][ T5927] igorplugusb 3-1:0.0: incorrect number of endpoints [ 103.102545][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.221340][ T5927] usb 3-1: USB disconnect, device number 13 [ 103.265286][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.275648][ T43] usb 1-1: config 0 has no interface number 0 [ 103.293310][ T43] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.321595][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.346952][ T43] usb 1-1: Product: syz [ 103.359383][ T43] usb 1-1: Manufacturer: syz [ 103.365137][ T43] usb 1-1: SerialNumber: syz [ 103.381362][ T43] usb 1-1: config 0 descriptor?? [ 103.431320][ T6324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.125'. [ 103.592060][ T43] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 103.603868][ T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.617037][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 103.628762][ T43] usb 1-1: media controller created [ 103.653893][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.849957][ T43] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 103.943684][ T5927] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.972168][ T43] usb 1-1: USB disconnect, device number 6 [ 104.102494][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 104.109829][ T5927] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 104.118446][ T5927] usb 2-1: config 0 has no interface number 0 [ 104.125118][ T5927] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 104.138979][ T5927] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 104.148284][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.156437][ T5927] usb 2-1: Product: syz [ 104.160722][ T5927] usb 2-1: Manufacturer: syz [ 104.166622][ T5927] usb 2-1: SerialNumber: syz [ 104.173628][ T5927] usb 2-1: config 0 descriptor?? [ 104.598522][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.624421][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.722955][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 104.724600][ T6359] usb usb8: usbfs: process 6359 (syz.0.135) did not claim interface 0 before use [ 104.892514][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 104.899444][ T43] usb 4-1: config 4 has an invalid interface number: 9 but max is 0 [ 104.918354][ T43] usb 4-1: config 4 has no interface number 0 [ 104.924827][ T43] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 104.935505][ T43] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 167 [ 104.945850][ T43] usb 4-1: config 4 interface 9 has no altsetting 0 [ 104.956110][ T43] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 104.966136][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.974339][ T43] usb 4-1: Product: syz [ 104.978813][ T43] usb 4-1: Manufacturer: syz [ 104.983660][ T43] usb 4-1: SerialNumber: syz [ 104.996384][ T6350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.009272][ T6350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 105.042145][ T5927] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input10 [ 105.056083][ T43] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 105.082511][ T5891] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 105.222329][ T1164] usb 4-1: Failed to submit usb control message: -71 [ 105.226947][ T5896] usb 4-1: USB disconnect, device number 11 [ 105.233856][ T1164] usb 4-1: unable to send the bmi data to the device: -71 [ 105.242300][ T1164] usb 4-1: unable to get target info from device [ 105.243186][ T5891] usb 1-1: device descriptor read/64, error -71 [ 105.248845][ T1164] usb 4-1: could not get target info (-71) [ 105.261039][ T1164] usb 4-1: could not probe fw (-71) [ 105.283702][ T5927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 105.443066][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 105.450253][ T5927] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 105.459348][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.469205][ T5927] usb 3-1: config 0 descriptor?? [ 105.482021][ T5927] as10x_usb: device has been detected [ 105.488273][ T5927] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 105.502674][ T5891] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 105.511020][ T5927] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 105.530413][ T5927] as10x_usb: error during firmware upload part1 [ 105.537559][ T5927] Registered device nBox DVB-T Dongle [ 105.642515][ T5891] usb 1-1: device descriptor read/64, error -71 [ 105.732760][ T5896] usb 3-1: USB disconnect, device number 14 [ 105.774595][ T5891] usb usb1-port1: attempt power cycle [ 105.789115][ T5896] Unregistered device nBox DVB-T Dongle [ 105.792420][ T5896] as10x_usb: device has been disconnected [ 106.132539][ T5891] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 106.164267][ T5891] usb 1-1: device descriptor read/8, error -71 [ 106.422520][ T5891] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 106.453069][ T5891] usb 1-1: device descriptor read/8, error -71 [ 106.562740][ T5891] usb usb1-port1: unable to enumerate USB device [ 106.707009][ T5891] usb 2-1: USB disconnect, device number 6 [ 106.964878][ T5832] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 106.973371][ T5832] Bluetooth: hci1: Injecting HCI hardware error event [ 106.981469][ T5832] Bluetooth: hci1: hardware error 0x00 [ 109.042556][ T5832] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 132.646535][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653109][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.801839][ T6402] binder: 6393:6402 ioctl c018620c 200000000380 returned -22 [ 179.945571][ T6410] netlink: 'syz.0.146': attribute type 10 has an invalid length. [ 179.960126][ T6410] macvlan1: entered allmulticast mode [ 179.972310][ T6410] veth1_vlan: entered allmulticast mode [ 179.986288][ T6410] team0: Port device macvlan1 added [ 180.171747][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.0.150'. [ 180.193047][ T5927] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.344523][ T5927] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 180.353849][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.375065][ T5927] usb 2-1: config 0 descriptor?? [ 180.382462][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 180.401686][ T5927] pwc: Creative Labs Webcam Pro Ex detected. [ 180.518086][ T5832] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 180.556338][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 180.572974][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.581476][ T10] usb 3-1: Product: syz [ 180.593937][ T10] usb 3-1: Manufacturer: syz [ 180.598575][ T10] usb 3-1: SerialNumber: syz [ 180.800963][ T5927] pwc: send_video_command error -71 [ 180.808572][ T5927] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 180.821005][ T6433] netlink: 80 bytes leftover after parsing attributes in process `syz.2.149'. [ 180.832032][ T5927] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 180.876863][ T5927] usb 2-1: USB disconnect, device number 7 [ 180.893794][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 180.932762][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 180.985187][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 181.009619][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 181.025092][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.050091][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 181.056086][ T6440] FAULT_INJECTION: forcing a failure. [ 181.056086][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.068425][ T10] usb 3-1: USB disconnect, device number 15 [ 181.087472][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(full) [ 181.087494][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.087512][ T6440] Call Trace: [ 181.087525][ T6440] [ 181.087532][ T6440] dump_stack_lvl+0x189/0x250 [ 181.087567][ T6440] ? __pfx____ratelimit+0x10/0x10 [ 181.087593][ T6440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.087614][ T6440] ? __pfx__printk+0x10/0x10 [ 181.087635][ T6440] ? __might_fault+0xb0/0x130 [ 181.087667][ T6440] should_fail_ex+0x414/0x560 [ 181.087697][ T6440] _copy_from_user+0x2d/0xb0 [ 181.087719][ T6440] input_event_from_user+0xb2/0x280 [ 181.087737][ T6440] ? __pfx_input_event_from_user+0x10/0x10 [ 181.087759][ T6440] ? input_inject_event+0xb6/0x340 [ 181.087782][ T6440] evdev_write+0x2a6/0x480 [ 181.087813][ T6440] ? __pfx_evdev_write+0x10/0x10 [ 181.087839][ T6440] ? bpf_lsm_file_permission+0x9/0x20 [ 181.087864][ T6440] ? security_file_permission+0x75/0x290 [ 181.087892][ T6440] ? rw_verify_area+0x255/0x4d0 [ 181.087917][ T6440] ? __lock_acquire+0xab9/0xd20 [ 181.087933][ T6440] ? __pfx_evdev_write+0x10/0x10 [ 181.087959][ T6440] vfs_write+0x27e/0xb30 [ 181.087982][ T6440] ? __pfx_vfs_write+0x10/0x10 [ 181.088000][ T6440] ? __fget_files+0x2a/0x420 [ 181.088022][ T6440] ? __fget_files+0x2a/0x420 [ 181.088040][ T6440] ? __fget_files+0x3a0/0x420 [ 181.088058][ T6440] ? __fget_files+0x2a/0x420 [ 181.088091][ T6440] ksys_write+0x145/0x250 [ 181.088109][ T6440] ? __pfx_ksys_write+0x10/0x10 [ 181.088129][ T6440] ? do_syscall_64+0xbe/0xfa0 [ 181.088158][ T6440] do_syscall_64+0xfa/0xfa0 [ 181.088184][ T6440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.088201][ T6440] ? clear_bhb_loop+0x60/0xb0 [ 181.088223][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.088239][ T6440] RIP: 0033:0x7f93c9f8f6c9 [ 181.088259][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.088273][ T6440] RSP: 002b:00007f93cae69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.088295][ T6440] RAX: ffffffffffffffda RBX: 00007f93ca1e5fa0 RCX: 00007f93c9f8f6c9 [ 181.088307][ T6440] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 181.088317][ T6440] RBP: 00007f93cae69090 R08: 0000000000000000 R09: 0000000000000000 [ 181.088327][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.088336][ T6440] R13: 00007f93ca1e6038 R14: 00007f93ca1e5fa0 R15: 00007fffc71327f8 [ 181.088365][ T6440] [ 181.199929][ T6443] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 181.365053][ T6443] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 181.382524][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.390239][ T1541] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.523670][ T1541] usb 4-1: device descriptor read/64, error -71 [ 181.545860][ T10] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 181.567430][ T10] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.577749][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 181.585122][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 181.595367][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.613533][ T10] usb 3-1: config 0 descriptor?? [ 181.763690][ T1541] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.896244][ T6465] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 181.902668][ T1541] usb 4-1: device descriptor read/64, error -71 [ 182.023846][ T1541] usb usb4-port1: attempt power cycle [ 182.052647][ T10] kye 0003:0458:5015.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 182.063969][ T10] kye 0003:0458:5015.0003: unknown main item tag 0x0 [ 182.075680][ T10] kye 0003:0458:5015.0003: item fetching failed at offset 3/5 [ 182.089641][ T10] kye 0003:0458:5015.0003: parse failed [ 182.097457][ T10] kye 0003:0458:5015.0003: probe with driver kye failed with error -22 [ 182.255188][ T10] usb 3-1: USB disconnect, device number 16 [ 182.362564][ T1541] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 182.383236][ T1541] usb 4-1: device descriptor read/8, error -71 [ 182.512528][ T5927] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 182.542630][ T6487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.172'. [ 182.623216][ T1541] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.644014][ T1541] usb 4-1: device descriptor read/8, error -71 [ 182.674337][ T5927] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 182.684210][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.695274][ T5927] usb 2-1: config 0 descriptor?? [ 182.715232][ T5927] pwc: Creative Labs Webcam Pro Ex detected. [ 182.753316][ T1541] usb usb4-port1: unable to enumerate USB device [ 183.111194][ T5927] pwc: send_video_command error -71 [ 183.119051][ T5927] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 183.127304][ T5927] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 183.139676][ T5927] usb 2-1: USB disconnect, device number 8 [ 183.192141][ T6506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.181'. [ 183.263256][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 183.449276][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 183.461143][ T43] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 183.486235][ T43] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 183.498994][ T43] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.510745][ T43] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 183.527039][ T43] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 183.536826][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.545300][ T43] usb 1-1: Product: syz [ 183.549476][ T43] usb 1-1: Manufacturer: syz [ 183.556048][ T43] usb 1-1: SerialNumber: syz [ 183.573008][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 183.590491][ T43] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input12 [ 183.782504][ T43] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 183.790827][ T43] (id 0x00) [ 183.844759][ T43] rc_core: IR keymap rc-imon-pad not found [ 183.850611][ T43] Registered IR keymap rc-empty [ 183.855563][ T892] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 183.863253][ T43] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 183.873655][ T43] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 183.912519][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.984888][ T43] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 183.997014][ T43] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input13 [ 184.013845][ T43] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:11> initialized [ 184.032485][ T892] usb 3-1: Using ep0 maxpacket: 32 [ 184.072617][ T892] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 184.073416][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 184.091232][ T892] usb 3-1: config 0 has no interface number 0 [ 184.109486][ T892] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.110728][ T10] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.142514][ T892] usb 3-1: config 0 interface 85 has no altsetting 0 [ 184.153632][ T10] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.172115][ T892] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 184.186361][ T892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.195113][ T892] usb 3-1: Product: syz [ 184.199317][ T892] usb 3-1: Manufacturer: syz [ 184.202713][ T10] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.204321][ T892] usb 3-1: SerialNumber: syz [ 184.227149][ T892] usb 3-1: config 0 descriptor?? [ 184.242561][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.262477][ T10] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 184.271628][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.302917][ T10] usb 2-1: config 0 descriptor?? [ 184.538988][ T10] usb 2-1: string descriptor 0 read error: -71 [ 184.550031][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 184.556312][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 184.568853][ T10] usb 2-1: USB disconnect, device number 9 [ 184.762450][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 184.873111][ T892] appletouch 3-1:0.85: Geyser mode initialized. [ 184.880965][ T892] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input14 [ 184.892087][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 184.903822][ T43] usb 4-1: device descriptor read/64, error -71 [ 185.086031][ T6535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.190'. [ 185.086077][ T6520] netlink: 80 bytes leftover after parsing attributes in process `syz.2.186'. [ 185.113622][ T5891] usb 3-1: USB disconnect, device number 17 [ 185.144276][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 185.166490][ T5891] appletouch 3-1:0.85: input: appletouch disconnected [ 185.166830][ T6537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.191'. [ 185.282761][ T43] usb 4-1: device descriptor read/64, error -71 [ 185.303187][ T892] usb 1-1: USB disconnect, device number 11 [ 185.323135][ T6542] imon:send_packet: error submitting urb(-19) [ 185.342914][ T6542] imon:vfd_write: send packet #3 failed [ 185.392914][ T43] usb usb4-port1: attempt power cycle [ 185.642516][ T1541] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 185.752499][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.773239][ T43] usb 4-1: device descriptor read/8, error -71 [ 185.812454][ T1541] usb 2-1: Using ep0 maxpacket: 32 [ 185.818934][ T1541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.829898][ T1541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.839699][ T1541] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 185.849241][ T1541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.859450][ T1541] usb 2-1: config 0 descriptor?? [ 185.902543][ T5878] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 186.013475][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.033045][ T43] usb 4-1: device descriptor read/8, error -71 [ 186.053122][ T5878] usb 3-1: too many configurations: 132, using maximum allowed: 8 [ 186.062728][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 186.070453][ T5878] usb 3-1: can't read configurations, error -61 [ 186.079101][ T6548] binder: BC_ACQUIRE_RESULT not supported [ 186.086104][ T6548] binder: 6547:6548 ioctl c0306201 200000000580 returned -22 [ 186.155397][ T43] usb usb4-port1: unable to enumerate USB device [ 186.189230][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 186.203733][ T5878] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 186.300423][ T1541] savu 0003:1E7D:2D5A.0004: unknown global tag 0xd [ 186.307031][ T1541] savu 0003:1E7D:2D5A.0004: item 0 4 1 13 parsing failed [ 186.315439][ T1541] savu 0003:1E7D:2D5A.0004: parse failed [ 186.321198][ T1541] savu 0003:1E7D:2D5A.0004: probe with driver savu failed with error -22 [ 186.363056][ T5878] usb 3-1: too many configurations: 132, using maximum allowed: 8 [ 186.372257][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 186.380008][ T5878] usb 3-1: can't read configurations, error -61 [ 186.386626][ T5878] usb usb3-port1: attempt power cycle [ 186.501595][ T10] usb 2-1: USB disconnect, device number 10 [ 186.522495][ T1541] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 186.652454][ T1541] usb 1-1: device descriptor read/64, error -71 [ 186.732518][ T5878] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 186.753574][ T5878] usb 3-1: too many configurations: 132, using maximum allowed: 8 [ 186.763334][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 186.771142][ T5878] usb 3-1: can't read configurations, error -61 [ 186.892492][ T1541] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 186.902523][ T5878] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 186.923618][ T5878] usb 3-1: too many configurations: 132, using maximum allowed: 8 [ 186.933178][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 186.940852][ T5878] usb 3-1: can't read configurations, error -61 [ 186.947655][ T5878] usb usb3-port1: unable to enumerate USB device [ 187.022559][ T1541] usb 1-1: device descriptor read/64, error -71 [ 187.050493][ T6562] netlink: 44 bytes leftover after parsing attributes in process `syz.1.200'. [ 187.133858][ T1541] usb usb1-port1: attempt power cycle [ 187.402507][ T5878] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.492512][ T1541] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 187.531420][ T6573] overlay: Bad value for 'metacopy' [ 187.533135][ T1541] usb 1-1: device descriptor read/8, error -71 [ 187.562522][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 187.569164][ T5878] usb 2-1: config 8 has an invalid interface number: 161 but max is 0 [ 187.577540][ T5878] usb 2-1: config 8 has no interface number 0 [ 187.583752][ T5878] usb 2-1: config 8 interface 161 has no altsetting 0 [ 187.594055][ T5878] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da [ 187.604009][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.612014][ T5878] usb 2-1: Product: syz [ 187.618886][ T5878] usb 2-1: Manufacturer: syz [ 187.624400][ T5878] usb 2-1: SerialNumber: syz [ 187.782501][ T1541] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 187.814141][ T1541] usb 1-1: device descriptor read/8, error -71 [ 187.847638][ T5878] net1080 2-1:8.161: probe with driver net1080 failed with error -22 [ 187.871713][ T5878] usb 2-1: USB disconnect, device number 11 [ 187.888108][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 187.923894][ T1541] usb usb1-port1: unable to enumerate USB device [ 187.944790][ T30] audit: type=1326 audit(1762766898.223:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.3.208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c9f8f6c9 code=0x0 [ 188.672527][ T5878] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 188.718674][ T6591] netlink: 44 bytes leftover after parsing attributes in process `syz.2.210'. [ 188.784064][ T6593] netlink: 'syz.2.211': attribute type 39 has an invalid length. [ 188.826664][ T5878] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.845786][ T5878] usb 2-1: config 0 has no interface number 0 [ 188.853129][ T5878] usb 2-1: config 0 interface 41 has no altsetting 0 [ 188.864156][ T5878] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.876440][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.884882][ T5878] usb 2-1: Product: syz [ 188.889140][ T5878] usb 2-1: Manufacturer: syz [ 188.899318][ T5878] usb 2-1: SerialNumber: syz [ 188.906599][ T5878] usb 2-1: config 0 descriptor?? [ 189.092471][ T10] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 189.092514][ T5891] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 189.244954][ T5891] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.253737][ T5891] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.254698][ T10] usb 3-1: config 3 has an invalid interface number: 113 but max is 1 [ 189.264295][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.272646][ T10] usb 3-1: config 3 has an invalid interface number: 225 but max is 1 [ 189.281988][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 189.289887][ T10] usb 3-1: config 3 has no interface number 0 [ 189.306925][ T10] usb 3-1: config 3 has no interface number 1 [ 189.313241][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 189.341487][ T5878] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 189.347300][ T5891] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.361497][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.369899][ T5878] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 189.389564][ T5891] usb 4-1: Product: syz [ 189.392245][ T5878] usb 2-1: USB disconnect, device number 12 [ 189.404029][ T5891] usb 4-1: Manufacturer: syz [ 189.406440][ T10] usb 3-1: config 3 interface 113 has no altsetting 0 [ 189.420847][ T10] usb 3-1: config 3 interface 225 has no altsetting 0 [ 189.425466][ T5891] cdc_wdm 4-1:1.0: skipping garbage [ 189.441082][ T10] usb 3-1: string descriptor 0 read error: -22 [ 189.448648][ T5891] cdc_wdm 4-1:1.0: skipping garbage [ 189.451812][ T10] usb 3-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=11.9b [ 189.465777][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.467951][ T5891] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 189.480054][ T5891] cdc_wdm 4-1:1.0: Unknown control protocol [ 189.695854][ T6600] netlink: 256 bytes leftover after parsing attributes in process `syz.0.214'. [ 189.751020][ T6593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.771016][ T6593] bond0: (slave rose0): Enslaving as an active interface with an up link [ 189.789229][ T43] usb 3-1: USB disconnect, device number 22 [ 190.171452][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.188339][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.295442][ T5878] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 190.361079][ T6631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.219'. [ 190.444014][ T5878] usb 2-1: device descriptor read/64, error -71 [ 190.682495][ T5878] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 190.812629][ T5878] usb 2-1: device descriptor read/64, error -71 [ 190.832771][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 190.849847][ T6651] overlay: ./file0 is not a directory [ 190.926500][ T5878] usb usb2-port1: attempt power cycle [ 190.985252][ T5896] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.994758][ T5896] usb 3-1: config 0 has no interface number 0 [ 191.008019][ T5896] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 191.017386][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.028706][ T5896] usb 3-1: Product: syz [ 191.033017][ T5896] usb 3-1: Manufacturer: syz [ 191.037708][ T5896] usb 3-1: SerialNumber: syz [ 191.049997][ T5896] usb 3-1: config 0 descriptor?? [ 191.262856][ T5896] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 191.272689][ T5878] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 191.284669][ T5896] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.295367][ T5896] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 191.305943][ T5896] usb 3-1: media controller created [ 191.311614][ T5878] usb 2-1: device descriptor read/8, error -71 [ 191.327189][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.572500][ T5878] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 191.593567][ T5878] usb 2-1: device descriptor read/8, error -71 [ 191.704069][ T5878] usb usb2-port1: unable to enumerate USB device [ 191.869536][ T43] usb 4-1: USB disconnect, device number 20 [ 191.930119][ T6665] capability: warning: `syz.3.224' uses deprecated v2 capabilities in a way that may be insecure [ 191.944990][ T6665] capability: warning: `syz.3.224' uses 32-bit capabilities (legacy support in use) [ 192.013648][ T6667] comedi comedi2: comedi_bond: 3:0 attached, 8 channels from 1 devices [ 192.124403][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 192.251379][ T6676] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 192.403857][ T5896] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 192.450621][ T5896] usb 3-1: USB disconnect, device number 23 [ 192.562479][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 192.722670][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 192.729525][ T43] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 192.737719][ T43] usb 4-1: config 0 has no interface number 0 [ 192.746086][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 192.755195][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.763233][ T43] usb 4-1: Product: syz [ 192.767398][ T43] usb 4-1: Manufacturer: syz [ 192.771981][ T43] usb 4-1: SerialNumber: syz [ 192.779505][ T43] usb 4-1: config 0 descriptor?? [ 192.786720][ T43] smsc95xx v2.0.0 [ 193.177963][ T1541] kernel read not supported for file /radio0 (pid: 1541 comm: kworker/0:3) [ 193.189724][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 193.198608][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 193.198635][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 193.227793][ T5891] kernel read not supported for file /radio0 (pid: 5891 comm: kworker/1:5) [ 193.298576][ T6694] netlink: 52 bytes leftover after parsing attributes in process `syz.1.235'. [ 193.329134][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 193.411580][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 193.431442][ T43] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 193.619964][ T1541] usb 4-1: USB disconnect, device number 21 [ 193.834816][ T5896] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 193.996970][ T5896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.005220][ T5896] usb 2-1: config 0 has no interface number 0 [ 194.016764][ T5896] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 194.026212][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.034672][ T5896] usb 2-1: Product: syz [ 194.039017][ T5896] usb 2-1: Manufacturer: syz [ 194.044138][ T5896] usb 2-1: SerialNumber: syz [ 194.051507][ T5896] usb 2-1: config 0 descriptor?? [ 194.082585][ T43] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 194.091459][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.098002][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.198075][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 194.258143][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 194.259691][ T5896] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 194.280091][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.280381][ T5896] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.288781][ T43] usb 3-1: Product: syz [ 194.288799][ T43] usb 3-1: Manufacturer: syz [ 194.288814][ T43] usb 3-1: SerialNumber: syz [ 194.314654][ T43] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 194.323520][ T5896] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 194.331549][ T5896] usb 2-1: media controller created [ 194.347813][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.359220][ T5927] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.442477][ T892] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 194.592473][ T892] usb 1-1: Using ep0 maxpacket: 32 [ 194.599509][ T892] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 194.607807][ T892] usb 1-1: config 4 has no interface number 0 [ 194.614004][ T892] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.625170][ T892] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.635172][ T892] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.644488][ T892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.662349][ T892] hub 1-1:4.128: USB hub found [ 194.662924][ T1541] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 194.774101][ T10] usb 3-1: USB disconnect, device number 24 [ 194.824568][ T1541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 194.838152][ T1541] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 194.847327][ T1541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.858146][ T1541] usb 4-1: config 0 descriptor?? [ 194.865266][ T6738] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 194.872645][ T892] hub 1-1:4.128: 2 ports detected [ 194.878245][ T892] hub 1-1:4.128: Using single TT (err -22) [ 195.076454][ T892] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 195.084333][ T892] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 195.125217][ T892] usb 1-1: USB disconnect, device number 17 [ 195.143273][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.153074][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.365856][ T1541] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 195.373650][ T1541] elan 0003:04F3:0755.0005: item fetching failed at offset 3/5 [ 195.381800][ T1541] elan 0003:04F3:0755.0005: Hid Parse failed [ 195.387939][ T1541] elan 0003:04F3:0755.0005: probe with driver elan failed with error -22 [ 195.442706][ T5896] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 195.444681][ T5927] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 195.456816][ T5927] ath9k_htc: Failed to initialize the device [ 195.469444][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 195.510323][ T5896] usb 2-1: USB disconnect, device number 17 [ 195.565798][ T5891] usb 4-1: USB disconnect, device number 22 [ 195.772595][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 195.924991][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.933077][ T10] usb 3-1: config 0 has no interface number 0 [ 195.939219][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 195.948313][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.958271][ T10] usb 3-1: config 0 descriptor?? [ 195.962560][ T5891] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 195.976438][ T10] usb 3-1: selecting invalid altsetting 1 [ 195.993205][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 195.999616][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 196.050832][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.252'. [ 196.061955][ T10] DVB: Unable to find symbol cx22700_attach() [ 196.107354][ T10] DVB: Unable to find symbol tda10046_attach() [ 196.113718][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 196.154169][ T5891] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 196.167487][ T6753] No control pipe specified [ 196.175572][ T5891] usb 1-1: config 1 interface 0 has no altsetting 0 [ 196.183982][ T6753] netlink: 92 bytes leftover after parsing attributes in process `syz.1.253'. [ 196.187841][ T5891] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 196.193126][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 196.203316][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.219309][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 196.226042][ T6755] loop4: detected capacity change from 0 to 524287936 [ 196.247699][ T5891] usb 1-1: Product: syz [ 196.251988][ T5891] usb 1-1: Manufacturer: syz [ 196.261417][ T5927] usb 3-1: USB disconnect, device number 25 [ 196.270353][ T5891] usb 1-1: SerialNumber: syz [ 196.299478][ T6747] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.385827][ T6757] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 196.392496][ T6757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.404233][ T6757] vhci_hcd vhci_hcd.0: Device attached [ 196.411989][ T6758] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 196.418520][ T6758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.444174][ T6758] vhci_hcd vhci_hcd.0: Device attached [ 196.518939][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.528895][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.574211][ T6747] IPVS: Scheduler module ip_vs_sip not found [ 196.583194][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.595206][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.619794][ T5891] usbhid 1-1:1.0: can't add hid device: -71 [ 196.627032][ T5891] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 196.640440][ T5891] usb 1-1: USB disconnect, device number 18 [ 196.682536][ T43] usb 39-2: new low-speed USB device number 2 using vhci_hcd [ 196.690007][ T892] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 196.701420][ T6769] FAULT_INJECTION: forcing a failure. [ 196.701420][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.715061][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT(full) [ 196.715083][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.715093][ T6769] Call Trace: [ 196.715100][ T6769] [ 196.715107][ T6769] dump_stack_lvl+0x189/0x250 [ 196.715137][ T6769] ? __pfx____ratelimit+0x10/0x10 [ 196.715164][ T6769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.715187][ T6769] ? __pfx__printk+0x10/0x10 [ 196.715209][ T6769] ? __might_fault+0xb0/0x130 [ 196.715243][ T6769] should_fail_ex+0x414/0x560 [ 196.715275][ T6769] _copy_from_user+0x2d/0xb0 [ 196.715298][ T6769] input_event_from_user+0xb2/0x280 [ 196.715315][ T6769] ? __pfx_input_event_from_user+0x10/0x10 [ 196.715337][ T6769] ? input_inject_event+0xb6/0x340 [ 196.715361][ T6769] evdev_write+0x2a6/0x480 [ 196.715394][ T6769] ? __pfx_evdev_write+0x10/0x10 [ 196.715422][ T6769] ? bpf_lsm_file_permission+0x9/0x20 [ 196.715463][ T6769] ? security_file_permission+0x75/0x290 [ 196.715490][ T6769] ? rw_verify_area+0x255/0x4d0 [ 196.715513][ T6769] ? __lock_acquire+0xab9/0xd20 [ 196.715528][ T6769] ? __pfx_evdev_write+0x10/0x10 [ 196.715553][ T6769] vfs_write+0x27e/0xb30 [ 196.715576][ T6769] ? __pfx_vfs_write+0x10/0x10 [ 196.715593][ T6769] ? __fget_files+0x2a/0x420 [ 196.715625][ T6769] ? __fget_files+0x2a/0x420 [ 196.715642][ T6769] ? __fget_files+0x3a0/0x420 [ 196.715659][ T6769] ? __fget_files+0x2a/0x420 [ 196.715702][ T6769] ksys_write+0x145/0x250 [ 196.715722][ T6769] ? __pfx_ksys_write+0x10/0x10 [ 196.715742][ T6769] ? do_syscall_64+0xbe/0xfa0 [ 196.715772][ T6769] do_syscall_64+0xfa/0xfa0 [ 196.715798][ T6769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.715815][ T6769] ? clear_bhb_loop+0x60/0xb0 [ 196.715846][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.715862][ T6769] RIP: 0033:0x7fec2758f6c9 [ 196.715878][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.715891][ T6769] RSP: 002b:00007fec284ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.715909][ T6769] RAX: ffffffffffffffda RBX: 00007fec277e5fa0 RCX: 00007fec2758f6c9 [ 196.715921][ T6769] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 196.715931][ T6769] RBP: 00007fec284ed090 R08: 0000000000000000 R09: 0000000000000000 [ 196.715941][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.715951][ T6769] R13: 00007fec277e6038 R14: 00007fec277e5fa0 R15: 00007fff6861c1b8 [ 196.715979][ T6769] [ 196.857492][ T892] usb 4-1: Using ep0 maxpacket: 16 [ 196.990200][ T892] usb 4-1: config 0 has no interfaces? [ 196.995919][ T892] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 197.012407][ T892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.013826][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 197.024128][ T892] usb 4-1: config 0 descriptor?? [ 197.162507][ T10] usb 2-1: device descriptor read/64, error -71 [ 197.220414][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.231522][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.241535][ T6762] usbip_core: unknown command [ 197.248823][ T6762] vhci_hcd: unknown pdu 0 [ 197.254726][ T5910] usb 4-1: USB disconnect, device number 23 [ 197.260779][ T6759] vhci_hcd: connection reset by peer [ 197.266932][ T6762] usbip_core: unknown command [ 197.271564][ T13] vhci_hcd vhci_hcd.3: stop threads [ 197.279726][ T13] vhci_hcd vhci_hcd.3: release socket [ 197.286297][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 197.294211][ T13] vhci_hcd vhci_hcd.3: stop threads [ 197.305626][ T13] vhci_hcd vhci_hcd.3: release socket [ 197.311232][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 197.317361][ T892] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 197.335180][ T6784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.262'. [ 197.412921][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 197.494359][ T892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.502718][ T892] usb 3-1: config 0 has no interface number 0 [ 197.510725][ T892] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 197.519876][ T892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.528248][ T892] usb 3-1: Product: syz [ 197.532486][ T892] usb 3-1: Manufacturer: syz [ 197.537086][ T892] usb 3-1: SerialNumber: syz [ 197.544474][ T892] usb 3-1: config 0 descriptor?? [ 197.552940][ T10] usb 2-1: device descriptor read/64, error -71 [ 197.664472][ T10] usb usb2-port1: attempt power cycle [ 197.742456][ T5891] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 197.751507][ T892] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 197.763511][ T892] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 197.774045][ T892] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 197.782095][ T892] usb 3-1: media controller created [ 197.799946][ T892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.914489][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 197.921683][ T5891] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.933844][ T5891] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.943722][ T5891] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.957497][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.957805][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 197.964225][ T5891] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 197.964249][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.973405][ T5891] usb 1-1: config 0 descriptor?? [ 198.013486][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 198.043190][ T10] usb 2-1: device descriptor read/8, error -71 [ 198.282476][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 198.323131][ T10] usb 2-1: device descriptor read/8, error -71 [ 198.425099][ T5891] uclogic 0003:5543:0042.0006: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 198.443028][ T10] usb usb2-port1: unable to enumerate USB device [ 198.512023][ T30] audit: type=1326 audit(1762766908.783:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.3.267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c9f8f6c9 code=0x0 [ 198.614842][ T10] usb 1-1: USB disconnect, device number 19 [ 198.892808][ T892] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 198.927960][ T892] usb 3-1: USB disconnect, device number 26 [ 199.384385][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.271'. [ 199.512481][ T892] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 199.672714][ T892] usb 1-1: Using ep0 maxpacket: 32 [ 199.686517][ T892] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 199.698263][ T892] usb 1-1: config 0 has no interface number 0 [ 199.705183][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 199.714368][ T892] usb 1-1: config 0 interface 12 has no altsetting 0 [ 199.723734][ T892] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 199.742584][ T892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.750621][ T892] usb 1-1: Product: syz [ 199.769862][ T892] usb 1-1: Manufacturer: syz [ 199.774788][ T892] usb 1-1: SerialNumber: syz [ 199.790931][ T892] usb 1-1: config 0 descriptor?? [ 199.839614][ T6826] kAFS: Can only specify source 'none' with -o dyn [ 200.142480][ T1541] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 200.464573][ T1541] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.480968][ T1541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.490116][ T1541] usb 3-1: Product: syz [ 200.496537][ T1541] usb 3-1: Manufacturer: syz [ 200.501155][ T1541] usb 3-1: SerialNumber: syz [ 200.520822][ T1541] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 200.550233][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.576318][ T6832] netlink: 36 bytes leftover after parsing attributes in process `syz.3.280'. [ 200.632532][ T5891] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 200.792054][ T892] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 200.812986][ T892] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 200.842947][ T892] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 200.860838][ T892] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 200.872821][ T6837] netlink: 'syz.3.282': attribute type 28 has an invalid length. [ 200.897313][ T892] usb 1-1: USB disconnect, device number 20 [ 200.984744][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.993826][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.018826][ T5878] usb 3-1: USB disconnect, device number 27 [ 201.466235][ T6848] loop4: detected capacity change from 0 to 524287936 [ 201.532648][ T892] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 201.632096][ T6857] netlink: 36 bytes leftover after parsing attributes in process `syz.2.289'. [ 201.632150][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 201.702489][ T892] usb 1-1: Invalid ep0 maxpacket: 64 [ 201.832500][ T43] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 201.842453][ T10] usb 3-1: Service connection timeout for: 256 [ 201.842601][ T892] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 201.860053][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 201.887948][ T10] ath9k_htc: Failed to initialize the device [ 201.905056][ T5878] usb 3-1: ath9k_htc: USB layer deinitialized [ 201.926586][ T6862] cgroup: Need name or subsystem set [ 202.032425][ T892] usb 1-1: Invalid ep0 maxpacket: 64 [ 202.040721][ T892] usb usb1-port1: attempt power cycle [ 202.356734][ T5878] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 202.392546][ T892] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 202.423519][ T892] usb 1-1: Invalid ep0 maxpacket: 64 [ 202.534200][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 202.553178][ T892] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 202.583070][ T892] usb 1-1: Invalid ep0 maxpacket: 64 [ 202.591425][ T892] usb usb1-port1: unable to enumerate USB device [ 202.595161][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.615585][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.695240][ T6883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.298'. [ 202.716419][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.734128][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 202.762263][ T5878] usb 3-1: can't read configurations, error -71 [ 202.797729][ T6889] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 202.804285][ T6889] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.813646][ T6889] vhci_hcd vhci_hcd.0: Device attached [ 202.824386][ T6890] vhci_hcd: connection closed [ 202.825314][ T13] vhci_hcd vhci_hcd.1: stop threads [ 202.844195][ T13] vhci_hcd vhci_hcd.1: release socket [ 202.850149][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 202.915884][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 203.310633][ T6896] loop4: detected capacity change from 0 to 524287936 [ 203.807188][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.310'. [ 203.924441][ T5878] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 204.037574][ T6917] syz.2.313 (6917) used greatest stack depth: 17864 bytes left [ 204.101079][ T5878] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.123217][ T5878] usb 4-1: config 0 has no interface number 0 [ 204.142489][ T5878] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 204.168286][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.186684][ T5878] usb 4-1: Product: syz [ 204.190949][ T5878] usb 4-1: Manufacturer: syz [ 204.210940][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 204.232457][ T5878] usb 4-1: SerialNumber: syz [ 204.264622][ T5878] usb 4-1: config 0 descriptor?? [ 204.460700][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.503377][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.511308][ T5878] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 204.561787][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.589219][ T5878] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.629412][ T5878] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 204.652539][ T5878] usb 4-1: media controller created [ 204.672930][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.710743][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.071226][ T5878] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 205.090186][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.321'. [ 205.145720][ T5878] usb 4-1: USB disconnect, device number 24 [ 205.198777][ T6957] 9pnet_fd: p9_fd_create_unix (6957): problem connecting socket: ./file1: -13 [ 205.225994][ T6959] bond0: entered promiscuous mode [ 205.231088][ T6959] rose0: entered promiscuous mode [ 205.401729][ T6968] FAULT_INJECTION: forcing a failure. [ 205.401729][ T6968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.419995][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.0.325 Not tainted syzkaller #0 PREEMPT(full) [ 205.420018][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.420029][ T6968] Call Trace: [ 205.420037][ T6968] [ 205.420044][ T6968] dump_stack_lvl+0x189/0x250 [ 205.420071][ T6968] ? __pfx____ratelimit+0x10/0x10 [ 205.420096][ T6968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.420118][ T6968] ? __pfx__printk+0x10/0x10 [ 205.420143][ T6968] ? __might_fault+0xb0/0x130 [ 205.420175][ T6968] should_fail_ex+0x414/0x560 [ 205.420206][ T6968] _copy_from_user+0x2d/0xb0 [ 205.420229][ T6968] input_event_from_user+0xb2/0x280 [ 205.420247][ T6968] ? __pfx_input_event_from_user+0x10/0x10 [ 205.420268][ T6968] ? input_inject_event+0xb6/0x340 [ 205.420290][ T6968] evdev_write+0x2a6/0x480 [ 205.420322][ T6968] ? __pfx_evdev_write+0x10/0x10 [ 205.420348][ T6968] ? bpf_lsm_file_permission+0x9/0x20 [ 205.420371][ T6968] ? security_file_permission+0x75/0x290 [ 205.420399][ T6968] ? rw_verify_area+0x255/0x4d0 [ 205.420425][ T6968] ? __lock_acquire+0xab9/0xd20 [ 205.420441][ T6968] ? __pfx_evdev_write+0x10/0x10 [ 205.420468][ T6968] vfs_write+0x27e/0xb30 [ 205.420490][ T6968] ? __pfx_vfs_write+0x10/0x10 [ 205.420506][ T6968] ? __fget_files+0x2a/0x420 [ 205.420526][ T6968] ? __fget_files+0x2a/0x420 [ 205.420542][ T6968] ? __fget_files+0x3a0/0x420 [ 205.420558][ T6968] ? __fget_files+0x2a/0x420 [ 205.420585][ T6968] ksys_write+0x145/0x250 [ 205.420604][ T6968] ? __pfx_ksys_write+0x10/0x10 [ 205.420623][ T6968] ? do_syscall_64+0xbe/0xfa0 [ 205.420652][ T6968] do_syscall_64+0xfa/0xfa0 [ 205.420677][ T6968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.420694][ T6968] ? clear_bhb_loop+0x60/0xb0 [ 205.420723][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.420738][ T6968] RIP: 0033:0x7f79d0b8f6c9 [ 205.420753][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.420766][ T6968] RSP: 002b:00007f79d1b06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.420784][ T6968] RAX: ffffffffffffffda RBX: 00007f79d0de5fa0 RCX: 00007f79d0b8f6c9 [ 205.420795][ T6968] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 205.420805][ T6968] RBP: 00007f79d1b06090 R08: 0000000000000000 R09: 0000000000000000 [ 205.420814][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.420824][ T6968] R13: 00007f79d0de6038 R14: 00007f79d0de5fa0 R15: 00007ffffdf0d5f8 [ 205.420852][ T6968] [ 205.474903][ T5927] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 205.712708][ T5878] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 205.842897][ T5891] usb 2-1: device descriptor read/64, error -110 [ 205.862426][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 205.869295][ T5927] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 205.874278][ T5878] usb 1-1: device descriptor read/64, error -71 [ 205.890152][ T5927] usb 3-1: config 0 has no interface number 0 [ 205.939788][ T5927] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 205.966078][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.982510][ T5927] usb 3-1: Product: syz [ 205.992704][ T5927] usb 3-1: Manufacturer: syz [ 206.001572][ T5927] usb 3-1: SerialNumber: syz [ 206.028756][ T5927] usb 3-1: config 0 descriptor?? [ 206.047944][ T5927] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 206.083032][ T5891] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 206.252040][ T5927] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 206.265772][ T5891] usb 2-1: device descriptor read/64, error -32 [ 206.279690][ T5927] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 206.282631][ T5878] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 206.375667][ T5891] usb usb2-port1: attempt power cycle [ 206.405547][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 206.411623][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 206.417823][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 206.452487][ T5878] usb 1-1: device descriptor read/64, error -71 [ 206.572731][ T5878] usb usb1-port1: attempt power cycle [ 206.616332][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.331'. [ 206.663219][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 206.663750][ T5896] usb 3-1: USB disconnect, device number 30 [ 206.696243][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 206.722477][ T5891] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 206.725721][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 206.762466][ T5927] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 206.766090][ T5896] quatech2 3-1:0.51: device disconnected [ 206.775230][ T5891] usb 2-1: device descriptor read/8, error -32 [ 206.883211][ T5891] raw-gadget.2 gadget.1: failed to queue suspend event [ 206.894247][ T5891] raw-gadget.2 gadget.1: failed to queue reset event [ 206.912799][ T5878] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 206.937806][ T5878] usb 1-1: device descriptor read/8, error -71 [ 206.952463][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 206.961023][ T5927] usb 4-1: config 0 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.974514][ T5891] raw-gadget.2 gadget.1: failed to queue resume event [ 206.981587][ T5927] usb 4-1: config 0 interface 0 altsetting 208 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.994431][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 207.001080][ T5927] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 207.010253][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.025448][ T5927] usb 4-1: config 0 descriptor?? [ 207.052553][ T5891] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 207.092655][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 207.099834][ T5891] usb 2-1: device descriptor read/8, error -32 [ 207.182480][ T5878] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 207.212602][ T5891] raw-gadget.2 gadget.1: failed to queue suspend event [ 207.213293][ T5878] usb 1-1: device descriptor read/8, error -71 [ 207.235682][ T5891] usb usb2-port1: unable to enumerate USB device [ 207.272059][ T7024] mmap: syz.2.333 (7024) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.293285][ T7024] binder: 7023:7024 unknown command 0 [ 207.299300][ T7024] binder: 7023:7024 ioctl c0306201 200000000200 returned -22 [ 207.374093][ T5878] usb usb1-port1: unable to enumerate USB device [ 207.449461][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.458502][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.669102][ T7028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.678598][ T7028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.885469][ T7031] loop4: detected capacity change from 0 to 524287936 [ 208.452820][ T5878] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 208.458428][ T7044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.340'. [ 208.521870][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.531872][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.624089][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.635223][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.645050][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.658020][ T5878] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 208.667792][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.679530][ T5878] usb 3-1: config 0 descriptor?? [ 208.832534][ T5891] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 208.962962][ T5891] usb 1-1: device descriptor read/64, error -71 [ 209.212475][ T5891] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 209.240412][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.249535][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.291031][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.305121][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.332091][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 209.338478][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 209.342976][ T5891] usb 1-1: device descriptor read/64, error -71 [ 209.362183][ T5878] usb 3-1: USB disconnect, device number 31 [ 209.462918][ T5891] usb usb1-port1: attempt power cycle [ 209.505636][ T5927] usbhid 4-1:0.0: can't add hid device: -71 [ 209.511909][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 209.546245][ T5927] usb 4-1: USB disconnect, device number 25 [ 209.676097][ T7050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.803380][ T5891] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 209.823142][ T5891] usb 1-1: device descriptor read/8, error -71 [ 209.955174][ T7059] loop4: detected capacity change from 0 to 524287936 [ 210.062816][ T5891] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 210.094466][ T5891] usb 1-1: device descriptor read/8, error -71 [ 210.222764][ T5891] usb usb1-port1: unable to enumerate USB device [ 210.256967][ T5891] IPVS: starting estimator thread 0... [ 210.262776][ T7073] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 210.352639][ T7076] IPVS: using max 32 ests per chain, 76800 per kthread [ 210.392728][ T5878] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 210.455489][ T7085] loop4: detected capacity change from 0 to 524287936 [ 210.564094][ T5878] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 210.572514][ T5878] usb 3-1: config 0 has no interface number 0 [ 210.580711][ T5878] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 210.589964][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.598275][ T5878] usb 3-1: Product: syz [ 210.603040][ T5878] usb 3-1: Manufacturer: syz [ 210.607697][ T5878] usb 3-1: SerialNumber: syz [ 210.623133][ T5878] usb 3-1: config 0 descriptor?? [ 210.813672][ T7094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 210.872261][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.884601][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.083423][ T10] usb 3-1: USB disconnect, device number 32 [ 211.089952][ T10] f81534a_ctrl 3-1:0.74: failed to set register 0x116: -19 [ 211.097284][ T10] f81534a_ctrl 3-1:0.74: failed to enable ports: -19 [ 211.680357][ T7111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.363'. [ 211.725566][ T7113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.364'. [ 211.770812][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.779669][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.872494][ T5878] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 212.022498][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 212.035574][ T5878] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 212.044541][ T5878] usb 1-1: config 0 has no interface number 0 [ 212.050691][ T5878] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.061974][ T5878] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 212.073899][ T5878] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.085304][ T5878] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.098581][ T5878] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.108176][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.120116][ T5878] usb 1-1: config 0 descriptor?? [ 212.138534][ T5878] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 212.402898][ T43] usb 1-1: USB disconnect, device number 33 [ 212.408954][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 212.415287][ T7105] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 212.427164][ T43] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 212.482513][ T5832] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 212.488840][ T5145] Bluetooth: hci4: command 0x1003 tx timeout [ 212.951021][ T7145] netlink: 830 bytes leftover after parsing attributes in process `syz.1.374'. [ 213.026522][ T5927] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 213.189635][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 213.208467][ T5927] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 213.223514][ T7157] loop4: detected capacity change from 0 to 524287936 [ 213.224342][ T5927] usb 3-1: can't read configurations, error -61 [ 213.372738][ T5927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 213.392880][ T7164] ALSA: seq fatal error: cannot create timer (-19) [ 213.472649][ T5891] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 213.523775][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.379'. [ 213.532712][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 213.541507][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 213.551236][ T5927] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 213.561887][ T5927] usb 3-1: can't read configurations, error -61 [ 213.568473][ T5927] usb usb3-port1: attempt power cycle [ 213.612452][ T5891] usb 1-1: device descriptor read/64, error -71 [ 213.872434][ T5891] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 213.917623][ T5927] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 213.964377][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 213.985691][ T5927] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.001680][ T5927] usb 3-1: can't read configurations, error -61 [ 214.012892][ T5891] usb 1-1: device descriptor read/64, error -71 [ 214.031469][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.041947][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.052505][ T892] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 214.134330][ T5891] usb usb1-port1: attempt power cycle [ 214.152520][ T5927] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 214.176691][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 214.194552][ T5927] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.202161][ T5927] usb 3-1: can't read configurations, error -61 [ 214.209048][ T5927] usb usb3-port1: unable to enumerate USB device [ 214.217410][ T892] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 214.228444][ T892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.238632][ T892] usb 4-1: config 0 descriptor?? [ 214.463780][ T892] usb 4-1: Cannot set MAC address [ 214.472865][ T892] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 214.505933][ T892] usb 4-1: USB disconnect, device number 26 [ 214.511906][ T5891] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 214.543269][ T5891] usb 1-1: device descriptor read/8, error -71 [ 214.772095][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.782561][ T5891] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 214.788349][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.801289][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.810922][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.811417][ T5891] usb 1-1: device descriptor read/8, error -71 [ 214.887369][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.900973][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.955015][ T5891] usb usb1-port1: unable to enumerate USB device [ 215.115664][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.126217][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.472456][ T5891] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 215.644110][ T5891] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 215.653445][ T5891] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 215.662444][ T5891] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 215.673107][ T5891] usb 4-1: config 220 has no interface number 2 [ 215.679851][ T5891] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 215.700068][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.702421][ T5891] usb 4-1: config 220 interface 0 has no altsetting 0 [ 215.716113][ T5891] usb 4-1: config 220 interface 76 has no altsetting 0 [ 215.720535][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.723029][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.739064][ T5891] usb 4-1: config 220 interface 1 has no altsetting 0 [ 215.744249][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.756560][ T5891] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 215.766053][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.774228][ T5891] usb 4-1: Product: syz [ 215.817804][ T5891] usb 4-1: Manufacturer: syz [ 215.822594][ T5891] usb 4-1: SerialNumber: syz [ 216.044002][ T5891] usb 4-1: selecting invalid altsetting 0 [ 216.054696][ T5891] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 216.062935][ T5891] uvcvideo 4-1:220.0: No valid video chain found. [ 216.080570][ T5891] usb 4-1: selecting invalid altsetting 0 [ 216.097017][ T5891] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 216.115700][ T5891] usb 4-1: USB disconnect, device number 27 [ 216.342735][ T892] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 216.429544][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 216.504259][ T892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.514991][ T892] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 216.524200][ T892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.568494][ T892] usb 3-1: config 0 descriptor?? [ 216.606738][ T892] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 216.969527][ T7279] virtio-fs: tag not found [ 217.004071][ T892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 217.011684][ T892] pwc: recv_control_msg error -32 req 02 val 2700 [ 217.206456][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.243077][ T892] pwc: recv_control_msg error -71 req 02 val 2c00 [ 217.251755][ T892] pwc: recv_control_msg error -71 req 04 val 1000 [ 217.257584][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.270242][ T892] pwc: recv_control_msg error -71 req 04 val 1300 [ 217.278210][ T892] pwc: recv_control_msg error -71 req 04 val 1400 [ 217.288767][ T892] pwc: recv_control_msg error -71 req 02 val 2000 [ 217.308235][ T892] pwc: recv_control_msg error -71 req 02 val 2100 [ 217.322804][ T892] pwc: recv_control_msg error -71 req 02 val 2200 [ 217.334826][ T892] pwc: recv_control_msg error -71 req 06 val 0600 [ 217.341894][ T892] pwc: recv_control_msg error -71 req 04 val 1500 [ 217.349872][ T892] pwc: recv_control_msg error -71 req 02 val 2500 [ 217.356952][ T892] pwc: recv_control_msg error -71 req 02 val 2400 [ 217.364475][ T892] pwc: recv_control_msg error -71 req 02 val 2600 [ 217.371428][ T892] pwc: recv_control_msg error -71 req 02 val 2900 [ 217.379505][ T892] pwc: recv_control_msg error -71 req 02 val 2800 [ 217.387458][ T892] pwc: recv_control_msg error -71 req 04 val 1100 [ 217.394305][ T892] pwc: recv_control_msg error -71 req 04 val 1200 [ 217.403897][ T892] pwc: Registered as video103. [ 217.411961][ T892] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 217.432589][ T10] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 217.432820][ T892] usb 3-1: USB disconnect, device number 37 [ 217.606380][ T10] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 217.615581][ T5896] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 217.623204][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.631191][ T10] usb 1-1: Product: syz [ 217.635532][ T10] usb 1-1: Manufacturer: syz [ 217.640184][ T10] usb 1-1: SerialNumber: syz [ 217.647256][ T10] usb 1-1: config 0 descriptor?? [ 217.654956][ T10] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 217.798707][ T5896] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 217.807981][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.820831][ T5896] usb 4-1: Product: syz [ 217.826456][ T5896] usb 4-1: Manufacturer: syz [ 217.831103][ T5896] usb 4-1: SerialNumber: syz [ 217.842760][ T5896] usb 4-1: config 0 descriptor?? [ 217.865433][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.876011][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.883649][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 217.896788][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.908686][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.928741][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.947025][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.960137][ T7307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.971267][ T7307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.003690][ T10] pwc: Failed to set LED on/off time (-71) [ 218.020206][ T10] pwc: send_video_command error -71 [ 218.027657][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 218.035533][ T10] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 218.053607][ T7300] binder: BINDER_SET_CONTEXT_MGR already set [ 218.059855][ T7300] binder: 7299:7300 ioctl 4018620d 200000004a80 returned -16 [ 218.070539][ T10] usb 1-1: USB disconnect, device number 38 [ 218.090003][ T5896] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 218.115922][ T5896] f81604 4-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 218.133552][ T5896] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 218.241271][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.254090][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.265885][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.274549][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.275914][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.284738][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.462532][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 218.502457][ T5878] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 218.614787][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 218.623933][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.635056][ T10] usb 1-1: config 0 descriptor?? [ 218.643259][ T10] pwc: Creative Labs Webcam Pro Ex detected. [ 218.655440][ T5878] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 218.664640][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.672866][ T5878] usb 3-1: Product: syz [ 218.677051][ T5878] usb 3-1: Manufacturer: syz [ 218.681648][ T5878] usb 3-1: SerialNumber: syz [ 218.692738][ T5878] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 218.710496][ T5896] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.847011][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.856131][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.866594][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.875502][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.044079][ T10] pwc: send_video_command error -71 [ 219.049443][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 219.058030][ T10] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 219.073267][ T10] usb 1-1: USB disconnect, device number 39 [ 219.167968][ T5927] usb 3-1: USB disconnect, device number 38 [ 219.671395][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 219.769561][ T5896] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 220.003105][ T5896] ath9k_htc: Failed to initialize the device [ 220.015159][ T5927] usb 3-1: ath9k_htc: USB layer deinitialized [ 220.355868][ T7361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.366651][ T7361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.374883][ T5927] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 220.386942][ T10] usb 4-1: USB disconnect, device number 28 [ 220.552513][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 220.562530][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.571436][ T5927] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 220.580357][ T5927] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 220.591166][ T5927] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 220.600393][ T5927] usb 3-1: config 128 has no interface number 0 [ 220.607158][ T5927] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 220.618665][ T5927] usb 3-1: config 128 interface 127 has no altsetting 0 [ 220.627769][ T5927] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 220.637013][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.646846][ T5927] usb 3-1: Product: syz [ 220.651048][ T5927] usb 3-1: Manufacturer: syz [ 220.655842][ T5927] usb 3-1: SerialNumber: syz [ 220.665226][ T7350] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.733585][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 220.812525][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 220.932732][ T5927] usb 3-1: USB disconnect, device number 39 [ 220.952647][ T10] usb 4-1: device descriptor read/64, error -71 [ 220.985400][ T6524] udevd[6524]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.020842][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.030490][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.218943][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 221.352479][ T10] usb 4-1: device descriptor read/64, error -71 [ 221.464064][ T10] usb usb4-port1: attempt power cycle [ 221.643370][ T7384] FAULT_INJECTION: forcing a failure. [ 221.643370][ T7384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.643964][ T7385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.446'. [ 221.675322][ T7384] CPU: 1 UID: 0 PID: 7384 Comm: syz.2.447 Not tainted syzkaller #0 PREEMPT(full) [ 221.675354][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.675366][ T7384] Call Trace: [ 221.675373][ T7384] [ 221.675382][ T7384] dump_stack_lvl+0x189/0x250 [ 221.675411][ T7384] ? __pfx____ratelimit+0x10/0x10 [ 221.675438][ T7384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.675462][ T7384] ? __pfx__printk+0x10/0x10 [ 221.675483][ T7384] ? __might_fault+0xb0/0x130 [ 221.675518][ T7384] should_fail_ex+0x414/0x560 [ 221.675551][ T7384] _copy_from_user+0x2d/0xb0 [ 221.675575][ T7384] input_event_from_user+0xb2/0x280 [ 221.675594][ T7384] ? __pfx_input_event_from_user+0x10/0x10 [ 221.675617][ T7384] ? input_inject_event+0xb6/0x340 [ 221.675642][ T7384] evdev_write+0x2a6/0x480 [ 221.675675][ T7384] ? __pfx_evdev_write+0x10/0x10 [ 221.675704][ T7384] ? bpf_lsm_file_permission+0x9/0x20 [ 221.675731][ T7384] ? security_file_permission+0x75/0x290 [ 221.675761][ T7384] ? rw_verify_area+0x255/0x4d0 [ 221.675789][ T7384] ? __lock_acquire+0xab9/0xd20 [ 221.675806][ T7384] ? __pfx_evdev_write+0x10/0x10 [ 221.675839][ T7384] vfs_write+0x27e/0xb30 [ 221.675865][ T7384] ? __pfx_vfs_write+0x10/0x10 [ 221.675884][ T7384] ? __fget_files+0x2a/0x420 [ 221.675908][ T7384] ? __fget_files+0x2a/0x420 [ 221.675927][ T7384] ? __fget_files+0x3a0/0x420 [ 221.675947][ T7384] ? __fget_files+0x2a/0x420 [ 221.675993][ T7384] ksys_write+0x145/0x250 [ 221.676016][ T7384] ? __pfx_ksys_write+0x10/0x10 [ 221.676038][ T7384] ? do_syscall_64+0xbe/0xfa0 [ 221.676072][ T7384] do_syscall_64+0xfa/0xfa0 [ 221.676102][ T7384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.676123][ T7384] ? clear_bhb_loop+0x60/0xb0 [ 221.676147][ T7384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.676166][ T7384] RIP: 0033:0x7f0c0bd8f6c9 [ 221.676185][ T7384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.676202][ T7384] RSP: 002b:00007f0c0cb52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.676222][ T7384] RAX: ffffffffffffffda RBX: 00007f0c0bfe5fa0 RCX: 00007f0c0bd8f6c9 [ 221.676237][ T7384] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 221.676250][ T7384] RBP: 00007f0c0cb52090 R08: 0000000000000000 R09: 0000000000000000 [ 221.676262][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.676273][ T7384] R13: 00007f0c0bfe6038 R14: 00007f0c0bfe5fa0 R15: 00007ffd8ce187c8 [ 221.676307][ T7384] [ 221.802528][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 221.947882][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.956937][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.022518][ T5896] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 222.062898][ T10] usb 4-1: device descriptor read/8, error -71 [ 222.153365][ T5896] usb 3-1: device descriptor read/64, error -71 [ 222.312497][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 222.333729][ T10] usb 4-1: device descriptor read/8, error -71 [ 222.392490][ T5896] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 222.442954][ T10] usb usb4-port1: unable to enumerate USB device [ 222.522512][ T5896] usb 3-1: device descriptor read/64, error -71 [ 222.643600][ T5896] usb usb3-port1: attempt power cycle [ 223.012478][ T5896] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 223.043799][ T5896] usb 3-1: device descriptor read/8, error -71 [ 223.157252][ T7408] netlink: 360 bytes leftover after parsing attributes in process `syz.0.454'. [ 223.184177][ T7408] loop4: detected capacity change from 0 to 2560 [ 223.196769][ T6524] Buffer I/O error on dev loop4, logical block 0, async page read [ 223.207420][ T7412] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 223.216993][ T6524] Buffer I/O error on dev loop4, logical block 3, async page read [ 223.284508][ T5896] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 223.321283][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.323401][ T5896] usb 3-1: device descriptor read/8, error -71 [ 223.331727][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.355090][ T7414] dvmrp1: entered allmulticast mode [ 223.452833][ T5896] usb usb3-port1: unable to enumerate USB device [ 223.555683][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 224.107461][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.118051][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.131348][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 224.262590][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.280239][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.342468][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 224.492507][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 224.499075][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.510034][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 224.518808][ T10] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 224.527978][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.536083][ T10] usb 1-1: Product: syz [ 224.540250][ T10] usb 1-1: Manufacturer: syz [ 224.544884][ T10] usb 1-1: SerialNumber: syz [ 224.551358][ T10] usb 1-1: config 0 descriptor?? [ 224.612502][ T5896] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 224.767748][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.781987][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 224.793986][ T5896] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 224.813802][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.828401][ T5896] usb 4-1: config 0 descriptor?? [ 224.996159][ T7463] tmpfs: Unknown parameter 'trans' [ 225.020095][ T7463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.114661][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.140682][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.163264][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 225.170533][ T10] imon:send_packet: packet tx failed (-71) [ 225.204010][ T10] imon 1-1:0.0: panel buttons/knobs setup failed [ 225.272556][ T10] rc_core: IR keymap rc-imon-pad not found [ 225.278512][ T10] Registered IR keymap rc-empty [ 225.287075][ T10] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 225.297585][ T10] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 225.308448][ T10] imon:send_packet: packet tx failed (-71) [ 225.332591][ T10] imon 1-1:0.0: remote input dev register failed [ 225.342837][ T10] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 225.369730][ T10] imon 1-1:0.0: unable to initialize intf0, err 0 [ 225.376692][ T10] imon:imon_probe: failed to initialize context! [ 225.383500][ T10] imon 1-1:0.0: unable to register, err -19 [ 225.394717][ T10] usb 1-1: USB disconnect, device number 40 [ 225.440769][ T5896] usbhid 4-1:0.0: can't add hid device: -71 [ 225.448606][ T5896] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 225.470046][ T5896] usb 4-1: USB disconnect, device number 33 [ 225.687783][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.698119][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.751262][ T7488] 9pnet_fd: p9_fd_create_unix (7488): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 225.752541][ T5891] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 225.795570][ T7486] tls_set_device_offload: netdev not found [ 225.963682][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 225.979738][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.998194][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.006869][ T7500] overlayfs: missing 'lowerdir' [ 226.014380][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.014405][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.014428][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.038058][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.056652][ T5891] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.065319][ T5891] usb 3-1: Manufacturer: syz [ 226.073038][ T5891] usb 3-1: config 0 descriptor?? [ 226.078266][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.087466][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.172526][ T892] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 226.292559][ T5896] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 226.332458][ T892] usb 1-1: Using ep0 maxpacket: 8 [ 226.337682][ T5891] rc_core: IR keymap rc-hauppauge not found [ 226.347325][ T5891] Registered IR keymap rc-empty [ 226.353725][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.363194][ T892] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 226.372260][ T892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.380401][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.387607][ T892] usb 1-1: Product: syz [ 226.391789][ T892] usb 1-1: Manufacturer: syz [ 226.396545][ T892] usb 1-1: SerialNumber: syz [ 226.404820][ T892] usb 1-1: config 0 descriptor?? [ 226.412422][ T892] gspca_main: se401-2.14.0 probing 047d:5003 [ 226.423551][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 226.436923][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 226.444681][ T5896] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 226.456287][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.461089][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.476109][ T5896] usb 4-1: config 0 descriptor?? [ 226.483060][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.485768][ T5896] pwc: Creative Labs Webcam Pro Ex detected. [ 226.503104][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.522652][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.552508][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.583710][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.602520][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.623260][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.642710][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.658863][ T7507] loop4: detected capacity change from 0 to 524287936 [ 226.666112][ T5891] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.718790][ T5891] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.738256][ T5891] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.761124][ T10] usb 3-1: USB disconnect, device number 44 [ 226.895196][ T5896] pwc: send_video_command error -71 [ 226.917486][ T5896] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 226.926542][ T5896] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 226.940524][ T5896] usb 4-1: USB disconnect, device number 34 [ 227.019857][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 227.026841][ T892] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 227.031970][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.050503][ T892] usb 1-1: USB disconnect, device number 41 [ 227.054676][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.619127][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.631335][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.692761][ T5891] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 227.739337][ T7525] 9p: Bad value for 'rfdno' [ 227.782664][ T892] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 227.797905][ T7530] loop4: detected capacity change from 0 to 524287936 [ 227.852442][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 227.873240][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 227.900833][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.912340][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.920669][ T5891] usb 4-1: Product: syz [ 227.925663][ T5891] usb 4-1: Manufacturer: syz [ 227.930278][ T5891] usb 4-1: SerialNumber: syz [ 227.938752][ T892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.955324][ T5891] usb 4-1: config 0 descriptor?? [ 227.960419][ T892] usb 3-1: config 0 has no interface number 0 [ 227.977225][ T5891] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 227.995645][ T892] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 228.009732][ T5891] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 228.016496][ T892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.030674][ T892] usb 3-1: Product: syz [ 228.035245][ T892] usb 3-1: Manufacturer: syz [ 228.039981][ T892] usb 3-1: SerialNumber: syz [ 228.048136][ T892] usb 3-1: config 0 descriptor?? [ 228.233191][ T5891] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 228.263135][ T892] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 228.300674][ T892] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 228.311527][ T892] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 228.323802][ T892] usb 3-1: media controller created [ 228.337972][ T5891] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 228.357180][ T5891] em28xx 4-1:0.0: board has no eeprom [ 228.373078][ T892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.442926][ T5891] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 228.450969][ T5891] em28xx 4-1:0.0: dvb set to bulk mode. [ 228.458507][ T43] em28xx 4-1:0.0: Binding DVB extension [ 228.476229][ T5891] usb 4-1: USB disconnect, device number 35 [ 228.499021][ T5891] em28xx 4-1:0.0: Disconnecting em28xx [ 228.511219][ T7554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.527126][ T892] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 228.573826][ T43] em28xx 4-1:0.0: Registering input extension [ 228.578420][ T7557] loop4: detected capacity change from 0 to 524287936 [ 228.588945][ T5891] em28xx 4-1:0.0: Closing input extension [ 228.629713][ T5891] em28xx 4-1:0.0: Freeing device [ 228.656717][ T892] usb 3-1: USB disconnect, device number 45 [ 228.945539][ T7573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.951702][ T7575] netlink: 14 bytes leftover after parsing attributes in process `syz.0.511'. [ 228.956411][ T7573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.963547][ T5891] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 229.058841][ T7581] Bluetooth: MGMT ver 1.23 [ 229.123454][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 229.131627][ T5891] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 229.141151][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.149222][ T5891] usb 4-1: Product: syz [ 229.153440][ T5891] usb 4-1: Manufacturer: syz [ 229.158047][ T5891] usb 4-1: SerialNumber: syz [ 229.165903][ T5891] usb 4-1: config 0 descriptor?? [ 229.328882][ T7589] kvm: kvm [7588]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 229.338104][ T892] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 229.374632][ T5891] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.506037][ T892] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 229.514324][ T892] usb 1-1: config 0 has no interface number 0 [ 229.520563][ T892] usb 1-1: config 0 interface 41 has no altsetting 0 [ 229.531218][ T892] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 229.540640][ T892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.549808][ T892] usb 1-1: Product: syz [ 229.554363][ T892] usb 1-1: Manufacturer: syz [ 229.559161][ T892] usb 1-1: SerialNumber: syz [ 229.567250][ T892] usb 1-1: config 0 descriptor?? [ 229.682587][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 229.835569][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 229.848356][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 229.857566][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.865818][ T10] usb 3-1: Product: syz [ 229.870079][ T10] usb 3-1: Manufacturer: syz [ 229.874786][ T10] usb 3-1: SerialNumber: syz [ 229.881804][ T10] usb 3-1: config 0 descriptor?? [ 229.893328][ T10] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 229.951903][ T7605] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 229.960110][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.981795][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.995911][ T7605] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 230.061922][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.073313][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.186082][ T892] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 230.554410][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.563928][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.711121][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.720747][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.046756][ T5891] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 231.368473][ T10] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 231.378385][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 231.458624][ T892] usb 4-1: USB disconnect, device number 36 [ 231.929517][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.938449][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.106859][ T5878] usb 1-1: USB disconnect, device number 42 [ 232.122674][ T892] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 232.292783][ T892] usb 4-1: Using ep0 maxpacket: 8 [ 232.301567][ T892] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 232.312731][ T892] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 232.329979][ T892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.336665][ T892] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 232.345906][ T892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.356785][ T892] usb 4-1: config 0 descriptor?? [ 232.456968][ T5878] usb 3-1: USB disconnect, device number 46 [ 232.570693][ T7641] ------------[ cut here ]------------ [ 232.576314][ T7641] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x88f/0xcb0, CPU#1: syz.3.532/7641 [ 232.587427][ T7641] Modules linked in: [ 232.591368][ T7641] CPU: 1 UID: 0 PID: 7641 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) [ 232.600624][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.610755][ T7641] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 232.616897][ T7641] Code: 00 e8 95 41 77 ff eb 0c e8 8e 41 77 ff eb 05 e8 87 41 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 b2 1a 09 cc e8 72 41 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 64 41 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 232.636940][ T7641] RSP: 0018:ffffc9000b14fd40 EFLAGS: 00010283 [ 232.643757][ T7641] RAX: ffffffff824a1b9e RBX: ffff88804d7fe680 RCX: 0000000000080000 [ 232.651753][ T7641] RDX: ffffc9000d160000 RSI: 000000000000093d RDI: 000000000000093e [ 232.660448][ T7641] RBP: ffffc9000b14fe01 R08: ffff888021fda0bb R09: 1ffff110043fb417 [ 232.668537][ T7641] R10: dffffc0000000000 R11: ffffed10043fb418 R12: dffffc0000000000 [ 232.676577][ T7641] R13: 0000000000000000 R14: ffff888021fda0b8 R15: ffff888021fda000 [ 232.684666][ T7641] FS: 00007f93cae696c0(0000) GS:ffff888125b83000(0000) knlGS:0000000000000000 [ 232.693705][ T7641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.700347][ T7641] CR2: 000000110c30132f CR3: 000000007d0fe000 CR4: 00000000003526f0 [ 232.708459][ T7641] Call Trace: [ 232.711760][ T7641] [ 232.714763][ T7641] switch_task_namespaces+0x3e/0x110 [ 232.720070][ T7641] __se_sys_setns+0x784/0x17d0 [ 232.725042][ T7641] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.730279][ T7641] ? __pfx___se_sys_setns+0x10/0x10 [ 232.735511][ T7641] ? do_syscall_64+0xbe/0xfa0 [ 232.740238][ T7641] do_syscall_64+0xfa/0xfa0 [ 232.744787][ T7641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.750869][ T7641] ? clear_bhb_loop+0x60/0xb0 [ 232.755582][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.761496][ T7641] RIP: 0033:0x7f93c9f90ef7 [ 232.765959][ T7641] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.785630][ T7641] RSP: 002b:00007f93cae68fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 232.794105][ T7641] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f93c9f90ef7 [ 232.802091][ T7641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 232.810244][ T7641] RBP: 00007f93ca011f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.818280][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.826298][ T7641] R13: 00007f93ca1e6038 R14: 00007f93ca1e5fa0 R15: 00007fffc71327f8 [ 232.834315][ T7641] [ 232.837356][ T7641] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.844640][ T7641] CPU: 1 UID: 0 PID: 7641 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) [ 232.853828][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.863895][ T7641] Call Trace: [ 232.867190][ T7641] [ 232.870128][ T7641] dump_stack_lvl+0x99/0x250 [ 232.874725][ T7641] ? __asan_memcpy+0x40/0x70 [ 232.879319][ T7641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.884537][ T7641] ? __pfx__printk+0x10/0x10 [ 232.889160][ T7641] vpanic+0x237/0x6d0 [ 232.893164][ T7641] ? __pfx_vpanic+0x10/0x10 [ 232.897681][ T7641] ? is_bpf_text_address+0x292/0x2b0 [ 232.903011][ T7641] ? is_bpf_text_address+0x26/0x2b0 [ 232.908237][ T7641] panic+0xb9/0xc0 [ 232.911963][ T7641] ? __pfx_panic+0x10/0x10 [ 232.916419][ T7641] __warn+0x334/0x4c0 [ 232.920412][ T7641] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 232.925878][ T7641] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 232.931348][ T7641] report_bug+0x2be/0x4f0 [ 232.935693][ T7641] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 232.941151][ T7641] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 232.946608][ T7641] ? nsproxy_ns_active_get+0x891/0xcb0 [ 232.952068][ T7641] handle_bug+0x84/0x160 [ 232.956312][ T7641] exc_invalid_op+0x1a/0x50 [ 232.960809][ T7641] asm_exc_invalid_op+0x1a/0x20 [ 232.965653][ T7641] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 232.971721][ T7641] Code: 00 e8 95 41 77 ff eb 0c e8 8e 41 77 ff eb 05 e8 87 41 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 b2 1a 09 cc e8 72 41 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 64 41 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 232.991325][ T7641] RSP: 0018:ffffc9000b14fd40 EFLAGS: 00010283 [ 232.997424][ T7641] RAX: ffffffff824a1b9e RBX: ffff88804d7fe680 RCX: 0000000000080000 [ 233.005436][ T7641] RDX: ffffc9000d160000 RSI: 000000000000093d RDI: 000000000000093e [ 233.013453][ T7641] RBP: ffffc9000b14fe01 R08: ffff888021fda0bb R09: 1ffff110043fb417 [ 233.021443][ T7641] R10: dffffc0000000000 R11: ffffed10043fb418 R12: dffffc0000000000 [ 233.029431][ T7641] R13: 0000000000000000 R14: ffff888021fda0b8 R15: ffff888021fda000 [ 233.037421][ T7641] ? nsproxy_ns_active_get+0x88e/0xcb0 [ 233.042920][ T7641] switch_task_namespaces+0x3e/0x110 [ 233.048232][ T7641] __se_sys_setns+0x784/0x17d0 [ 233.053019][ T7641] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.058253][ T7641] ? __pfx___se_sys_setns+0x10/0x10 [ 233.063476][ T7641] ? do_syscall_64+0xbe/0xfa0 [ 233.068204][ T7641] do_syscall_64+0xfa/0xfa0 [ 233.072731][ T7641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.078808][ T7641] ? clear_bhb_loop+0x60/0xb0 [ 233.083494][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.089396][ T7641] RIP: 0033:0x7f93c9f90ef7 [ 233.093823][ T7641] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.113438][ T7641] RSP: 002b:00007f93cae68fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 233.121858][ T7641] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f93c9f90ef7 [ 233.129831][ T7641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 233.137803][ T7641] RBP: 00007f93ca011f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.145790][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.153761][ T7641] R13: 00007f93ca1e6038 R14: 00007f93ca1e5fa0 R15: 00007fffc71327f8 [ 233.161743][ T7641] [ 233.165119][ T7641] Kernel Offset: disabled [ 233.169448][ T7641] Rebooting in 86400 seconds..