last executing test programs: 15.489517858s ago: executing program 1 (id=506): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$SNDCTL_TMR_START(r1, 0x5402) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000011c0), &(0x7f0000001200)=0x4) (async) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f00000000c0)={0x28, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x10000, &(0x7f00000012c0)={[{@none}], [{@hash}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x38}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xc, 0x8b, 0x8c, 0x20, 0x1546, 0x1342, 0xeb4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x5, 0x80, 0x6, [{{0x9, 0x4, 0x4, 0x5, 0x0, 0x53, 0xe9, 0x63, 0x6a}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000001180)={0x28, 0x2, r3, r4, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000180)="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"}) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x2ec400) (async) accept4$inet(r1, 0x0, &(0x7f0000001300), 0x80000) 14.101360393s ago: executing program 1 (id=510): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES32=0x0], 0x18}, {&(0x7f00000005c0)={0x188, 0x1d, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x12f, 0x0, 0x0, @pid}, @nested={0x8b, 0x96, 0x0, 0x1, [@generic="64b3c02cad2013dfa43ed17641ec0fdde6aee4b9dd9f79a1e13ab65ce38a1cf8420bb244b040498a8d17eff6cc8e90d85bb1b76221c47c0e366e591045b1e5ef7fe60a505898eb5b828d8351b2ac46280dadf42e893af4fe025e771c4a59ecd92d6acea67faf512c0247655ce850f53ea23318412a4f30fd6520b688eadd98", @nested={0x4, 0x51}, @typed={0x4, 0xa2}]}, @nested={0xe3, 0x4b, 0x0, 0x1, [@generic="6faa57b3c25b2f2657decb7d2565810de58368b4d1c44291fe0aa02e0ae6489c5b99b99d64a7106a3665450cd87c7bdad7859e1cfb1d6d9a2a3c5e10a393df986af459817a6d3ff65c5fd421996610c600bbe046cfce5baf964e60f77318bf1d38d4c11d5c426a439be8770e42d73b992a0bd276d88854440a7cbbeb43ced9304298103529a78dc66ba73c03a027079881e306a957f2ce9f4b66ade3869fc375b111e7a0687dacc85fdccc31e68b1052957dfcd8219daf3cb0c1059a", @typed={0x14, 0xba, 0x0, 0x0, @ipv6=@private2}, @generic="5cba06b2ccc3a8cbbcfc4f91702776"]}]}, 0x188}, {&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14003b00fc0100000000000000000000000000010000001a00d6800400228004008d806e231b1c817f04006880040021800000"], 0x1f0}, {&(0x7f0000000980)={0x94, 0x20, 0x800, 0x70bd28, 0x25dfdbfe, "", [@generic="282804bc8b2322aee8a60d944e007fe4837bb6d9d1050b2e077b742de6b2d4202a8bf5e1b57792580c87beb7ff89a114542bed38fed51c4d2aa23163e553d77497f45913898ab86fcda4910d02aa51a11785a87648beb6a14090f4ffe471d02197d82d8be07077f0e32bc14af824a9add69ddf8e0e15d31cfa741556f4e3dc72c8"]}, 0x94}], 0x4}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001380)=""/4092, 0xfffffffffffffe78, 0x0, 0x3, 0x2}}, 0x48) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0xc201}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x22, 0x4, 0x10011, 0xffff, 0x7, 0x1ed, 0x2, 0x3, 0xbb, 0x0, 0x70, 0x2, 0x7, 0x8, 0xfffffff8], 0x1, 0x4}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="08000800070000000000140000cfa86f007800660000401190780a010102ac14141a4e204e2200649078020000000400000002000000ad0c8335f3ccc2f00c33c876d62f076228fa007b9a88a2648d11ed4b38fb1dee460c512e21bc44aafb7292f9fe79d28914d18f523ba7cc26f0bcbb571d9b68ceecc83e59e6ed9a06a4af0e9561223f44"], 0x86) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r8}, 0x14) syz_open_dev$vbi(0x0, 0x1, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000080)='./file1\x00', 0x86000547) 13.185179699s ago: executing program 1 (id=511): r0 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f00000002c0)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000280)='\r', 0x1}], 0x2) syz_usb_disconnect(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x50f00, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) 11.423566063s ago: executing program 0 (id=514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x3, 0xee, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xb7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x6, 0xb0, 0x8b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x15, 0xd}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x5, "845b711eb0b2"}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x7, 0x3, "2ba32bde2f65"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x9, 0x2, 0x4, 0x8, 0x8, 0x2], 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0xdc, "5df393b9ea80"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x2, 0x10, "7cb9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7f, 0x10, 0x2, "838370f9"}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x2, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0xe, 0xd9, "b3380cf9e0fa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x1, 0x0, {0x7, 0x25, 0x1, 0x1, 0xf3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x9, 0x1, "afe9bbd1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x5, 0x10, {0x7, 0x25, 0x1, 0x81, 0xfb, 0x4}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0xfb, 0x5, 0x3, 0x10, 0xb}, 0x36, &(0x7f00000001c0)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0xcb, 0xe}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x1, 0x0, 0x7, [0xffc000, 0xc0, 0x3f00, 0x0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x9}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x446}}, {0xfc, &(0x7f0000000440)=@string={0xfc, 0x3, "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"}}, {0x74, &(0x7f0000000540)=@string={0x74, 0x3, "82becc849e8442fdcd73e9de366b29d312a1632faebe7779669e10629a226afba8963f88f6891b0dd160625d51bebfd5225a6231a46d3a4f2f6ae04abe56ad440da93f6df67d1280bfe78cec54a6e58860af3d30e1b516e6588a6920fb0d99d5682d1f773b3502e48e7e91357ae368b3e909"}}, {0x69, &(0x7f00000005c0)=@string={0x69, 0x3, "b57cced4dcb4bc10c6d2b081f96c942aa6a3e45882f9efcbee6a413ff7c24f2610a0934821043d69433d71f2d82315fcaa8b2c07d2e3f168d40ec7b70357bff2dcd6c1ce2a6af1680637d8087b140bf6a03618f15437590ddf0517413cf0d152b16bf701864f26"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x119, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x7d, 0x68, 0xa5, 0x8, 0x830, 0x20, 0x3930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x2, 0xd4, 0x3, 0x80, 0x65, [{{0x9, 0x4, 0x85, 0x67, 0x3, 0x86, 0xed, 0x63, 0xe, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x25f2, 0xffff, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x8, 0xff}]}], [{{0x9, 0x5, 0x1, 0x4, 0x40, 0xff, 0xf, 0x1, [@generic={0x5d, 0xe, "a4e0549f88d4f0fef9a3b66e2ef84d1d8b1b8f9eaf4a5b3f7e7afaa8e25a3995420a72cd3da87213c2315e84d522b518ae0e79ba0db2c0f840f8c89693ba2a5b18f08da1df46bceff5a70cda0a0d82344457d4203eaf9fb24bcace"}, @generic={0x2d, 0x8, "4b241e0a594fd610f10e86a1ee273271ae287f977b90042800ef709510d8ebeb6264013d08c42e82002fd0"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x5, 0x80, 0x9}}, {{0x9, 0x5, 0x6, 0x1c, 0x10, 0x4, 0x1, 0xe6}}]}}, {{0x9, 0x4, 0xb, 0xff, 0x1, 0xea, 0x27, 0x66, 0x6, [], [{{0x9, 0x5, 0xc, 0x14, 0x20, 0x6, 0xba, 0x6, [@generic={0x20, 0x22, "16d9803bb2929c123899957db435a968424d516e7f090840fb37b0311919"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="202315"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x482841, 0x4, 0x1e}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0x0, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x0, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x7ffc, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x5, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x1, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a5, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082cbd7000000000000c00000008000300", @ANYRES32=r5, @ANYBLOB="3000508011000a0056bee339084eeef16f162471f40000000800070000000000050002"], 0x58}, 0x1, 0x0, 0x0, 0x44151}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000d40)={0x24, &(0x7f0000000bc0)={0x40, 0x22, 0x8f, {0x8f, 0xa, "89e669062066912f2350955331dac41cd4f6925d5407a4c774040fc98c97bb7d9b19a9ede593e440d229d5a8d4c2c2c551aac0cb90d223897dc0439a8afc1a2f2b2c668b71be03e6d5a136639f33818368bd2b3843c9ebef4239717a7a4d3dd72a5c08626f9a07358beab58410712b9b66fadc3e5cd9aa0a7da0ffd51502750799cf176e8bd313f0a99e47f13c"}}, &(0x7f0000000c80)={0x0, 0x3, 0x13, @string={0x13, 0x3, "b3e85e7eff980f10828abef14d595aa42c"}}, &(0x7f0000000cc0)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0xc, "599c055b"}, @global=@item_4={0x3, 0x1, 0x4, "47187dd6"}, @global=@item_4={0x3, 0x1, 0x3, "277b1146"}, @main=@item_4={0x3, 0x0, 0xc, "0b12991d"}]}}, &(0x7f0000000d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xc21}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0xc, 0x85, "4ee2c3cfe95e8cca34f6ba73bccd0e230c369b430057bae746d2c5bbbb0bf660391de16050740c8a545e8c775c65125e4b70ef4a73284d326f1471b31143be6b1bf2aed5348d924fb2ed978e0296c5d0032cd079338a214c79d244886b7a1b9aa775bf52812f2cce380d894ad7a7f29c137ba1d9fb2675eed7e51a18d4052a53d6491b0e89"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ec0)={0x20, 0x1, 0x7e, "5439211ac2af051e0afd68f693a92f6c0762816b542109da5e659211d067b8d920d8c60fcc82df38a24d3b0aad488161d596ed3e88884300b01dc239f4f30040a1daf66bf474f4dcbb6f0b530e091e1a9302085cb8f575c6b42f4baa698c1df6c79b350d4d3a977c9554a8e5ec764c4f261d13c043ad4fcb824931309479"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x5}}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000740)=0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 7.889137406s ago: executing program 0 (id=518): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0b111"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07000000000000000000120000000c0001800600010002000000"], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000ffdb5570485d7bbabb050010f700000400819b00"], 0x20}, 0x1, 0x0, 0x0, 0x200400c9}, 0x800) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x13, 0x101301) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000200590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r8, 0x8004745a, &(0x7f00000000c0)) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x280801, 0x0) fcntl$notify(r9, 0x402, 0x29) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x40000) ioctl$HIDIOCGFLAG(r12, 0x8004480e, &(0x7f0000000140)) creat(&(0x7f00000003c0)='./file0\x00', 0x1b7) mount(&(0x7f0000000100)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='ext4\x00', 0x208003, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x80006, 0x19ef, 0x6, 0x4, 0x27ff, 0xe2, 0x7ff, 0xbb4, 0x2800, 0x8, {0x8, 0x6}, 0xd0, 0x9}}) 7.888486382s ago: executing program 1 (id=519): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x9, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x933, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xd0, 0x6, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0xa45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x80, 0xf0}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x7, 0xd1, 0xc0, 0x40, 0x5}, 0xbc, &(0x7f0000000180)=ANY=[@ANYBLOB="050fbc00030710021232071f03100bad100a94028203aeea992624d356585f631673ecf1314b10bea2859160747a3f1c7229156d4335739a368775c6094844625920bcaff82e17ead5a96c6fa02e73f328267a44c45fe7d8efb17ef13f3f79973eb6d5f9d7da2f8ec8241402957480bf1eb0fc87a5d63b1bc376a9bdf42240a520575995427460cb1aa192da6f850e22a6f6c2ac94648667743ca3086d59d47ec96058a9744dbd42135d553e262000"/188], 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}, {0x9a, &(0x7f0000000280)=@string={0x9a, 0x3, "1e46c226f5988c3d525eb0aa8a9590eb38a78b15a38f4e4653dbe732005f140db7542416377866d9d73a016f1ed14851a0c4ca188b8b2240adbce3724c0f00efae7ea7ee763c62d9144847dc216105dbed01c77541978f6abb63cc32699062f89df8e7b083812fcc7bc604d4458a0014019c224063c500bbb8cc8c88ff4c79cadd2ef3310cc2ff58ed151e22729cbf0fcd7a40249b8c00dc"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x53ea1ebea2ce1c17}}]}) syz_usb_control_io(r2, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x40, 0x23, 0x3a, {0x3a, 0x10, "a6c07f6bc3bff3f9ab054520378888227ae5a94382a8d145f6ffd95146175737627a884d28c0ff66be21ce7909480aa4555568c5561caf56"}}, &(0x7f0000000400)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "51743545e472159f326bf509d93f8fc5a92d387fde2d302219b8f92bae20567a3984172495e358fa2f261d7c1bbac6fc0e51d78676463dc574c7b1b2ae7aff613cf308e524f18be09743f092462329ca1c62ff8fa8741516e40e028f4a05e58389bcbe120f185ac53e2de71a4ecf0bca2fc7dae45a88d3ed3abe620f44be41f37ebe614c933326f5558c3f3b05864852a2ecca0ec1b179ba1648ed150693d21e6afa96870160e031b558fc70d239385c0e38cbf9f9aeba"}}, &(0x7f00000004c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x81, 0x3, 0x1}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x8, 0x4, "1c6a3ba3", "616829ee"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x80, 0xd, 0x0, 0x0, 0x19}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x78, "889c845dc748024233b78e39b84a5e1dde2010c033e80c8c16ee5167c39d72135c3e82b2a2a117d91834fad5d358a43cacf6a17a70596194944ef0186f5ba67bd33e692042a206ca543d04bb182f57f42d797a0fab3156da81bad6ba246dac80b555c557c61c0213e990c90ca9631fa674f3ded36e03e858"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1e0, 0x40}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0xb, 0x2, "aa9d"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x101}, &(0x7f0000000880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000008c0)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, "ffb7"}, &(0x7f0000000940)={0x40, 0x1a, 0x2}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x6}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) sendmsg$netlink(r4, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x804e, {0x1, 0x6, "57daba", 0x443a, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0xbaf0}}}}}}}, 0x66) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x100, 0xffffff44, 0x7, 0x5, 0x1ff}) r6 = eventfd2(0x0, 0x80000) r7 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x20100) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r9 = dup3(r7, r8, 0x0) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f0000000000)={&(0x7f0000000a80), 0x0}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001000), 0x200000, 0x0) r11 = eventfd(0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000002b00000008000300", @ANYRES32=r14, @ANYBLOB="050034006e000000080026008a09fd931e001f0001000504000000000000006200fc000900000008000d0000000500001e00940201001dff03000000000000050008000f000000060089000000030000"], 0x6c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) io_submit(0x0, 0x9, &(0x7f0000001380)=[&(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000b80)="080a666ef5c88b6e40f073838e202ce75ee36e00c60044faf2aeea6c250076e9fe6fd329e40d362f693986d22eb2909fa48f8a5009a7d853d5df33a88e072c4bce0d5ac788b1427cba246381e368fcc3f75f8fc8ef811d5f393c3c09a41b7103dd91c59c60a04730b533a8460001298c0b9e904545fd8f0c09a591e5b1db5854992fbae8b0eddb3c3d81b129ba72632f0cdec3f04e3182405c898c9756360a8a411ae8e7160052f0273181502437623d4fc49e7c13c4ac2af6a487da5648fc200588594ad78b0772dd8feaa453b50bfdcd59dd81e2514a", 0xd7, 0x0, 0x0, 0x1, r6}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f0000000cc0)="9b6540ebd60bd288d1273e7d3a1cf4d475df38e5d14183c47209a95d3d3101b106e07346ef7ac85664f23e72c387b01ca03e5b0f9bf048f28fe611bacfede6e673fc828616d45f600f7784e26c1c58f32317e0998cbbe0b80f480e3bb3a6e35b19d9655b60600c28d6bf7a10d5bd617811ff1cb7b479b526463b76331e709b43a3787afa84a05d28251d9846d233f436011d1c249b539c114509ca6b263ac8977a2cb76b80b3eaa8c6ba9d33e872cfcc6e25057f82af10259c57c686a20700fe89c20385cae213ca9da7372eb59ac95281c4e8a94c722cd1695d0525e51e14", 0xdf, 0x39e, 0x0, 0x2}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x3, 0x5, r5, &(0x7f0000000e00)="7a8733cabb997b9ed05bc56608b0cca9597f2e6aaef969959ac8be4d846fb755cfa5aa4b6183c8a89faebd869b0bdef87e81156e8a9949b2ad7ebde569b6946a982c08c54ff6c9e9c2da5355db3b87f0c70748e3ee30a36b40508b59ba245bda8b", 0x61, 0x6}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x1, 0x8000, r5, &(0x7f0000000ec0)="bbf7b5a903de0b8d195b3d31c2bd26823b7c5ed890a6b6607ace48b7ff64f81a73e721b45b31a8c7e4293e860314116bb411882841f6d677af1a20d2c1e8af769d40c24c943c84100a663b945dbaa0b2462806d5", 0x54, 0x9, 0x0, 0x3, r9}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x8, 0x9, r3, &(0x7f0000000f80)="f83bdf8332ae3aac50ba76623ada5395493ef6f5090fcf13d284b6acb9682f7c0059aeecf3d79a234f98c5b44a0816f7707fba873ed9640f932e5d67847f87b3d0", 0x41, 0xffffffff00000000, 0x0, 0x1, r10}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x5, 0xe, r5, &(0x7f0000001080)="6cab268bb3e3f9270f943110bcf056a2a9933bb0c690bb31fe6fe305aec76222ee0d232dd98f13a89408ad557fd76c84d5bc3eae56bccd6539baac1c220f5975f1a5bd9c02a362931fdf581b2a8cd2cae99dd55b05e817f18133a49e3c73252a880304d88571a11ee70de88961f7d8fe1c6715d6c42f3121e100045a580c5b5d6bb26545cab49fb341c979bd27ee690e9b2308632a1fd10b5b2081f57adfc11137910a90f8b2c2a0545508e9cc48c28acd647f", 0xb3, 0x3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x2, 0x101, r1, &(0x7f0000001180)="0e6f7f979bc80067967d3e655fd1c31320e9ba62dce8895d8241b680eb5cad2fcbb0aa60106868aa2102e8991859f5b18bf518e1feb693fb77abbef663def074ff06ee2e42b3fc2143eac2a4899fcdff00c4f5ba81730044d87e976e8438581f08cc9e6f86cc6aa7e7baad0582d4ee9b0fc9064329f108c7cb941234e6098e2d033481ed15dd92e606f7e9f8bc0f97db64971265bb04aa825fdded6f4cb2e67a4c3ea71dd0fb7cfbae5e56ddbfc87139f853", 0xb2, 0x1, 0x0, 0x0, r11}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x8, 0x1, r12, &(0x7f0000001280)="de9bf2889dc7942f4e5b48b48e4f92faa89a22cd14a8f1", 0x17, 0x3, 0x0, 0x3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x7, 0x8, r5, &(0x7f0000001300)="425d940c5ab566204529548948fbc0368075b6a17110fdb7206df93d877843f3cb087c9a14ad38d302596f811a138f", 0x2f, 0x8000000000000001, 0x0, 0x3, r4}]) r15 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGETKEYCODE(r15, 0x4b4c, &(0x7f0000000b00)={0x5, 0xa028}) 4.854733323s ago: executing program 0 (id=526): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x6, 0x6, 0xd51df4994cc05469, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000040)) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{0x1, 0xfb, 0x6, 0xfffffffa}, {0x9, 0x9, 0x4, 0x4}, {0x45dd, 0x0, 0x3}, {0x523, 0x6, 0x57, 0x1000}, {0xe, 0xa, 0xdf, 0x2}]}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d) 4.80942225s ago: executing program 1 (id=527): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB='}w\''], 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000a40)={0x0, 0x30, 0x6, "b095594ef163"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x40, 0x1, 0x2, "8856"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000e80)={0x20, 0x0, 0x2, "367f"}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x40, 0x11, 0x91, {0x91, 0x10, "737a8795ac183e1f6df89aefc3a77d791836854771c7b3ae9898b91c27cdec99579b156819c80c2b19220f153bc33d185cef355c93257c517d7b6a3e25aa7c9181b97d2789e0567f82212644384beabc5fc1a8f6ea3df598cccc060849e312703f716bf559534719e591909a4940329c7a8cd875ff376b40a5a27ae03ef393debcac53908b7689aee41dd7178dcb2e"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="0003be000000be031fd847f5cb09a8b324ae32eadc4575eded40e2722d86429a0b80de9fa0dfcd6f7a7e515ced060ab47bcd9c7bf4494b83410abf3bd3ab8cead87a9919bd194cd3f1eb2de67526f1fbca3f201da7f0ddee37ec8667d74ef6e5a8feabf1dc91dbfe1ac98b9430d79a767709288c304a1fb776328030fc1b1e4da81d89938f72ab64ca0c438bdfe1740f6bd594add2ff0ec0dd64038effffffff000000000b1d896ba8ba19c23dc3ae0800f720c7b19b93482c157dc3e8362f7ca317ce0b"]}, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x20, 0x16, 0xa9, "1de4909f6d83fba20d241e06654d1942a927ee839c6286597b422f4c6322d197be3408d1d8034e145439efbcee911cc3c63b42b49720a0ab4f2dedc6e4040524123e5b515d71f4d76b0e0a65f20e9d6381d5cfe4a12798d11f77841adb0d2ea6be36dee7f8e7afdcb69fec82ac37502c1f523724e4901fa4e605b1c39892c31b208657a77e29b45068e7b3362bb6c503ba694c7acc35fcee6c8cf59facc931c6d8ac44a060939bf0d4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000000400)={0x20, 0x81, 0x3, "b2139a"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "1236"}, &(0x7f0000000480)=ANY=[@ANYBLOB="bced"], &(0x7f00000004c0)={0x20, 0x84, 0x3, "33fc00"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "761b23"}}) 4.727332589s ago: executing program 0 (id=528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, &(0x7f0000000340)={0x20, 0x24, 0xfd, {0xfd, 0x2, "2a76bb029fb891cf00afe3f24a0f05e69ade7e69cae328361ac965a98a8dfe7aa03447d77234dd407cbb50e83c5f51711aeb34143c5ca392931a868efde7c2937760911b79b5eb5e5ed07854d7bcb5139e75e098f26dea7fb614b5ba0d8edf473a2d1c5d22783c9c1e8536aa8b260803b5fda1217f51915df3e3f3b81374ca64c0c3c7768a09648abc770d010025dc897fa000839755fc3714244f18fb3116cfc56619ac117c5fcaefbdf972b55e0914a8987f41227b141e0333ccd033e140ea270b7ba353047add48572ad763256adfa9fe9cca0dbeb891497c7a5676ec620daed117f567d9197db6755eb9d5aadb3c6ec73e3093a8df7a4a3667"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}}, &(0x7f0000000680)={0x44, &(0x7f0000000280)={0x0, 0xa, 0x61, "782b23039911da67a114c29d5f2efbc1808627ffb6f0554964bd3c5ef950d694ea1ab5367199c7b3f9d4f8d3200563c52d6001a8b4c3d6e95ceb83bc04973ba2299eb50fb7b2b8ad1ccb8925545ca9f4b07df33cc9db9f9212715726db2bfdcfc7"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x81, 0x3, "d13b1a"}, &(0x7f0000000580)={0x20, 0x82, 0x1, '~'}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "bb63"}, &(0x7f0000000600)={0x20, 0x84, 0x1, 'n'}, &(0x7f0000000640)={0x20, 0x85, 0x3, "b2bb33"}}) r3 = syz_usb_connect$cdc_ncm(0x2, 0x97, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x1, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "b8"}, {0x5, 0x24, 0x0, 0xae38}, {0xd, 0x24, 0xf, 0x1, 0xa96, 0x0, 0x5102, 0xe9}, {0x6, 0x24, 0x1a, 0x1, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x7fff, 0x82}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x7fff}, @mdlm={0x15, 0x24, 0x12, 0x8}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0xb1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x14, 0xc, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x8, 0x2e}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x310, 0x5, 0x3, 0x5, 0x20, 0x8}, 0xf, &(0x7f0000000800)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x6, 0x8001}]}, 0x7, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2809}}, {0xcf, &(0x7f0000000880)=@string={0xcf, 0x3, "770fe4d67fe34172c9b1749dbc363ecf6d1385ddf7451aa60eb9d7271f1001f4c77b71f8e618254a2ec1cda82fccd870edd2199c24d340c2c098017c0d960a464adab24cee4a3bc7d9ed27991422ad28018999a7852de5eb6e614e91472f6b68efff45be89d501e9d723e9f6515643b4e3698e45f6a733ad453d8b317692b616c0d8f176fb08d4885b007b36e6578462e0c122837a18251983d26918edf091ed053d4cce80dc381365fb1a5ef8657988d396ec1458ae81ecbf0c5e3fb9da9c1360ec35024b1361fbdd2385058c"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xf494}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x425}}, {0x9d, &(0x7f0000000a00)=@string={0x9d, 0x3, "817133058af76fc5ce96af8879ccc56de82f8b42960e7d6636e008827a4a6a2ffb4ab2e91408e898f119a6340b3ff8dd7fddcc1d9571a6bdc8bf34ef222ce5c0f75b82fb558d3169e6f9cb64192892b9675454eac8e17c002ddeaa10990dde0f4eb45ccc84d4c1c6f93b7f3be3e62c7a303e9aaf9f5824272c586ab8a928833da0acea0d65a29e6bda28811c752722956c4afa5e2cc3dca8cdc11d"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x44b}}, {0x40, &(0x7f0000000b00)=@string={0x40, 0x3, "77ae25d223c2ab7afa465f2205b06662e50557a47159f904e7dfaed027440a734912e6ccb321fe50489bbca52d15afe11f13f446cb492377366f8ef87df7"}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000cc0)={0x14, &(0x7f0000000bc0)={0x40, 0xa, 0x8d, {0x8d, 0x2a, "17c6a7a74ad39536302479593c71c3082acd6e34cd496a21daddfb86f68c132af8d44e7f73315596c7a0a1df71b1dc362255c17f5e2f55a7141effade8d7f9955856dbff91f2e704a13026fd1d7f979fc38133d16e8bd2010993f03d469ca4f209ac066444fdd5cc5fe799365242c5a0ff413077f64ac7bdab5e72b0646013f6e15e6a28d8cb2f067a82ba"}}, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000d00)={0x20, 0x0, 0x14, "ad91942920fa6b0c74a6320b0c5c9d123442e4d2"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x95}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xfff8, 0xb, 0x1, 0x6, 0x2, 0x8, 0x40, 0xfc1, 0x9, 0x10, 0x3, 0x4}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0xa}, &(0x7f0000000e40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e80)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000ec0)={0x20, 0x89, 0x2}}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x0, 0xb2, 0x3, &(0x7f0000000180)={0xa, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 1.798064026s ago: executing program 0 (id=533): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40a800, 0x0) r1 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, &(0x7f0000001540)=""/18, 0x12}, 0x2040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES64=r3], 0x6c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x40) r6 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x40, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x80000001}) 1.713444359s ago: executing program 1 (id=535): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a00010d00000000000000000400008008000280"], 0x1c}], 0x1}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000d70b024d564b"]) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.60931342s ago: executing program 0 (id=536): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0x0, 0x40000}) 1.533421381s ago: executing program 3 (id=537): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xa883, 0x92) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x28, @b={0x20, 0x5, 0x1, 0x5, {0x22, "8bfbccd6838d095bbb440ac90d8866119ee1843edd9b5987364e32370e1920071eff"}, 0x2}}, 0x2b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x4000, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 1.134955465s ago: executing program 3 (id=539): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0x10002}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x2, 0x20080058) connect$inet6(r0, 0x0, 0x0) 964.067362ms ago: executing program 3 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x121e}}, './file0\x00'}) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000580)=""/174, 0xff56) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 801.554573ms ago: executing program 2 (id=542): uname(&(0x7f0000001900)=""/87) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x4, 0xd) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000080)) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r4}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x23aa80) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000840)="f421c652c2f15db118ea395df34c6ee2f5cf61f1a91309f1af9a70bdf51be98296f0a7da013dcbc2305b706cd49b3aee34aefcfa8f16492c7e0a7f2f820262ba0c2a69051e594016240504609d7132e2ba4ac5f6c971c0897fd3bb1cd629d002663ae35a2bfdc29c356405736ce6cef62afa7b3cadfd0586b44e437220573993fb3461e4a831a854ad0fc78d8989fc0cd2a16c9fa5ed1806f534add9ab3db4f08f0f46f2c2f953bad07d173054526c62b17473f5818ec7aacb5fb1893a3dabe9", 0xc0}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f00000001c0)="b3c6d39d4f71738e7b15ab982cbdd9e059de202b6d3473c0efd93445a3846b953d12138d4791b59dae2039ee53f6cff8bea1b5b7d9374522da235246b4098faaef32a90fd8c7057c979f4edf91c91f55d985f66e40cedd421df5152c", 0x5c}, {&(0x7f0000001980)="c67ce0dea17695f51eb7c67d3138566bd4b06f917bc72bd5cb023f59a001cf48250624e988cb4765075ff398e9e0fbed365329516da6f7a9a3facf6a61d1b4f01f72360fb7652eccc18e6335c158913ca891b935cdc8d361dfbeda62d768e318037ed6cc2e91d9b0b79c451efe3d8f4846ab15ed94cb0d13cab028b0ea2794f0eb9149ab05027603a71067be5e4277824100cea795fc1f1537f355a5528ef9621bf3050fcca5f9c7d8e560f7341fb66edb564ddcc53fa085ccf3e2216cf654bc4cb86e438878256bf9008a13784e7792e6898d16d2cde330d3fc55704886031576f4d16f81e86433f7da3ed6d85c924c", 0xf0}], 0x4) ioctl$BLKGETDISKSEQ(r6, 0x80081280, &(0x7f0000000180)) 717.295408ms ago: executing program 3 (id=543): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="9586f54c42c686c1d890d6db2ab6f2d98386c6231d80cc835e4f041c4fa8b3a18b74f9d1af5ae6154138bb4a28dee64f90151737204f7588983262c26af550a980fa54ceb67c175d2faab2ade716c40852e2763541a8cbe23d3c45a376163c88cb30db6d0dbf8c86f61db940ab66495579e0b96be72a0dca887c7afb3d92e2c9175be83f89ba74a92f387ee4574507ceddef53543891401b48c1315fbd0a2ffc13572703dc4c3a078e5d0a44835e436b83288f5e9cdd08b104f8a1c78fa789bb0075e5b808756b9dd347d571e4aa95db03ecf0", 0xd3, r4) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x341ac0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r0, 0x2000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="c805f08017fefdccacb61c1f0a348ef4d65c1a8661af95913979fb20dcc50d8154bc6adf", 0x24}], 0x1, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="3c2dd784fe50881f8801648c54e7650e7c883114c8e25c394b24209d14bb5a3d509a49702424003363edc7ad066664bd14fae70712b5e478447cc34a720114540f66a56ac74095362b6dc17ea057e0d909baa65da8cf2a48fccf2a76c201c6171dbae5cc8442ebd13b8a6648bdfbed11dec9912492d392a1472f34dc571fed739365272beeaf5dc2d57824f349641cee62d656862db8c1e237ba338de904e83ba3d37f919f0d963932d11c9bcf0c", 0xae}], 0x1, 0xfffffffffffffffd, 0x0, 0x4041}}], 0x2, 0x20088180) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) fremovexattr(r5, &(0x7f0000000640)=@known='security.selinux\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r6, 0x0, 0x0, 0x10101, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) setsockopt(r8, 0x84, 0x7f, &(0x7f00000005c0)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x1ffffe, 0x40200003, 0x0, 0x6, 0x9}) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="4d9374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$KVM_RUN(r3, 0xae80, 0x0) 645.332291ms ago: executing program 2 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400a9000000080026006c090000300051802c00e080040006000500020001000000110001"], 0x60}, 0x1, 0x2c00, 0x0, 0x4010}, 0x0) 496.839657ms ago: executing program 2 (id=545): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40a800, 0x0) r1 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, &(0x7f0000001540)=""/18, 0x12}, 0x2040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES64=r3], 0x6c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}}, 0x40) r6 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x40, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x80000001}) 496.698648ms ago: executing program 3 (id=546): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddb060000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0xfffffffd, 0x30, 0x30, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x9}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0xffffff80}}, 0x10) 332.948544ms ago: executing program 3 (id=547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x3, 0xee, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xb7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x6, 0xb0, 0x8b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x15, 0xd}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x5, "845b711eb0b2"}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x7, 0x3, "2ba32bde2f65"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x9, 0x2, 0x4, 0x8, 0x8, 0x2], 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0xdc, "5df393b9ea80"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x2, 0x10, "7cb9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7f, 0x10, 0x2, "838370f9"}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x2, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0xe, 0xd9, "b3380cf9e0fa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x1, 0x0, {0x7, 0x25, 0x1, 0x1, 0xf3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x9, 0x1, "afe9bbd1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x5, 0x10, {0x7, 0x25, 0x1, 0x81, 0xfb, 0x4}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0xfb, 0x5, 0x3, 0x10, 0xb}, 0x36, &(0x7f00000001c0)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0xcb, 0xe}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x1, 0x0, 0x7, [0xffc000, 0xc0, 0x3f00, 0x0, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x9}]}, 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x446}}, {0xfc, &(0x7f0000000440)=@string={0xfc, 0x3, "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"}}, {0x74, &(0x7f0000000540)=@string={0x74, 0x3, "82becc849e8442fdcd73e9de366b29d312a1632faebe7779669e10629a226afba8963f88f6891b0dd160625d51bebfd5225a6231a46d3a4f2f6ae04abe56ad440da93f6df67d1280bfe78cec54a6e58860af3d30e1b516e6588a6920fb0d99d5682d1f773b3502e48e7e91357ae368b3e909"}}, {0x69, &(0x7f00000005c0)=@string={0x69, 0x3, "b57cced4dcb4bc10c6d2b081f96c942aa6a3e45882f9efcbee6a413ff7c24f2610a0934821043d69433d71f2d82315fcaa8b2c07d2e3f168d40ec7b70357bff2dcd6c1ce2a6af1680637d8087b140bf6a03618f15437590ddf0517413cf0d152b16bf701864f26"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x119, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x7d, 0x68, 0xa5, 0x8, 0x830, 0x20, 0x3930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x2, 0xd4, 0x3, 0x80, 0x65, [{{0x9, 0x4, 0x85, 0x67, 0x3, 0x86, 0xed, 0x63, 0xe, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x25f2, 0xffff, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x8, 0xff}]}], [{{0x9, 0x5, 0x1, 0x4, 0x40, 0xff, 0xf, 0x1, [@generic={0x5d, 0xe, "a4e0549f88d4f0fef9a3b66e2ef84d1d8b1b8f9eaf4a5b3f7e7afaa8e25a3995420a72cd3da87213c2315e84d522b518ae0e79ba0db2c0f840f8c89693ba2a5b18f08da1df46bceff5a70cda0a0d82344457d4203eaf9fb24bcace"}, @generic={0x2d, 0x8, "4b241e0a594fd610f10e86a1ee273271ae287f977b90042800ef709510d8ebeb6264013d08c42e82002fd0"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x5, 0x80, 0x9}}, {{0x9, 0x5, 0x6, 0x1c, 0x10, 0x4, 0x1, 0xe6}}]}}, {{0x9, 0x4, 0xb, 0xff, 0x1, 0xea, 0x27, 0x66, 0x6, [], [{{0x9, 0x5, 0xc, 0x14, 0x20, 0x6, 0xba, 0x6, [@generic={0x20, 0x22, "16d9803bb2929c123899957db435a968424d516e7f090840fb37b0311919"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="202315"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x482841, 0x4, 0x1e}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0xfffa}, 0x1b, [0x1, 0xc95a, 0x0, 0x9, 0x5, 0x2, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x0, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x7ffc, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x5, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x3, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x404f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0xb, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0xfffffffd, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x1, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2, 0x2, 0x5, 0x9, 0x2, 0x14c, 0x60a5, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x2, 0x80000001, 0x1, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082cbd7000000000000c00000008000300", @ANYRES32=r5, @ANYBLOB="3000508011000a0056bee339084eeef16f162471f40000000800070000000000050002"], 0x58}, 0x1, 0x0, 0x0, 0x44151}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_usb_control_io$hid(r0, &(0x7f0000000d40)={0x24, &(0x7f0000000bc0)={0x40, 0x22, 0x8f, {0x8f, 0xa, "89e669062066912f2350955331dac41cd4f6925d5407a4c774040fc98c97bb7d9b19a9ede593e440d229d5a8d4c2c2c551aac0cb90d223897dc0439a8afc1a2f2b2c668b71be03e6d5a136639f33818368bd2b3843c9ebef4239717a7a4d3dd72a5c08626f9a07358beab58410712b9b66fadc3e5cd9aa0a7da0ffd51502750799cf176e8bd313f0a99e47f13c"}}, &(0x7f0000000c80)={0x0, 0x3, 0x13, @string={0x13, 0x3, "b3e85e7eff980f10828abef14d595aa42c"}}, &(0x7f0000000cc0)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0xc, "599c055b"}, @global=@item_4={0x3, 0x1, 0x4, "47187dd6"}, @global=@item_4={0x3, 0x1, 0x3, "277b1146"}, @main=@item_4={0x3, 0x0, 0xc, "0b12991d"}]}}, &(0x7f0000000d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xc21}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0xc, 0x85, "4ee2c3cfe95e8cca34f6ba73bccd0e230c369b430057bae746d2c5bbbb0bf660391de16050740c8a545e8c775c65125e4b70ef4a73284d326f1471b31143be6b1bf2aed5348d924fb2ed978e0296c5d0032cd079338a214c79d244886b7a1b9aa775bf52812f2cce380d894ad7a7f29c137ba1d9fb2675eed7e51a18d4052a53d6491b0e89"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ec0)={0x20, 0x1, 0x7e, "5439211ac2af051e0afd68f693a92f6c0762816b542109da5e659211d067b8d920d8c60fcc82df38a24d3b0aad488161d596ed3e88884300b01dc239f4f30040a1daf66bf474f4dcbb6f0b530e091e1a9302085cb8f575c6b42f4baa698c1df6c79b350d4d3a977c9554a8e5ec764c4f261d13c043ad4fcb824931309479"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x5}}) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000740)=0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 330.765782ms ago: executing program 2 (id=548): fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f00000003c0)={0xc1, 0x0, 0x4}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) syz_open_dev$vcsu(&(0x7f0000000000), 0x90f, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x90f, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600000000206050000000000000000000100000405000400000000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fchdir(r7) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r9, &(0x7f00000000c0)=""/55, 0x37) (async) getdents64(r9, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r9, 0x6, 0x0) 177.998226ms ago: executing program 2 (id=549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r2, 0xe307}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x40000010) 0s ago: executing program 2 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) kernel console output (not intermixed with test programs): ribute type 5 has an invalid length. [ 161.241163][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 161.264760][ T7113] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 161.409898][ T5916] DVB: Unable to find symbol cx22700_attach() [ 161.455375][ T9] cdc_ncm 4-1:1.0: bind() failure [ 161.466477][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 161.484910][ T9] cdc_ncm 4-1:1.1: bind() failure [ 161.496460][ T9] usb 4-1: USB disconnect, device number 25 [ 161.602352][ T5916] DVB: Unable to find symbol tda10046_attach() [ 161.609041][ T5916] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 161.611986][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.630664][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.660011][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.671317][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.690237][ T794] usb 1-1: USB disconnect, device number 35 [ 161.986521][ T7137] tmpfs: Bad value for 'mpol' [ 162.101945][ T7141] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 162.110177][ T7141] veth1_vlan: left allmulticast mode [ 162.214711][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 162.364712][ T5916] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 162.386770][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.405679][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.415229][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.426113][ T9] usb 2-1: config 0 descriptor?? [ 162.538761][ T5916] usb 3-1: config 4 has an invalid interface number: 247 but max is 0 [ 162.549841][ T5916] usb 3-1: config 4 has no interface number 0 [ 162.556311][ T5916] usb 3-1: config 4 interface 247 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 162.568315][ T5916] usb 3-1: config 4 interface 247 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 162.580358][ T5916] usb 3-1: config 4 interface 247 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 162.591781][ T5916] usb 3-1: config 4 interface 247 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.614593][ T5916] usb 3-1: config 4 interface 247 has no altsetting 0 [ 162.622172][ T5934] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 162.631804][ T5916] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 162.641663][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.651765][ T5916] usb 3-1: Product: syz [ 162.656126][ T5916] usb 3-1: Manufacturer: syz [ 162.660782][ T5916] usb 3-1: SerialNumber: syz [ 162.666667][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.676230][ T7141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.696299][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.705770][ T5916] ni6501 3-1:4.247: driver 'ni6501' failed to auto-configure device. [ 162.801156][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.813593][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 162.827166][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 162.837573][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.850446][ T5934] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 162.859541][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.870255][ T5934] usb 1-1: config 0 descriptor?? [ 162.883685][ T5934] gspca_main: spca561-2.14.0 probing abcd:cdee [ 162.922234][ T9] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 162.943657][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input21 [ 163.074632][ T794] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 163.091823][ T5934] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 163.102213][ T9] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 163.112606][ T5934] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.137766][ T7135] netlink: 96 bytes leftover after parsing attributes in process `syz.1.324'. [ 163.157886][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 163.168608][ T5934] usb 1-1: MIDIStreaming interface descriptor not found [ 163.187342][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 163.252171][ T794] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 163.292103][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.334618][ T794] usb 4-1: Product: syz [ 163.339289][ T794] usb 4-1: Manufacturer: syz [ 163.344496][ T5934] usb 1-1: USB disconnect, device number 36 [ 163.371060][ T794] usb 4-1: SerialNumber: syz [ 163.417020][ T794] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 163.472776][ T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 163.533553][ T794] usb 3-1: USB disconnect, device number 25 [ 163.683937][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.702343][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.733047][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.763642][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.806752][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.814870][ T7172] netlink: 'syz.1.324': attribute type 6 has an invalid length. [ 163.851150][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.873667][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.902056][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.939812][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.960640][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.978243][ T7159] mmap: syz.3.335 (7159) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.120047][ T30] audit: type=1326 audit(1762521844.812:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.134745][ T794] usb 4-1: USB disconnect, device number 26 [ 164.161191][ T30] audit: type=1326 audit(1762521844.852:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.186385][ T30] audit: type=1326 audit(1762521844.882:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.260900][ T30] audit: type=1326 audit(1762521844.882:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.283698][ T7189] netlink: '': attribute type 10 has an invalid length. [ 164.329782][ T30] audit: type=1326 audit(1762521844.882:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.406488][ T30] audit: type=1326 audit(1762521844.902:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.471923][ T30] audit: type=1326 audit(1762521844.902:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.521549][ T30] audit: type=1326 audit(1762521844.902:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.564556][ T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 164.580946][ T43] ath9k_htc: Failed to initialize the device [ 164.600639][ T30] audit: type=1326 audit(1762521844.932:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.643536][ T794] usb 4-1: ath9k_htc: USB layer deinitialized [ 164.672997][ T30] audit: type=1326 audit(1762521844.932:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7ef8f6c9 code=0x7ffc0000 [ 164.709675][ T7202] netlink: 19 bytes leftover after parsing attributes in process `syz.3.343'. [ 164.768306][ T5916] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 164.891074][ T7208] netlink: 'syz.3.344': attribute type 10 has an invalid length. [ 164.901438][ T7208] macvlan1: entered allmulticast mode [ 164.934418][ T5916] usb 1-1: device descriptor read/64, error -71 [ 164.938209][ T7208] veth1_vlan: entered allmulticast mode [ 164.972023][ T7208] team0: Port device macvlan1 added [ 165.120433][ T43] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 165.180317][ T5916] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 165.214370][ T794] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 165.274367][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 165.281620][ T43] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 165.290509][ T43] usb 3-1: config 0 has no interface number 0 [ 165.300019][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 165.309289][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.314435][ T5916] usb 1-1: device descriptor read/64, error -71 [ 165.317361][ T43] usb 3-1: Product: syz [ 165.327823][ T43] usb 3-1: Manufacturer: syz [ 165.332468][ T43] usb 3-1: SerialNumber: syz [ 165.340812][ T43] usb 3-1: config 0 descriptor?? [ 165.349836][ T43] smsc95xx v2.0.0 [ 165.397997][ T794] usb 4-1: config 4 has an invalid interface number: 247 but max is 0 [ 165.414372][ T794] usb 4-1: config 4 has no interface number 0 [ 165.420578][ T794] usb 4-1: config 4 interface 247 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 165.432081][ T794] usb 4-1: config 4 interface 247 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 165.434933][ T5916] usb usb1-port1: attempt power cycle [ 165.445436][ T794] usb 4-1: config 4 interface 247 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 165.461620][ T794] usb 4-1: config 4 interface 247 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.476852][ T794] usb 4-1: config 4 interface 247 has no altsetting 0 [ 165.489094][ T9] usb 2-1: USB disconnect, device number 36 [ 165.509797][ T794] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 165.530678][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.542616][ T794] usb 4-1: Product: syz [ 165.547865][ T794] usb 4-1: Manufacturer: syz [ 165.555384][ T794] usb 4-1: SerialNumber: syz [ 165.587566][ T7212] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 165.615802][ T794] ni6501 4-1:4.247: driver 'ni6501' failed to auto-configure device. [ 165.779312][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 165.804359][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 165.834442][ T5916] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 165.860271][ T5916] usb 1-1: device descriptor read/8, error -71 [ 166.126094][ T5916] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 166.154896][ T5916] usb 1-1: device descriptor read/8, error -71 [ 166.266008][ T5916] usb usb1-port1: unable to enumerate USB device [ 166.304395][ T794] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 166.461000][ T794] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 166.469433][ T9] usb 4-1: USB disconnect, device number 27 [ 166.473779][ T794] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.520576][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.532546][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 166.561647][ T794] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.575067][ T794] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.592399][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.616107][ T794] usb 2-1: config 0 descriptor?? [ 166.632731][ T7232] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.753442][ T7252] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 166.761485][ T7252] netlink: 216 bytes leftover after parsing attributes in process `syz.3.351'. [ 167.130691][ T794] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 167.167330][ T794] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 167.324198][ T795] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 167.437059][ T794] usb 2-1: USB disconnect, device number 37 [ 167.476850][ T795] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 167.501113][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.514741][ T795] usb 4-1: config 0 descriptor?? [ 167.535251][ T795] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 167.737849][ T7264] : entered promiscuous mode [ 167.745958][ T795] usb 4-1: USB disconnect, device number 28 [ 167.874060][ T794] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 168.050859][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.063008][ T794] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.073529][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.097441][ T794] usb 1-1: config 0 descriptor?? [ 168.319955][ T7278] netlink: 'syz.1.359': attribute type 10 has an invalid length. [ 168.325739][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.342393][ T7278] macvlan1: entered allmulticast mode [ 168.352029][ T7278] veth1_vlan: entered allmulticast mode [ 168.359079][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.382430][ T7278] team0: Port device macvlan1 added [ 168.578608][ T794] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 168.592068][ T794] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input24 [ 168.634581][ T795] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 168.676136][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 168.692913][ T43] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 168.706594][ T794] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 168.744347][ T43] usb 3-1: USB disconnect, device number 26 [ 168.786646][ T5895] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 168.817153][ T795] usb 2-1: config 4 has an invalid interface number: 247 but max is 0 [ 168.817535][ T7269] netlink: 96 bytes leftover after parsing attributes in process `syz.0.355'. [ 168.831864][ T795] usb 2-1: config 4 has no interface number 0 [ 168.849796][ T795] usb 2-1: config 4 interface 247 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 168.857500][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 168.865017][ T795] usb 2-1: config 4 interface 247 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 168.877490][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 168.883244][ T795] usb 2-1: config 4 interface 247 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 168.903440][ T795] usb 2-1: config 4 interface 247 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.917743][ T795] usb 2-1: config 4 interface 247 has no altsetting 0 [ 168.926956][ T795] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 168.936292][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.946823][ T795] usb 2-1: Product: syz [ 168.951025][ T795] usb 2-1: Manufacturer: syz [ 168.955780][ T795] usb 2-1: SerialNumber: syz [ 168.967016][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.977298][ T5895] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 168.987015][ T7278] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 168.994350][ T5895] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 169.008107][ T795] ni6501 2-1:4.247: driver 'ni6501' failed to auto-configure device. [ 169.016326][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.035809][ T5895] usb 4-1: config 0 descriptor?? [ 169.267569][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.276580][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.292673][ T5895] Bluetooth: Can't get state to change to load ram patch err [ 169.321233][ T5895] Bluetooth: Loading patch file failed [ 169.321271][ T5895] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 169.334876][ T5895] usb 4-1: USB disconnect, device number 29 [ 169.394160][ T7287] netlink: 'syz.0.355': attribute type 6 has an invalid length. [ 169.455155][ T7296] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 169.466874][ T7296] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.364'. [ 169.815823][ T9] usb 2-1: USB disconnect, device number 38 [ 169.979995][ T7306] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.365' resets device [ 170.004457][ T7306] tipc: Started in network mode [ 170.009446][ T7306] tipc: Node identity da29a17d991e, cluster identity 4711 [ 170.035102][ T7306] tipc: Enabled bearer , priority 0 [ 170.056523][ T7306] syzkaller0: MTU too low for tipc bearer [ 170.062388][ T7306] tipc: Disabling bearer [ 170.088038][ T7312] FAULT_INJECTION: forcing a failure. [ 170.088038][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 170.101035][ T7312] CPU: 0 UID: 0 PID: 7312 Comm: syz.1.366 Not tainted syzkaller #0 PREEMPT(full) [ 170.101065][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.101080][ T7312] Call Trace: [ 170.101089][ T7312] [ 170.101098][ T7312] dump_stack_lvl+0x189/0x250 [ 170.101131][ T7312] ? __pfx____ratelimit+0x10/0x10 [ 170.101160][ T7312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.101187][ T7312] ? __pfx__printk+0x10/0x10 [ 170.101219][ T7312] ? __pfx___might_resched+0x10/0x10 [ 170.101248][ T7312] should_fail_ex+0x414/0x560 [ 170.101286][ T7312] should_failslab+0xa8/0x100 [ 170.101320][ T7312] kmem_cache_alloc_noprof+0x88/0x700 [ 170.101345][ T7312] ? apparmor_capable+0x137/0x1b0 [ 170.101376][ T7312] ? skb_clone+0x212/0x3a0 [ 170.101412][ T7312] skb_clone+0x212/0x3a0 [ 170.101440][ T7312] ? nfnetlink_rcv+0x4ba/0x2590 [ 170.101468][ T7312] nfnetlink_rcv+0x4ec/0x2590 [ 170.101497][ T7312] ? __kernel_text_address+0xd/0x40 [ 170.101529][ T7312] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 170.101562][ T7312] ? arch_stack_walk+0xfc/0x150 [ 170.101601][ T7312] ? stack_trace_save+0x9c/0xe0 [ 170.101633][ T7312] ? __pfx_stack_trace_save+0x10/0x10 [ 170.101669][ T7312] ? trim_netdev_trace+0x320/0x440 [ 170.101692][ T7312] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 170.101731][ T7312] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 170.101751][ T7312] ? ref_tracker_free+0x63a/0x7d0 [ 170.101771][ T7312] ? netlink_unicast+0x7fa/0x9e0 [ 170.101794][ T7312] ? netlink_sendmsg+0x805/0xb30 [ 170.101821][ T7312] ? __sock_sendmsg+0x21c/0x270 [ 170.101838][ T7312] ? ____sys_sendmsg+0x505/0x830 [ 170.101865][ T7312] ? ___sys_sendmsg+0x21f/0x2a0 [ 170.101930][ T7312] ? __x64_sys_sendmsg+0x19b/0x260 [ 170.101963][ T7312] ? do_syscall_64+0xfa/0xfa0 [ 170.101992][ T7312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.102021][ T7312] ? __skb_clone+0x483/0x7a0 [ 170.102060][ T7312] ? skb_clone+0x246/0x3a0 [ 170.102094][ T7312] ? __netlink_deliver_tap+0x866/0x8b0 [ 170.102123][ T7312] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.102172][ T7312] netlink_unicast+0x82f/0x9e0 [ 170.102208][ T7312] ? __pfx_netlink_unicast+0x10/0x10 [ 170.102236][ T7312] ? netlink_sendmsg+0x642/0xb30 [ 170.102263][ T7312] ? skb_put+0x11b/0x210 [ 170.102295][ T7312] netlink_sendmsg+0x805/0xb30 [ 170.102335][ T7312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.102369][ T7312] ? aa_sock_msg_perm+0xf1/0x1d0 [ 170.102397][ T7312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.102426][ T7312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.102457][ T7312] __sock_sendmsg+0x21c/0x270 [ 170.102483][ T7312] ____sys_sendmsg+0x505/0x830 [ 170.102519][ T7312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.102559][ T7312] ? import_iovec+0x74/0xa0 [ 170.102589][ T7312] ___sys_sendmsg+0x21f/0x2a0 [ 170.102622][ T7312] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.102692][ T7312] ? __fget_files+0x2a/0x420 [ 170.102717][ T7312] ? __fget_files+0x3a0/0x420 [ 170.102752][ T7312] __x64_sys_sendmsg+0x19b/0x260 [ 170.102787][ T7312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.102827][ T7312] ? __pfx_ksys_write+0x10/0x10 [ 170.102852][ T7312] ? do_syscall_64+0xbe/0xfa0 [ 170.102892][ T7312] do_syscall_64+0xfa/0xfa0 [ 170.102924][ T7312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.102946][ T7312] ? clear_bhb_loop+0x60/0xb0 [ 170.102972][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.102993][ T7312] RIP: 0033:0x7fc6e9b8f6c9 [ 170.103013][ T7312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.103033][ T7312] RSP: 002b:00007fc6ea95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.103057][ T7312] RAX: ffffffffffffffda RBX: 00007fc6e9de5fa0 RCX: 00007fc6e9b8f6c9 [ 170.103073][ T7312] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 170.103086][ T7312] RBP: 00007fc6ea95b090 R08: 0000000000000000 R09: 0000000000000000 [ 170.103100][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.103113][ T7312] R13: 00007fc6e9de6038 R14: 00007fc6e9de5fa0 R15: 00007fff78d157c8 [ 170.103148][ T7312] [ 170.805456][ T794] usb 1-1: USB disconnect, device number 41 [ 170.985046][ T7334] CUSE: info not properly terminated [ 170.986155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.993831][ T7334] netlink: 'syz.0.372': attribute type 12 has an invalid length. [ 170.999910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 171.154362][ T5934] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 171.170446][ T7340] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 171.177087][ T5895] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 171.190623][ T7340] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 171.204351][ T7340] comedi comedi3: 8255: I/O port conflict (0xfffffffffff7fffd,4) [ 171.222888][ T7340] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 171.231116][ T7340] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 171.231185][ T7340] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 171.231230][ T7340] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 171.231339][ T7340] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 171.262501][ T7340] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 171.270002][ T7340] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 171.277857][ T7340] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 171.284686][ T7340] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 171.291274][ T7340] comedi comedi3: 8255: I/O port conflict (0x11,4) [ 171.324925][ T7340] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 171.326758][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.343961][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 171.349195][ T7340] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 171.359113][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 171.362061][ T5934] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 171.372915][ T5895] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 171.396262][ T7340] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 171.403420][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.406083][ T5895] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 171.424018][ T5895] usb 2-1: Product: syz [ 171.428717][ T7340] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 171.429837][ T5934] usb 4-1: config 0 descriptor?? [ 171.438685][ T5895] usb 2-1: Manufacturer: syz [ 171.447956][ T7340] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 171.456958][ T5895] usb 2-1: SerialNumber: syz [ 171.460290][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 171.609802][ T7351] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 171.619063][ T7351] macvlan1: entered allmulticast mode [ 171.628916][ T7351] veth1_vlan: entered allmulticast mode [ 171.641059][ T7351] team0: Port device macvlan1 added [ 171.669219][ T5895] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 171.677917][ T5895] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 171.691331][ T5895] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 171.700184][ T5895] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 171.823719][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 171.868186][ T5934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 171.875848][ T5934] pwc: recv_control_msg error -32 req 02 val 2700 [ 171.883701][ T5934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 171.893783][ T794] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 171.902827][ T5934] pwc: recv_control_msg error -32 req 04 val 1000 [ 171.913137][ T5934] pwc: recv_control_msg error -32 req 04 val 1300 [ 171.923619][ T5934] pwc: recv_control_msg error -32 req 04 val 1400 [ 171.933909][ T5934] pwc: recv_control_msg error -32 req 02 val 2000 [ 171.942171][ T5934] pwc: recv_control_msg error -32 req 02 val 2100 [ 171.953755][ T5934] pwc: recv_control_msg error -32 req 04 val 1500 [ 171.963316][ T5934] pwc: recv_control_msg error -32 req 02 val 2500 [ 171.971214][ T5934] pwc: recv_control_msg error -32 req 02 val 2400 [ 171.986966][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.998068][ T9] usb 3-1: config 0 has no interface number 0 [ 172.004796][ T5895] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 172.013159][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 172.022969][ T5895] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 172.031396][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.042771][ T5895] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 172.054332][ T9] usb 3-1: config 0 descriptor?? [ 172.058089][ T794] usb 1-1: config 4 has an invalid interface number: 247 but max is 0 [ 172.067553][ T9] usb 3-1: selecting invalid altsetting 1 [ 172.067739][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 172.067755][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 172.083876][ T5895] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 172.090105][ T794] usb 1-1: config 4 has no interface number 0 [ 172.132307][ T5895] usb 2-1: USB disconnect, device number 39 [ 172.143609][ T794] usb 1-1: config 4 interface 247 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 172.149295][ T5895] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 172.165126][ T794] usb 1-1: config 4 interface 247 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 172.170826][ T5895] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 172.190442][ T5895] visor 2-1:1.0: device disconnected [ 172.193642][ T5934] pwc: recv_control_msg error -32 req 02 val 2900 [ 172.202573][ T794] usb 1-1: config 4 interface 247 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 172.230176][ T9] DVB: Unable to find symbol cx22700_attach() [ 172.230486][ T794] usb 1-1: config 4 interface 247 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.250057][ T5934] pwc: recv_control_msg error -32 req 02 val 2800 [ 172.257731][ T794] usb 1-1: config 4 interface 247 has no altsetting 0 [ 172.263322][ T7350] FAULT_INJECTION: forcing a failure. [ 172.263322][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.271929][ T794] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 172.289974][ T7350] CPU: 0 UID: 0 PID: 7350 Comm: syz.2.376 Not tainted syzkaller #0 PREEMPT(full) [ 172.290004][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.290018][ T7350] Call Trace: [ 172.290027][ T7350] [ 172.290035][ T7350] dump_stack_lvl+0x189/0x250 [ 172.290069][ T7350] ? __pfx____ratelimit+0x10/0x10 [ 172.290097][ T7350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.290125][ T7350] ? __pfx__printk+0x10/0x10 [ 172.290165][ T7350] should_fail_ex+0x414/0x560 [ 172.290202][ T7350] _copy_to_user+0x31/0xb0 [ 172.290229][ T7350] i2cdev_ioctl_rdwr+0x5ad/0x740 [ 172.290274][ T7350] i2cdev_ioctl+0x64b/0x820 [ 172.290303][ T7350] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 172.290337][ T7350] ? __fget_files+0x3a0/0x420 [ 172.290361][ T7350] ? __fget_files+0x2a/0x420 [ 172.290389][ T7350] ? bpf_lsm_file_ioctl+0x9/0x20 [ 172.290422][ T7350] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 172.290452][ T7350] __se_sys_ioctl+0xfc/0x170 [ 172.290486][ T7350] do_syscall_64+0xfa/0xfa0 [ 172.290519][ T7350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.290541][ T7350] ? clear_bhb_loop+0x60/0xb0 [ 172.290559][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.290568][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.290590][ T7350] RIP: 0033:0x7f578dd8f6c9 [ 172.290608][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.290624][ T7350] RSP: 002b:00007f578bff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.290649][ T7350] RAX: ffffffffffffffda RBX: 00007f578dfe5fa0 RCX: 00007f578dd8f6c9 [ 172.290667][ T7350] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 172.290684][ T7350] RBP: 00007f578bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.290711][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.290726][ T7350] R13: 00007f578dfe6038 R14: 00007f578dfe5fa0 R15: 00007ffff64c8e38 [ 172.290765][ T7350] [ 172.322560][ T9] DVB: Unable to find symbol tda10046_attach() [ 172.384981][ T794] usb 1-1: Product: syz [ 172.392730][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 172.397534][ T794] usb 1-1: Manufacturer: syz [ 172.407590][ T9] usb 3-1: USB disconnect, device number 27 [ 172.420072][ T794] usb 1-1: SerialNumber: syz [ 172.530438][ T5934] pwc: recv_control_msg error -71 req 04 val 1200 [ 172.539153][ T5934] pwc: Registered as video103. [ 172.547134][ T5934] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 172.561014][ T7351] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 172.582318][ T5934] usb 4-1: USB disconnect, device number 30 [ 172.600552][ T794] ni6501 1-1:4.247: driver 'ni6501' failed to auto-configure device. [ 172.703196][ T7357] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 172.713966][ T7357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'. [ 172.745865][ T7357] batman_adv: batadv0: Adding interface: virt_wifi0 [ 172.752668][ T7357] batman_adv: batadv0: Interface activated: virt_wifi0 [ 173.118656][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 173.148401][ T7373] netlink: 'syz.2.381': attribute type 10 has an invalid length. [ 173.156679][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.381'. [ 173.258342][ T7378] input: syz0 as /devices/virtual/input/input26 [ 173.308986][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.346814][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 173.375350][ T5895] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 173.387117][ T9] usb 2-1: can't read configurations, error -71 [ 173.395496][ T795] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 173.418096][ T10] usb 1-1: USB disconnect, device number 42 [ 173.439179][ T795] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 173.469124][ T795] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 173.565822][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.584299][ T5895] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.593938][ T7382] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 173.609106][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.627397][ T5895] usb 4-1: config 0 descriptor?? [ 173.778314][ T7382] usb 3-1: Using ep0 maxpacket: 8 [ 173.797035][ T7382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 173.809253][ T7382] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 173.819892][ T7382] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 173.843272][ T7382] usb 3-1: config 8 interface 0 has no altsetting 0 [ 173.853167][ T7382] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 173.865155][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.883289][ T7382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.884030][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.891464][ T7382] usb 3-1: Product: syz [ 173.901638][ T5934] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 173.914303][ T7382] usb 3-1: Manufacturer: syz [ 173.919070][ T7382] usb 3-1: SerialNumber: syz [ 174.113388][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.123778][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.140210][ T5934] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.149523][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.162005][ T5934] usb 1-1: config 0 descriptor?? [ 174.163709][ T5895] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 174.189271][ T5895] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0014/input/input27 [ 174.210375][ T5934] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 174.324758][ T5895] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 174.364288][ T7371] netlink: 96 bytes leftover after parsing attributes in process `syz.3.380'. [ 174.383954][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 174.415363][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 174.524207][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 174.695805][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.731194][ T7382] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.753589][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.780109][ T7382] usb 3-1: selecting invalid altsetting 0 [ 174.787791][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.832217][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.858982][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.880081][ T7419] netlink: 'syz.3.380': attribute type 6 has an invalid length. [ 174.895392][ T9] usb 2-1: config 0 descriptor?? [ 174.926764][ T7422] netlink: 100 bytes leftover after parsing attributes in process `syz.2.387'. [ 174.958732][ T7382] snd-usb-audio 3-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 174.978678][ T7382] usb 3-1: USB disconnect, device number 28 [ 175.055681][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.335197][ T9] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 175.453175][ T7382] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 175.533900][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.540219][ T795] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 175.547198][ T795] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 175.593447][ T7382] usb 3-1: device descriptor read/64, error -71 [ 175.688384][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.698344][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.843456][ T7382] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 176.013126][ T7382] usb 3-1: device descriptor read/64, error -71 [ 176.137243][ T7382] usb usb3-port1: attempt power cycle [ 176.169441][ T5875] usb 4-1: USB disconnect, device number 31 [ 176.492982][ T7382] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 176.526197][ T7382] usb 3-1: device descriptor read/8, error -71 [ 176.655109][ T5875] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 176.692079][ T5914] usb 1-1: USB disconnect, device number 43 [ 176.783582][ T7382] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 176.806769][ T5875] usb 2-1: device descriptor read/64, error -32 [ 176.816222][ T7382] usb 3-1: device descriptor read/8, error -71 [ 176.834616][ T7476] netlink: 100 bytes leftover after parsing attributes in process `syz.0.390'. [ 176.936087][ T7382] usb usb3-port1: unable to enumerate USB device [ 177.054520][ T5875] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 177.203289][ T5875] usb 2-1: device descriptor read/64, error -32 [ 177.462862][ T5875] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 177.493060][ T5934] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 177.496547][ T5875] usb 2-1: device descriptor read/8, error -32 [ 177.603476][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.609898][ T795] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 177.619490][ T795] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 177.724910][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.739913][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.767604][ T5934] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 177.792228][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.812158][ T7499] netlink: 100 bytes leftover after parsing attributes in process `syz.1.393'. [ 177.821501][ T7499] FAULT_INJECTION: forcing a failure. [ 177.821501][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 177.824606][ T5934] usb 4-1: config 0 descriptor?? [ 177.861726][ T7499] CPU: 0 UID: 0 PID: 7499 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 177.861761][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.861775][ T7499] Call Trace: [ 177.861784][ T7499] [ 177.861798][ T7499] dump_stack_lvl+0x189/0x250 [ 177.861831][ T7499] ? __pfx____ratelimit+0x10/0x10 [ 177.861859][ T7499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.861886][ T7499] ? __pfx__printk+0x10/0x10 [ 177.861919][ T7499] ? __pfx___might_resched+0x10/0x10 [ 177.861949][ T7499] should_fail_ex+0x414/0x560 [ 177.861986][ T7499] should_failslab+0xa8/0x100 [ 177.862019][ T7499] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 177.862047][ T7499] ? __alloc_skb+0x112/0x2d0 [ 177.862079][ T7499] __alloc_skb+0x112/0x2d0 [ 177.862109][ T7499] netlink_ack+0x146/0xa50 [ 177.862139][ T7499] ? rcu_is_watching+0x15/0xb0 [ 177.862166][ T7499] ? trace_contention_end+0x39/0x120 [ 177.862206][ T7499] netlink_rcv_skb+0x28c/0x470 [ 177.862236][ T7499] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 177.862272][ T7499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.862318][ T7499] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.862355][ T7499] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.862387][ T7499] xfrm_netlink_rcv+0x79/0x90 [ 177.862421][ T7499] netlink_unicast+0x82f/0x9e0 [ 177.862457][ T7499] ? __pfx_netlink_unicast+0x10/0x10 [ 177.862485][ T7499] ? netlink_sendmsg+0x642/0xb30 [ 177.862512][ T7499] ? skb_put+0x11b/0x210 [ 177.862543][ T7499] netlink_sendmsg+0x805/0xb30 [ 177.862583][ T7499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.862616][ T7499] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.862644][ T7499] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.862673][ T7499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.862717][ T7499] __sock_sendmsg+0x21c/0x270 [ 177.862740][ T7499] ____sys_sendmsg+0x505/0x830 [ 177.862775][ T7499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.862812][ T7499] ? import_iovec+0x74/0xa0 [ 177.862840][ T7499] ___sys_sendmsg+0x21f/0x2a0 [ 177.862871][ T7499] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.862936][ T7499] ? __fget_files+0x2a/0x420 [ 177.862958][ T7499] ? __fget_files+0x3a0/0x420 [ 177.862993][ T7499] __x64_sys_sendmsg+0x19b/0x260 [ 177.863025][ T7499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.863062][ T7499] ? __pfx_ksys_write+0x10/0x10 [ 177.863086][ T7499] ? do_syscall_64+0xbe/0xfa0 [ 177.863120][ T7499] do_syscall_64+0xfa/0xfa0 [ 177.863150][ T7499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.863172][ T7499] ? clear_bhb_loop+0x60/0xb0 [ 177.863198][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.863217][ T7499] RIP: 0033:0x7fc6e9b8f6c9 [ 177.863237][ T7499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.863255][ T7499] RSP: 002b:00007fc6ea95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.863277][ T7499] RAX: ffffffffffffffda RBX: 00007fc6e9de5fa0 RCX: 00007fc6e9b8f6c9 [ 177.863292][ T7499] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 177.863305][ T7499] RBP: 00007fc6ea95b090 R08: 0000000000000000 R09: 0000000000000000 [ 177.863317][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.863352][ T7499] R13: 00007fc6e9de6038 R14: 00007fc6e9de5fa0 R15: 00007fff78d157c8 [ 177.863392][ T7499] [ 178.206821][ T7489] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.392'. [ 178.231475][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 178.237796][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 178.341999][ T5934] usb 4-1: USB disconnect, device number 32 [ 178.519584][ T7508] netlink: 100 bytes leftover after parsing attributes in process `syz.2.395'. [ 178.662414][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.673736][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.842795][ T5934] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 178.880799][ T7527] netlink: 100 bytes leftover after parsing attributes in process `syz.0.400'. [ 178.994060][ T5875] usb 2-1: reset high-speed USB device number 41 using dummy_hcd [ 179.005271][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.022170][ T5934] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.033682][ T5875] usb 2-1: device descriptor read/8, error -71 [ 179.046310][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.085537][ T5934] usb 3-1: config 0 descriptor?? [ 179.165567][ T9] usb 2-1: USB disconnect, device number 41 [ 179.242657][ T7382] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 179.309012][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.325894][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.382673][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 179.404904][ T7382] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.416834][ T7382] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.426950][ T7382] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.436194][ T5875] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 179.447564][ T7382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.461932][ T7536] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 179.474671][ T7382] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.542617][ T9] usb 2-1: device descriptor read/64, error -71 [ 179.542885][ T5934] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 179.574140][ T5934] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0016/input/input28 [ 179.604627][ T5875] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 179.614475][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.625581][ T5875] usb 4-1: config 0 descriptor?? [ 179.677365][ T5934] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 179.684164][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.696744][ T795] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 179.712799][ T795] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 179.730279][ T7548] FAULT_INJECTION: forcing a failure. [ 179.730279][ T7548] name failslab, interval 1, probability 0, space 0, times 0 [ 179.756520][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.0.402 Not tainted syzkaller #0 PREEMPT(full) [ 179.756551][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.756569][ T7548] Call Trace: [ 179.756578][ T7548] [ 179.756588][ T7548] dump_stack_lvl+0x189/0x250 [ 179.756620][ T7548] ? __pfx____ratelimit+0x10/0x10 [ 179.756650][ T7548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.756677][ T7548] ? __pfx__printk+0x10/0x10 [ 179.756710][ T7548] ? __pfx___might_resched+0x10/0x10 [ 179.756731][ T7548] ? fs_reclaim_acquire+0x7d/0x100 [ 179.756767][ T7548] should_fail_ex+0x414/0x560 [ 179.756806][ T7548] should_failslab+0xa8/0x100 [ 179.756839][ T7548] __kmalloc_cache_noprof+0x84/0x700 [ 179.756869][ T7548] ? snd_seq_port_connect+0x6b/0x460 [ 179.756908][ T7548] snd_seq_port_connect+0x6b/0x460 [ 179.756940][ T7548] ? do_raw_read_unlock+0x3d/0x80 [ 179.756971][ T7548] ? _raw_read_unlock+0x28/0x50 [ 179.757004][ T7548] snd_seq_ioctl_subscribe_port+0x36a/0x7a0 [ 179.757047][ T7548] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 179.757083][ T7548] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.757124][ T7548] snd_seq_oss_midi_open+0x471/0x810 [ 179.757158][ T7548] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 179.757198][ T7548] ? __lock_acquire+0xab9/0xd20 [ 179.757226][ T7548] snd_seq_oss_synth_reset+0x3ca/0x8c0 [ 179.757258][ T7548] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 179.757288][ T7548] ? rcu_is_watching+0x15/0xb0 [ 179.757315][ T7548] ? trace_contention_end+0x39/0x120 [ 179.757348][ T7548] snd_seq_oss_reset+0x5a/0x240 [ 179.757386][ T7548] snd_seq_oss_release+0xeb/0x2e0 [ 179.757428][ T7548] ? __pfx_snd_seq_oss_release+0x10/0x10 [ 179.757459][ T7548] ? __asan_memset+0x22/0x50 [ 179.757484][ T7548] ? odev_release+0x46/0xa0 [ 179.757513][ T7548] ? __fsnotify_parent+0x242/0x540 [ 179.757542][ T7548] ? __pfx___mutex_lock+0x10/0x10 [ 179.757574][ T7548] ? __pfx___fsnotify_parent+0x10/0x10 [ 179.757605][ T7548] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 179.757637][ T7548] ? __pfx_vfs_write+0x10/0x10 [ 179.757672][ T7548] ? evm_file_release+0x107/0x1e0 [ 179.757705][ T7548] ? __pfx_odev_release+0x10/0x10 [ 179.757737][ T7548] odev_release+0x4e/0xa0 [ 179.757769][ T7548] __fput+0x44c/0xa70 [ 179.757811][ T7548] fput_close_sync+0x113/0x220 [ 179.757841][ T7548] ? __pfx_fput_close_sync+0x10/0x10 [ 179.757871][ T7548] ? do_raw_spin_unlock+0x122/0x240 [ 179.757911][ T7548] __x64_sys_close+0x7f/0x110 [ 179.757942][ T7548] do_syscall_64+0xfa/0xfa0 [ 179.757974][ T7548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.757996][ T7548] ? clear_bhb_loop+0x60/0xb0 [ 179.758022][ T7548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.758045][ T7548] RIP: 0033:0x7f6e7ef8f6c9 [ 179.758064][ T7548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.758083][ T7548] RSP: 002b:00007f6e7fe57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 179.758106][ T7548] RAX: ffffffffffffffda RBX: 00007f6e7f1e6090 RCX: 00007f6e7ef8f6c9 [ 179.758122][ T7548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 179.758135][ T7548] RBP: 00007f6e7fe57090 R08: 0000000000000000 R09: 0000000000000000 [ 179.758148][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.758161][ T7548] R13: 00007f6e7f1e6128 R14: 00007f6e7f1e6090 R15: 00007ffdd6402f68 [ 179.758198][ T7548] [ 179.766482][ T7516] netlink: 96 bytes leftover after parsing attributes in process `syz.2.398'. [ 179.784019][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 179.821618][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 180.012713][ T9] usb 2-1: device descriptor read/64, error -71 [ 180.016434][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 180.037324][ T7382] usb 1-1: USB disconnect, device number 44 [ 180.163447][ T9] usb usb2-port1: attempt power cycle [ 180.361157][ T7549] netlink: 'syz.2.398': attribute type 6 has an invalid length. [ 180.372374][ T7538] fuse: Bad value for 'fd' [ 180.502733][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 180.523159][ T9] usb 2-1: device descriptor read/8, error -71 [ 180.783548][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 180.824939][ T9] usb 2-1: device descriptor read/8, error -71 [ 180.933128][ T9] usb usb2-port1: unable to enumerate USB device [ 180.994232][ T5875] pegasus 4-1:0.0: can't reset MAC [ 181.004490][ T5875] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 181.022676][ T5875] usb 4-1: USB disconnect, device number 33 [ 181.577552][ T7576] netlink: 393 bytes leftover after parsing attributes in process `syz.3.413'. [ 181.717499][ T7382] usb 3-1: USB disconnect, device number 33 [ 181.763169][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.769440][ T795] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 181.777386][ T795] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 181.820265][ T7581] FAULT_INJECTION: forcing a failure. [ 181.820265][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 181.862422][ T7581] CPU: 0 UID: 0 PID: 7581 Comm: syz.0.414 Not tainted syzkaller #0 PREEMPT(full) [ 181.862461][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.862486][ T7581] Call Trace: [ 181.862496][ T7581] [ 181.862507][ T7581] dump_stack_lvl+0x189/0x250 [ 181.862551][ T7581] ? __pfx____ratelimit+0x10/0x10 [ 181.862588][ T7581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.862626][ T7581] ? __pfx__printk+0x10/0x10 [ 181.862669][ T7581] ? __pfx___might_resched+0x10/0x10 [ 181.862710][ T7581] should_fail_ex+0x414/0x560 [ 181.862759][ T7581] should_failslab+0xa8/0x100 [ 181.862808][ T7581] __kmalloc_noprof+0xdf/0x800 [ 181.862843][ T7581] ? kfree+0x4d/0x6d0 [ 181.862873][ T7581] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 181.862919][ T7581] tomoyo_realpath_from_path+0xe3/0x5d0 [ 181.862958][ T7581] ? tomoyo_domain+0xd8/0x130 [ 181.863002][ T7581] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 181.863033][ T7581] tomoyo_path_number_perm+0x1e8/0x5a0 [ 181.863068][ T7581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 181.863149][ T7581] ? __fget_files+0x2a/0x420 [ 181.863192][ T7581] ? __fget_files+0x3a0/0x420 [ 181.863223][ T7581] ? __fget_files+0x2a/0x420 [ 181.863270][ T7581] security_file_ioctl+0xcb/0x2d0 [ 181.863319][ T7581] __se_sys_ioctl+0x47/0x170 [ 181.863366][ T7581] do_syscall_64+0xfa/0xfa0 [ 181.863407][ T7581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.863437][ T7581] ? clear_bhb_loop+0x60/0xb0 [ 181.863472][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.863503][ T7581] RIP: 0033:0x7f6e7ef8f6c9 [ 181.863542][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.863568][ T7581] RSP: 002b:00007f6e7fe78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.863604][ T7581] RAX: ffffffffffffffda RBX: 00007f6e7f1e5fa0 RCX: 00007f6e7ef8f6c9 [ 181.863622][ T7581] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 181.863637][ T7581] RBP: 00007f6e7fe78090 R08: 0000000000000000 R09: 0000000000000000 [ 181.863652][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.863666][ T7581] R13: 00007f6e7f1e6038 R14: 00007f6e7f1e5fa0 R15: 00007ffdd6402f68 [ 181.863708][ T7581] [ 181.863720][ T7581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.167739][ T7585] evm: overlay not supported [ 182.659264][ T7600] netlink: 'syz.1.421': attribute type 25 has an invalid length. [ 182.712640][ T794] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 182.894401][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 182.917263][ T794] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 182.941494][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.991891][ T794] usb 1-1: config 0 descriptor?? [ 183.004662][ T7595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.342344][ T5914] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 183.426509][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.457544][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.484731][ T794] usbhid 1-1:0.0: can't add hid device: -71 [ 183.506098][ T794] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 183.523809][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.545555][ T5914] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.558781][ T794] usb 1-1: USB disconnect, device number 45 [ 183.574231][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.601640][ T5914] usb 3-1: config 0 descriptor?? [ 183.742578][ T7635] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 183.768272][ T7635] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 183.822593][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.862062][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.096891][ T7644] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.124370][ T5914] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 184.160420][ T5914] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0017/input/input29 [ 184.311395][ T7615] netlink: 96 bytes leftover after parsing attributes in process `syz.2.425'. [ 184.323472][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 184.375705][ T5914] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 184.426675][ T7650] comedi comedi2: dmm32at: I/O port conflict (0x4,16) [ 184.446862][ T7650] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.642192][ T5916] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 184.739065][ T7660] netlink: 'syz.2.425': attribute type 6 has an invalid length. [ 184.813045][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 184.831574][ T5916] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 184.851294][ T5916] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 184.889226][ T7668] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.915797][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 184.942918][ T5916] usb 2-1: config 1 has no interface number 0 [ 184.949111][ T5916] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.992214][ T5916] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 185.009978][ T7671] syzkaller1: entered promiscuous mode [ 185.028124][ T7671] syzkaller1: entered allmulticast mode [ 185.036193][ T5916] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 185.050226][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.102830][ T5916] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 185.156741][ T7675] netlink: 180 bytes leftover after parsing attributes in process `syz.3.438'. [ 185.303697][ T5916] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 185.384809][ T7684] syzkaller1: entered promiscuous mode [ 185.390568][ T7684] syzkaller1: entered allmulticast mode [ 185.399949][ T7684] FAULT_INJECTION: forcing a failure. [ 185.399949][ T7684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.415078][ T7684] CPU: 0 UID: 0 PID: 7684 Comm: syz.3.440 Not tainted syzkaller #0 PREEMPT(full) [ 185.415110][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.415124][ T7684] Call Trace: [ 185.415133][ T7684] [ 185.415142][ T7684] dump_stack_lvl+0x189/0x250 [ 185.415174][ T7684] ? __pfx____ratelimit+0x10/0x10 [ 185.415203][ T7684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.415232][ T7684] ? __pfx__printk+0x10/0x10 [ 185.415258][ T7684] ? __might_fault+0xb0/0x130 [ 185.415296][ T7684] should_fail_ex+0x414/0x560 [ 185.415334][ T7684] _copy_from_iter+0x1de/0x1790 [ 185.415363][ T7684] ? rcu_is_watching+0x15/0xb0 [ 185.415399][ T7684] ? __pfx__copy_from_iter+0x10/0x10 [ 185.415429][ T7684] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.415453][ T7684] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.415487][ T7684] skb_copy_datagram_from_iter+0xf5/0x720 [ 185.415523][ T7684] ? __lock_acquire+0xab9/0xd20 [ 185.415547][ T7684] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 185.415575][ T7684] tun_get_user+0x1691/0x3e90 [ 185.415618][ T7684] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 185.415650][ T7684] ? __pfx_tun_get_user+0x10/0x10 [ 185.415683][ T7684] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 185.415718][ T7684] ? ref_tracker_alloc+0x318/0x460 [ 185.415748][ T7684] ? tun_get+0x157/0x2f0 [ 185.415767][ T7684] ? tun_chr_write_iter+0x60/0x210 [ 185.415790][ T7684] ? vfs_writev+0x31a/0x960 [ 185.415816][ T7684] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 185.415856][ T7684] ? tun_get+0x1c/0x2f0 [ 185.415886][ T7684] ? tun_get+0x1c/0x2f0 [ 185.415908][ T7684] ? tun_get+0x1c/0x2f0 [ 185.415937][ T7684] tun_chr_write_iter+0x113/0x210 [ 185.415964][ T7684] do_iter_readv_writev+0x623/0x8c0 [ 185.415994][ T7684] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 185.416014][ T7684] ? common_file_perm+0x1b5/0x230 [ 185.416045][ T7684] ? bpf_lsm_file_permission+0x9/0x20 [ 185.416084][ T7684] ? security_file_permission+0x75/0x290 [ 185.416119][ T7684] ? rw_verify_area+0x255/0x4d0 [ 185.416157][ T7684] vfs_writev+0x31a/0x960 [ 185.416188][ T7684] ? __lock_acquire+0xab9/0xd20 [ 185.416212][ T7684] ? __pfx_vfs_writev+0x10/0x10 [ 185.416256][ T7684] ? __fget_files+0x2a/0x420 [ 185.416285][ T7684] ? __fget_files+0x3a0/0x420 [ 185.416308][ T7684] ? __fget_files+0x2a/0x420 [ 185.416342][ T7684] do_writev+0x14d/0x2d0 [ 185.416372][ T7684] ? __pfx_do_writev+0x10/0x10 [ 185.416403][ T7684] ? do_syscall_64+0xbe/0xfa0 [ 185.416437][ T7684] do_syscall_64+0xfa/0xfa0 [ 185.416468][ T7684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.416491][ T7684] ? clear_bhb_loop+0x60/0xb0 [ 185.416517][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.416538][ T7684] RIP: 0033:0x7f8ae678f6c9 [ 185.416558][ T7684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.416577][ T7684] RSP: 002b:00007f8ae764d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 185.416600][ T7684] RAX: ffffffffffffffda RBX: 00007f8ae69e5fa0 RCX: 00007f8ae678f6c9 [ 185.416615][ T7684] RDX: 0000000000000001 RSI: 0000200000001580 RDI: 0000000000000004 [ 185.416629][ T7684] RBP: 00007f8ae764d090 R08: 0000000000000000 R09: 0000000000000000 [ 185.416643][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.416656][ T7684] R13: 00007f8ae69e6038 R14: 00007f8ae69e5fa0 R15: 00007ffe6c1b24e8 [ 185.416693][ T7684] [ 185.798373][ T7652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.807427][ T7652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.972014][ T7382] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 186.040878][ T7652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.050572][ T7652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.070071][ T5914] usb 2-1: USB disconnect, device number 46 [ 186.087990][ T5914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 186.134828][ T7382] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.143047][ T7382] usb 1-1: config 0 has no interface number 0 [ 186.149198][ T7382] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 186.161891][ T7382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.173574][ T7382] usb 1-1: config 0 descriptor?? [ 186.183833][ T7382] usb 1-1: selecting invalid altsetting 1 [ 186.198436][ T7382] dvb_ttusb_budget: ttusb_init_controller: error [ 186.206217][ T7382] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 186.211420][ T43] usb 3-1: USB disconnect, device number 34 [ 186.294461][ T7382] DVB: Unable to find symbol cx22700_attach() [ 186.302423][ T794] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 186.377367][ T7382] DVB: Unable to find symbol tda10046_attach() [ 186.383694][ T7382] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 186.400648][ T7382] usb 1-1: USB disconnect, device number 46 [ 186.481787][ T794] usb 4-1: Using ep0 maxpacket: 32 [ 186.489635][ T794] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 186.500790][ T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.512272][ T794] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 186.521550][ T794] usb 4-1: config 0 has no interface number 1 [ 186.529607][ T794] usb 4-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 9216, setting to 64 [ 186.543119][ T794] usb 4-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.561379][ T794] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 186.571069][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.579980][ T794] usb 4-1: Product: syz [ 186.584647][ T794] usb 4-1: Manufacturer: syz [ 186.589351][ T794] usb 4-1: SerialNumber: syz [ 186.601038][ T794] usb 4-1: config 0 descriptor?? [ 186.828890][ T794] kaweth 4-1:0.235: Firmware present in device. [ 187.025929][ T7693] netlink: 'syz.3.442': attribute type 3 has an invalid length. [ 187.048436][ T7693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.442'. [ 187.080969][ T7693] input: syz0 as /devices/virtual/input/input30 [ 187.521731][ T43] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 187.570330][ T794] kaweth 4-1:0.235: Error reading configuration (-71), no net device created [ 187.601977][ T794] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 187.635787][ T794] kaweth 4-1:0.0: Firmware present in device. [ 187.652351][ T794] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 187.671612][ T794] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 187.685423][ T794] usb 4-1: USB disconnect, device number 34 [ 187.691694][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 187.701104][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 187.713297][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.728628][ T43] usb 2-1: Product: syz [ 187.733568][ T43] usb 2-1: Manufacturer: syz [ 187.742297][ T43] usb 2-1: SerialNumber: syz [ 187.751441][ T43] usb 2-1: config 0 descriptor?? [ 187.855642][ T7724] syzkaller1: entered promiscuous mode [ 187.861261][ T7724] syzkaller1: entered allmulticast mode [ 187.964808][ T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.247461][ T7735] netlink: 'syz.3.455': attribute type 12 has an invalid length. [ 188.274816][ T7737] netlink: 'syz.0.456': attribute type 12 has an invalid length. [ 188.282993][ T7737] FAULT_INJECTION: forcing a failure. [ 188.282993][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 188.311557][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.0.456 Not tainted syzkaller #0 PREEMPT(full) [ 188.311587][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.311612][ T7737] Call Trace: [ 188.311620][ T7737] [ 188.311632][ T7737] dump_stack_lvl+0x189/0x250 [ 188.311671][ T7737] ? __pfx____ratelimit+0x10/0x10 [ 188.311699][ T7737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.311726][ T7737] ? __pfx__printk+0x10/0x10 [ 188.311767][ T7737] should_fail_ex+0x414/0x560 [ 188.311803][ T7737] should_failslab+0xa8/0x100 [ 188.311836][ T7737] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 188.311862][ T7737] ? __neigh_notify+0x29/0x310 [ 188.311888][ T7737] ? __alloc_skb+0x112/0x2d0 [ 188.311918][ T7737] __alloc_skb+0x112/0x2d0 [ 188.311943][ T7737] ? __neigh_notify+0x29/0x310 [ 188.311971][ T7737] __neigh_notify+0x15c/0x310 [ 188.312001][ T7737] __neigh_update+0x1d7f/0x25d0 [ 188.312051][ T7737] neigh_add+0xa8e/0xed0 [ 188.312090][ T7737] ? __pfx_neigh_add+0x10/0x10 [ 188.312174][ T7737] ? __pfx_neigh_add+0x10/0x10 [ 188.312203][ T7737] rtnetlink_rcv_msg+0x77c/0xb70 [ 188.312235][ T7737] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 188.312260][ T7737] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.312284][ T7737] ? netlink_sendmsg+0x805/0xb30 [ 188.312311][ T7737] ? __sock_sendmsg+0x21c/0x270 [ 188.312330][ T7737] ? sock_write_iter+0x279/0x360 [ 188.312360][ T7737] ? vfs_write+0x5c9/0xb30 [ 188.312377][ T7737] ? ksys_write+0x145/0x250 [ 188.312393][ T7737] ? do_syscall_64+0xfa/0xfa0 [ 188.312421][ T7737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.312458][ T7737] netlink_rcv_skb+0x208/0x470 [ 188.312488][ T7737] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.312517][ T7737] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.312560][ T7737] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.312597][ T7737] netlink_unicast+0x82f/0x9e0 [ 188.312635][ T7737] ? __pfx_netlink_unicast+0x10/0x10 [ 188.312670][ T7737] ? netlink_sendmsg+0x642/0xb30 [ 188.312696][ T7737] ? skb_put+0x11b/0x210 [ 188.312728][ T7737] netlink_sendmsg+0x805/0xb30 [ 188.312769][ T7737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.312801][ T7737] ? __lock_acquire+0xab9/0xd20 [ 188.312821][ T7737] ? aa_sock_msg_perm+0xf1/0x1d0 [ 188.312849][ T7737] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.312878][ T7737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.312910][ T7737] __sock_sendmsg+0x21c/0x270 [ 188.312935][ T7737] sock_write_iter+0x279/0x360 [ 188.312971][ T7737] ? __pfx_sock_write_iter+0x10/0x10 [ 188.313017][ T7737] ? bpf_lsm_file_permission+0x9/0x20 [ 188.313059][ T7737] ? security_file_permission+0x75/0x290 [ 188.313102][ T7737] vfs_write+0x5c9/0xb30 [ 188.313127][ T7737] ? __pfx_sock_write_iter+0x10/0x10 [ 188.313160][ T7737] ? __pfx_vfs_write+0x10/0x10 [ 188.313206][ T7737] ? __fget_files+0x2a/0x420 [ 188.313240][ T7737] ksys_write+0x145/0x250 [ 188.313262][ T7737] ? __pfx_ksys_write+0x10/0x10 [ 188.313286][ T7737] ? do_syscall_64+0xbe/0xfa0 [ 188.313318][ T7737] do_syscall_64+0xfa/0xfa0 [ 188.313348][ T7737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.313369][ T7737] ? clear_bhb_loop+0x60/0xb0 [ 188.313395][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.313433][ T7737] RIP: 0033:0x7f6e7ef8f6c9 [ 188.313452][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.313471][ T7737] RSP: 002b:00007f6e7fe78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.313494][ T7737] RAX: ffffffffffffffda RBX: 00007f6e7f1e5fa0 RCX: 00007f6e7ef8f6c9 [ 188.313511][ T7737] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000003 [ 188.313524][ T7737] RBP: 00007f6e7fe78090 R08: 0000000000000000 R09: 0000000000000000 [ 188.313538][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.313551][ T7737] R13: 00007f6e7f1e6038 R14: 00007f6e7f1e5fa0 R15: 00007ffdd6402f68 [ 188.313593][ T7737] [ 188.699084][ T794] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 188.905183][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.917593][ T794] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.943686][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.955289][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.968543][ T794] usb 3-1: config 0 descriptor?? [ 188.974526][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.177013][ T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 189.191477][ T7382] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 189.191486][ T5914] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 189.210448][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.212217][ T43] usb 2-1: USB disconnect, device number 47 [ 189.221141][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.351521][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 189.360225][ T5914] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.370305][ T5914] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.383635][ T5914] usb 4-1: config 1 interface 0 has no altsetting 0 [ 189.397102][ T7382] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.397657][ T5914] usb 4-1: language id specifier not provided by device, defaulting to English [ 189.405919][ T7382] usb 1-1: config 0 has no interface number 0 [ 189.420805][ T7382] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 189.428367][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.430282][ T7382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.440011][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.452919][ T7382] usb 1-1: config 0 descriptor?? [ 189.458179][ T794] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 189.475932][ T7382] usb 1-1: selecting invalid altsetting 1 [ 189.478368][ T794] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0018/input/input31 [ 189.490819][ T7382] dvb_ttusb_budget: ttusb_init_controller: error [ 189.493243][ T5914] usb 4-1: Manufacturer: င [ 189.493264][ T5914] usb 4-1: SerialNumber: syz [ 189.510805][ T7382] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 189.521987][ T7752] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 189.539477][ T7752] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 189.592357][ T7382] DVB: Unable to find symbol cx22700_attach() [ 189.634727][ T794] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 189.666951][ T7729] netlink: 96 bytes leftover after parsing attributes in process `syz.2.452'. [ 189.679239][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 189.690604][ T7382] DVB: Unable to find symbol tda10046_attach() [ 189.697287][ T7382] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 189.758195][ T5914] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 189.801640][ T5914] usb 4-1: USB disconnect, device number 35 [ 190.094397][ T7761] netlink: 'syz.2.452': attribute type 6 has an invalid length. [ 190.441366][ T7382] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 190.495967][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 190.495987][ T30] audit: type=1326 audit(1762522127.196:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.3.464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae678f6c9 code=0x0 [ 190.612913][ T7382] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.623266][ T7382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.636142][ T7382] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.645396][ T7382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.653797][ T7382] usb 2-1: SerialNumber: syz [ 190.841245][ T5914] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 190.864083][ T7764] netlink: 64 bytes leftover after parsing attributes in process `syz.1.462'. [ 190.873326][ T7764] netlink: 64 bytes leftover after parsing attributes in process `syz.1.462'. [ 190.912329][ T7382] usb 2-1: 0:2 : does not exist [ 190.933801][ T7382] usb 2-1: USB disconnect, device number 48 [ 190.976449][ T6944] udevd[6944]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.994036][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 191.002384][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.013566][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.024158][ T5914] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 191.033340][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.044949][ T5914] usb 4-1: config 0 descriptor?? [ 191.482109][ T5914] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 191.565177][ T5914] usb 3-1: USB disconnect, device number 35 [ 191.650722][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'. [ 191.712493][ T7776] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 191.771299][ T7382] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 191.796523][ T5916] usb 1-1: USB disconnect, device number 47 [ 191.923688][ T7382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.951337][ T7382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.973297][ T7382] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 191.992561][ T7382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.013605][ T7382] usb 2-1: config 0 descriptor?? [ 192.068474][ T7786] fuse: Bad value for 'fd' [ 192.301925][ T5916] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 192.435481][ T7382] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 192.442968][ T7382] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 192.450218][ T7382] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 192.457616][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 192.462860][ T7382] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 192.470109][ T7382] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 192.479450][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.492245][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.504041][ T5916] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 192.513753][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.521949][ T7382] cm6533_jd 0003:0D8C:0022.001A: hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 192.541063][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 192.550879][ T5916] usb 1-1: config 0 descriptor?? [ 192.645696][ T5914] usb 2-1: USB disconnect, device number 49 [ 192.712997][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.726814][ T43] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.735960][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.746761][ T43] usb 3-1: config 0 descriptor?? [ 192.911053][ T7382] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 192.958908][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.970430][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.177639][ T5916] usbhid 1-1:0.0: can't add hid device: -71 [ 193.183872][ T5916] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 193.195274][ T43] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 193.217218][ T5916] usb 1-1: USB disconnect, device number 48 [ 193.239155][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001B/input/input32 [ 193.348175][ T43] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 193.406224][ T7794] netlink: 96 bytes leftover after parsing attributes in process `syz.2.475'. [ 193.445151][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 193.721145][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 193.850898][ T7382] usb 4-1: device descriptor read/64, error -71 [ 193.901977][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 193.921188][ T43] usb 2-1: can't read configurations, error -61 [ 194.051464][ T43] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 194.092966][ T7382] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 194.214092][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.221907][ T43] usb 2-1: can't read configurations, error -61 [ 194.228730][ T43] usb usb2-port1: attempt power cycle [ 194.262711][ T7382] usb 4-1: device firmware changed [ 194.270300][ T795] usb 4-1: USB disconnect, device number 36 [ 194.420949][ T795] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 194.570827][ T795] usb 4-1: Using ep0 maxpacket: 32 [ 194.580965][ T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 194.589676][ T795] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 194.601580][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 194.616523][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.625207][ T43] usb 2-1: can't read configurations, error -61 [ 194.632628][ T795] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 194.642954][ T795] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 194.652849][ T795] usb 4-1: Product: syz [ 194.657055][ T795] usb 4-1: Manufacturer: syz [ 194.662932][ T795] usb 4-1: SerialNumber: syz [ 194.672907][ T795] usb 4-1: config 0 descriptor?? [ 194.706036][ T795] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 194.762029][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 194.804690][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.813106][ T43] usb 2-1: can't read configurations, error -61 [ 194.820093][ T43] usb usb2-port1: unable to enumerate USB device [ 194.844106][ T7816] overlayfs: missing 'workdir' [ 194.903294][ T795] usb 4-1: USB disconnect, device number 37 [ 194.909534][ T36] usb 4-1: Failed to submit usb control message: -71 [ 194.927232][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 194.939852][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'. [ 194.941355][ T36] usb 4-1: unable to get target info from device [ 194.956222][ T36] usb 4-1: could not get target info (-71) [ 194.961589][ T7818] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 194.964547][ T36] usb 4-1: could not probe fw (-71) [ 194.969077][ T7818] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 194.981486][ T7818] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 194.988186][ T7818] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 195.001199][ T7818] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 195.008881][ T7818] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 195.021055][ T7818] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 195.023184][ T7819] netlink: 'syz.0.482': attribute type 5 has an invalid length. [ 195.035130][ T7818] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 195.044049][ T7818] comedi comedi3: comedi_config --init_data is deprecated [ 195.309723][ T795] usb 3-1: USB disconnect, device number 36 [ 195.430686][ T43] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 195.531195][ T7829] netlink: 'syz.3.486': attribute type 10 has an invalid length. [ 195.539108][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.486'. [ 195.557378][ T7829] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 195.566783][ T7829] team0: Failed to send options change via netlink (err -105) [ 195.575320][ T7829] team0: Port device geneve0 added [ 195.603304][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.613471][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 195.622685][ T43] usb 1-1: config 15 has an invalid interface number: 168 but max is 0 [ 195.632273][ T43] usb 1-1: config 15 has no interface number 0 [ 195.638514][ T43] usb 1-1: config 15 interface 168 has no altsetting 0 [ 195.648710][ T43] usb 1-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=f0.ca [ 195.658258][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.666381][ T43] usb 1-1: Product: syz [ 195.670784][ T43] usb 1-1: Manufacturer: syz [ 195.675424][ T43] usb 1-1: SerialNumber: syz [ 195.710669][ T795] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 195.746496][ T7835] FAULT_INJECTION: forcing a failure. [ 195.746496][ T7835] name failslab, interval 1, probability 0, space 0, times 0 [ 195.759798][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.3.488 Not tainted syzkaller #0 PREEMPT(full) [ 195.759828][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.759838][ T7835] Call Trace: [ 195.759844][ T7835] [ 195.759851][ T7835] dump_stack_lvl+0x189/0x250 [ 195.759886][ T7835] ? __pfx____ratelimit+0x10/0x10 [ 195.759914][ T7835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.759940][ T7835] ? __pfx__printk+0x10/0x10 [ 195.759970][ T7835] ? __pfx___might_resched+0x10/0x10 [ 195.759986][ T7835] ? fs_reclaim_acquire+0x7d/0x100 [ 195.760022][ T7835] should_fail_ex+0x414/0x560 [ 195.760060][ T7835] should_failslab+0xa8/0x100 [ 195.760098][ T7835] __kmalloc_noprof+0xdf/0x800 [ 195.760122][ T7835] ? tomoyo_encode+0x28b/0x550 [ 195.760145][ T7835] tomoyo_encode+0x28b/0x550 [ 195.760173][ T7835] tomoyo_realpath_from_path+0x58d/0x5d0 [ 195.760213][ T7835] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 195.760238][ T7835] tomoyo_path_number_perm+0x1e8/0x5a0 [ 195.760266][ T7835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.760310][ T7835] ? __fget_files+0x2a/0x420 [ 195.760341][ T7835] ? __fget_files+0x3a0/0x420 [ 195.760371][ T7835] ? __fget_files+0x2a/0x420 [ 195.760399][ T7835] security_file_ioctl+0xcb/0x2d0 [ 195.760432][ T7835] __se_sys_ioctl+0x47/0x170 [ 195.760457][ T7835] do_syscall_64+0xfa/0xfa0 [ 195.760483][ T7835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.760518][ T7835] ? clear_bhb_loop+0x60/0xb0 [ 195.760545][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.760566][ T7835] RIP: 0033:0x7f8ae678f6c9 [ 195.760583][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.760602][ T7835] RSP: 002b:00007f8ae764d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.760623][ T7835] RAX: ffffffffffffffda RBX: 00007f8ae69e5fa0 RCX: 00007f8ae678f6c9 [ 195.760639][ T7835] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 195.760654][ T7835] RBP: 00007f8ae764d090 R08: 0000000000000000 R09: 0000000000000000 [ 195.760667][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.760684][ T7835] R13: 00007f8ae69e6038 R14: 00007f8ae69e5fa0 R15: 00007ffe6c1b24e8 [ 195.760719][ T7835] [ 195.985942][ T7835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.063572][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.074724][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.084948][ T795] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 196.095319][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.106734][ T795] usb 3-1: config 0 descriptor?? [ 196.206862][ T43] dvb-usb: found a 'Gigabyte U8000-RH' in cold state, will try to load a firmware [ 196.300572][ T794] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 196.312527][ T43] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.321182][ T43] dib0700: firmware download failed at 7 with -22 [ 196.331501][ T43] usb 1-1: USB disconnect, device number 49 [ 196.470555][ T794] usb 4-1: Using ep0 maxpacket: 32 [ 196.477922][ T794] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 196.502899][ T794] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 196.520543][ T794] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 196.528789][ T794] usb 4-1: Product: syz [ 196.529718][ T795] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 196.537791][ T794] usb 4-1: Manufacturer: syz [ 196.546124][ T794] usb 4-1: SerialNumber: syz [ 196.554220][ T794] usb 4-1: config 0 descriptor?? [ 196.560164][ T7837] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 196.562395][ T795] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 196.585510][ T795] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 196.593309][ T795] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 196.602519][ T795] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 196.631168][ T795] cm6533_jd 0003:0D8C:0022.001C: hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 196.739784][ T7842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.491'. [ 196.814629][ T795] usb 3-1: USB disconnect, device number 37 [ 196.846546][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 197.161484][ T7849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.175298][ T7849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.194077][ T794] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 197.352829][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.365340][ T794] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.379960][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.419437][ T794] usb 2-1: config 0 descriptor?? [ 197.451405][ T7853] input: syz0 as /devices/virtual/input/input34 [ 197.636706][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.645766][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.653852][ T795] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 197.760623][ T5914] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 197.812788][ T795] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.821068][ T795] usb 1-1: config 0 has no interface number 0 [ 197.829554][ T795] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 197.838851][ T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.846930][ T795] usb 1-1: Product: syz [ 197.851333][ T795] usb 1-1: Manufacturer: syz [ 197.855958][ T795] usb 1-1: SerialNumber: syz [ 197.863905][ T795] usb 1-1: config 0 descriptor?? [ 197.864381][ T794] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 197.887099][ T794] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001D/input/input35 [ 197.940565][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 197.948112][ T5914] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 197.958733][ T5914] usb 3-1: config 0 has no interface number 0 [ 197.966629][ T5914] usb 3-1: config 0 interface 230 has no altsetting 0 [ 197.984569][ T5914] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 197.999395][ T794] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 198.013422][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.021646][ T5914] usb 3-1: Product: syz [ 198.031979][ T5914] usb 3-1: Manufacturer: syz [ 198.038553][ T5914] usb 3-1: SerialNumber: syz [ 198.060812][ T5914] usb 3-1: config 0 descriptor?? [ 198.080826][ T5914] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 198.084793][ T795] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 198.105241][ T7848] netlink: 96 bytes leftover after parsing attributes in process `syz.1.493'. [ 198.118487][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 198.133018][ T795] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.139327][ T5914] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 198.154487][ T795] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 198.163394][ T795] usb 1-1: media controller created [ 198.185529][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.280353][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.289406][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.299494][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.313895][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.326187][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.338725][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.350964][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.365262][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.380404][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.392955][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.494167][ T43] usb 1-1: USB disconnect, device number 50 [ 199.128521][ T5916] usb 4-1: USB disconnect, device number 38 [ 199.340347][ T794] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 199.479011][ T7881] netlink: 212 bytes leftover after parsing attributes in process `syz.3.502'. [ 199.490224][ T794] usb 1-1: Using ep0 maxpacket: 16 [ 199.491240][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 199.508605][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 199.689209][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.700399][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.970164][ T5916] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 199.984983][ T795] usb 2-1: USB disconnect, device number 54 [ 200.141902][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.153265][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.164896][ T5916] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 200.174327][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.185277][ T5916] usb 4-1: config 0 descriptor?? [ 200.440171][ T795] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 200.500149][ T5914] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 200.513796][ T5914] usb 3-1: USB disconnect, device number 38 [ 200.590080][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 200.597860][ T795] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.607709][ T5916] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 200.615227][ T5916] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 200.622828][ T5916] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 200.630368][ T5916] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 200.637750][ T5916] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 200.645219][ T795] usb 2-1: config 16 has an invalid interface number: 4 but max is 0 [ 200.656412][ T795] usb 2-1: config 16 has no interface number 0 [ 200.663577][ T795] usb 2-1: config 16 interface 4 has no altsetting 0 [ 200.671960][ T5916] cm6533_jd 0003:0D8C:0022.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 200.687044][ T795] usb 2-1: New USB device found, idVendor=1546, idProduct=1342, bcdDevice=eb.4e [ 200.710012][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.718077][ T795] usb 2-1: Product: syz [ 200.722405][ T795] usb 2-1: Manufacturer: syz [ 200.727056][ T795] usb 2-1: SerialNumber: syz [ 200.865620][ T5916] usb 4-1: USB disconnect, device number 39 [ 200.959221][ T795] usb 2-1: USB disconnect, device number 55 [ 201.432576][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 201.601207][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 201.608589][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.620994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 201.641552][ T43] usb 3-1: config 255 has an invalid interface number: 193 but max is 1 [ 201.653914][ T43] usb 3-1: config 255 has no interface number 1 [ 201.661004][ T43] usb 3-1: config 255 interface 0 has no altsetting 0 [ 201.667844][ T43] usb 3-1: config 255 interface 193 has no altsetting 0 [ 201.676863][ T43] usb 3-1: New USB device found, idVendor=1199, idProduct=68a9, bcdDevice=9d.4a [ 201.687302][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.695414][ T43] usb 3-1: Product: syz [ 201.699729][ T43] usb 3-1: Manufacturer: syz [ 201.702763][ T5916] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 201.704556][ T43] usb 3-1: SerialNumber: syz [ 201.730514][ T794] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 201.738918][ T794] usb 1-1: config 0 has no interface number 0 [ 201.745253][ T794] usb 1-1: New USB device found, idVendor=046d, idProduct=085c, bcdDevice= b.fc [ 201.754670][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.766481][ T794] usb 1-1: config 0 descriptor?? [ 201.777584][ T794] uvcvideo 1-1:0.249: Found UVC 0.00 device (046d:085c) [ 201.786095][ T794] uvcvideo 1-1:0.249: No valid video chain found. [ 201.859912][ T5916] usb 4-1: Invalid ep0 maxpacket: 64 [ 201.983760][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.989935][ T5916] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 201.994274][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.063129][ T795] usb 1-1: USB disconnect, device number 51 [ 202.149855][ T5916] usb 4-1: Invalid ep0 maxpacket: 64 [ 202.155637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 202.165948][ T5916] usb usb4-port1: attempt power cycle [ 202.509836][ T5916] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 202.530518][ T5916] usb 4-1: Invalid ep0 maxpacket: 64 [ 202.660299][ T5916] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 202.682938][ T5916] usb 4-1: Invalid ep0 maxpacket: 64 [ 202.688597][ T5916] usb usb4-port1: unable to enumerate USB device [ 202.709954][ T795] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 202.839849][ T795] usb 2-1: device descriptor read/64, error -71 [ 202.929779][ T794] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 203.079801][ T795] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 203.082230][ T794] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 203.098376][ T794] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 203.107605][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.115699][ T794] usb 1-1: Product: syz [ 203.120338][ T794] usb 1-1: Manufacturer: syz [ 203.124967][ T794] usb 1-1: SerialNumber: syz [ 203.138070][ T794] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 203.158871][ T5934] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 203.209898][ T795] usb 2-1: device descriptor read/64, error -71 [ 203.321900][ T795] usb usb2-port1: attempt power cycle [ 203.373530][ T7913] trusted_key: encrypted_key: key trusted:syz not found [ 203.374723][ T5916] usb 1-1: USB disconnect, device number 52 [ 203.659725][ T795] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 203.680348][ T795] usb 2-1: device descriptor read/8, error -71 [ 203.919738][ T795] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 203.940462][ T795] usb 2-1: device descriptor read/8, error -71 [ 204.050055][ T795] usb usb2-port1: unable to enumerate USB device [ 204.131379][ T43] usb 3-1: bad CDC descriptors [ 204.156959][ T43] usb 3-1: USB disconnect, device number 39 [ 204.249740][ T5934] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 204.256836][ T5934] ath9k_htc: Failed to initialize the device [ 204.265545][ T5916] usb 1-1: ath9k_htc: USB layer deinitialized [ 204.295013][ T7919] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 204.303982][ T7919] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 204.313495][ T7919] FAULT_INJECTION: forcing a failure. [ 204.313495][ T7919] name failslab, interval 1, probability 0, space 0, times 0 [ 204.327285][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.2.515 Not tainted syzkaller #0 PREEMPT(full) [ 204.327319][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.327333][ T7919] Call Trace: [ 204.327341][ T7919] [ 204.327350][ T7919] dump_stack_lvl+0x189/0x250 [ 204.327382][ T7919] ? __pfx____ratelimit+0x10/0x10 [ 204.327409][ T7919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.327436][ T7919] ? __pfx__printk+0x10/0x10 [ 204.327474][ T7919] ? __pfx___might_resched+0x10/0x10 [ 204.327498][ T7919] ? fs_reclaim_acquire+0x7d/0x100 [ 204.327534][ T7919] should_fail_ex+0x414/0x560 [ 204.327570][ T7919] should_failslab+0xa8/0x100 [ 204.327603][ T7919] kmem_cache_alloc_noprof+0x88/0x700 [ 204.327623][ T7919] ? alloc_empty_file+0x55/0x1d0 [ 204.327645][ T7919] alloc_empty_file+0x55/0x1d0 [ 204.327666][ T7919] dentry_open+0x44/0xa0 [ 204.327686][ T7919] ovl_dir_read+0x85/0x560 [ 204.327715][ T7919] ? __pfx_ovl_dir_read+0x10/0x10 [ 204.327738][ T7919] ? ovl_path_upper+0x105/0x170 [ 204.327760][ T7919] ? ovl_path_next+0x23c/0x470 [ 204.327781][ T7919] ovl_dir_read_merged+0x2b8/0x4b0 [ 204.327807][ T7919] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 204.327832][ T7919] ? __pfx_ovl_fill_merge+0x10/0x10 [ 204.327864][ T7919] ? __kasan_kmalloc+0x93/0xb0 [ 204.327885][ T7919] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 204.327903][ T7919] ? __lock_acquire+0xab9/0xd20 [ 204.327918][ T7919] ? ovl_iterate+0xcb2/0x2110 [ 204.327945][ T7919] ovl_iterate+0xd75/0x2110 [ 204.327983][ T7919] ? __pfx_ovl_iterate+0x10/0x10 [ 204.328009][ T7919] ? aa_file_perm+0x139/0x1540 [ 204.328031][ T7919] ? aa_file_perm+0x139/0x1540 [ 204.328059][ T7919] ? __lock_acquire+0xab9/0xd20 [ 204.328082][ T7919] ? wrap_directory_iterator+0x5a/0xe0 [ 204.328116][ T7919] ? down_write+0x162/0x1f0 [ 204.328129][ T7919] ? __pfx_down_write+0x10/0x10 [ 204.328153][ T7919] ? wrap_directory_iterator+0x52/0xe0 [ 204.328176][ T7919] ? __pfx_ovl_iterate+0x10/0x10 [ 204.328201][ T7919] wrap_directory_iterator+0x96/0xe0 [ 204.328226][ T7919] iterate_dir+0x399/0x570 [ 204.328253][ T7919] ovl_dir_read+0x13f/0x560 [ 204.328281][ T7919] ? __pfx_ovl_dir_read+0x10/0x10 [ 204.328302][ T7919] ? ovl_path_upper+0x105/0x170 [ 204.328323][ T7919] ? ovl_path_next+0x23c/0x470 [ 204.328345][ T7919] ovl_dir_read_merged+0x2b8/0x4b0 [ 204.328370][ T7919] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 204.328395][ T7919] ? __pfx_ovl_fill_merge+0x10/0x10 [ 204.328426][ T7919] ? __kasan_kmalloc+0x93/0xb0 [ 204.328448][ T7919] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 204.328475][ T7919] ? ovl_iterate+0xcb2/0x2110 [ 204.328496][ T7919] ? __lock_acquire+0xab9/0xd20 [ 204.328514][ T7919] ovl_iterate+0xd75/0x2110 [ 204.328552][ T7919] ? __pfx_ovl_iterate+0x10/0x10 [ 204.328578][ T7919] ? aa_file_perm+0x139/0x1540 [ 204.328599][ T7919] ? aa_file_perm+0x139/0x1540 [ 204.328627][ T7919] ? __lock_acquire+0xab9/0xd20 [ 204.328650][ T7919] ? wrap_directory_iterator+0x5a/0xe0 [ 204.328684][ T7919] ? down_write+0x162/0x1f0 [ 204.328697][ T7919] ? __pfx_down_write+0x10/0x10 [ 204.328721][ T7919] ? wrap_directory_iterator+0x52/0xe0 [ 204.328745][ T7919] ? __pfx_ovl_iterate+0x10/0x10 [ 204.328769][ T7919] wrap_directory_iterator+0x96/0xe0 [ 204.328795][ T7919] iterate_dir+0x399/0x570 [ 204.328822][ T7919] __se_sys_getdents64+0xe4/0x260 [ 204.328848][ T7919] ? __pfx___se_sys_getdents64+0x10/0x10 [ 204.328870][ T7919] ? ksys_write+0x22a/0x250 [ 204.328882][ T7919] ? __pfx_filldir64+0x10/0x10 [ 204.328907][ T7919] ? __pfx_ksys_write+0x10/0x10 [ 204.328923][ T7919] ? do_syscall_64+0xbe/0xfa0 [ 204.328948][ T7919] do_syscall_64+0xfa/0xfa0 [ 204.328969][ T7919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.328984][ T7919] ? clear_bhb_loop+0x60/0xb0 [ 204.329003][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.329018][ T7919] RIP: 0033:0x7f578dd8f6c9 [ 204.329032][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.329045][ T7919] RSP: 002b:00007f578bff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 204.329061][ T7919] RAX: ffffffffffffffda RBX: 00007f578dfe5fa0 RCX: 00007f578dd8f6c9 [ 204.329072][ T7919] RDX: 000000000000ff56 RSI: 0000200000000580 RDI: 0000000000000003 [ 204.329083][ T7919] RBP: 00007f578bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.329092][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.329101][ T7919] R13: 00007f578dfe6038 R14: 00007f578dfe5fa0 R15: 00007ffff64c8e38 [ 204.329126][ T7919] [ 204.881700][ T795] IPVS: starting estimator thread 0... [ 204.969660][ T7924] IPVS: using max 35 ests per chain, 84000 per kthread [ 205.019566][ T5916] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 205.171472][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.182621][ T5916] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.191800][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.202361][ T5916] usb 1-1: config 0 descriptor?? [ 205.211829][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 205.369487][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 205.376692][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 205.388334][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 205.411659][ T43] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 205.424061][ T43] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 205.433677][ T43] usb 4-1: Product: syz [ 205.437900][ T43] usb 4-1: Manufacturer: syz [ 205.442807][ T43] usb 4-1: SerialNumber: syz [ 205.450295][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.462438][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.472267][ T43] usb 4-1: config 0 descriptor?? [ 205.493228][ T43] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 205.696641][ T1164] usb 4-1: Failed to submit usb control message: -71 [ 205.698475][ T5916] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 205.709768][ T43] usb 4-1: USB disconnect, device number 44 [ 205.722188][ T1164] usb 4-1: unable to send the bmi data to the device: -71 [ 205.729879][ T1164] usb 4-1: unable to get target info from device [ 205.734728][ T5916] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001F/input/input36 [ 205.739745][ T1164] usb 4-1: could not get target info (-71) [ 205.755286][ T1164] usb 4-1: could not probe fw (-71) [ 205.835141][ T5916] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 205.906765][ T7917] netlink: 96 bytes leftover after parsing attributes in process `syz.0.514'. [ 205.921188][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. Stopping sshd: stopped /usr/sbin/sshd (pid 5579) OK Stopping crond: stopped /usr/sbin/crond (pid 5565) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5487) Stopping network: [ 207.709730][ T5916] usb 1-1: USB disconnect, device number 53 [ 207.913955][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 208.059646][ T7382] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 208.213422][ T5916] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 208.250801][ T7382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.262636][ T7382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.273746][ T7382] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.290301][ T7382] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.309581][ T7382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.330024][ T5875] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 208.349646][ T7382] usb 2-1: config 0 descriptor?? [ 208.406981][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.420799][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.449125][ T5916] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 208.468753][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.470569][ T5934] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 208.501200][ T5916] usb 1-1: config 0 descriptor?? [ 208.527048][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.538909][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.558656][ T5875] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 208.568224][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.598416][ T5875] usb 4-1: config 0 descriptor?? OK [ 208.629092][ T5934] usb 3-1: device descriptor read/64, error -71 Stopping iptables: OK [ 208.820715][ T7382] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 208.873268][ T5934] usb 3-1: new full-speed USB device number 41 using dummy_hcd Stopping system message bus: [ 208.931484][ T5916] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 208.938862][ T5916] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 208.961646][ T5916] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 208.993169][ T5916] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 209.011497][ T5916] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 209.040456][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.050960][ T5934] usb 3-1: device descriptor read/64, error -71 [ 209.069317][ T5875] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 209.079417][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.091973][ T5916] cm6533_jd 0003:0D8C:0022.0021: hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 209.127665][ T5875] cp2112 0003:10C4:EA90.0022: hidraw2: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 209.181701][ T5934] usb usb3-port1: attempt power cycle [ 209.260084][ T5875] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE done [ 209.568957][ T5934] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 209.602794][ T5934] usb 3-1: device descriptor read/8, error -71 [ 209.859818][ T5934] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 209.877572][ T7964] cp2112 0003:10C4:EA90.0022: Error starting transaction: -38 [ 209.884430][ T5934] usb 3-1: device descriptor read/8, error -71 [ 209.894318][ T5875] cp2112 0003:10C4:EA90.0022: error reading lock byte: -71 [ 209.911415][ T5875] usb 4-1: USB disconnect, device number 45 [ 210.011070][ T5934] usb usb3-port1: unable to enumerate USB device [ 210.099574][ T43] usb 1-1: USB disconnect, device number 54 [ 210.218972][ T5934] usb 2-1: reset high-speed USB device number 60 using dummy_hcd Stopping klogd: OK Stopping acpid: [ 210.848936][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 211.008763][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 211.015490][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 211.028140][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 211.046870][ T9] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 211.056124][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.064260][ T9] usb 4-1: Product: syz [ 211.068472][ T9] usb 4-1: Manufacturer: syz [ 211.073379][ T9] usb 4-1: SerialNumber: syz [ 211.080130][ T9] usb 4-1: config 0 descriptor?? [ 211.138808][ T9] rc_core: IR keymap rc-streamzap not found [ 211.144773][ T9] Registered IR keymap rc-empty [ 211.154359][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 211.158888][ T43] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 211.168085][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input38 [ 211.269015][ T5934] usb 2-1: device descriptor read/64, error -71 [ 211.308318][ T5875] usb 4-1: USB disconnect, device number 46 [ 211.340412][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.352546][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.362488][ T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 211.371595][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.382305][ T43] usb 1-1: config 0 descriptor?? [ 211.508764][ T5934] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 211.628693][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 211.638730][ T5934] usb 2-1: device descriptor read/64, error -71 [ 211.780780][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.791857][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.793440][ T43] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 211.800979][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.804195][ T9] usb 3-1: config 0 descriptor?? [ 211.811399][ T43] cp2112 0003:10C4:EA90.0023: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 211.888719][ T5934] usb 2-1: reset high-speed USB device number 60 using dummy_hcd OK [ 211.921720][ T5934] usb 2-1: device descriptor read/8, error -71 Stopping syslogd: [ 212.011347][ T43] cp2112 0003:10C4:EA90.0023: Part Number: 0x82 Device Version: 0xFE [ 212.026387][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.039410][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 stopped /sbin/syslogd (pid 5175) OK [ 212.174371][ T5934] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 212.221342][ T5934] usb 2-1: device descriptor read/8, error -71 [ 212.256191][ T9] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 212.280326][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input39 [ 212.340906][ T794] usb 2-1: USB disconnect, device number 60 [ 212.397636][ T9] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 212.464635][ T8015] netlink: 96 bytes leftover after parsing attributes in process `syz.2.529'. [ 212.478001][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 212.508625][ T794] usb 2-1: new high-speed USB device number 61 using dummy_hcd umount: can't remount debugfs read-only [ 212.639288][ T794] usb 2-1: device descriptor read/64, error -71 [ 212.860225][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.918554][ T794] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 212.941433][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.008765][ T8011] cp2112 0003:10C4:EA90.0023: Error starting transaction: -38 [ 213.068678][ T5934] usb 1-1: reset high-speed USB device number 55 using dummy_hcd [ 213.108542][ T794] usb 2-1: device descriptor read/64, error -71 [ 213.220781][ T794] usb usb2-port1: attempt power cycle [ 213.275216][ T8065] FAULT_INJECTION: forcing a failure. [ 213.275216][ T8065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.297152][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) [ 213.297184][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.297197][ T8065] Call Trace: [ 213.297206][ T8065] [ 213.297215][ T8065] dump_stack_lvl+0x189/0x250 [ 213.297247][ T8065] ? __pfx____ratelimit+0x10/0x10 [ 213.297276][ T8065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.297303][ T8065] ? __pfx__printk+0x10/0x10 [ 213.297342][ T8065] should_fail_ex+0x414/0x560 [ 213.297380][ T8065] _copy_to_user+0x31/0xb0 [ 213.297410][ T8065] simple_read_from_buffer+0xe1/0x170 [ 213.297438][ T8065] proc_fail_nth_read+0x1b3/0x220 [ 213.297474][ T8065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.297511][ T8065] ? rw_verify_area+0x2a6/0x4d0 [ 213.297545][ T8065] ? __lock_acquire+0xab9/0xd20 [ 213.297564][ T8065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.297598][ T8065] vfs_read+0x200/0xa30 [ 213.297630][ T8065] ? fdget_pos+0x247/0x320 [ 213.297658][ T8065] ? __pfx___mutex_lock+0x10/0x10 [ 213.297691][ T8065] ? __pfx_vfs_read+0x10/0x10 [ 213.297734][ T8065] ? __fget_files+0x2a/0x420 [ 213.297765][ T8065] ? __fget_files+0x3a0/0x420 [ 213.297788][ T8065] ? __fget_files+0x2a/0x420 [ 213.297822][ T8065] ksys_read+0x145/0x250 [ 213.297845][ T8065] ? __pfx_ksys_read+0x10/0x10 [ 213.297869][ T8065] ? do_syscall_64+0xbe/0xfa0 [ 213.297903][ T8065] do_syscall_64+0xfa/0xfa0 [ 213.297939][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.297961][ T8065] ? clear_bhb_loop+0x60/0xb0 [ 213.297988][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.298010][ T8065] RIP: 0033:0x7f8ae678e0dc [ 213.298030][ T8065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.298049][ T8065] RSP: 002b:00007f8ae764d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.298072][ T8065] RAX: ffffffffffffffda RBX: 00007f8ae69e5fa0 RCX: 00007f8ae678e0dc [ 213.298093][ T8065] RDX: 000000000000000f RSI: 00007f8ae764d0a0 RDI: 0000000000000004 [ 213.298107][ T8065] RBP: 00007f8ae764d090 R08: 0000000000000000 R09: 0000000000000000 [ 213.298120][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.298133][ T8065] R13: 00007f8ae69e6038 R14: 00007f8ae69e5fa0 R15: 00007ffe6c1b24e8 [ 213.298170][ T8065] [ 213.798603][ T794] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 213.875349][ T794] usb 2-1: device descriptor read/8, error -71 [ 213.960149][ T43] usb 1-1: USB disconnect, device number 55 [ 214.110443][ T8078] loop7: detected capacity change from 0 to 7 [ 214.119397][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.127929][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.148788][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.156971][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.173702][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.218465][ T8082] Invalid logical block size (6) [ 214.226301][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.235601][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.251519][ T8078] ldm_validate_partition_table(): Disk read failed. [ 214.258742][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.266860][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.301641][ T8078] Buffer I/O error on dev loop7, logical block 0, async page read [ 214.315548][ T8078] Dev loop7: unable to read RDB block 0 [ 214.325598][ T9] usb 3-1: USB disconnect, device number 44 [ 214.340985][ T794] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 214.348700][ T8078] loop7: unable to read partition table [ 214.348960][ T8078] loop7: partition table beyond EOD, truncated [ 214.386326][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.396631][ T8078] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 214.413969][ T43] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 214.455682][ T794] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.482009][ T8084] netlink: 14 bytes leftover after parsing attributes in process `syz.2.538'. [ 214.488377][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.529290][ T794] usb 2-1: config 0 descriptor?? [ 214.555318][ T794] pwc: Askey VC010 type 2 USB webcam detected. [ 214.613314][ T43] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 214.628300][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.661694][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.694523][ T8089] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 214.698840][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.705457][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 214.724348][ T8089] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 214.732219][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.780831][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.798803][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.844027][ T43] usb 1-1: config 0 descriptor?? [ 214.852831][ T8075] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 214.951759][ T794] pwc: recv_control_msg error -32 req 02 val 2b00 [ 214.978355][ T794] pwc: recv_control_msg error -32 req 02 val 2700 [ 215.006952][ T794] pwc: recv_control_msg error -32 req 02 val 2c00 [ 215.022856][ T794] pwc: recv_control_msg error -32 req 04 val 1000 [ 215.049290][ T794] pwc: recv_control_msg error -32 req 04 val 1300 [ 215.056563][ T794] pwc: recv_control_msg error -32 req 04 val 1400 [ 215.074144][ T794] pwc: recv_control_msg error -32 req 02 val 2000 [ 215.099304][ T794] pwc: recv_control_msg error -32 req 02 val 2100 [ 215.118673][ T794] pwc: recv_control_msg error -32 req 04 val 1500 [ 215.143704][ T794] pwc: recv_control_msg error -32 req 02 val 2500 [ 215.160556][ T794] pwc: recv_control_msg error -32 req 02 val 2400 [ 215.184671][ T794] pwc: recv_control_msg error -32 req 02 val 2600 [ 215.199719][ T794] pwc: recv_control_msg error -32 req 02 val 2900 [ 215.292460][ T43] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 215.330970][ T43] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 215.497561][ T794] pwc: recv_control_msg error -71 req 04 val 1100 [ 215.516844][ T794] pwc: recv_control_msg error -71 req 04 val 1200 [ 215.538976][ T794] pwc: Registered as video103. [ 215.557506][ T794] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounte[ 215.577541][ T43] usb 1-1: USB disconnect, device number 56 d read-only umount: can't remount /dev/root read-only [ 215.598562][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 215.614294][ T794] usb 2-1: USB disconnect, device number 64 The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.216 closed by remote host. [ 215.809941][ T9] usb 4-1: device descriptor read/all, error -71 [ 215.881940][ T5822] ------------[ cut here ]------------ [ 215.887484][ T5822] WARNING: ./include/linux/ns_common.h:255 at put_mnt_ns+0x152/0x190, CPU#1: syz-executor/5822 [ 215.897963][ T5822] Modules linked in: [ 215.902031][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 215.911931][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.922381][ T5822] RIP: 0010:put_mnt_ns+0x152/0x190 [ 215.927544][ T5822] Code: 79 00 00 bf 01 00 00 00 89 ee e8 39 d9 7d ff 85 ed 7e 1f e8 f0 d4 7d ff 5b 41 5e 41 5f 5d e9 d5 a2 24 09 cc e8 df d4 7d ff 90 <0f> 0b 90 e9 33 ff ff ff e8 d1 d4 7d ff 4c 89 f7 be 03 00 00 00 5b [ 215.947552][ T5822] RSP: 0018:ffffc9000446fa68 EFLAGS: 00010293 [ 215.953981][ T5822] RAX: ffffffff8243fb51 RBX: ffff88801f7f1000 RCX: ffff888026561e80 [ 215.962463][ T5822] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 215.971058][ T5822] RBP: 00000000ffffffff R08: ffff88801f7f10bb R09: 1ffff11003efe217 [ 215.979195][ T5822] R10: dffffc0000000000 R11: ffffed1003efe218 R12: dffffc0000000000 [ 215.987228][ T5822] R13: 0000000000000009 R14: ffff88801f7f10b8 R15: dffffc0000000000 [ 215.995271][ T5822] FS: 0000000000000000(0000) GS:ffff888125b79000(0000) knlGS:0000000000000000 [ 216.004294][ T5822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.011059][ T5822] CR2: 0000555558d54808 CR3: 0000000025184000 CR4: 00000000003526f0 [ 216.019114][ T5822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.027208][ T5822] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 216.035317][ T5822] Call Trace: [ 216.038672][ T5822] [ 216.041625][ T5822] free_nsproxy+0x46/0x560 [ 216.046070][ T5822] do_exit+0x6b8/0x2300 [ 216.050314][ T5822] ? do_raw_spin_lock+0x121/0x290 [ 216.055378][ T5822] ? __pfx_do_exit+0x10/0x10 [ 216.060067][ T5822] do_group_exit+0x21c/0x2d0 [ 216.064694][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.070024][ T5822] get_signal+0x1285/0x1340 [ 216.074594][ T5822] arch_do_signal_or_restart+0x9a/0x7a0 [ 216.080456][ T5822] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 216.085700][ T5822] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 216.092025][ T5822] ? exit_to_user_mode_loop+0x55/0x4f0 [ 216.097534][ T5822] exit_to_user_mode_loop+0x87/0x4f0 [ 216.102912][ T5822] ? rcu_is_watching+0x15/0xb0 [ 216.107717][ T5822] do_syscall_64+0x2e9/0xfa0 [ 216.112393][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.118536][ T5822] ? clear_bhb_loop+0x60/0xb0 [ 216.123253][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.129222][ T5822] RIP: 0033:0x7f6e7efc1f85 [ 216.133660][ T5822] Code: Unable to access opcode bytes at 0x7f6e7efc1f5b. [ 216.140814][ T5822] RSP: 002b:00007ffdd6403280 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 216.149331][ T5822] RAX: 0000000000000000 RBX: 000000000000017c RCX: 00007f6e7efc1f85 [ 216.157346][ T5822] RDX: 00007ffdd64032c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.165606][ T5822] RBP: 00007ffdd640332c R08: 0000000000000000 R09: 0000000000000000 [ 216.173740][ T5822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 216.181766][ T5822] R13: 00000000000927c0 R14: 00000000000349f3 R15: 00007ffdd6403380 [ 216.189831][ T5822] [ 216.192882][ T5822] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.200162][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 216.209618][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.219676][ T5822] Call Trace: [ 216.222957][ T5822] [ 216.225886][ T5822] dump_stack_lvl+0x99/0x250 [ 216.230486][ T5822] ? __asan_memcpy+0x40/0x70 [ 216.235109][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.240335][ T5822] ? __pfx__printk+0x10/0x10 [ 216.244936][ T5822] vpanic+0x237/0x6d0 [ 216.248925][ T5822] ? __pfx_vpanic+0x10/0x10 [ 216.253457][ T5822] ? is_bpf_text_address+0x292/0x2b0 [ 216.258785][ T5822] ? is_bpf_text_address+0x26/0x2b0 [ 216.264015][ T5822] panic+0xb9/0xc0 [ 216.267749][ T5822] ? __pfx_panic+0x10/0x10 [ 216.272188][ T5822] __warn+0x334/0x4c0 [ 216.276175][ T5822] ? put_mnt_ns+0x152/0x190 [ 216.280695][ T5822] ? put_mnt_ns+0x152/0x190 [ 216.285220][ T5822] report_bug+0x2be/0x4f0 [ 216.289584][ T5822] ? put_mnt_ns+0x152/0x190 [ 216.294097][ T5822] ? put_mnt_ns+0x152/0x190 [ 216.298624][ T5822] ? put_mnt_ns+0x154/0x190 [ 216.303138][ T5822] handle_bug+0x84/0x160 [ 216.307410][ T5822] exc_invalid_op+0x1a/0x50 [ 216.311926][ T5822] asm_exc_invalid_op+0x1a/0x20 [ 216.316784][ T5822] RIP: 0010:put_mnt_ns+0x152/0x190 [ 216.321928][ T5822] Code: 79 00 00 bf 01 00 00 00 89 ee e8 39 d9 7d ff 85 ed 7e 1f e8 f0 d4 7d ff 5b 41 5e 41 5f 5d e9 d5 a2 24 09 cc e8 df d4 7d ff 90 <0f> 0b 90 e9 33 ff ff ff e8 d1 d4 7d ff 4c 89 f7 be 03 00 00 00 5b [ 216.341541][ T5822] RSP: 0018:ffffc9000446fa68 EFLAGS: 00010293 [ 216.347624][ T5822] RAX: ffffffff8243fb51 RBX: ffff88801f7f1000 RCX: ffff888026561e80 [ 216.355611][ T5822] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 216.363594][ T5822] RBP: 00000000ffffffff R08: ffff88801f7f10bb R09: 1ffff11003efe217 [ 216.371587][ T5822] R10: dffffc0000000000 R11: ffffed1003efe218 R12: dffffc0000000000 [ 216.379594][ T5822] R13: 0000000000000009 R14: ffff88801f7f10b8 R15: dffffc0000000000 [ 216.387598][ T5822] ? put_mnt_ns+0x151/0x190 [ 216.392131][ T5822] ? put_mnt_ns+0x151/0x190 [ 216.396652][ T5822] free_nsproxy+0x46/0x560 [ 216.401081][ T5822] do_exit+0x6b8/0x2300 [ 216.405261][ T5822] ? do_raw_spin_lock+0x121/0x290 [ 216.410303][ T5822] ? __pfx_do_exit+0x10/0x10 [ 216.414938][ T5822] do_group_exit+0x21c/0x2d0 [ 216.419544][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.424770][ T5822] get_signal+0x1285/0x1340 [ 216.429301][ T5822] arch_do_signal_or_restart+0x9a/0x7a0 [ 216.434863][ T5822] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 216.440108][ T5822] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 216.446289][ T5822] ? exit_to_user_mode_loop+0x55/0x4f0 [ 216.451761][ T5822] exit_to_user_mode_loop+0x87/0x4f0 [ 216.457069][ T5822] ? rcu_is_watching+0x15/0xb0 [ 216.461867][ T5822] do_syscall_64+0x2e9/0xfa0 [ 216.466499][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.472592][ T5822] ? clear_bhb_loop+0x60/0xb0 [ 216.477290][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.483202][ T5822] RIP: 0033:0x7f6e7efc1f85 [ 216.487637][ T5822] Code: Unable to access opcode bytes at 0x7f6e7efc1f5b. [ 216.494669][ T5822] RSP: 002b:00007ffdd6403280 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 216.503102][ T5822] RAX: 0000000000000000 RBX: 000000000000017c RCX: 00007f6e7efc1f85 [ 216.511087][ T5822] RDX: 00007ffdd64032c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.519065][ T5822] RBP: 00007ffdd640332c R08: 0000000000000000 R09: 0000000000000000 [ 216.527042][ T5822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 216.535025][ T5822] R13: 00000000000927c0 R14: 00000000000349f3 R15: 00007ffdd6403380 [ 216.543023][ T5822] [ 216.546393][ T5822] Kernel Offset: disabled [ 216.550723][ T5822] Rebooting in 86400 seconds..