last executing test programs: 11.53847238s ago: executing program 3 (id=213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001740)=ANY=[@ANYBLOB="fc000000190401"], 0xfc}}, 0x4080) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x980912, 0xfffffffe}) syz_usb_connect(0x2, 0xc7, &(0x7f0000000100)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310", @ANYBLOB="62742713cc99ce2c196e2ad851"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 10.336111405s ago: executing program 3 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000000020000092c000480280001800b0001006f626a7265660000180002800900020073797a3000000000080001400000000f0900010073797a30000000000900020073797a32"], 0x88}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 10.1479911s ago: executing program 3 (id=220): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000280)={0x0, 'veth0_macvtap\x00', {0x2}, 0x6}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="400a03000000fbc85fc8dcf0a36d9d5ed6038c3698d56c629afc513f43138835a39771d4076c1a0b66bea717c862db4a786cb35fd84bed60a420908e56ad0ffce415658f6c19338e17a312863a4b71e71398ab11305923a0aa646a18212917ffb6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x1, 0x27, "013447ca03022582f6129e0cd6b1e3f7226dd9f96aad94f71a9c277b987765479849cdb7abc000"}, 0x0}) 9.210433632s ago: executing program 0 (id=225): write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 8.910280062s ago: executing program 0 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x40002, 0x0) r1 = syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x10, 0x6f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x4020013, r0, 0x2000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 7.309147589s ago: executing program 2 (id=233): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x821, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 7.058478123s ago: executing program 2 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000004840)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (fail_nth: 2) 7.028707149s ago: executing program 2 (id=237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x540, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) r3 = fsmount(r1, 0x0, 0xa) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r6, &(0x7f0000007480), 0x29e15b2, 0x0) fchdir(r3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c00018008000400", @ANYRES32=r10], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) lstat(&(0x7f00000012c0)='./sys\x00', &(0x7f0000001300)) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(r8, 0x6, &(0x7f0000000100)={0x0, 0x3, 0x7, 0xffff, r11}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000004840)=ANY=[@ANYBLOB="240000000f06010800000000000000000200000a07000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000140)={0x6, 'team_slave_0\x00', {0x38000000}, 0x780}) open(&(0x7f0000000180)='./sys\x00', 0x10000, 0x10) 6.200726627s ago: executing program 2 (id=238): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0xfff7, 0x6df, 0x19, 0x9, 0xffff, 0x5, 0x1, 0xfff, r3}, &(0x7f0000000140)=0x20) (async) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r5], 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000010c0)={0x1, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x401}) fcntl$lock(r0, 0x25, &(0x7f0000001080)={0x1, 0x0, 0x80000000, 0x5, r7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) r8 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r8, 0x82000000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) connect(r2, &(0x7f0000001140)=@pppoe={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x80) (async) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {r10, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) (async) preadv(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) 5.784578858s ago: executing program 0 (id=239): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550d, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#.:.', 0x800000000000000) 5.765298945s ago: executing program 0 (id=240): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='a', @ANYRESDEC=r0], 0x10e6) 5.663071678s ago: executing program 0 (id=241): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="2012750000008ee40fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$midi(0x0, 0x94, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0x1, 0x1, 0x80, 0xfe, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0xc, 0x1, [{0x8, 0x9e}], 0xe}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x1, 0xf5, 0xd, {0x4}}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x0, 0x9, 0x3, {0x10, 0x25, 0x1, 0xc, "faecbcae7e6cd07e1d8d979f"}}}, {{0x9, 0x5, 0xd, 0x13, 0x10, 0xe, 0xa3, 0xcf, {0x6, 0x25, 0x1, 0x2, "5382"}}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xfc, 0x3, 0x7, {0x11, 0x25, 0x1, 0xd, "528a513359f13fe7c9787f1054"}}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x2, 0x6, 0x3, {0xf, 0x25, 0x1, 0xb, "3949a815f49ce2f0a68c54"}}}]}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x98, 0x3, 0x23, 0x8, 0x48}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xac, 0x4, 0xae, 0x9b7f, 0xff}]}, 0x8, [{0x11, &(0x7f0000000240)=@string={0x11, 0x3, "6997f743fd241222040a8ea9292b21"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x446}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "ff90ba8c45f366886e3f735382e8036b400c95a345aa8ef4921f3b691c1147d5a6dbd42b6833574f6c87e7287a6c088567ef9e0a97eb4b32dc57fb0bdbcf816c86d00431a1a700dbb5e60eeb1a3dd854ad874a8db83015c8f744ba2a2fb524080342d83a0f1a8547274b3272828cea4db6"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xc6, &(0x7f0000000500)=@string={0xc6, 0x3, "5b420a3df987b3b981e1e0f7c45f91d72261e5af92552a725302d281ef413ddff9eae561f5fa52b6adbc763996b37dd3c0ca8f282074fc1f07dd71748be5b6070186ef53c686009b986abff1396ce5a0405fa256c5fada5d8518b6e039020ea401785e32a610ce956238b175ea2389a6f6aec73c5935cd03b3fc0c5b528481e632f19801a37c8ce9d536738711cda7e8c6f064a332f93b2e578c8165dec1e7eb97dd81f4c78b87d1eccdf5a3ade1b5ca3289740b9f040c8e3961f2f5168b5e3f2ac9a7f8"}}, {0x66, &(0x7f0000000600)=@string={0x66, 0x3, "44b7ba5a3b52eba35e9cd04cbd0f1592c187d4ecd4278918a5f8d230417bf258b86e1bd9f4cd10be1733a30e348b4e2fe0a8e098aa8c2b33fd3165add2ec1f369178d09676ffc959498f417b8499f66a7c26be778abc01fecb956b02ecbe74fd51a58d24"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000ac0)={0x14, &(0x7f0000000900)={0x40, 0x1d978cbafc4b420a, 0x86, {0x86, 0x22, "71a527063087185c80b05b0c299c6e9cf4387b5a657e8eaac113cf19f9f6bfe16d6d5924b2ab148494201cd07924bb5b099bf1276d7870e779ca2a602b459202d4bc4e4f5211d052082fe7b24ba365882516262073f64acf5bbde99d31f1f61963a7e2ae074764f540d907fa7a8166c64a0d6dfecaa15be52e33ca81b809c4172f9244ef"}}, &(0x7f00000009c0)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "38ff13fe6153164f222c1680903be2a52fa38f37d42b4e88e5446fd75715331ebceba26125d49a2dc2d58063af9aa9e5e97f66fa5ea11235575b14e91e127bc93e951cb0e0ae441a426d475202fdcfce8beb3642563a800555976496cb37434b8c83c681cae4022f27805ab12db98b0bb8d5dde7ac99948f8db14d43081023fae8f18aaf93c15f4f4ede2fb17784bab8c3bb9906b050271dd518721ec50f65cc23f97fab4f2131347040db13f4e9f37e7e067dc573767208c5112bbe21f544a8435a5381"}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000b00)={0x40, 0xa, 0x70, "1f3a78d2a300208fd5185ae0dcea0fbb603f622ccb539e7c5dc2e70a5509f7b83739a08a50fc2982bee3e9ee2b01dcddfa07dbeed6c8cb2b9fa04220a128dfd4d101b77aed3ceb8596b3284e3823a8969447c2310f5aa61466aa4e993f00cbfc3edf6aecaca687fab7782e456464dc6f"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c00)={0x20, 0x81, 0x2, "a593"}, &(0x7f0000000c40)={0x20, 0x82, 0x2, "3c84"}, &(0x7f0000000c80)={0x20, 0x83, 0x2, "83a4"}, &(0x7f0000000cc0)={0x20, 0x84, 0x3, "5b37f4"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "8c2a83"}}) io_setup(0x2, &(0x7f0000000300)=0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer], 0x0, 0x0, 0x0}) r4 = eventfd(0x3dd) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10) r6 = eventfd(0x7) r7 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001f00), &(0x7f0000001f40)=0x10) io_submit(r2, 0x4, &(0x7f0000002fc0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x2, 0xb, r3, &(0x7f0000000380)="8785c55cd839f3144847519cddbe52258c53eea9b021", 0x16, 0x40, 0x0, 0x1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000dc0)="f8139e841ba927804e8a1178815bcdf119d768daa53bcb5f137c64ee10191bedcb377f5f8350fddfec34567479e375e546cfeb1f8e77e54969cf75a60a75576c741434e18eb6180d6f331ab3cf6499552ea6dbfe5345d65af40794df75bcfaa32c81669c874fc88a698133136dd5271a896d055b3823eaa14072626317417cd8f83c5d85f351dbf0b6fd127cb1f487f04c411843ee699996b8d289c3c551806dd190ee0db078ea03cd19c24b15ade060ee09875babd2", 0xb6, 0x8000000000000000, 0x0, 0x3, r4}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x6, 0xc39, r5, &(0x7f0000000ec0)="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", 0x1000, 0x660, 0x0, 0x0, r6}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x6, 0x0, r7, &(0x7f0000001f80)="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", 0x1000, 0x2, 0x0, 0x3}]) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x0, 0x23, 0x3, {0x3, 0x31, "ed"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.569489296s ago: executing program 3 (id=242): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0x10000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x7, 0x6b, {0x6b, 0x23, "9ed6f475f2ea72c3fc5dddf70250a11ec2292bd7672c4e177be3c30effa21bf9542a4f93f7ca8ca422debad9394e42109b43cf7b50bde7346004d445cbdd8b3225e69bf9e57ebc7c8f34f9fdbd96d84cbfd3d675e7689d8c28afb03bc3eb9c6f2584c5409129bfb49e"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20, 0x1f, 0xe0, "fe98100f9d82e2422f2ebbbafa07f76ee1c04eeec17f70e807c7083292c3331df70ceac39fcece8dc5e4d0cf5277c087a8c82df3d1c85c7732ebf389363b00b1cf9e26b60058f0865d07e63ccd411478eee1e3437c4dcdc5d34f4d322cf309b870c6f34fdcb4a38e2935f25c0049dd9112ca66192e4b9c6851c08556ebf7062b06d824d082c80b57d314a43231c83412f34f65a5f5a40cb0eb8ab691b27ee17b6ae2c86026d481d300363fcfc11573fe919c3c2b8078d9c719d753afa28298c69d1f1de08b8278475865aaa7c114919ab1cef70249e545ff6d3f8b23e9bae4d5"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000380)={0xc0, 0x5, 0x2, "3993"}, &(0x7f0000000440)={0x40, 0x5, 0x2, "b1cd"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000001100)={0x14, &(0x7f0000000fc0)={0x20, 0xd, 0xdb, {0xdb, 0x21, "8d516f692a3dfd18439a89b53d07fcde7510de9e2fd9892bad1f594d1a6e7ca6a639b12676dec75c8c4c9a012f30244019096f1aff303eec19a6c9975ae4b7618f9789cf2425151ca7a23cc2d83cfcb2e73bdefdc6feefdbb57adbc194a27b2e340ffe8b183d23818c7d9078aade5b6325a58a3ab67279b6c43deeacfe0368d998e6c18472216df3d0e70c07f4029fde59bf7ba44507b5d0e220142b540a1e2a28c240d6eb4c72caee3dd111657d1847a11f8031a37219d749a27e2e7f0272eddd6290f133efd08e929f77f79e35aa6e264c616cd3ef24f828"}}, &(0x7f00000010c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001140)={0x0, 0x31, 0x6b, "124638234129cf9ddf0789309f3590d63e5e00c4e66997d6bf8f1714563d078cdeaa813baeab7a46021a3a1ca6d1b4d975b749b088090772a93a57058f70c710fad392c3d723dfe7325bfd2553c4cb334dec22dde4dbd6356ae828f7fba1bccb0a152afd13a5430afc54bf"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001240)={0xc0, 0x5, 0x5, "ccb88ac662"}, &(0x7f0000001280)}) 3.736491333s ago: executing program 1 (id=245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x6}, {0xcdab, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in=@remote, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0xfff5, @mcast2, 0x7}, 0x1c) 3.606368731s ago: executing program 1 (id=246): r0 = syz_open_dev$radio(&(0x7f0000000200), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c00053c000111000001f500010244132403b1fd606412c3258e3d67aa5b00010000000000000000001d2bffc1264d04000280040003"], 0x64}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}}) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) 3.593579166s ago: executing program 1 (id=247): socket$packet(0x11, 0x3, 0x300) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x22, 0x1f) 3.488504707s ago: executing program 1 (id=248): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040a306d00c00000000000109022400010035945000a002090400050203008400092100004001221800090581036000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0xfffffffffffffe97, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x8, "8d9a42003dd2da00"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 3.150878004s ago: executing program 3 (id=249): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, 0x0, 0x10e6) 3.10235409s ago: executing program 2 (id=250): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x6, 0x8000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x2, {0x4, 0x1, 0x768, 0x10}}) r2 = syz_usb_connect$uac3(0x2, 0xd4, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xdba, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x6, 0x20, 0x8, {0x8, 0xb, 0x1, 0x2, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x37, 0xffff0001}, [@source_unit={0xc, 0x24, 0xb, 0x1, 0x2, 0x4, 0x91, 0xffff}, @feature_unit={0x15, 0x24, 0x7, 0x2, 0x6, [0x5, 0xf, 0xe, 0xa]}, @selector_unit={0xc, 0x24, 0xc, 0x5, 0x7, "6a667767460dec"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0x4f, 0x4, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xad, 0x9, 0x5, {0xa, 0x25, 0x25, 0x400, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xd}, @as_header={0x17, 0x24, 0x1, 0x2, 0x3, 0x7f, 0x3, 0x20, 0x2, 0x8e, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xc0, 0x6, 0xee, {0xa, 0x25, 0x25, 0x7ff, 0x4, 0x2}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x5, 0x9d, 0xf, 0x40}, 0x22, &(0x7f0000000200)={0x5, 0xf, 0x22, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x456, 0xff00, 0x428, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xd1, 0x6, 0xb}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="000e06"], 0x0}, 0x0) r3 = getpgid(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x101000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x6, 0xd9, 0x2}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x24, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000240)={{0x77359400}, {r6, r7+60000000}}, 0x0) syz_pidfd_open(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, &(0x7f0000000040)) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) (async) syz_open_dev$video4linux(&(0x7f0000000100), 0x6, 0x8000) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x2, {0x4, 0x1, 0x768, 0x10}}) (async) syz_usb_connect$uac3(0x2, 0xd4, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xdba, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x6, 0x20, 0x8, {0x8, 0xb, 0x1, 0x2, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x37, 0xffff0001}, [@source_unit={0xc, 0x24, 0xb, 0x1, 0x2, 0x4, 0x91, 0xffff}, @feature_unit={0x15, 0x24, 0x7, 0x2, 0x6, [0x5, 0xf, 0xe, 0xa]}, @selector_unit={0xc, 0x24, 0xc, 0x5, 0x7, "6a667767460dec"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0x4f, 0x4, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xad, 0x9, 0x5, {0xa, 0x25, 0x25, 0x400, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xd}, @as_header={0x17, 0x24, 0x1, 0x2, 0x3, 0x7f, 0x3, 0x20, 0x2, 0x8e, 0xe}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xc0, 0x6, 0xee, {0xa, 0x25, 0x25, 0x7ff, 0x4, 0x2}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x5, 0x9d, 0xf, 0x40}, 0x22, &(0x7f0000000200)={0x5, 0xf, 0x22, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x456, 0xff00, 0x428, [0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xd1, 0x6, 0xb}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}]}) (async) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) (async) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="000e06"], 0x0}, 0x0) (async) getpgid(0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x101000) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x6, 0xd9, 0x2}) (async) timer_create(0x2, &(0x7f0000000180)={0x0, 0x24, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) timer_settime(r5, 0x0, &(0x7f0000000240)={{0x77359400}, {r6, r7+60000000}}, 0x0) (async) syz_pidfd_open(r3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, &(0x7f0000000040)) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) 2.597846784s ago: executing program 0 (id=251): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000280)={0x0, 'veth0_macvtap\x00', {0x2}, 0x6}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="400a03000000fbc85fc8dcf0a36d9d5ed6038c3698d56c629afc513f43138835a39771d4076c1a0b66bea717c862db4a786cb35fd84bed60a420908e56ad0ffce415658f6c19338e17a312863a4b71e71398ab11305923a0aa646a18212917ffb6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x1, 0x27, "013447ca03022582f6129e0cd6b1e3f7226dd9f96aad94f71a9c277b987765479849cdb7abc000"}, 0x0}) 2.160223192s ago: executing program 1 (id=252): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80ff, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) 2.058888492s ago: executing program 1 (id=253): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00fc0482f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000001f0a052000000000000000000a0000050900010073797a3100000000140003800c000080080003400000000204000080090002"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8) syz_usb_control_io$printer(r1, 0x0, 0x0) 1.277323229s ago: executing program 2 (id=254): prctl$PR_GET_THP_DISABLE(0x2a) mknod$loop(0x0, 0xfff, 0x1) syz_usb_connect$uac1(0x2, 0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000206307032005000102030109027600030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002011000f441a4440fb209050109ff037808ba0725010c040300090402000001020000090402010101020000090582092000030201072501000e0300"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x1214040, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ecm(0x3, 0x62, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x50, 0x73, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfbcb, 0x2, 0x5, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf3}, @dmm={0x7, 0x24, 0x14, 0x3, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x7, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xc, 0x2, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x2, 0x80, 0x5, 0x40, 0x5}, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="050f16020710400080"], 0x1, [{0x99, &(0x7f0000000340)=ANY=[@ANYBLOB="99038525dff905a076697bdc7f87e7e42716de9e230770429a21bc131338da6a20b934090dafe050a6838504f572092f5d3907114aea0c58e91e26a9bc11f37fe6b626bc71bcda10a3b152d34ecf58fbd938db87bf4b86518e9280c27bcfe7b73c65211ea4ca3f8823760e3926211ea9195160e433e9f947b814a2664859a5bd794b607b214e9dc40ee8a9900fb62bd868870af40e2a6e2b1a"]}]}) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x100000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="e9faffff", @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x64}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968c18a}, 0x8006) accept$unix(r1, 0x0, &(0x7f0000000500)) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x7c) write$tun(r4, &(0x7f0000000540)={@val={0x0, 0xee57}, @void, @ipv4=@tipc={{0x18, 0x4, 0x0, 0x3, 0x7b, 0x68, 0x0, 0x6, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@end, @ssrr={0x89, 0x13, 0x80, [@local, @broadcast, @loopback, @multicast2]}, @lsrr={0x83, 0x7, 0x93, [@loopback]}, @end, @lsrr={0x83, 0xb, 0x7e, [@broadcast, @private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x7, [{@local, 0xb}, {@multicast1, 0x80000000}, {@loopback, 0x920}, {@remote, 0x6}]}]}}, @payload_conn={{{0x1b, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, 0x2, 0x7f, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, 0x7, 0x4, 0x4e24, 0x4e23}}, [0x0, 0x0, 0x0]}}}, 0x7f) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x5ea64cd34f78567a) 0s ago: executing program 3 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x6c, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0x58, 0xe, 0x0, 0x1, [@nested={0x54, 0x52, 0x0, 0x1, [@generic="6f784e8df96ddb651128a7a38ffcf1dd0308c33fa12db8a947f424a892a831217f9a97a3764574383b7ef8d45cf916d331c46b86459433ae9ec3f9ca195b5ed7a145aead9f1e384cf57ef81d5b7862a0"]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x149080, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x8cf, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x3) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000900)) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) kernel console output (not intermixed with test programs): 26] Cannot create hsr debugfs directory [ 85.870801][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.887071][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.888996][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.899802][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.906340][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.923837][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.924568][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.927385][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.998949][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.011811][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.027377][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.030927][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.031746][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.052000][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.069454][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.074661][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.144570][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.149117][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.149917][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.157648][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.184491][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.187363][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.210092][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.221183][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.294168][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.296921][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.316804][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.327237][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.328055][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.331139][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.331816][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.354278][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.378014][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.435192][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.462781][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.479536][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.479625][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.516017][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.516091][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.547490][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.577583][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.577656][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.615552][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.619076][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.619136][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.661882][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.690673][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.690735][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.708509][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.708819][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.757385][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.833022][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.868485][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.868572][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.888143][ T5615] Bluetooth: hci0: command tx timeout [ 86.920002][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.920094][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.967667][ T5615] Bluetooth: hci1: command tx timeout [ 87.130587][ T5615] Bluetooth: hci2: command tx timeout [ 87.130604][ T52] Bluetooth: hci3: command tx timeout [ 87.905000][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.926990][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.951203][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.991377][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.054334][ T5613] veth0_vlan: entered promiscuous mode [ 88.085392][ T5618] veth0_vlan: entered promiscuous mode [ 88.087004][ T5613] veth1_vlan: entered promiscuous mode [ 88.120329][ T5626] veth0_vlan: entered promiscuous mode [ 88.131222][ T5625] veth0_vlan: entered promiscuous mode [ 88.131830][ T5618] veth1_vlan: entered promiscuous mode [ 88.158256][ T5625] veth1_vlan: entered promiscuous mode [ 88.160909][ T5626] veth1_vlan: entered promiscuous mode [ 88.219655][ T5613] veth0_macvtap: entered promiscuous mode [ 88.231461][ T5618] veth0_macvtap: entered promiscuous mode [ 88.244078][ T5618] veth1_macvtap: entered promiscuous mode [ 88.250031][ T5613] veth1_macvtap: entered promiscuous mode [ 88.264239][ T5625] veth0_macvtap: entered promiscuous mode [ 88.285931][ T5626] veth0_macvtap: entered promiscuous mode [ 88.287325][ T5625] veth1_macvtap: entered promiscuous mode [ 88.311816][ T5626] veth1_macvtap: entered promiscuous mode [ 88.320296][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.344614][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.349639][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.351189][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.361243][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.391646][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.430022][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.455696][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.467983][ T1171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524024][ T290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524065][ T290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524097][ T290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524130][ T290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524160][ T290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524186][ T290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524214][ T290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524242][ T290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524273][ T290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524302][ T290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524332][ T290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.532543][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.533208][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.715122][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.737941][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.737965][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.760382][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.760399][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.815539][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.815555][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.839673][ T290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.871755][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.871771][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.919275][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.919307][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.960198][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.962665][ T52] Bluetooth: hci0: command tx timeout [ 88.999518][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.999534][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.042089][ T52] Bluetooth: hci1: command tx timeout [ 89.070619][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.070633][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.179960][ T5766] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 89.205827][ T52] Bluetooth: hci3: command tx timeout [ 89.212327][ T52] Bluetooth: hci2: command tx timeout [ 89.214301][ T5766] FAULT_INJECTION: forcing a failure. [ 89.214301][ T5766] name failslab, interval 1, probability 0, space 0, times 1 [ 89.214336][ T5766] CPU: 0 UID: 0 PID: 5766 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 89.214357][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.214375][ T5766] Call Trace: [ 89.214385][ T5766] [ 89.214393][ T5766] dump_stack_lvl+0xe8/0x150 [ 89.214429][ T5766] should_fail_ex+0x3eb/0x540 [ 89.214455][ T5766] should_failslab+0xa8/0x100 [ 89.214477][ T5766] __kmalloc_noprof+0xf9/0x710 [ 89.214503][ T5766] ? rcu_is_watching+0x16/0xb0 [ 89.214523][ T5766] ? tomoyo_realpath_from_path+0xef/0x640 [ 89.214547][ T5766] ? tomoyo_realpath_from_path+0xef/0x640 [ 89.214577][ T5766] tomoyo_realpath_from_path+0xef/0x640 [ 89.214611][ T5766] ? tomoyo_path_number_perm+0x219/0x5f0 [ 89.214631][ T5766] tomoyo_path_number_perm+0x246/0x5f0 [ 89.214653][ T5766] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 89.214672][ T5766] ? __lock_acquire+0x747/0x2de0 [ 89.214713][ T5766] ? hook_file_ioctl+0x1f2/0x600 [ 89.214752][ T5766] ? __fget_files+0x2a/0x420 [ 89.214779][ T5766] ? __fget_files+0x2a/0x420 [ 89.214801][ T5766] ? __fget_files+0x3a2/0x420 [ 89.214824][ T5766] ? __fget_files+0x2a/0x420 [ 89.214851][ T5766] security_file_ioctl+0xc3/0x2a0 [ 89.214882][ T5766] __se_sys_ioctl+0x47/0x170 [ 89.214913][ T5766] do_syscall_64+0x166/0x520 [ 89.214931][ T5766] ? trace_irq_disable+0x3b/0x140 [ 89.214958][ T5766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.214978][ T5766] ? clear_bhb_loop+0x70/0xc0 [ 89.215002][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.215020][ T5766] RIP: 0033:0x7f6061f9e159 [ 89.215042][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.215057][ T5766] RSP: 002b:00007f6062e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.215080][ T5766] RAX: ffffffffffffffda RBX: 00007f6062225fa0 RCX: 00007f6061f9e159 [ 89.215094][ T5766] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 89.215106][ T5766] RBP: 00007f6062e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 89.215118][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.215128][ T5766] R13: 00007f6062226038 R14: 00007f6062225fa0 R15: 00007fff8f7d3ee8 [ 89.215156][ T5766] [ 89.215163][ T5766] ERROR: Out of memory at tomoyo_realpath_from_path. [ 89.215608][ T9] rust_binder: 5765: undelivered TRANSACTION_COMPLETE [ 89.215661][ T9] rust_binder: 5765: undelivered TRANSACTION_COMPLETE [ 89.225758][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.225823][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.520592][ T5630] rust_binder: 5765: undelivered transaction 5, process died [ 89.520656][ T5630] rust_binder: 5765: undelivered transaction 4, process died [ 89.544306][ T5766] syz.1.2 (5766) used greatest stack depth: 11936 bytes left [ 89.657750][ T5762] rust_binder: 5767: undelivered TRANSACTION_COMPLETE [ 89.657800][ T5762] rust_binder: 5767: undelivered TRANSACTION_COMPLETE [ 89.694295][ T5630] rust_binder: 5771: undelivered TRANSACTION_COMPLETE [ 89.694324][ T5630] rust_binder: 5771: undelivered TRANSACTION_COMPLETE [ 89.724766][ T5630] rust_binder: 5771: undelivered transaction 17, process died [ 89.724809][ T5630] rust_binder: 5771: undelivered transaction 16, process died [ 89.752929][ T5630] rust_binder: 5767: undelivered transaction 11, process died [ 89.752972][ T5630] rust_binder: 5767: undelivered transaction 10, process died [ 89.990435][ T5764] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.122580][ T5689] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.142788][ T5764] usb 2-1: New USB device found, idVendor=046d, idProduct=c548, bcdDevice= 0.40 [ 90.143786][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.145471][ T5764] usb 2-1: config 1 interface 0 has no altsetting 0 [ 90.148400][ T5764] usb 2-1: string descriptor 0 read error: -22 [ 90.148531][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.271975][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 90.274463][ T5689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.274491][ T5689] usb 4-1: New USB device found, idVendor=0db0, idProduct=5580, bcdDevice=23.89 [ 90.275427][ T5689] usb 4-1: config 14 has an invalid interface number: 157 but max is 0 [ 90.275441][ T5689] usb 4-1: config 14 has no interface number 0 [ 90.275459][ T5689] usb 4-1: config 14 interface 157 has no altsetting 0 [ 90.277380][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.277394][ T5689] usb 4-1: Product: syz [ 90.277403][ T5689] usb 4-1: Manufacturer: syz [ 90.277412][ T5689] usb 4-1: SerialNumber: syz [ 90.334469][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.334629][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 90.339708][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.339769][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.364017][ T9] usb 1-1: string descriptor 0 read error: -22 [ 90.364685][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.404570][ T5770] comedi comedi3: pcmmio: a I/O base address must be specified [ 90.439355][ T9] usb 1-1: selecting invalid altsetting 1 [ 90.453500][ T9] usb 1-1: unit 3 not found! [ 90.613929][ T9] usb 1-1: cannot request logical cluster ID: 0 (err: -5) [ 90.613953][ T9] usb 1-1: invalid MIXER UNIT descriptor 6 [ 90.688891][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.688979][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.689011][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.689047][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.689072][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.689119][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.689143][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.689166][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.689190][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.689213][ T5764] logitech-djreceiver 0003:046D:C548.0001: unknown main item tag 0x0 [ 90.761506][ T5689] usb 4-1: USB disconnect, device number 2 [ 90.820036][ T5780] lo: entered allmulticast mode [ 90.870644][ T5764] logitech-djreceiver 0003:046D:C548.0001: hidraw0: USB HID v0.22 Device [HID 046d:c548] on usb-dummy_hcd.1-1/input0 [ 90.906235][ T5764] usb 2-1: USB disconnect, device number 2 [ 90.927444][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 90.947407][ T9] usb 1-1: USB disconnect, device number 2 [ 91.000402][ T5787] fido_id[5787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 91.042397][ T52] Bluetooth: hci0: command tx timeout [ 91.097913][ T5789] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 91.098368][ T5789] syzkaller1: entered promiscuous mode [ 91.098381][ T5789] syzkaller1: entered allmulticast mode [ 91.265013][ T5791] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.289636][ T52] Bluetooth: hci2: command tx timeout [ 91.289666][ T52] Bluetooth: hci3: command tx timeout [ 91.436203][ T5795] Bluetooth: MGMT ver 1.23 [ 91.510744][ T5797] overlayfs: workdir and upperdir must reside under the same mount [ 91.532487][ T5797] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.650059][ T5801] capability: warning: `syz.3.17' uses deprecated v2 capabilities in a way that may be insecure [ 92.015971][ T189] cfg80211: failed to load regulatory.db [ 92.072008][ T5689] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.101686][ T5818] sd 0:0:1:0: PR command failed: 1026 [ 92.101720][ T5818] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 92.101745][ T5818] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 92.125601][ T5816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.202197][ T5689] usb 2-1: device descriptor read/64, error -71 [ 92.216447][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 92.237601][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.353521][ T5830] ======================================================= [ 92.353521][ T5830] WARNING: The mand mount option has been deprecated and [ 92.353521][ T5830] and is ignored by this kernel. Remove the mand [ 92.353521][ T5830] option from the mount to silence this warning. [ 92.353521][ T5830] ======================================================= [ 92.399480][ T5830] vivid-001: ================= START STATUS ================= [ 92.399564][ T5830] vivid-001: ================== END STATUS ================== [ 92.437510][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.437552][ T25] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 92.438521][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.438543][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.445350][ T5689] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.497083][ T25] usb 4-1: string descriptor 0 read error: -22 [ 92.497199][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.521890][ T25] usb 4-1: selecting invalid altsetting 1 [ 92.522725][ T25] usb 4-1: unit 6 not found! [ 92.572044][ T5689] usb 2-1: device descriptor read/64, error -71 [ 92.682369][ T5689] usb usb2-port1: attempt power cycle [ 92.782053][ T5764] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.927594][ T5702] hid-generic 0005:0C45:1010.0002: item fetching failed at offset 0/1 [ 92.931602][ T5702] hid-generic 0005:0C45:1010.0002: probe with driver hid-generic failed with error -22 [ 92.943507][ T5764] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 92.966055][ T5764] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.966084][ T5764] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.971354][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 92.971372][ T5764] usb 1-1: Product: syz [ 92.971382][ T5764] usb 1-1: Manufacturer: syz [ 93.017995][ T5764] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 93.032719][ T5689] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.054653][ T5689] usb 2-1: device descriptor read/8, error -71 [ 93.210578][ T5830] veth1_macvtap: left promiscuous mode [ 93.210606][ T5830] macsec0: entered promiscuous mode [ 93.210620][ T5830] macsec0: entered allmulticast mode [ 93.240910][ T5830] veth1_macvtap: entered promiscuous mode [ 93.240928][ T5830] veth1_macvtap: entered allmulticast mode [ 93.241466][ T5830] macsec0: left promiscuous mode [ 93.241642][ T5830] macsec0: left allmulticast mode [ 93.241655][ T5830] veth1_macvtap: left allmulticast mode [ 93.291991][ T5689] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.313196][ T5689] usb 2-1: device descriptor read/8, error -71 [ 93.416360][ T5856] Zero length message leads to an empty skb [ 93.428401][ T5689] usb usb2-port1: unable to enumerate USB device [ 93.473364][ T5764] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 93.536957][ T25] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 93.595920][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 93.598340][ T25] usb 4-1: USB disconnect, device number 3 [ 93.672137][ T5702] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.678078][ T5703] usb 1-1: USB disconnect, device number 3 [ 93.689770][ T5703] mos7840 1-1:1.0: device disconnected [ 93.802033][ T5702] usb 3-1: device descriptor read/64, error -71 [ 94.042135][ T5702] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.106403][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 94.183438][ T5702] usb 3-1: device descriptor read/64, error -71 [ 94.293884][ T5702] usb usb3-port1: attempt power cycle [ 94.457101][ T5876] syzkaller1: entered promiscuous mode [ 94.457116][ T5876] syzkaller1: entered allmulticast mode [ 94.631993][ T5702] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.652516][ T5702] usb 3-1: device descriptor read/8, error -71 [ 94.866842][ T5878] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.892038][ T5702] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.912745][ T5702] usb 3-1: device descriptor read/8, error -71 [ 94.935997][ T5881] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 94.938776][ T12] IPVS: starting estimator thread 0... [ 95.022063][ T5882] IPVS: using max 32 ests per chain, 76800 per kthread [ 95.022799][ T5702] usb usb3-port1: unable to enumerate USB device [ 95.310733][ T5896] rust_binder: 5895:5896 got transaction to invalid handle 1 [ 95.310759][ T5896] rust_binder: 5895:5896 transaction call to 0:0 failed ENOENT, code 0 size 80-24 [ 95.329819][ T5630] rust_binder: 5895: undelivered TRANSACTION_ERROR: 29201 [ 95.352020][ T5764] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 95.412080][ T5702] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.481057][ T5902] netlink: 80 bytes leftover after parsing attributes in process `syz.0.46'. [ 95.514490][ T5764] usb 4-1: not running at top speed; connect to a high speed hub [ 95.514521][ T5764] usb 4-1: New USB device found, idVendor=1286, idProduct=2052, bcdDevice=8d.91 [ 95.515595][ T5764] usb 4-1: config 247 has an invalid interface number: 137 but max is 3 [ 95.515618][ T5764] usb 4-1: config 247 has an invalid interface number: 94 but max is 3 [ 95.515637][ T5764] usb 4-1: config 247 has an invalid interface number: 85 but max is 3 [ 95.515656][ T5764] usb 4-1: config 247 has an invalid interface number: 246 but max is 3 [ 95.515674][ T5764] usb 4-1: config 247 has an invalid interface number: 13 but max is 3 [ 95.515691][ T5764] usb 4-1: config 247 has 5 interfaces, different from the descriptor's value: 4 [ 95.515711][ T5764] usb 4-1: config 247 has no interface number 0 [ 95.515726][ T5764] usb 4-1: config 247 has no interface number 1 [ 95.515741][ T5764] usb 4-1: config 247 has no interface number 2 [ 95.515756][ T5764] usb 4-1: config 247 has no interface number 3 [ 95.515789][ T5764] usb 4-1: config 247 has no interface number 4 [ 95.515860][ T5764] usb 4-1: config 247 interface 137 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 95.515885][ T5764] usb 4-1: config 247 interface 137 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 95.515909][ T5764] usb 4-1: config 247 interface 137 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 95.515944][ T5764] usb 4-1: config 247 interface 94 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 95.515965][ T5764] usb 4-1: config 247 interface 94 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 95.515986][ T5764] usb 4-1: config 247 interface 94 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 95.516010][ T5764] usb 4-1: config 247 interface 94 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 95.516035][ T5764] usb 4-1: config 247 interface 94 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 95.516056][ T5764] usb 4-1: config 247 interface 94 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 95.516077][ T5764] usb 4-1: config 247 interface 94 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 95.516111][ T5764] usb 4-1: config 247 interface 85 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 95.516135][ T5764] usb 4-1: config 247 interface 85 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 95.516165][ T5764] usb 4-1: config 247 interface 246 altsetting 214 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.516190][ T5764] usb 4-1: too many endpoints for config 247 interface 13 altsetting 205: 200, using maximum allowed: 30 [ 95.516230][ T5764] usb 4-1: config 247 interface 13 altsetting 205 has 1 endpoint descriptor, different from the interface descriptor's value: 200 [ 95.516255][ T5764] usb 4-1: config 247 interface 137 has no altsetting 0 [ 95.516272][ T5764] usb 4-1: config 247 interface 94 has no altsetting 0 [ 95.516288][ T5764] usb 4-1: config 247 interface 85 has no altsetting 0 [ 95.516304][ T5764] usb 4-1: config 247 interface 246 has no altsetting 0 [ 95.516320][ T5764] usb 4-1: config 247 interface 13 has no altsetting 0 [ 95.520079][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.520102][ T5764] usb 4-1: Product: ႈ姰ãŽë¾³ë¥›ì­Šíƒ¦à¼¬ï®â»Œê¨”滢ç¦ê±Œçªê–§î¤ªî’ºá¿¨é—˜æ ‘훂ꇜ枂펟᲎쀪䕥鶉âºí‚™ [ 95.520120][ T5764] usb 4-1: Manufacturer: Ћ [ 95.520134][ T5764] usb 4-1: SerialNumber: 쬔़㿴ᒳ軼越镤說ںٶᮮìï鉞㑽↴í䴮ᑽဪì㣬䑼⚛ãªï—¾æ †ì¸¶ï¹¤ç¢»ê£¶ì°«ç³­á¾æ• çŒœáŸà¾¼ß§éš¥æ–뇞㓟ꇧ哴곈ￜ䧿䟲ꥌ伛䚴浘 [ 95.571721][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.571843][ T5702] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 95.576595][ T5702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.576649][ T5702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.588377][ T5702] usb 2-1: string descriptor 0 read error: -22 [ 95.588713][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.653971][ T5702] usb 2-1: selecting invalid altsetting 1 [ 95.660294][ T5702] usb 2-1: unit 6 not found! [ 96.013390][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 96.362787][ T5764] usb 4-1: USB disconnect, device number 4 [ 96.461834][ T5908] XFS (nullb0): Invalid superblock magic number [ 96.747622][ T5702] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 96.793833][ T5689] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.888413][ T5702] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 96.904782][ T5702] usb 2-1: USB disconnect, device number 7 [ 96.952036][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 96.952815][ T5689] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.953697][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.953715][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.955500][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.955522][ T5689] usb 3-1: Product: syz [ 96.955535][ T5689] usb 3-1: Manufacturer: syz [ 96.955551][ T5689] usb 3-1: SerialNumber: syz [ 96.957667][ T5689] usb 3-1: config 0 descriptor?? [ 97.007459][ T5689] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.007544][ T5689] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 97.172032][ T5764] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.311295][ T5931] overlay: filesystem on ./bus not supported as upperdir [ 97.322515][ T5764] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 97.324803][ T5764] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 97.324848][ T5764] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.324865][ T5764] usb 4-1: config 2 interface 0 has no altsetting 0 [ 97.326989][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.327005][ T5764] usb 4-1: Product: syz [ 97.327014][ T5764] usb 4-1: Manufacturer: syz [ 97.327022][ T5764] usb 4-1: SerialNumber: syz [ 97.583150][ T5689] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 97.585721][ T5689] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 97.603203][ T5764] usb 4-1: USB disconnect, device number 5 [ 98.191102][ T5689] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 98.191614][ T5689] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 98.792532][ T5703] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 98.820308][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.822156][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.844852][ T5689] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 98.845202][ T5689] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 98.845545][ T5689] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 98.880988][ T5689] usb 3-1: USB disconnect, device number 6 [ 98.883562][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 98.923954][ T5964] CIFS: bad ip= option (127\0.0.1) [ 98.953982][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.954025][ T5703] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 98.956112][ T5703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.956135][ T5703] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.960566][ T5703] usb 2-1: string descriptor 0 read error: -22 [ 98.960680][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.033989][ T5703] usb 2-1: selecting invalid altsetting 1 [ 99.034605][ T5703] usb 2-1: unit 6 not found! [ 99.097993][ T5966] loop5: detected capacity change from 0 to 7 [ 99.111544][ T5966] Dev loop5: unable to read RDB block 7 [ 99.111581][ T5966] loop5: unable to read partition table [ 99.111765][ T5966] loop5: partition table beyond EOD, truncated [ 99.114685][ T5966] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.147618][ T5966] netlink: 'syz.3.67': attribute type 6 has an invalid length. [ 99.172993][ T5970] FAULT_INJECTION: forcing a failure. [ 99.172993][ T5970] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.173023][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) [ 99.173048][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.173061][ T5970] Call Trace: [ 99.173070][ T5970] [ 99.173079][ T5970] dump_stack_lvl+0xe8/0x150 [ 99.173125][ T5970] should_fail_ex+0x3eb/0x540 [ 99.173152][ T5970] _copy_from_iter+0x3b0/0x1660 [ 99.173194][ T5970] ? __alloc_skb+0x27a/0x7a0 [ 99.173219][ T5970] ? __alloc_skb+0x27a/0x7a0 [ 99.173239][ T5970] ? __pfx__copy_from_iter+0x10/0x10 [ 99.173260][ T5970] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 99.173289][ T5970] ? __alloc_skb+0x27a/0x7a0 [ 99.173306][ T5970] ? __alloc_skb+0x27a/0x7a0 [ 99.173330][ T5970] ? netlink_sendmsg+0x5fa/0xae0 [ 99.173357][ T5970] ? skb_put+0x112/0x210 [ 99.173379][ T5970] netlink_sendmsg+0x667/0xae0 [ 99.173411][ T5970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.173455][ T5970] ? apparmor_socket_sendmsg+0x98/0x360 [ 99.173478][ T5970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.173502][ T5970] sock_sendmsg_nosec+0x13a/0x180 [ 99.173531][ T5970] ____sys_sendmsg+0x54e/0x850 [ 99.173558][ T5970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.173588][ T5970] ? import_iovec+0x73/0xa0 [ 99.173616][ T5970] ___sys_sendmsg+0x2a5/0x360 [ 99.173637][ T5970] ? __lock_acquire+0x747/0x2de0 [ 99.173669][ T5970] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.173722][ T5970] ? __fget_files+0x2a/0x420 [ 99.173746][ T5970] ? __fget_files+0x3a2/0x420 [ 99.173778][ T5970] __x64_sys_sendmsg+0x1b1/0x290 [ 99.173802][ T5970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.173843][ T5970] do_syscall_64+0x166/0x520 [ 99.173881][ T5970] ? trace_irq_disable+0x3b/0x140 [ 99.173911][ T5970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.173932][ T5970] ? clear_bhb_loop+0x70/0xc0 [ 99.173965][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.173985][ T5970] RIP: 0033:0x7f93ad79e159 [ 99.174004][ T5970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.174021][ T5970] RSP: 002b:00007f93ae6ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.174043][ T5970] RAX: ffffffffffffffda RBX: 00007f93ada26090 RCX: 00007f93ad79e159 [ 99.174058][ T5970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 99.174071][ T5970] RBP: 00007f93ae6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 99.174084][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.174096][ T5970] R13: 00007f93ada26128 R14: 00007f93ada26090 R15: 00007fff8c0acfa8 [ 99.174128][ T5970] [ 99.657575][ T5980] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.731024][ T5980] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.803286][ T5980] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.835404][ T5980] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.902159][ T5762] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.946560][ T290] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.976284][ T290] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.000717][ T290] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.001565][ T290] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.056967][ T5762] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 100.057950][ T5762] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 100.057975][ T5762] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 100.057997][ T5762] usb 3-1: config 0 has no interface number 1 [ 100.058048][ T5762] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.058089][ T5762] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 100.068948][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.069026][ T5762] usb 3-1: Product: syz [ 100.069075][ T5762] usb 3-1: Manufacturer: syz [ 100.069124][ T5762] usb 3-1: SerialNumber: syz [ 100.121263][ T5762] usb 3-1: config 0 descriptor?? [ 100.152682][ T5703] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 100.173050][ T5762] usb-storage 3-1:0.127: USB Mass Storage device detected [ 100.214801][ T5762] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 100.284881][ T5762] usb-storage 3-1:0.0: USB Mass Storage device detected [ 100.291604][ T5762] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 100.351566][ T5762] usb 3-1: USB disconnect, device number 7 [ 100.374903][ T5703] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 100.385134][ T5992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.420454][ T5703] usb 2-1: USB disconnect, device number 8 [ 100.683356][ T5702] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.775554][ T6005] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.77'. [ 100.777160][ T6004] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.77'. [ 100.843313][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 100.845591][ T5702] usb 4-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 100.850380][ T5702] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 255, using maximum allowed: 30 [ 100.850417][ T5702] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 144, changing to 11 [ 100.850443][ T5702] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 100.850481][ T5702] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.850511][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.930615][ T5702] usb 4-1: config 0 descriptor?? [ 101.022215][ T6007] sg_write: data in/out 896512/136 bytes for SCSI command 0x0-- guessing data in; [ 101.022215][ T6007] program syz.1.78 not setting count and/or reply_len properly [ 101.424549][ T6024] netlink: 300 bytes leftover after parsing attributes in process `syz.2.83'. [ 101.454716][ T5702] input: HID 150a:1203 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:150A:1203.0003/input/input5 [ 101.493987][ T5702] tivo_slide 0003:150A:1203.0003: input,hidraw0: USB HID v1.00 Joystick [HID 150a:1203] on usb-dummy_hcd.3-1/input0 [ 101.670099][ T5764] usb 4-1: USB disconnect, device number 6 [ 102.057845][ T6045] process 'syz.2.88' launched './file1' with NULL argv: empty string added [ 102.193001][ T5762] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.349181][ T5762] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.349228][ T5762] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 102.362744][ T5762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.362817][ T5762] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.396208][ T5762] usb 2-1: string descriptor 0 read error: -22 [ 102.396339][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.428793][ T5762] usb 2-1: selecting invalid altsetting 1 [ 102.429652][ T5762] usb 2-1: unit 6 not found! [ 102.702238][ T5702] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.850875][ T6061] key id 00000004 not found [ 102.852022][ T5702] usb 1-1: Using ep0 maxpacket: 8 [ 102.863055][ T5702] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 102.875576][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.875599][ T5702] usb 1-1: Product: syz [ 102.875614][ T5702] usb 1-1: Manufacturer: syz [ 102.875627][ T5702] usb 1-1: SerialNumber: syz [ 102.879179][ T5702] usb 1-1: config 0 descriptor?? [ 103.086169][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.090106][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.154243][ T6069] loop4: detected capacity change from 0 to 7 [ 103.157093][ T6069] Dev loop4: unable to read RDB block 7 [ 103.157150][ T6069] loop4: unable to read partition table [ 103.157328][ T6069] loop4: partition table beyond EOD, truncated [ 103.165364][ T6069] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.236302][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 103.236724][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 103.236869][ T5762] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 103.237146][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 103.311997][ T5764] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.341699][ T5762] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 103.351555][ T5762] usb 2-1: USB disconnect, device number 9 [ 103.360304][ T6072] warning: `syz.3.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.442024][ T5764] usb 3-1: device descriptor read/64, error -71 [ 103.570258][ T5702] usb write operation failed. (-71) [ 103.570585][ T5702] usb write operation failed. (-71) [ 103.570602][ T5702] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 103.622034][ T5630] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.640961][ T5702] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 103.640979][ T5702] usb 1-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 103.683387][ T5764] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 103.774802][ T5630] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 103.775733][ T5630] usb 4-1: config 1 has an invalid interface number: 13 but max is 0 [ 103.775756][ T5630] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.775773][ T5630] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 103.775792][ T5630] usb 4-1: config 1 has no interface number 1 [ 103.775851][ T5630] usb 4-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 103.775873][ T5630] usb 4-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.775893][ T5630] usb 4-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.775914][ T5630] usb 4-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 103.775938][ T5630] usb 4-1: config 1 interface 13 has no altsetting 0 [ 103.778800][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.778823][ T5630] usb 4-1: Product: syz [ 103.778836][ T5630] usb 4-1: Manufacturer: syz [ 103.778850][ T5630] usb 4-1: SerialNumber: syz [ 103.826451][ T5630] usb-storage 4-1:1.0: USB Mass Storage device detected [ 103.838705][ T5764] usb 3-1: device descriptor read/64, error -71 [ 103.857322][ T5630] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 103.872572][ T5630] scsi host1: usb-storage 4-1:1.0 [ 103.915024][ T5630] usb-storage 4-1:1.13: USB Mass Storage device detected [ 103.927489][ T5630] usb-storage 4-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 103.944563][ T5764] usb usb3-port1: attempt power cycle [ 104.012794][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.013183][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.283401][ T5764] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 104.302457][ T5764] usb 3-1: device descriptor read/8, error -71 [ 104.542043][ T5764] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 104.562864][ T5764] usb 3-1: device descriptor read/8, error -71 [ 104.665283][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.665804][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.666624][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.667512][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.668052][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.714214][ T25] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 104.722739][ T5764] usb usb3-port1: unable to enumerate USB device [ 104.874480][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.877469][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.877490][ T25] usb 2-1: Product: syz [ 104.877504][ T25] usb 2-1: Manufacturer: syz [ 104.877517][ T25] usb 2-1: SerialNumber: syz [ 104.880456][ T25] usb 2-1: config 0 descriptor?? [ 105.095190][ T25] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.271013][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.271166][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.271341][ T6090] bridge_slave_0: entered allmulticast mode [ 105.294174][ T6090] bridge_slave_0: entered promiscuous mode [ 105.302560][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.302643][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.303049][ T6090] bridge_slave_1: entered allmulticast mode [ 105.304792][ T6090] bridge_slave_1: entered promiscuous mode [ 105.357711][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.360510][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.406187][ T6090] team0: Port device team_slave_0 added [ 105.409193][ T6090] team0: Port device team_slave_1 added [ 105.450662][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.450701][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.450718][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.453242][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.453325][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.453383][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.573594][ T6090] hsr_slave_0: entered promiscuous mode [ 105.574464][ T6090] hsr_slave_1: entered promiscuous mode [ 105.575105][ T6090] debugfs: 'hsr0' already exists in 'hsr' [ 105.575122][ T6090] Cannot create hsr debugfs directory [ 105.749650][ T6090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.800806][ T6090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.869802][ T6090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.954819][ T6090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.072377][ T6090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.080546][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.088904][ T6090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.110030][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.110759][ T6090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.129427][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.131476][ T6090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.156034][ T6090] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.217309][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.217423][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.314369][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.345466][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.368125][ T25] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 106.384185][ T25] usb 2-1: USB disconnect, device number 10 [ 106.398336][ T189] usb 4-1: USB disconnect, device number 7 [ 106.474957][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.481284][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.481388][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.519469][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.519557][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.680301][ T6114] FAULT_INJECTION: forcing a failure. [ 106.680301][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 106.680329][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: syz.2.102 Not tainted syzkaller #0 PREEMPT(full) [ 106.680350][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.680373][ T6114] Call Trace: [ 106.680381][ T6114] [ 106.680389][ T6114] dump_stack_lvl+0xe8/0x150 [ 106.680419][ T6114] should_fail_ex+0x3eb/0x540 [ 106.680446][ T6114] should_failslab+0xa8/0x100 [ 106.680469][ T6114] __kmalloc_noprof+0xf9/0x710 [ 106.680495][ T6114] ? rcu_is_watching+0x16/0xb0 [ 106.680515][ T6114] ? tomoyo_realpath_from_path+0xef/0x640 [ 106.680539][ T6114] ? tomoyo_realpath_from_path+0xef/0x640 [ 106.680570][ T6114] tomoyo_realpath_from_path+0xef/0x640 [ 106.680604][ T6114] ? tomoyo_path_number_perm+0x219/0x5f0 [ 106.680632][ T6114] tomoyo_path_number_perm+0x246/0x5f0 [ 106.680655][ T6114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.680674][ T6114] ? __lock_acquire+0x747/0x2de0 [ 106.680716][ T6114] ? hook_file_ioctl+0x1f2/0x600 [ 106.680754][ T6114] ? __fget_files+0x2a/0x420 [ 106.680781][ T6114] ? __fget_files+0x2a/0x420 [ 106.680804][ T6114] ? __fget_files+0x3a2/0x420 [ 106.680827][ T6114] ? __fget_files+0x2a/0x420 [ 106.680854][ T6114] security_file_ioctl+0xc3/0x2a0 [ 106.680886][ T6114] __se_sys_ioctl+0x47/0x170 [ 106.680919][ T6114] do_syscall_64+0x166/0x520 [ 106.680937][ T6114] ? trace_irq_disable+0x3b/0x140 [ 106.680964][ T6114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.680984][ T6114] ? clear_bhb_loop+0x70/0xc0 [ 106.681008][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.681027][ T6114] RIP: 0033:0x7f4606d9e159 [ 106.681044][ T6114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.681060][ T6114] RSP: 002b:00007f4607b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.681081][ T6114] RAX: ffffffffffffffda RBX: 00007f4607025fa0 RCX: 00007f4606d9e159 [ 106.681095][ T6114] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 106.681107][ T6114] RBP: 00007f4607b98090 R08: 0000000000000000 R09: 0000000000000000 [ 106.681119][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.681129][ T6114] R13: 00007f4607026038 R14: 00007f4607025fa0 R15: 00007ffc814ecef8 [ 106.681160][ T6114] [ 106.681167][ T6114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.723930][ T5615] Bluetooth: hci2: command tx timeout [ 107.082943][ T6126] FAULT_INJECTION: forcing a failure. [ 107.082943][ T6126] name failslab, interval 1, probability 0, space 0, times 0 [ 107.082974][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT(full) [ 107.082998][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.083010][ T6126] Call Trace: [ 107.083018][ T6126] [ 107.083027][ T6126] dump_stack_lvl+0xe8/0x150 [ 107.083061][ T6126] should_fail_ex+0x3eb/0x540 [ 107.083097][ T6126] should_failslab+0xa8/0x100 [ 107.083133][ T6126] __kmalloc_noprof+0xf9/0x710 [ 107.083163][ T6126] ? tnode_new+0xc7/0x3b0 [ 107.083183][ T6126] ? tnode_new+0xc7/0x3b0 [ 107.083211][ T6126] tnode_new+0xc7/0x3b0 [ 107.083237][ T6126] resize+0x787/0x2490 [ 107.083272][ T6126] fib_insert_alias+0xd9a/0x10f0 [ 107.083301][ T6126] fib_table_insert+0x671/0x1b10 [ 107.083334][ T6126] ? ip_rt_ioctl+0x94c/0x1240 [ 107.083358][ T6126] ? fib_new_table+0x14b/0x3f0 [ 107.083387][ T6126] ip_rt_ioctl+0x4da/0x1240 [ 107.083418][ T6126] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 107.083441][ T6126] ? lock_acquire+0x115/0x350 [ 107.083483][ T6126] ? __might_fault+0xaf/0x130 [ 107.083514][ T6126] inet_ioctl+0x49d/0x560 [ 107.083543][ T6126] ? __pfx_inet_ioctl+0x10/0x10 [ 107.083588][ T6126] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 107.083614][ T6126] sock_do_ioctl+0x101/0x320 [ 107.083643][ T6126] ? __pfx_sock_do_ioctl+0x10/0x10 [ 107.083667][ T6126] ? hook_file_ioctl+0x1f2/0x600 [ 107.083704][ T6126] sock_ioctl+0x57a/0x7e0 [ 107.083731][ T6126] ? __pfx_sock_ioctl+0x10/0x10 [ 107.083757][ T6126] ? __fget_files+0x2a/0x420 [ 107.083780][ T6126] ? __fget_files+0x3a2/0x420 [ 107.083804][ T6126] ? __fget_files+0x2a/0x420 [ 107.083831][ T6126] ? bpf_lsm_file_ioctl+0x9/0x20 [ 107.083855][ T6126] ? __pfx_sock_ioctl+0x10/0x10 [ 107.083880][ T6126] __se_sys_ioctl+0xfc/0x170 [ 107.083912][ T6126] do_syscall_64+0x166/0x520 [ 107.083930][ T6126] ? trace_irq_disable+0x3b/0x140 [ 107.083958][ T6126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.083979][ T6126] ? clear_bhb_loop+0x70/0xc0 [ 107.084003][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.084023][ T6126] RIP: 0033:0x7f6061f9e159 [ 107.084041][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.084058][ T6126] RSP: 002b:00007f6062e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.084087][ T6126] RAX: ffffffffffffffda RBX: 00007f6062225fa0 RCX: 00007f6061f9e159 [ 107.084103][ T6126] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 107.084116][ T6126] RBP: 00007f606203506b R08: 0000000000000000 R09: 0000000000000000 [ 107.084129][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.084140][ T6126] R13: 00007f6062226038 R14: 00007f6062225fa0 R15: 00007fff8f7d3ee8 [ 107.084174][ T6126] [ 107.433236][ T1585] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 107.476426][ T6128] CacheFiles: Empty tag specified [ 107.583559][ T1585] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 107.585266][ T1585] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.585363][ T1585] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.585390][ T1585] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.585429][ T1585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.598424][ T6129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.698060][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.712751][ T5630] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.771352][ T6090] veth0_vlan: entered promiscuous mode [ 107.788354][ T6090] veth1_vlan: entered promiscuous mode [ 107.837709][ T6090] veth0_macvtap: entered promiscuous mode [ 107.853174][ T6090] veth1_macvtap: entered promiscuous mode [ 107.868322][ T5630] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.878325][ T5630] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.878347][ T5630] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.897364][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.897472][ T5630] usb 4-1: Product: syz [ 107.897507][ T5630] usb 4-1: Manufacturer: syz [ 107.897538][ T5630] usb 4-1: SerialNumber: syz [ 107.929530][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.949643][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.025159][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.025196][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.025223][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.025277][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.097711][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.097730][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.139498][ T5630] usb 4-1: cannot find UAC_HEADER [ 108.154121][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.154138][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.221003][ T5630] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.230130][ T5630] usb 4-1: USB disconnect, device number 8 [ 108.242037][ T189] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 108.290245][ T6143] syzkaller1: entered promiscuous mode [ 108.290263][ T6143] syzkaller1: entered allmulticast mode [ 108.314509][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.394435][ T189] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.394464][ T189] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 108.395440][ T189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.395454][ T189] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.398157][ T189] usb 3-1: string descriptor 0 read error: -22 [ 108.398238][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.437582][ T189] usb 3-1: selecting invalid altsetting 1 [ 108.439100][ T189] usb 3-1: unit 6 not found! [ 108.802347][ T5615] Bluetooth: hci2: command tx timeout [ 109.024913][ T6152] netlink: 104 bytes leftover after parsing attributes in process `syz.3.110'. [ 109.229572][ T189] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 109.323690][ T189] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 109.326439][ T189] usb 3-1: USB disconnect, device number 12 [ 109.872609][ T5703] kernel read not supported for file 105/task/107/net (pid: 5703 comm: kworker/1:5) [ 109.931666][ T6187] syzkaller1: entered promiscuous mode [ 109.931682][ T6187] syzkaller1: entered allmulticast mode [ 110.033756][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 110.072106][ T5630] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 110.221965][ T5630] usb 3-1: Using ep0 maxpacket: 32 [ 110.222493][ T5630] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 110.223406][ T5630] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 110.223434][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.223450][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.223472][ T5630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.225842][ T5630] usb 3-1: config 0 descriptor?? [ 110.602026][ T5764] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.633588][ T5630] usbhid 3-1:0.0: can't add hid device: -71 [ 110.633716][ T5630] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 110.639116][ T5630] usb 3-1: USB disconnect, device number 13 [ 110.751968][ T5764] usb 4-1: Using ep0 maxpacket: 8 [ 110.752499][ T5764] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 110.753432][ T5764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 110.753459][ T5764] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.753492][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.758649][ T5764] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 110.817181][ T5764] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 110.881972][ T5615] Bluetooth: hci2: command tx timeout [ 111.217390][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.219566][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.243930][ T1585] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 111.244258][ T1585] aiptek 2-1:17.0: probe with driver aiptek failed with error -22 [ 111.251618][ T1585] usb 2-1: USB disconnect, device number 11 [ 111.527076][ T5764] usb 4-1: USB disconnect, device number 9 [ 111.546490][ T5764] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 111.550061][ T5764] kobil_sct 4-1:1.0: device disconnected [ 111.845413][ T5703] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 111.993642][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.993672][ T5703] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 111.994458][ T5703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.994472][ T5703] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.997618][ T5703] usb 2-1: string descriptor 0 read error: -22 [ 111.997731][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.057324][ T5703] usb 2-1: selecting invalid altsetting 1 [ 112.058032][ T5703] usb 2-1: unit 6 not found! [ 112.228441][ T6215] syzkaller1: entered promiscuous mode [ 112.228461][ T6215] syzkaller1: entered allmulticast mode [ 112.811304][ T5703] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 112.867237][ T5703] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 112.869900][ T5703] usb 2-1: USB disconnect, device number 12 [ 112.962503][ T5615] Bluetooth: hci2: command tx timeout [ 113.409682][ T6236] FAULT_INJECTION: forcing a failure. [ 113.409682][ T6236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.409711][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT(full) [ 113.409733][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.409745][ T6236] Call Trace: [ 113.409753][ T6236] [ 113.409761][ T6236] dump_stack_lvl+0xe8/0x150 [ 113.409791][ T6236] should_fail_ex+0x3eb/0x540 [ 113.409818][ T6236] _copy_from_user+0x2d/0xb0 [ 113.409845][ T6236] vlan_ioctl_handler+0xbd/0x630 [ 113.409876][ T6236] ? __pfx___mutex_lock+0x10/0x10 [ 113.409897][ T6236] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 113.409924][ T6236] ? hook_file_ioctl+0x1f2/0x600 [ 113.409959][ T6236] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 113.409987][ T6236] sock_ioctl+0x612/0x7e0 [ 113.410016][ T6236] ? __pfx_sock_ioctl+0x10/0x10 [ 113.410042][ T6236] ? __fget_files+0x2a/0x420 [ 113.410067][ T6236] ? __fget_files+0x3a2/0x420 [ 113.410095][ T6236] ? __fget_files+0x2a/0x420 [ 113.410123][ T6236] ? bpf_lsm_file_ioctl+0x9/0x20 [ 113.410147][ T6236] ? __pfx_sock_ioctl+0x10/0x10 [ 113.410172][ T6236] __se_sys_ioctl+0xfc/0x170 [ 113.410206][ T6236] do_syscall_64+0x166/0x520 [ 113.410225][ T6236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.410245][ T6236] ? clear_bhb_loop+0x70/0xc0 [ 113.410268][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.410288][ T6236] RIP: 0033:0x7f6061f9e159 [ 113.410306][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.410322][ T6236] RSP: 002b:00007f6062e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.410343][ T6236] RAX: ffffffffffffffda RBX: 00007f6062225fa0 RCX: 00007f6061f9e159 [ 113.410357][ T6236] RDX: 0000200000000280 RSI: 0000000000008982 RDI: 0000000000000004 [ 113.410369][ T6236] RBP: 00007f606203506b R08: 0000000000000000 R09: 0000000000000000 [ 113.410382][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.410393][ T6236] R13: 00007f6062226038 R14: 00007f6062225fa0 R15: 00007fff8f7d3ee8 [ 113.410429][ T6236] [ 113.721998][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 113.872662][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 113.873522][ T9] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.873542][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.873558][ T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.873585][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.876989][ T6236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.313727][ T6217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.421455][ T6239] sd 0:0:1:0: PR command failed: 1026 [ 115.421501][ T6239] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 115.421540][ T6239] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 115.441064][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.478633][ T6241] evm: overlay not supported [ 115.684454][ T6247] syzkaller1: entered promiscuous mode [ 115.684480][ T6247] syzkaller1: entered allmulticast mode [ 116.342005][ T5703] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 116.372186][ T6265] FAULT_INJECTION: forcing a failure. [ 116.372186][ T6265] name failslab, interval 1, probability 0, space 0, times 0 [ 116.372229][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.3.147 Not tainted syzkaller #0 PREEMPT(full) [ 116.372266][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.372283][ T6265] Call Trace: [ 116.372290][ T6265] [ 116.372298][ T6265] dump_stack_lvl+0xe8/0x150 [ 116.372342][ T6265] should_fail_ex+0x3eb/0x540 [ 116.372361][ T6265] should_failslab+0xa8/0x100 [ 116.372378][ T6265] __kmalloc_noprof+0xf9/0x710 [ 116.372418][ T6265] ? rcu_is_watching+0x16/0xb0 [ 116.372439][ T6265] ? tomoyo_realpath_from_path+0xef/0x640 [ 116.372464][ T6265] ? tomoyo_realpath_from_path+0xef/0x640 [ 116.372498][ T6265] tomoyo_realpath_from_path+0xef/0x640 [ 116.372523][ T6265] ? tomoyo_path_number_perm+0x219/0x5f0 [ 116.372537][ T6265] tomoyo_path_number_perm+0x246/0x5f0 [ 116.372570][ T6265] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.372592][ T6265] ? __lock_acquire+0x747/0x2de0 [ 116.372633][ T6265] ? hook_file_ioctl+0x1f2/0x600 [ 116.372669][ T6265] ? __fget_files+0x2a/0x420 [ 116.372690][ T6265] ? __fget_files+0x2a/0x420 [ 116.372721][ T6265] ? __fget_files+0x3a2/0x420 [ 116.372746][ T6265] ? __fget_files+0x2a/0x420 [ 116.372774][ T6265] security_file_ioctl+0xc3/0x2a0 [ 116.372808][ T6265] __se_sys_ioctl+0x47/0x170 [ 116.372833][ T6265] do_syscall_64+0x166/0x520 [ 116.372846][ T6265] ? trace_irq_disable+0x3b/0x140 [ 116.372884][ T6265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.372905][ T6265] ? clear_bhb_loop+0x70/0xc0 [ 116.372929][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.372948][ T6265] RIP: 0033:0x7efe1479e159 [ 116.372969][ T6265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.372981][ T6265] RSP: 002b:00007efe156e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.372999][ T6265] RAX: ffffffffffffffda RBX: 00007efe14a25fa0 RCX: 00007efe1479e159 [ 116.373009][ T6265] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 116.373034][ T6265] RBP: 00007efe156e2090 R08: 0000000000000000 R09: 0000000000000000 [ 116.373047][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.373059][ T6265] R13: 00007efe14a26038 R14: 00007efe14a25fa0 R15: 00007ffc1c114388 [ 116.373089][ T6265] [ 116.373097][ T6265] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.500959][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 116.501075][ T5703] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 116.506347][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.506400][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.520447][ T5703] usb 3-1: string descriptor 0 read error: -22 [ 116.521053][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.620420][ T5703] usb 3-1: selecting invalid altsetting 1 [ 116.626972][ T5703] usb 3-1: unit 6 not found! [ 117.042084][ T5764] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 117.192473][ T5764] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 117.193535][ T5764] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 117.193603][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 117.193631][ T5764] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.193652][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 117.193674][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 117.195246][ T5764] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 117.195287][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 117.195313][ T5764] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.195334][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 117.195356][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 117.196299][ T5764] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 117.196339][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 117.196363][ T5764] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.196387][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 117.196409][ T5764] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 117.201391][ T5764] usb 4-1: string descriptor 0 read error: -22 [ 117.201501][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.378028][ T5764] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 117.402076][ T5703] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 117.465005][ T9] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 117.465187][ T9] aiptek 2-1:17.0: probe with driver aiptek failed with error -22 [ 117.468852][ T5703] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 117.471044][ T5703] usb 3-1: USB disconnect, device number 14 [ 117.521486][ T9] usb 2-1: USB disconnect, device number 13 [ 117.557713][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.558262][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.560657][ T5764] usb 4-1: USB disconnect, device number 10 [ 117.903880][ T6277] syzkaller1: entered promiscuous mode [ 117.903901][ T6277] syzkaller1: entered allmulticast mode [ 118.165959][ T6290] use of bytesused == 0 is deprecated and will be removed in the future, [ 118.165976][ T6290] use the actual size instead. [ 118.453651][ T6299] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 118.564456][ T6305] FAULT_INJECTION: forcing a failure. [ 118.564456][ T6305] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.564476][ T6305] CPU: 0 UID: 0 PID: 6305 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 118.564491][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.564499][ T6305] Call Trace: [ 118.564504][ T6305] [ 118.564510][ T6305] dump_stack_lvl+0xe8/0x150 [ 118.564532][ T6305] should_fail_ex+0x3eb/0x540 [ 118.564551][ T6305] get_futex_key+0x1b4/0x1580 [ 118.564583][ T6305] ? __pfx_get_futex_key+0x10/0x10 [ 118.564608][ T6305] ? __rtnl_unlock+0xc3/0xe0 [ 118.564629][ T6305] futex_wake+0x119/0x5f0 [ 118.564646][ T6305] ? __pfx_netdev_run_todo+0x10/0x10 [ 118.564665][ T6305] ? __pfx_futex_wake+0x10/0x10 [ 118.564684][ T6305] ? sock_ioctl+0x636/0x7e0 [ 118.564704][ T6305] ? __mutex_unlock_slowpath+0x731/0x900 [ 118.564720][ T6305] do_futex+0x458/0x4e0 [ 118.564738][ T6305] ? __pfx_do_futex+0x10/0x10 [ 118.564758][ T6305] __se_sys_futex+0x3a8/0x450 [ 118.564775][ T6305] ? __fget_files+0x2a/0x420 [ 118.564793][ T6305] ? __pfx___se_sys_futex+0x10/0x10 [ 118.564806][ T6305] ? __fget_files+0x2a/0x420 [ 118.564828][ T6305] ? __x64_sys_futex+0x21/0xf0 [ 118.564844][ T6305] do_syscall_64+0x166/0x520 [ 118.564856][ T6305] ? trace_irq_disable+0x3b/0x140 [ 118.564875][ T6305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.564889][ T6305] ? clear_bhb_loop+0x70/0xc0 [ 118.564906][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.564919][ T6305] RIP: 0033:0x7f6061f9e159 [ 118.564931][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.564944][ T6305] RSP: 002b:00007f6062e8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.564960][ T6305] RAX: ffffffffffffffda RBX: 00007f6062225fa8 RCX: 00007f6061f9e159 [ 118.564969][ T6305] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6062225fac [ 118.564978][ T6305] RBP: 00007f6062225fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 118.564987][ T6305] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 118.564996][ T6305] R13: 00007f6062226038 R14: 00007fff8f7d3e00 R15: 00007fff8f7d3ee8 [ 118.565016][ T6305] [ 118.852895][ T189] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 118.949856][ T6315] trusted_key: encrypted_key: keyword 'updateú¶®#‚ðÄÀ' not recognized [ 119.012451][ T189] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 119.013328][ T189] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.013346][ T189] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.013362][ T189] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.013386][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.016225][ T6305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.132548][ T5764] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 119.191988][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 119.283948][ T5764] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 119.284970][ T5764] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.285003][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.287412][ T5764] usb 4-1: config 0 descriptor?? [ 119.342677][ T9] usb 3-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 119.343751][ T9] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 119.343780][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 119.345971][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.345994][ T9] usb 3-1: Product: syz [ 119.346013][ T9] usb 3-1: Manufacturer: syz [ 119.346046][ T9] usb 3-1: SerialNumber: syz [ 119.351836][ T6314] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 119.559716][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.560174][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.696091][ T5764] hid_parser_main: 1204 callbacks suppressed [ 119.696111][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696161][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696186][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696209][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696233][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696256][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696311][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696335][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696359][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.696382][ T5764] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 119.699475][ T5764] hid-u2fzero 0003:20A0:4287.0004: hidraw0: USB HID v0.02 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 119.739403][ T5764] hid-u2fzero 0003:20A0:4287.0004: NitroKey U2F LED initialised [ 119.739727][ T5764] hid-u2fzero 0003:20A0:4287.0004: NitroKey U2F RNG initialised [ 119.788335][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 119.788557][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 119.833325][ T9] usb 3-1: USB disconnect, device number 15 [ 119.899996][ T1585] usb 4-1: USB disconnect, device number 11 [ 122.461995][ T5764] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 122.594939][ T189] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 122.595074][ T189] aiptek 2-1:17.0: probe with driver aiptek failed with error -22 [ 122.597381][ T189] usb 2-1: USB disconnect, device number 14 [ 122.612110][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 122.616412][ T5764] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 122.618978][ T5764] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 122.619004][ T5764] usb 4-1: config 0 has no interface number 0 [ 122.619176][ T5764] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.619212][ T5764] usb 4-1: config 0 interface 85 has no altsetting 0 [ 122.637338][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.637397][ T5764] usb 4-1: Product: syz [ 122.637434][ T5764] usb 4-1: Manufacturer: syz [ 122.637472][ T5764] usb 4-1: SerialNumber: syz [ 122.674520][ T5764] usb 4-1: config 0 descriptor?? [ 122.947582][ T6355] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 122.947596][ T6355] netlink: 48 bytes leftover after parsing attributes in process `syz.1.171'. [ 123.091605][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.096447][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.101352][ T5764] appletouch 4-1:0.85: Geyser mode initialized. [ 123.116276][ T5764] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input9 [ 123.305565][ T5764] usb 4-1: USB disconnect, device number 12 [ 123.331574][ T5764] appletouch 4-1:0.85: input: appletouch disconnected [ 123.472857][ T6327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.867601][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.868030][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.902601][ T5717] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 124.007671][ T6385] FAULT_INJECTION: forcing a failure. [ 124.007671][ T6385] name fail_futex, interval 1, probability 0, space 0, times 0 [ 124.007690][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.1.180 Not tainted syzkaller #0 PREEMPT(full) [ 124.007704][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.007713][ T6385] Call Trace: [ 124.007718][ T6385] [ 124.007723][ T6385] dump_stack_lvl+0xe8/0x150 [ 124.007748][ T6385] should_fail_ex+0x3eb/0x540 [ 124.007767][ T6385] get_futex_key+0x1b4/0x1580 [ 124.007796][ T6385] ? __pfx_get_futex_key+0x10/0x10 [ 124.007820][ T6385] ? __rtnl_unlock+0xc3/0xe0 [ 124.007841][ T6385] futex_wake+0x119/0x5f0 [ 124.007858][ T6385] ? __pfx_netdev_run_todo+0x10/0x10 [ 124.007877][ T6385] ? __pfx_futex_wake+0x10/0x10 [ 124.007896][ T6385] ? sock_ioctl+0x636/0x7e0 [ 124.007916][ T6385] ? __mutex_unlock_slowpath+0x731/0x900 [ 124.007932][ T6385] do_futex+0x458/0x4e0 [ 124.007949][ T6385] ? __pfx_do_futex+0x10/0x10 [ 124.007969][ T6385] __se_sys_futex+0x3a8/0x450 [ 124.007986][ T6385] ? __fget_files+0x2a/0x420 [ 124.008004][ T6385] ? __pfx___se_sys_futex+0x10/0x10 [ 124.008017][ T6385] ? __fget_files+0x2a/0x420 [ 124.008039][ T6385] ? __x64_sys_futex+0x21/0xf0 [ 124.008055][ T6385] do_syscall_64+0x166/0x520 [ 124.008067][ T6385] ? trace_irq_disable+0x3b/0x140 [ 124.008086][ T6385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.008101][ T6385] ? clear_bhb_loop+0x70/0xc0 [ 124.008117][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.008131][ T6385] RIP: 0033:0x7f6061f9e159 [ 124.008143][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.008154][ T6385] RSP: 002b:00007f6062e8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.008168][ T6385] RAX: ffffffffffffffda RBX: 00007f6062225fa8 RCX: 00007f6061f9e159 [ 124.008177][ T6385] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6062225fac [ 124.008186][ T6385] RBP: 00007f6062225fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 124.008195][ T6385] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 124.008203][ T6385] R13: 00007f6062226038 R14: 00007fff8f7d3e00 R15: 00007fff8f7d3ee8 [ 124.008223][ T6385] [ 124.102145][ T5764] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 124.250718][ T5717] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.250761][ T5717] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 124.269072][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.269094][ T5717] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.271869][ T5717] usb 3-1: string descriptor 0 read error: -22 [ 124.272056][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.313621][ T5717] usb 3-1: selecting invalid altsetting 1 [ 124.314270][ T5717] usb 3-1: unit 6 not found! [ 124.332151][ T189] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 124.484248][ T189] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 124.485633][ T189] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.485664][ T189] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.485691][ T189] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.485735][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.489917][ T6385] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 125.150975][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 125.154200][ T5717] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 125.237802][ T5717] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.245739][ T5717] usb 3-1: USB disconnect, device number 16 [ 125.532023][ T5764] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 125.684005][ T5764] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 125.685219][ T5764] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 125.685243][ T5764] usb 4-1: config 1 has no interface number 0 [ 125.685284][ T5764] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 125.691259][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.691285][ T5764] usb 4-1: Product: syz [ 125.691300][ T5764] usb 4-1: Manufacturer: syz [ 125.691316][ T5764] usb 4-1: SerialNumber: syz [ 125.760138][ T6405] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.770870][ T5764] usb 4-1: Error in usbnet_get_endpoints (-22) [ 125.846412][ T6410] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 125.956113][ T6410] netlink: 'syz.2.188': attribute type 4 has an invalid length. [ 125.956131][ T6410] netlink: 152 bytes leftover after parsing attributes in process `syz.2.188'. [ 125.968575][ T6410] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 126.272009][ T5717] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 126.421996][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 126.422892][ T5717] usb 3-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 126.423910][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.423933][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.423987][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.426972][ T5717] usb 3-1: config 0 descriptor?? [ 126.702405][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.703078][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.837699][ T5717] hid_parser_main: 14 callbacks suppressed [ 126.837723][ T5717] thrustmaster 0003:044F:B654.0005: unknown main item tag 0x0 [ 126.839785][ T5717] thrustmaster 0003:044F:B654.0005: force feedback for ThrustMaster devices by Zinx Verituse [ 126.843416][ T5717] input: HID 044f:b654 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:044F:B654.0005/input/input11 [ 126.917557][ T5717] thrustmaster 0003:044F:B654.0005: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b654] on usb-dummy_hcd.2-1/input0 [ 127.098670][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.100626][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.540809][ T1585] usb 3-1: USB disconnect, device number 17 [ 128.084840][ T189] aiptek 2-1:17.0: Aiptek tried all speeds, no sane response [ 128.085045][ T189] aiptek 2-1:17.0: probe with driver aiptek failed with error -22 [ 128.091225][ T189] usb 2-1: USB disconnect, device number 15 [ 128.369841][ T1585] usb 4-1: USB disconnect, device number 14 [ 128.592103][ T5717] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 128.744891][ T5717] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.744947][ T5717] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f90, bcdDevice=a5.ec [ 128.746276][ T5717] usb 3-1: config 6 has an invalid interface number: 226 but max is 0 [ 128.746302][ T5717] usb 3-1: config 6 has no interface number 0 [ 128.746355][ T5717] usb 3-1: config 6 interface 226 altsetting 129 endpoint 0x9 has invalid maxpacket 1088, setting to 64 [ 128.746382][ T5717] usb 3-1: config 6 interface 226 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 128.746404][ T5717] usb 3-1: config 6 interface 226 altsetting 129 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 128.746422][ T5717] usb 3-1: config 6 interface 226 altsetting 129 endpoint 0x81 has invalid maxpacket 41644, setting to 1024 [ 128.746441][ T5717] usb 3-1: config 6 interface 226 altsetting 129 bulk endpoint 0x81 has invalid maxpacket 1024 [ 128.746464][ T5717] usb 3-1: config 6 interface 226 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.746483][ T5717] usb 3-1: config 6 interface 226 has no altsetting 0 [ 128.747658][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.747711][ T5717] usb 3-1: SerialNumber: syz [ 128.777124][ T6419] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 129.000166][ T5717] dvb-usb: found a 'DiBcom STK807xP reference design' in warm state. [ 129.013936][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.014684][ T5717] dvbdev: DVB: registering new adapter (DiBcom STK807xP reference design) [ 129.014724][ T5717] usb 3-1: media controller created [ 129.048789][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.097366][ T5717] DVB: Unable to find symbol dib8000_attach() [ 129.097384][ T5717] dvb-usb: no frontend was attached by 'DiBcom STK807xP reference design' [ 129.123035][ T1585] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 129.171992][ T5717] rc_core: IR keymap rc-dib0700-nec not found [ 129.172010][ T5717] Registered IR keymap rc-empty [ 129.172700][ T5717] dvb-usb: could not initialize remote control. [ 129.172708][ T5717] dvb-usb: DiBcom STK807xP reference design successfully initialized and connected. [ 129.293178][ T1585] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 129.294045][ T1585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.414562][ T5717] usb 3-1: USB disconnect, device number 18 [ 129.455784][ T5717] dvb-usb: DiBcom STK807xP reference design successfully deinitialized and disconnected. [ 129.500214][ T1585] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 130.040054][ T6442] netlink: 176 bytes leftover after parsing attributes in process `syz.2.197'. [ 130.122031][ T5762] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 130.271961][ T5762] usb 2-1: Using ep0 maxpacket: 16 [ 130.272624][ T5762] usb 2-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=c5.7a [ 130.275116][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.275132][ T5762] usb 2-1: Product: syz [ 130.275142][ T5762] usb 2-1: Manufacturer: syz [ 130.275151][ T5762] usb 2-1: SerialNumber: syz [ 130.331995][ T1585] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 130.482001][ T1585] usb 3-1: Using ep0 maxpacket: 32 [ 130.482831][ T1585] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 130.485711][ T1585] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 130.485755][ T1585] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.485782][ T1585] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.485818][ T1585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.491848][ T1585] usb 3-1: config 0 descriptor?? [ 130.493330][ T5762] plfxlc 2-1:251.0: Firmware Version: 0 [ 130.493465][ T5762] plfxlc 2-1:251.0: Unit type is station [ 130.822027][ T5762] plfxlc 2-1:251.0: vendor command failed (-71) [ 130.822056][ T5762] plfxlc 2-1:251.0: FPGA download failed (-22) [ 130.887381][ T5762] plfxlc 2-1:251.0: pureLifi:Device error [ 130.887416][ T5762] plfxlc 2-1:251.0: probe with driver plfxlc failed with error -22 [ 130.909438][ T5762] usb 2-1: USB disconnect, device number 16 [ 130.981041][ T6445] syz.2.198 (6445) used obsolete PPPIOCDETACH ioctl [ 130.996265][ T1585] logitech 0003:046D:C24F.0006: unknown main item tag 0x2 [ 130.996302][ T1585] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 130.997915][ T1585] logitech 0003:046D:C24F.0006: unknown main item tag 0x0 [ 131.017251][ T1585] input: HID 046d:c24f as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C24F.0006/input/input13 [ 131.084122][ T1585] logitech 0003:046D:C24F.0006: offset (39) exceeds report_count (19) [ 131.084246][ T1585] logitech 0003:046D:C24F.0006: offset (25) exceeds report_count (19) [ 131.244049][ T1585] logitech 0003:046D:C24F.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c24f] on usb-dummy_hcd.2-1/input0 [ 131.244584][ T1585] logitech 0003:046D:C24F.0006: implement() called with too large value 245 (n: 0)! (kworker/1:2) [ 131.248925][ T1585] logitech 0003:046D:C24F.0006: implement() called with too large value 248 (n: 0)! (kworker/1:2) [ 131.248953][ T1585] logitech 0003:046D:C24F.0006: implement() called with too large value 129 (n: 0)! (kworker/1:2) [ 131.248974][ T1585] logitech 0003:046D:C24F.0006: implement() called with too large value 132 (n: 0)! (kworker/1:2) [ 131.249018][ T1585] logitech 0003:046D:C24F.0006: implement() called with too large value 3 (n: 0)! (kworker/1:2) [ 131.249169][ T1585] logitech 0003:046D:C24F.0006: implement() called with too large value 248 (n: 0)! (kworker/1:2) [ 131.249192][ T1585] logitech 0003:046D:C24F.0006: implement() called with too large value 18 (n: 0)! (kworker/1:2) [ 131.270763][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.277731][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.435430][ T1585] logitech 0003:046D:C24F.0006: Force feedback support for Logitech Gaming Wheels [ 131.454853][ T1585] usb 3-1: USB disconnect, device number 19 [ 131.481986][ T5762] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 131.509656][ T6453] fido_id[6453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 131.632048][ T5762] usb 2-1: Invalid ep0 maxpacket: 16 [ 131.762136][ T5762] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 131.768324][ T189] usb 4-1: USB disconnect, device number 15 [ 131.853870][ T6462] FAULT_INJECTION: forcing a failure. [ 131.853870][ T6462] name failslab, interval 1, probability 0, space 0, times 0 [ 131.853903][ T6462] CPU: 0 UID: 0 PID: 6462 Comm: syz.3.202 Not tainted syzkaller #0 PREEMPT(full) [ 131.853947][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.853966][ T6462] Call Trace: [ 131.853975][ T6462] [ 131.853985][ T6462] dump_stack_lvl+0xe8/0x150 [ 131.854022][ T6462] should_fail_ex+0x3eb/0x540 [ 131.854056][ T6462] should_failslab+0xa8/0x100 [ 131.854084][ T6462] __kmalloc_noprof+0xf9/0x710 [ 131.854119][ T6462] ? tnode_new+0xc7/0x3b0 [ 131.854144][ T6462] ? tnode_new+0xc7/0x3b0 [ 131.854177][ T6462] tnode_new+0xc7/0x3b0 [ 131.854206][ T6462] resize+0x787/0x2490 [ 131.854248][ T6462] fib_insert_alias+0xd9a/0x10f0 [ 131.854284][ T6462] fib_table_insert+0x671/0x1b10 [ 131.854323][ T6462] ? ip_rt_ioctl+0x94c/0x1240 [ 131.854350][ T6462] ? fib_new_table+0x14b/0x3f0 [ 131.854383][ T6462] ip_rt_ioctl+0x4da/0x1240 [ 131.854420][ T6462] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 131.854446][ T6462] ? lock_acquire+0x115/0x350 [ 131.854496][ T6462] ? __might_fault+0xaf/0x130 [ 131.854533][ T6462] inet_ioctl+0x49d/0x560 [ 131.854567][ T6462] ? __pfx_inet_ioctl+0x10/0x10 [ 131.854631][ T6462] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.854675][ T6462] sock_do_ioctl+0x101/0x320 [ 131.854729][ T6462] ? __pfx_sock_do_ioctl+0x10/0x10 [ 131.854758][ T6462] ? hook_file_ioctl+0x1f2/0x600 [ 131.854801][ T6462] sock_ioctl+0x57a/0x7e0 [ 131.854834][ T6462] ? __pfx_sock_ioctl+0x10/0x10 [ 131.854876][ T6462] ? __fget_files+0x2a/0x420 [ 131.854904][ T6462] ? __fget_files+0x3a2/0x420 [ 131.854932][ T6462] ? __fget_files+0x2a/0x420 [ 131.854963][ T6462] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.855008][ T6462] ? __pfx_sock_ioctl+0x10/0x10 [ 131.855039][ T6462] __se_sys_ioctl+0xfc/0x170 [ 131.855077][ T6462] do_syscall_64+0x166/0x520 [ 131.855098][ T6462] ? trace_irq_disable+0x3b/0x140 [ 131.855130][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.855153][ T6462] ? clear_bhb_loop+0x70/0xc0 [ 131.855182][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.855205][ T6462] RIP: 0033:0x7efe1479e159 [ 131.855226][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.855245][ T6462] RSP: 002b:00007efe156e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.855270][ T6462] RAX: ffffffffffffffda RBX: 00007efe14a25fa0 RCX: 00007efe1479e159 [ 131.855287][ T6462] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 131.855301][ T6462] RBP: 00007efe1483506b R08: 0000000000000000 R09: 0000000000000000 [ 131.855316][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.855329][ T6462] R13: 00007efe14a26038 R14: 00007efe14a25fa0 R15: 00007ffc1c114388 [ 131.855366][ T6462] [ 131.957193][ T5762] usb 2-1: Invalid ep0 maxpacket: 16 [ 131.962327][ T5762] usb usb2-port1: attempt power cycle [ 132.301987][ T189] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 132.411997][ T5762] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 132.433854][ T5762] usb 2-1: Invalid ep0 maxpacket: 16 [ 132.452584][ T189] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 132.453592][ T189] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.453620][ T189] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.453645][ T189] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.453686][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.458206][ T6463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.572115][ T5762] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 132.592723][ T5762] usb 2-1: Invalid ep0 maxpacket: 16 [ 132.593047][ T5762] usb usb2-port1: unable to enumerate USB device [ 132.662055][ T1585] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 132.811974][ T1585] usb 3-1: Using ep0 maxpacket: 32 [ 132.814735][ T1585] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.814788][ T1585] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 132.815769][ T1585] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 132.815787][ T1585] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 132.815855][ T1585] usb 3-1: config 14 has no interface number 0 [ 132.815873][ T1585] usb 3-1: config 14 has no interface number 1 [ 132.815940][ T1585] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 132.815975][ T1585] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 132.816002][ T1585] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 132.816032][ T1585] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 132.816061][ T1585] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 132.816087][ T1585] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.816118][ T1585] usb 3-1: config 14 interface 57 has no altsetting 0 [ 132.816147][ T1585] usb 3-1: config 14 interface 228 has no altsetting 0 [ 132.818260][ T1585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.818290][ T1585] usb 3-1: Product: syz [ 132.818301][ T1585] usb 3-1: Manufacturer: syz [ 132.818312][ T1585] usb 3-1: SerialNumber: syz [ 132.983305][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.986148][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.231513][ T1585] legousbtower 3-1:14.57: interrupt endpoints not found [ 133.633030][ T1585] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 133.638590][ T1585] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 134.398000][ T1585] usb 3-1: USB disconnect, device number 20 [ 134.433336][ T1585] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 134.582246][ T5762] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 134.732101][ T5762] usb 2-1: Using ep0 maxpacket: 8 [ 134.732588][ T5762] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.733488][ T5762] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 134.733522][ T5762] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.733536][ T5762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.733552][ T5762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.733566][ T5762] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.733593][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.945071][ T5762] usb 2-1: usb_control_msg returned -32 [ 134.945122][ T5762] usbtmc 2-1:16.0: can't read capabilities [ 135.149308][ T5762] usb 2-1: USB disconnect, device number 21 [ 135.262021][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 135.412571][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 135.415762][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.415788][ T9] usb 3-1: Product: syz [ 135.415803][ T9] usb 3-1: Manufacturer: syz [ 135.415817][ T9] usb 3-1: SerialNumber: syz [ 135.418057][ T9] usb 3-1: config 0 descriptor?? [ 135.625808][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 136.054138][ T189] aiptek 4-1:17.0: Aiptek tried all speeds, no sane response [ 136.054309][ T189] aiptek 4-1:17.0: probe with driver aiptek failed with error -22 [ 136.057671][ T189] usb 4-1: USB disconnect, device number 16 [ 136.142918][ T5762] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 136.292074][ T5762] usb 2-1: Using ep0 maxpacket: 32 [ 136.294161][ T5762] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.294211][ T5762] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 136.295341][ T5762] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 136.295366][ T5762] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 136.295388][ T5762] usb 2-1: config 14 has no interface number 0 [ 136.295439][ T5762] usb 2-1: config 14 has no interface number 1 [ 136.295483][ T5762] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 136.295501][ T5762] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 136.295518][ T5762] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 136.295537][ T5762] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 136.295556][ T5762] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 136.295595][ T5762] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.295614][ T5762] usb 2-1: config 14 interface 57 has no altsetting 0 [ 136.295630][ T5762] usb 2-1: config 14 interface 228 has no altsetting 0 [ 136.298049][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.298074][ T5762] usb 2-1: Product: syz [ 136.298089][ T5762] usb 2-1: Manufacturer: syz [ 136.298134][ T5762] usb 2-1: SerialNumber: syz [ 136.515533][ T6486] jffs2: notice: (6486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.797445][ T6484] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 136.797462][ T6484] netlink: 232 bytes leftover after parsing attributes in process `syz.1.210'. [ 136.797515][ T6484] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 136.799538][ T5762] legousbtower 2-1:14.57: interrupt endpoints not found [ 136.853295][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 136.856052][ T9] usb 3-1: USB disconnect, device number 21 [ 136.962302][ T5689] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 137.114311][ T5689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.114765][ T5689] usb 4-1: not running at top speed; connect to a high speed hub [ 137.114786][ T5689] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 137.115655][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.115672][ T5689] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.115702][ T5689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25104, setting to 64 [ 137.116986][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 137.117001][ T5689] usb 4-1: Product: syz [ 137.117028][ T5689] usb 4-1: Manufacturer: syz [ 137.120561][ T6494] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.130686][ T5689] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 137.130770][ T5689] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 137.221364][ T5762] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 137.235528][ T5762] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 137.323704][ T5703] usb 4-1: USB disconnect, device number 17 [ 137.536698][ T31] audit: type=1326 audit(1790276682.051:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.537379][ T31] audit: type=1326 audit(1790276682.051:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.537812][ T31] audit: type=1326 audit(1790276682.051:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.537853][ T31] audit: type=1326 audit(1790276682.051:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.537892][ T31] audit: type=1326 audit(1790276682.051:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.538422][ T31] audit: type=1326 audit(1790276682.051:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.538556][ T31] audit: type=1326 audit(1790276682.051:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.538687][ T31] audit: type=1326 audit(1790276682.051:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.538729][ T31] audit: type=1326 audit(1790276682.051:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.538987][ T31] audit: type=1326 audit(1790276682.051:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6500 comm="syz.0.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812659e159 code=0x7ffc0000 [ 137.995025][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 138.015964][ T5689] usb 2-1: USB disconnect, device number 22 [ 138.049050][ T5689] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 138.230466][ T6519] FAULT_INJECTION: forcing a failure. [ 138.230466][ T6519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.230500][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.3.220 Not tainted syzkaller #0 PREEMPT(full) [ 138.230525][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.230539][ T6519] Call Trace: [ 138.230548][ T6519] [ 138.230558][ T6519] dump_stack_lvl+0xe8/0x150 [ 138.230610][ T6519] should_fail_ex+0x3eb/0x540 [ 138.230643][ T6519] _copy_from_user+0x2d/0xb0 [ 138.230675][ T6519] vlan_ioctl_handler+0xbd/0x630 [ 138.230713][ T6519] ? __pfx___mutex_lock+0x10/0x10 [ 138.230738][ T6519] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 138.230771][ T6519] ? hook_file_ioctl+0x1f2/0x600 [ 138.230811][ T6519] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 138.230846][ T6519] sock_ioctl+0x612/0x7e0 [ 138.230899][ T6519] ? __pfx_sock_ioctl+0x10/0x10 [ 138.230928][ T6519] ? __fget_files+0x2a/0x420 [ 138.230957][ T6519] ? __fget_files+0x3a2/0x420 [ 138.230983][ T6519] ? __fget_files+0x2a/0x420 [ 138.231015][ T6519] ? bpf_lsm_file_ioctl+0x9/0x20 [ 138.231044][ T6519] ? __pfx_sock_ioctl+0x10/0x10 [ 138.231072][ T6519] __se_sys_ioctl+0xfc/0x170 [ 138.231109][ T6519] do_syscall_64+0x166/0x520 [ 138.231130][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.231153][ T6519] ? clear_bhb_loop+0x70/0xc0 [ 138.231181][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.231204][ T6519] RIP: 0033:0x7efe1479e159 [ 138.231225][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.231243][ T6519] RSP: 002b:00007efe156e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.231267][ T6519] RAX: ffffffffffffffda RBX: 00007efe14a25fa0 RCX: 00007efe1479e159 [ 138.231284][ T6519] RDX: 0000200000000280 RSI: 0000000000008982 RDI: 0000000000000004 [ 138.231299][ T6519] RBP: 00007efe1483506b R08: 0000000000000000 R09: 0000000000000000 [ 138.231313][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.231326][ T6519] R13: 00007efe14a26038 R14: 00007efe14a25fa0 R15: 00007ffc1c114388 [ 138.231361][ T6519] [ 138.592054][ T1585] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 138.742060][ T5689] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 138.743649][ T1585] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 138.745266][ T1585] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.745298][ T1585] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.745336][ T1585] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.745382][ T1585] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.750505][ T6519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.904345][ T5689] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 138.910861][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.910888][ T5689] usb 3-1: Product: syz [ 138.910903][ T5689] usb 3-1: Manufacturer: syz [ 138.910918][ T5689] usb 3-1: SerialNumber: syz [ 138.951414][ T5689] usb 3-1: config 0 descriptor?? [ 139.174935][ T5689] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.260235][ T6534] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.225'. [ 139.260599][ T6533] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.225'. [ 139.756732][ T6539] dlm: non-version read from control device 3421 [ 139.910386][ T6543] rust_binder: 6542:6543 error while translating object: EINVAL [ 139.910519][ T6543] rust_binder: Failure in copy_transaction_data: EINVAL [ 139.910553][ T6543] rust_binder: 6542:6543 transaction call to 6542:0 failed EINVAL, code 0 size 120-24 [ 139.920658][ T5762] rust_binder: 6542: undelivered TRANSACTION_ERROR: 29201 [ 140.164568][ T6552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.367392][ T6552] afs: Bad value for 'source' [ 140.393659][ T5689] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 140.419557][ T5689] usb 3-1: USB disconnect, device number 22 [ 140.430735][ T6552] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 141.309785][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 141.372194][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 141.498396][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035092800: rx timeout, send abort [ 141.510293][ T25] usb 2-1: device descriptor read/64, error -71 [ 141.742125][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 141.872075][ T25] usb 2-1: device descriptor read/64, error -71 [ 141.982470][ T25] usb usb2-port1: attempt power cycle [ 141.998536][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027187c00: rx timeout, send abort [ 141.999504][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035092800: abort rx timeout. Force session deactivation [ 142.302013][ T5703] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 142.322108][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 142.342763][ T25] usb 2-1: device descriptor read/8, error -71 [ 142.344485][ T1585] aiptek 4-1:17.0: Aiptek tried all speeds, no sane response [ 142.344633][ T1585] aiptek 4-1:17.0: probe with driver aiptek failed with error -22 [ 142.347451][ T1585] usb 4-1: USB disconnect, device number 18 [ 142.442307][ T5703] usb 3-1: device descriptor read/64, error -71 [ 142.498589][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027187c00: abort rx timeout. Force session deactivation [ 142.582062][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 142.606685][ T25] usb 2-1: device descriptor read/8, error -71 [ 142.682030][ T5703] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 142.712479][ T25] usb usb2-port1: unable to enumerate USB device [ 142.812022][ T5703] usb 3-1: device descriptor read/64, error -71 [ 142.922298][ T5703] usb usb3-port1: attempt power cycle [ 142.962183][ T25] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 143.123146][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.126356][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.126382][ T25] usb 4-1: Product: syz [ 143.126397][ T25] usb 4-1: Manufacturer: syz [ 143.126412][ T25] usb 4-1: SerialNumber: syz [ 143.128835][ T25] usb 4-1: config 0 descriptor?? [ 143.282052][ T5703] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 143.313524][ T5703] usb 3-1: device descriptor read/8, error -71 [ 143.336452][ T25] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.552029][ T5703] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 143.572702][ T5703] usb 3-1: device descriptor read/8, error -71 [ 143.682600][ T5703] usb usb3-port1: unable to enumerate USB device [ 144.555240][ T25] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 144.559720][ T25] usb 4-1: USB disconnect, device number 19 [ 145.031997][ T5689] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 145.203593][ T5689] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 145.204664][ T5689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.204742][ T5689] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.204782][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.206939][ T5689] usb 2-1: config 0 descriptor?? [ 145.416965][ T5689] usb 2-1: string descriptor 0 read error: -71 [ 145.418769][ T5689] usb 2-1: USB disconnect, device number 27 [ 145.492885][ T5762] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 145.643263][ T5762] usb 3-1: Using ep0 maxpacket: 16 [ 145.647281][ T5762] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.647337][ T5762] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 145.650397][ T5762] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.650473][ T5762] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 145.650515][ T5762] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.662646][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.662732][ T5762] usb 3-1: Product: syz [ 145.662776][ T5762] usb 3-1: Manufacturer: syz [ 145.662821][ T5762] usb 3-1: SerialNumber: syz [ 145.777100][ T6608] FAULT_INJECTION: forcing a failure. [ 145.777100][ T6608] name failslab, interval 1, probability 0, space 0, times 0 [ 145.777150][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.0.251 Not tainted syzkaller #0 PREEMPT(full) [ 145.777186][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.777202][ T6608] Call Trace: [ 145.777211][ T6608] [ 145.777224][ T6608] dump_stack_lvl+0xe8/0x150 [ 145.777259][ T6608] should_fail_ex+0x3eb/0x540 [ 145.777292][ T6608] should_failslab+0xa8/0x100 [ 145.777312][ T6608] __kvmalloc_node_noprof+0x171/0x820 [ 145.777357][ T6608] ? lock_acquire+0x115/0x350 [ 145.777403][ T6608] ? net_generic+0x1e/0x240 [ 145.777440][ T6608] ? alloc_netdev_mqs+0xa9/0x12a0 [ 145.777464][ T6608] ? alloc_netdev_mqs+0xa9/0x12a0 [ 145.777506][ T6608] alloc_netdev_mqs+0xa9/0x12a0 [ 145.777539][ T6608] ? __pfx_vlan_setup+0x10/0x10 [ 145.777576][ T6608] register_vlan_device+0x235/0x4b0 [ 145.777614][ T6608] ? __pfx_register_vlan_device+0x10/0x10 [ 145.777683][ T6608] ? security_capable+0x7e/0x2c0 [ 145.777719][ T6608] vlan_ioctl_handler+0x248/0x630 [ 145.777753][ T6608] ? __pfx___mutex_lock+0x10/0x10 [ 145.777775][ T6608] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 145.777798][ T6608] ? hook_file_ioctl+0x1f2/0x600 [ 145.777847][ T6608] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 145.777882][ T6608] sock_ioctl+0x612/0x7e0 [ 145.777919][ T6608] ? __pfx_sock_ioctl+0x10/0x10 [ 145.777941][ T6608] ? __fget_files+0x2a/0x420 [ 145.777961][ T6608] ? __fget_files+0x3a2/0x420 [ 145.777999][ T6608] ? __fget_files+0x2a/0x420 [ 145.778031][ T6608] ? bpf_lsm_file_ioctl+0x9/0x20 [ 145.778059][ T6608] ? __pfx_sock_ioctl+0x10/0x10 [ 145.778089][ T6608] __se_sys_ioctl+0xfc/0x170 [ 145.778120][ T6608] do_syscall_64+0x166/0x520 [ 145.778154][ T6608] ? trace_irq_disable+0x3b/0x140 [ 145.778188][ T6608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.778211][ T6608] ? clear_bhb_loop+0x70/0xc0 [ 145.778243][ T6608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.778260][ T6608] RIP: 0033:0x7f812659e159 [ 145.778275][ T6608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.778305][ T6608] RSP: 002b:00007f812753b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.778332][ T6608] RAX: ffffffffffffffda RBX: 00007f8126825fa0 RCX: 00007f812659e159 [ 145.778349][ T6608] RDX: 0000200000000280 RSI: 0000000000008982 RDI: 0000000000000004 [ 145.778363][ T6608] RBP: 00007f812663506b R08: 0000000000000000 R09: 0000000000000000 [ 145.778377][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.778396][ T6608] R13: 00007f8126826038 R14: 00007f8126825fa0 R15: 00007ffd5398c648 [ 145.778422][ T6608] [ 145.954459][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.970181][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.225486][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.226042][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.228046][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.228519][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.412037][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 146.438470][ T5762] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 146.438887][ T5762] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 146.491578][ T5762] usb 3-1: USB disconnect, device number 27 [ 146.529232][ T6459] udevd[6459]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.564661][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 146.565641][ T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 146.566515][ T25] usb 2-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 146.566550][ T25] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.566570][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.568252][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.568277][ T25] usb 2-1: Product: syz [ 146.568294][ T25] usb 2-1: Manufacturer: syz [ 146.568310][ T25] usb 2-1: SerialNumber: syz [ 146.570989][ T25] usb 2-1: config 0 descriptor?? [ 146.787315][ T25] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 146.787424][ T25] imon 2-1:0.0: unable to initialize intf0, err -19 [ 146.787438][ T25] imon:imon_probe: failed to initialize context! [ 146.787446][ T25] imon 2-1:0.0: unable to register, err -19 [ 146.789702][ T25] usb 2-1: USB disconnect, device number 28 [ 146.827478][ T6459] udevd[6459]: setting owner of /dev/bus/usb/002/028 to uid=0, gid=0 failed: No such file or directory [ 147.222218][ T25] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 147.241987][ T1585] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 147.373456][ T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 147.374516][ T25] usb 2-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 147.374566][ T25] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.374594][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.376732][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.376759][ T25] usb 2-1: Product: syz [ 147.376774][ T25] usb 2-1: Manufacturer: syz [ 147.376789][ T25] usb 2-1: SerialNumber: syz [ 147.379096][ T25] usb 2-1: config 0 descriptor?? [ 147.426610][ T1585] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.429468][ T1585] usb 3-1: not running at top speed; connect to a high speed hub [ 147.429634][ T1585] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.05 [ 147.435377][ T1585] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 147.445585][ T1585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.445723][ T1585] usb 3-1: Product: syz [ 147.445772][ T1585] usb 3-1: Manufacturer: syz [ 147.445815][ T1585] usb 3-1: SerialNumber: syz [ 147.585335][ T25] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 147.585422][ T25] imon 2-1:0.0: unable to initialize intf0, err -19 [ 147.585435][ T25] imon:imon_probe: failed to initialize context! [ 147.585444][ T25] imon 2-1:0.0: unable to register, err -19 [ 147.694419][ T6619] overlayfs: failed to resolve '/¤D²  ÿxº% ': -2 [ 147.696002][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.696735][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.121735][ T6600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.171701][ T1585] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 148.171749][ T1585] usb 3-1: found format II with max.bitrate = 512, frame size=4097 [ 148.182755][ T1585] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 148.182784][ T1585] usb 3-1: found format II with max.bitrate = 512, frame size=4097 [ 148.212868][ T1585] usb 3-1: 1:1: cannot set freq 11669316 to ep 0x1 [ 148.213476][ T1585] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 148.283774][ T4945] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 148.295741][ T4945] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 148.304195][ T4945] CPU: 1 UID: 0 PID: 4945 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) [ 148.313601][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.323676][ T4945] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 148.328917][ T4945] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 148.348563][ T4945] RSP: 0018:ffffc9000e607868 EFLAGS: 00010202 [ 148.354710][ T4945] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 148.362921][ T4945] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888076ce2de0 [ 148.370917][ T4945] RBP: 0000000000009801 R08: ffff888076ce2e3f R09: 1ffff1100ed9c5c7 [ 148.378921][ T4945] R10: dffffc0000000000 R11: ffffed100ed9c5c8 R12: dffffc0000000000 [ 148.386918][ T4945] R13: ffff888076ce2dc0 R14: ffff888034de2c40 R15: 0000000000000008 [ 148.394935][ T4945] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 148.403885][ T4945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.410503][ T4945] CR2: 00007efe1472d380 CR3: 000000000ed48000 CR4: 00000000003526f0 [ 148.418532][ T4945] Call Trace: [ 148.421836][ T4945] [ 148.424823][ T4945] ? __pfx_journal_end_buffer_io_sync+0x10/0x10 [ 148.431116][ T4945] jbd2_journal_commit_transaction+0x2285/0x5c80 [ 148.437523][ T4945] ? trace_hrtimer_start+0x82/0x200 [ 148.442777][ T4945] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 148.449512][ T4945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 148.454930][ T4945] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.460775][ T4945] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 148.466633][ T4945] ? __timer_delete_sync+0x4a7/0x520 [ 148.471974][ T4945] kjournald2+0x3bc/0x740 [ 148.476365][ T4945] ? __pfx_kjournald2+0x10/0x10 [ 148.481305][ T4945] ? __pfx_autoremove_wake_function+0x10/0x10 [ 148.487425][ T4945] ? __kthread_parkme+0x71/0x1f0 [ 148.492417][ T4945] ? __kthread_parkme+0x199/0x1f0 [ 148.497485][ T4945] kthread+0x38b/0x480 [ 148.501613][ T4945] ? __pfx_kjournald2+0x10/0x10 [ 148.506499][ T4945] ? __pfx_kthread+0x10/0x10 [ 148.511144][ T4945] ret_from_fork+0x514/0xb70 [ 148.515781][ T4945] ? __pfx_ret_from_fork+0x10/0x10 [ 148.520925][ T4945] ? __switch_to+0xc89/0x1420 [ 148.525629][ T4945] ? __pfx_kthread+0x10/0x10 [ 148.530259][ T4945] ret_from_fork_asm+0x1a/0x30 [ 148.535091][ T4945] [ 148.538133][ T4945] Modules linked in: [ 148.543816][ T4945] ---[ end trace 0000000000000000 ]--- [ 148.571587][ T6626] netlink: 'syz.1.253': attribute type 3 has an invalid length. [ 148.577270][ T1585] usb 3-1: USB disconnect, device number 28 [ 148.598367][ T4945] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 148.598404][ T4945] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 148.598424][ T4945] RSP: 0018:ffffc9000e607868 EFLAGS: 00010202 [ 148.599442][ T4945] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 148.599459][ T4945] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888076ce2de0 [ 148.599475][ T4945] RBP: 0000000000009801 R08: ffff888076ce2e3f R09: 1ffff1100ed9c5c7 [ 148.599500][ T4945] R10: dffffc0000000000 R11: ffffed100ed9c5c8 R12: dffffc0000000000 [ 148.599518][ T4945] R13: ffff888076ce2dc0 R14: ffff888034de2c40 R15: 0000000000000008 [ 148.599534][ T4945] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 148.599553][ T4945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.599568][ T4945] CR2: 00007ffd2caa1dd4 CR3: 000000007a94e000 CR4: 00000000003526f0 [ 148.599590][ T4945] Kernel panic - not syncing: Fatal exception [ 148.700795][ T4945] Kernel Offset: disabled [ 148.705156][ T4945] Rebooting in 86400 seconds..