last executing test programs: 20.402526555s ago: executing program 4 (id=544): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000ec0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000f40)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) syz_usb_connect(0x5, 0x51, &(0x7f0000002d00)=ANY=[@ANYBLOB="120101020f4f07407b060323f5130102030109023f00010304e0030904130904ba95d287090508fb000306065709050610100406080709040483af0cf67b3f09058e0220000c08ff09050c12"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x538, 0x2a8, 0x0, 0xd0, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0x0, 0xff000000, 0xff000000], 0x4e21, 0x4e21, 0x4e20, 0x4e24, 0x800, 0x9, 0x401, 0x7, 0x91}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000002c0)=""/67, 0x43}], 0x1}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)) pwritev2(r6, 0x0, 0x0, 0x3, 0x7ff, 0x18) sendto$inet(r5, 0x0, 0x0, 0x20000779, &(0x7f0000000e80)={0x2, 0x4c23, @local}, 0x10) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000080)) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) sendto$inet(r0, &(0x7f00000001c0)="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", 0xc34, 0x8080, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000001044104d7a00000000000109022400010000800009040000090300020009210008000000290009058103"], 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000f80)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x5, 0x5, 0xfff]}, &(0x7f0000000e00)=0x44) 18.606126493s ago: executing program 4 (id=547): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x80cbba745da0e8b7, 0x0, 0x0) 18.477382363s ago: executing program 4 (id=548): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x5c, 0xa, 0x68, 0x10, 0x17ef, 0x3098, 0x6c41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x9, 0xb0, 0x5, "", [{{0x9, 0x4, 0xbe, 0x6, 0x1, 0xff, 0xff, 0xff, 0x2, [], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x8, 0x95}}]}}]}}]}}, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7110be000000159e7b16000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xa72, 0xd, 0x55595659, 0x5, 0x3, 0x2, 0x9, 0x1, 0x1, 0x2, 0x2, 0x5}}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}}}, &(0x7f0000000040)=0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000100)=0xfffffff7, 0x4) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) 11.488012261s ago: executing program 4 (id=573): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/freeze_filesystems', 0x42, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) semop(0xffffffffffffffff, &(0x7f0000000500)=[{0x2, 0x3ff, 0x800}], 0x41) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="99c7454f579f630171d84fe2123511ea5469348d21ab06035b6ad6a38d45faf16dce02fc607055465cb22b081e85b9eb2887ac82faabe51603f562f21b34ef3986a2026ecc547cba5e6642251541b11ba2b0b0bbf615db20999e5aac6be40ee2a9fa1f47de6d9a355dab420721348536c6bde257584f4abb88ef000000024200000000", @ANYRES32, @ANYBLOB="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"], 0x20) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ff"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x18, 0x44, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000240)={0x11, {{0x29, 0x0, 0x5000000, @local, 0x7ff}}}, 0x88) 10.808463584s ago: executing program 1 (id=577): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x20, r2, 0xa01, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}}, 0x40000) 10.802484287s ago: executing program 1 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4800) unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x34}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30001100010000000000000000000000000a"], 0x88}}, 0x0) sysfs$1(0x1, &(0x7f0000000100)='),}/[+@\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x4000400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0xc1) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r8, 0x6f50, 0x81) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_FPU(r11, 0x41a0ae8d, 0x0) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef) 9.554127208s ago: executing program 4 (id=584): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3dc0, 0x0, 0x0, &(0x7f0000000540), &(0x7f00000005c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsu(&(0x7f00000004c0), 0xb0, 0x498b80) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x4, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a28f2ce4df4e24c16ff0000c8c7a6ec00120c00014002080c00bdad446b9bbc7a7f4a16fa3b09d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x44091) r5 = fsopen(&(0x7f0000000580)='fusectl\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000680)='\nE\xcb\xf3\xfd\x0e\xc9T5Usou\x01\x00\x1d', &(0x7f0000000800)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1nr\xa2\xcf\'\x80w\xde\xb6\x02\xd8r*_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf6\x84\x1fA\xeas\xd3\xef\xa2\x85\xab!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000044000000", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8.609924918s ago: executing program 1 (id=589): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x400, 0x802) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000140)={0x9, 0x80000, r1}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="8e2f77346d32b98a24d63b6ab7e384d532fcde93a58970816b1b8abcae5e333387f6cf1e754fb79064432355d06acf2e02864d3a0111b887afb803c5492b087773bdd1d9fae505486ed4928ea5fce7bec1fb5ba5548196c89a62474d43099cb1f0e2ce0c81af831d01927c32b8c98e7c2d41ce1beb731b42db3ea4503af58b578801bbd24b7608ae1bb5a0fc73d669f25afb13fb2e9d583b49c6e0626be418b9ad7c25342f04156a5f510980b79acdacfb9b0acbd4d6385371173bf7b5714e45306f4610c75281f6d12a1b600f0b4c40dde4d7fda3509eb71514f895154ae9c6a90f1cee8d049d4866631017d336aaecf574464f0b07608abb170fae8aec1b20f918c0e73521bc480638750bf701218cab1ad7428aad727c409c72c54b128ee7470c30159b30b8d2d518624c52e0b00ef5a17557008ed0ba07fc6ab965464e50ce537e2438b7f291d44cb3dcc4814c9fc347397022a175f4d7355b3a6df4687a54478ec8f3d31db192439cc21a1bcfca81f83c3d03401e97e94640a980fa08f6f216b4bcb283438c0f152173587cc02bdfc2331a8703a23749ce14c6bff4bc683f2e691c26da5a022481855dd5da3c112243fb58ae919dd6b3e8a916cc42a5ddf9bd9dbed17263ff4d8639a2a60d8fa7878762c094", @ANYRES32, @ANYBLOB="00000000000001000000000000f0ffffffffffff"]) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x245, 0x2000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) socket(0x10, 0x3, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r6, &(0x7f00000007c0)={0x14, &(0x7f0000000540)={0x0, 0x6, 0x100, {0x100, 0x2, "2f7bfad415715375b2641f8710960ee253390e27511e201fdab5aa871d94a80622d1c025cc16ab12f65ff3c018e9cc289b024a16cd3d438a84e7daa02dbe3cfd47a41adccda14763746854156eac0748671a086aacd9d6b108d63a1d7e1859f34d5262c5734e96c6a92d0089f50aca706b13765330d991b0696ae3f7b41563546a5689c02f24d6778a665b2c3016eae4e72e18f93c98db6322ac588ba50e3a5d785805af36a31860902054fa8131ad62a526130c8862d1a2ae5bb12a8b0598cbfa28ceacc64addfaa44c2338d351fc231cb536546988b5e86d78428c5ce03279e69960a99af8a6e025405ea117833b06284f5c06e85c92ad2665380b36bf"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a00)={0x40, 0xd, 0xf8, "df1cd2dd31ca73ce12fdb22edc6bf9f55c72da6925132bb67f1fb634b23ca903b07a88275293d2b80b2a77b46fa7325fb2fef615609d4a27f30e6e4bf3e91972dd5b72016b71d30d7bb4fb5716bb982ca364cb6786558917e20065f9b7958bd2e715c48b9ddf893af7e97245c4b3a23e4703f74243ac07a612cfe42ed56392c7c36f436e61d1a704ac2a4403db99524216eadc687338b4fe27c68292da3883e5716abea06433589dc996f76c57628e533bf17ff87c095dd5ac11636da53739f1efc2a38c8b41000be2e91d3fc8f9aff3f1285a284b6dc6c8c5ff863f088d21e80b5a8c545eb5cf3552662d337ddc9c7511aaa88179393890"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b80)={0x20, 0x81, 0x1, "c6"}, &(0x7f0000000bc0)={0x20, 0x82, 0x1, "a6"}, &(0x7f0000000c00)={0x20, 0x83, 0x3, "1833e4"}, &(0x7f0000000c40)={0x20, 0x84, 0x4, "46b3db48"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "47c6f0"}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 6.995470989s ago: executing program 2 (id=592): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000029"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r7, &(0x7f0000000040)={'some', 0x20, 0x7, 0x20, 0x7}, 0x2f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x18, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x18}}, 0x40000) 6.841189743s ago: executing program 2 (id=593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8004}, 0x1) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) syz_usb_disconnect(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) 6.109177318s ago: executing program 4 (id=595): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x0, 0x200, 0x0, 0x0}], 0x1}) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c86dd6000ed0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1570f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670605"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r2 = userfaultfd(0x801) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000000)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) 5.393792315s ago: executing program 1 (id=597): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x7, 0xfffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365d20fc7700066b8502466ef", 0x50}], 0x1, 0x11, 0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x1, 0xa000, 0x0, 0x0}, {0x6, 0x1811, 0x0, 0x0}, {0xdf8e, 0x4000, 0x0, 0x0}], 0x3}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100)) pidfd_send_signal(r3, 0x3f, &(0x7f0000000080)={0x4003b, 0x8000, 0x7}, 0x0) syz_emit_ethernet(0x1eb, &(0x7f0000000200)=ANY=[@ANYBLOB="49a188da23acd5d460bdee3c88a81200810021000800441301d5006500009f0690787f000001ac1414bb441c2560000007e5000003ff000000090000248c800000017fffffff94040000440ef72ff643fe38fd478d7a92ff070ba3ffffffff7f00000100071b6e7f000001ac1414bbac1414bb000000007f000001ac1414bb0044245f030000000000000003ac1414bb000000017f00000100000006e00000010000000200004e214e24", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="6010000790780f4a00fe03831312b8d8d54a3bc232187e076e7ff2cb8bb51312c55e6d22e5a58a57a5d587b258f51cd5fe0cf989c32539ed05ae3b0300000ef7a6a0b7eef61566bddd869500ddf4d450274981f481d3a1c9dcef937b928a7d01c8fdced5ea14066223301dfeacdaf35ef4d349c20b21065bf0723cce537c349221ca0afea29ab1786eb7174c19715ce50e7931a3f9cccdcbbafbeac086cfeb44433bd7eda4571d2796cf631332c7ba2b081d688baa88f3c9f6711924d730e60ef2a8932ab1ef66272b1d211b60b2a0850d0a492a3434834ec4bd2048254a6cec1dda6f432e68b60ab178b991b328397bf9cf11e90fff003becfa45e8fd02d5ad0234ec7f4396cc0b0539df5122a05436410aa3f8a0f9ec638ef820495f556d2b5a2c0115d59d8d03fef94096f94504d67e097db856d876cca7b11668dea1f6c5138a3710cf512489"], 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.517796955s ago: executing program 2 (id=599): syz_open_dev$vcsn(&(0x7f0000000040), 0x55, 0x8000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000044000000", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 3.390048327s ago: executing program 2 (id=600): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x500, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0) 3.291186564s ago: executing program 2 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x4800) unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x34}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30001100010000000000000000000000000a"], 0x88}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x4000400) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0xc1) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r7, 0x6f50, 0x81) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_FPU(r10, 0x41a0ae8d, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01000000000014000000600000"], 0xfdef) 2.724413382s ago: executing program 0 (id=603): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0) (fail_nth: 10) 2.709310541s ago: executing program 3 (id=604): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x200, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.660961232s ago: executing program 0 (id=605): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800002000000011c0012800b00010067726574617000000ce4f2f7f599e7c126000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000001440)=@multiplanar_userptr={0x6, 0xd, 0x4, 0x100, 0x2, {}, {0x5, 0x0, 0x8, 0x3a, 0x5, 0xd, "43616180"}, 0xe, 0x2, {0x0}}) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc0046209, 0x0) 2.556550114s ago: executing program 0 (id=606): io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0xfd00) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000c0000000080000004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x4}, 0x20) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000ff0c01020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) 1.865682733s ago: executing program 2 (id=607): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x400, 0x802) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000140)={0x9, 0x80000, r1}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000000001000000000000f0ffffffffffff"]) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x245, 0x2000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) socket(0x10, 0x3, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r6, &(0x7f00000007c0)={0x14, &(0x7f0000000540)={0x0, 0x6, 0x100, {0x100, 0x2, "2f7bfad415715375b2641f8710960ee253390e27511e201fdab5aa871d94a80622d1c025cc16ab12f65ff3c018e9cc289b024a16cd3d438a84e7daa02dbe3cfd47a41adccda14763746854156eac0748671a086aacd9d6b108d63a1d7e1859f34d5262c5734e96c6a92d0089f50aca706b13765330d991b0696ae3f7b41563546a5689c02f24d6778a665b2c3016eae4e72e18f93c98db6322ac588ba50e3a5d785805af36a31860902054fa8131ad62a526130c8862d1a2ae5bb12a8b0598cbfa28ceacc64addfaa44c2338d351fc231cb536546988b5e86d78428c5ce03279e69960a99af8a6e025405ea117833b06284f5c06e85c92ad2665380b36bf"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a00)={0x40, 0xd, 0xf8, "df1cd2dd31ca73ce12fdb22edc6bf9f55c72da6925132bb67f1fb634b23ca903b07a88275293d2b80b2a77b46fa7325fb2fef615609d4a27f30e6e4bf3e91972dd5b72016b71d30d7bb4fb5716bb982ca364cb6786558917e20065f9b7958bd2e715c48b9ddf893af7e97245c4b3a23e4703f74243ac07a612cfe42ed56392c7c36f436e61d1a704ac2a4403db99524216eadc687338b4fe27c68292da3883e5716abea06433589dc996f76c57628e533bf17ff87c095dd5ac11636da53739f1efc2a38c8b41000be2e91d3fc8f9aff3f1285a284b6dc6c8c5ff863f088d21e80b5a8c545eb5cf3552662d337ddc9c7511aaa88179393890"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b80)={0x20, 0x81, 0x1, "c6"}, &(0x7f0000000bc0)={0x20, 0x82, 0x1, "a6"}, &(0x7f0000000c00)={0x20, 0x83, 0x3, "1833e4"}, &(0x7f0000000c40)={0x20, 0x84, 0x4, "46b3db48"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "47c6f0"}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.687633367s ago: executing program 3 (id=608): openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) getpid() r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x70, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0xa, 0x7, 0x200000b, 0xff}, @broadcast, @rand_addr=0x64010102, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') read$FUSE(r5, &(0x7f00000095c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000400)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, '\x00', 0x7}) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) recvmsg$can_j1939(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000640)=""/12, 0xc}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/188, 0xbc}, {&(0x7f0000001a80)=""/71, 0x47}], 0x5}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={0x0, 0x68}}, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001b80)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32=r7, @ANYRES16=r9], 0x71) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000001c0)={{}, 0x7, 0x1, 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r4, 0x333, 0x0, 0xfffffffe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x8880) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000088500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0xffffffffffffffba, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.445799123s ago: executing program 3 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x480c00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) readv(r2, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/23, 0x17}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a03000008009f0009"], 0x40}}, 0x48000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x6}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000180)={0x8, {"f99d07d086f3b6c374b5d33163d720d4", "16fc2647c61e1e4c60df5f602467415c", "3893bd52c4533c8a68b05cfc7df644fd"}, 0xff}) 1.292407792s ago: executing program 3 (id=610): syz_open_dev$vcsn(&(0x7f0000000040), 0x55, 0x8000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000440000000800", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.269205523s ago: executing program 3 (id=611): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x10000000}) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) r3 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 957.638572ms ago: executing program 0 (id=612): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote, @remote, @remote}}}}, 0x0) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 915.55822ms ago: executing program 0 (id=613): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r9, 0x0, r10}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x1}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x2, 0xfffe, 0xfffc, 0x0, 0x24, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x200, 0x3dc], [0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r14, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r14, 0x40045569, 0x9) 696.221µs ago: executing program 0 (id=614): syz_usb_connect(0x0, 0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e700"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 0s ago: executing program 3 (id=615): unshare(0x2040400) r0 = syz_io_uring_setup(0x2fa2, &(0x7f0000001740)={0x0, 0xb403, 0x40, 0x2, 0x1d8}, &(0x7f0000000040), &(0x7f0000001800), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r8, 0x0, 0x1) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000001240)) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000001080)={0x0, 0x95, "3a0bdce3747a358f32ee3dcc6be2471c5139d2e9b10e33831b828f081c27b221d8ae6bf2738a5c05b8c7977df196d618a3e8a198d63ec40d30aa884d30be39387e60764e2fa2547d986d558acdff2982ddcbeea46ef2b2366e68c06a2df69583291f51790dd838cd7d61466bf35aa95f3d7632f27ac39f41034fa89f924aebc278f10c5fb2fa4365cdc3d6ce44a4e464ecfa8a4989"}, &(0x7f0000001140)=0x9d) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000011c0)={r10, 0xfff, 0x20, 0xfffffffffffffffd, 0x9}, &(0x7f0000001200)=0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x4}, {0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001300)=@gettaction={0x60, 0x32, 0x800, 0x70bd27, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r3) sendmsg$BATADV_CMD_SET_VLAN(r12, &(0x7f0000001540)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r13, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x97}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet_int(r11, 0x0, 0x33, 0x0, 0x0) kernel console output (not intermixed with test programs): ] ? __d_lookup+0x66/0x780 [ 174.401265][ T6926] ? __d_lookup+0x66/0x780 [ 174.401295][ T6926] ? __d_lookup+0x66/0x780 [ 174.401324][ T6926] ? __pfx_d_alloc_parallel+0x10/0x10 [ 174.401356][ T6926] ? __raw_spin_lock_init+0x45/0x100 [ 174.401385][ T6926] ? __init_waitqueue_head+0xa9/0x150 [ 174.401418][ T6926] proc_fill_cache+0x17f/0x440 [ 174.401442][ T6926] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 174.401462][ T6926] ? __pfx_proc_fill_cache+0x10/0x10 [ 174.401496][ T6926] ? __pfx_filldir64+0x10/0x10 [ 174.401521][ T6926] proc_pident_readdir+0x150/0x1f0 [ 174.401548][ T6926] iterate_dir+0x399/0x570 [ 174.401582][ T6926] __se_sys_getdents64+0xf1/0x280 [ 174.401603][ T6926] ? __pfx___se_sys_getdents64+0x10/0x10 [ 174.401621][ T6926] ? ksys_write+0x242/0x270 [ 174.401645][ T6926] ? __pfx_filldir64+0x10/0x10 [ 174.401665][ T6926] ? __pfx_ksys_write+0x10/0x10 [ 174.401699][ T6926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.401720][ T6926] do_syscall_64+0x15f/0xf80 [ 174.401748][ T6926] ? trace_irq_disable+0x3b/0x140 [ 174.401776][ T6926] ? clear_bhb_loop+0x40/0x90 [ 174.401800][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.401818][ T6926] RIP: 0033:0x7fea0779ce59 [ 174.401838][ T6926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.401855][ T6926] RSP: 002b:00007fea08725028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 174.401876][ T6926] RAX: ffffffffffffffda RBX: 00007fea07a15fa0 RCX: 00007fea0779ce59 [ 174.401890][ T6926] RDX: 000000000000107d RSI: 00002000000003c0 RDI: 0000000000000003 [ 174.401903][ T6926] RBP: 00007fea08725090 R08: 0000000000000000 R09: 0000000000000000 [ 174.401915][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.401927][ T6926] R13: 00007fea07a16038 R14: 00007fea07a15fa0 R15: 00007fea07b3fa48 [ 174.401966][ T6926] [ 174.408828][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.678443][ T5728] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 174.689087][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.721732][ T5728] usb 2-1: device descriptor read/8, error -71 [ 174.731321][ T5631] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 174.747446][ T5631] usbhid 4-1:0.0: can't add hid device: -71 [ 174.754391][ T5631] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 174.786624][ T6930] fuse: Unknown parameter 'user_d' [ 174.810692][ T5631] usb 4-1: USB disconnect, device number 16 [ 174.848469][ T5728] usb usb2-port1: unable to enumerate USB device [ 174.938863][ T5715] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 175.100028][ T5715] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.108833][ T5715] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 175.120354][ T5715] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 175.129566][ T5715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 175.140692][ T5715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 175.153846][ T5715] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.163080][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.171135][ T5715] usb 3-1: Product: syz [ 175.175436][ T5715] usb 3-1: Manufacturer: syz [ 175.185574][ T5715] cdc_wdm 3-1:1.0: skipping garbage [ 175.190913][ T5715] cdc_wdm 3-1:1.0: skipping garbage [ 175.197695][ T5715] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 175.203703][ T5715] cdc_wdm 3-1:1.0: Unknown control protocol [ 175.278267][ T5728] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 175.393138][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.407363][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.420470][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 175.427117][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 175.434268][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 175.440894][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 175.448560][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 175.448939][ T5728] usb 5-1: Using ep0 maxpacket: 8 [ 175.455192][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 175.455520][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 175.473008][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 175.473472][ T5728] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 175.481528][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 175.494759][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 175.501859][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 175.508486][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 175.514598][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.515317][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 175.529216][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 175.530108][ T5728] usb 5-1: Product: syz [ 175.536023][ T5715] usb 3-1: USB disconnect, device number 25 [ 175.540386][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 175.540412][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 175.540427][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 175.547035][ T5728] usb 5-1: Manufacturer: syz [ 175.602861][ T5728] usb 5-1: SerialNumber: syz [ 175.628706][ T5728] usb 5-1: config 0 descriptor?? [ 175.765353][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 175.765370][ T29] audit: type=1800 audit(1779472909.542:45): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.364" name="bus" dev="tmpfs" ino=400 res=0 errno=0 [ 175.845409][ T5728] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 176.288249][ T5715] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 176.330327][ T5631] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 176.491346][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 176.506734][ T5631] usb 1-1: Using ep0 maxpacket: 16 [ 176.524195][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 176.540976][ T5715] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 176.554991][ T5631] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 176.564444][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.572625][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.587794][ T5715] usb 2-1: config 0 descriptor?? [ 176.600775][ T5631] usb 1-1: Product: syz [ 176.613238][ T5631] usb 1-1: Manufacturer: syz [ 176.627098][ T5631] usb 1-1: SerialNumber: syz [ 176.656787][ T5631] r8152-cfgselector 1-1: Unknown version 0x0000 [ 176.672411][ T5631] r8152-cfgselector 1-1: config 0 descriptor?? [ 176.813790][ T5715] ath6kl: Failed to submit usb control message: -71 [ 176.821397][ T5715] ath6kl: unable to send the bmi data to the device: -71 [ 176.828662][ T5715] ath6kl: Unable to send get target info: -71 [ 176.839073][ T5715] ath6kl: Failed to init ath6kl core: -71 [ 176.846687][ T5715] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 176.874746][ T5715] usb 2-1: USB disconnect, device number 32 [ 176.889883][ T5631] r8152-cfgselector 1-1: Needed 2 retries to read version [ 176.909695][ T5631] r8152-cfgselector 1-1: Unknown version 0x0000 [ 176.922821][ T5631] r8152-cfgselector 1-1: No union descriptors [ 176.939626][ T5693] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 177.078573][ T5693] usb 4-1: device descriptor read/64, error -71 [ 177.209766][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.220702][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.328286][ T5693] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 177.439212][ T5715] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 177.458531][ T5693] usb 4-1: device descriptor read/64, error -71 [ 177.569039][ T5693] usb usb4-port1: attempt power cycle [ 177.600358][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.611501][ T5715] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.620610][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.628267][ T5714] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 177.637837][ T5715] usb 3-1: config 0 descriptor?? [ 177.778210][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 177.785872][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.796317][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.807796][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.817713][ T5714] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.828325][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.842813][ T5714] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.847517][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.852872][ T5714] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.866703][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.868649][ T5714] usb 2-1: Manufacturer: syz [ 177.885947][ T5714] usb 2-1: config 0 descriptor?? [ 177.908297][ T5693] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 177.929291][ T5693] usb 4-1: device descriptor read/8, error -71 [ 177.940465][ T6967] vivid-004: ================= START STATUS ================= [ 177.948587][ T6967] vivid-004: Radio HW Seek Mode: Bounded [ 177.954512][ T6967] vivid-004: Radio Programmable HW Seek: false [ 177.960815][ T6967] vivid-004: RDS Rx I/O Mode: Block I/O [ 177.966421][ T6967] vivid-004: Generate RBDS Instead of RDS: false [ 177.974236][ T6967] vivid-004: RDS Reception: true [ 177.983377][ T6967] vivid-004: RDS Program Type: 0 inactive [ 177.989253][ T6967] vivid-004: RDS PS Name: inactive [ 177.994523][ T6967] vivid-004: RDS Radio Text: inactive [ 178.001006][ T6967] vivid-004: RDS Traffic Announcement: false inactive [ 178.007885][ T6967] vivid-004: RDS Traffic Program: false inactive [ 178.014332][ T6967] vivid-004: RDS Music: false inactive [ 178.019883][ T6967] vivid-004: ================== END STATUS ================== [ 178.050073][ T5715] usbhid 3-1:0.0: can't add hid device: -71 [ 178.063875][ T5715] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 178.077292][ T5715] usb 3-1: USB disconnect, device number 26 [ 178.158259][ T5714] rc_core: IR keymap rc-hauppauge not found [ 178.164296][ T5714] Registered IR keymap rc-empty [ 178.170096][ T5693] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 178.177834][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.198414][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.205906][ T5693] usb 4-1: device descriptor read/8, error -71 [ 178.229575][ T5714] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 178.243105][ T5714] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 178.261692][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.290471][ T5728] usb write operation failed. (-71) [ 178.296272][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.306637][ T5728] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 178.319384][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.327150][ T5693] usb usb4-port1: unable to enumerate USB device [ 178.334588][ T5728] dvbdev: DVB: registering new adapter (Terratec H7) [ 178.342787][ T5728] usb 5-1: media controller created [ 178.349447][ T5728] usb read operation failed. (-71) [ 178.357396][ T5728] usb write operation failed. (-71) [ 178.362910][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.388553][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.402776][ T5728] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 178.426413][ T5728] usb 5-1: USB disconnect, device number 25 [ 178.432542][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.459448][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.494327][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.518328][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.538414][ T5714] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.561966][ T5714] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 178.571837][ T5714] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 178.669085][ T5715] usb 2-1: USB disconnect, device number 33 [ 178.979571][ T5728] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 179.087855][ T5631] r8152-cfgselector 1-1: USB disconnect, device number 34 [ 179.138284][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 179.153662][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.216796][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.256987][ T5728] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.266329][ T6987] fuse: Unknown parameter 'user_d' [ 179.294624][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.310399][ T5728] usb 3-1: config 0 descriptor?? [ 179.329050][ T5728] hub 3-1:0.0: USB hub found [ 179.528301][ T5728] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 179.548310][ T5714] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 179.732679][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 179.751955][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.766433][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.777033][ T5714] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.787234][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.787385][ T6992] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 179.812197][ T5714] usb 2-1: config 0 descriptor?? [ 179.941700][ T5728] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0 [ 179.966850][ T5728] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 180.422852][ T7011] vlan0: entered promiscuous mode [ 180.536870][ T6989] vivid-002: disconnect [ 180.555461][ T6989] __nla_validate_parse: 24 callbacks suppressed [ 180.555476][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 180.571530][ T6982] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 181.048941][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 181.150034][ T5700] usb 3-1: USB disconnect, device number 27 [ 181.172095][ T6989] vivid-002: reconnect [ 181.214404][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.234479][ T5714] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 181.251131][ T10] usb 1-1: config 0 has no interface number 0 [ 181.278746][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 181.313177][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.345589][ T10] usb 1-1: Product: syz [ 181.359214][ T5714] usb 2-1: USB disconnect, device number 34 [ 181.374369][ T10] usb 1-1: Manufacturer: syz [ 181.395486][ T10] usb 1-1: SerialNumber: syz [ 181.486048][ T10] usb 1-1: config 0 descriptor?? [ 181.487272][ T7017] fido_id[7017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 181.507961][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 181.523584][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 181.728327][ T5700] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 181.745665][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 181.757660][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 181.771535][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 181.782235][ T10] usb 1-1: media controller created [ 181.810549][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.898681][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 181.906075][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.917588][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.928507][ T5700] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.937590][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.949574][ T5700] usb 3-1: config 0 descriptor?? [ 181.959125][ T5700] hub 3-1:0.0: USB hub found [ 182.008278][ T5715] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 182.162834][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 182.178088][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.198976][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.218378][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.234303][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.264259][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.265974][ T5715] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.317634][ T5715] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.351358][ T5715] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.365136][ T7035] fuse: Unknown parameter 'user_d' [ 182.370569][ T5715] usb 2-1: Manufacturer: syz [ 182.404946][ T5715] usb 2-1: config 0 descriptor?? [ 182.720467][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.756478][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.812560][ T5700] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 182.843863][ T5700] usbhid 3-1:0.0: can't add hid device: -71 [ 182.862506][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 182.871331][ T5700] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 182.900944][ T5700] usb 3-1: USB disconnect, device number 28 [ 182.923146][ T10] usb 1-1: USB disconnect, device number 35 [ 183.048338][ T5728] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 183.198265][ T5728] usb 4-1: Using ep0 maxpacket: 16 [ 183.206184][ T5728] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 183.229246][ T5728] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 183.239327][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.247717][ T5728] usb 4-1: Product: syz [ 183.252456][ T5728] usb 4-1: Manufacturer: syz [ 183.253003][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 183.257141][ T5728] usb 4-1: SerialNumber: syz [ 183.281123][ T5728] usb 4-1: config 0 descriptor?? [ 183.290082][ T5728] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 183.300114][ T5728] usb 4-1: Detected FT232R [ 183.492743][ T5728] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 183.508799][ T5631] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 183.670359][ T5631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.692727][ T5631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 183.721763][ T5631] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 183.731634][ T5728] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 183.749938][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.768580][ T5728] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 183.790378][ T5631] usb 5-1: config 0 descriptor?? [ 183.872471][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 184.014454][ T5631] ath6kl: Failed to submit usb control message: -71 [ 184.030637][ T5631] ath6kl: unable to send the bmi data to the device: -71 [ 184.044648][ T5631] ath6kl: Unable to send get target info: -71 [ 184.067999][ T5631] ath6kl: Failed to init ath6kl core: -71 [ 184.090694][ T5631] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 184.127906][ T5631] usb 5-1: USB disconnect, device number 26 [ 184.757464][ T5631] usb 2-1: USB disconnect, device number 35 [ 184.930844][ T7068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.958421][ T5728] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 185.133759][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.162071][ T5728] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 185.183537][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.206811][ T5728] usb 5-1: config 0 descriptor?? [ 185.230438][ T5728] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 185.410704][ T7078] fuse: Unknown parameter 'user_d' [ 185.428464][ T5700] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 185.588592][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 185.601287][ T5700] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 185.618957][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.640637][ T5700] usb 1-1: config 0 descriptor?? [ 185.782845][ T5728] usb 4-1: USB disconnect, device number 21 [ 185.821303][ T5728] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 185.849699][ T5728] ftdi_sio 4-1:0.0: device disconnected [ 185.862724][ T5700] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 185.889900][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 185.909385][ T5700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.938957][ T5700] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 185.957352][ T5700] usb 1-1: media controller created [ 186.112716][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.154531][ T5728] usb 5-1: USB disconnect, device number 27 [ 186.282401][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 186.353632][ T5700] DVB: Unable to find symbol dib7000p_attach() [ 186.370469][ T5700] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 186.548405][ T5700] rc_core: IR keymap rc-dib0700-rc5 not found [ 186.557646][ T5700] Registered IR keymap rc-empty [ 186.588857][ T5700] dvb-usb: could not initialize remote control. [ 186.603002][ T5700] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 186.640794][ T5700] usb 1-1: USB disconnect, device number 36 [ 186.661165][ T5728] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 186.688293][ T5693] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 186.751154][ T5700] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 186.832123][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.858236][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 186.868852][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 186.887291][ T5693] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.900523][ T5728] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 186.911302][ T5693] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.925015][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.940809][ T5693] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 186.967948][ T5728] usb 5-1: config 0 descriptor?? [ 186.979416][ T5693] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.005725][ T5693] usb 2-1: Manufacturer: syz [ 187.018616][ T7102] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 187.024326][ T5693] usb 2-1: config 0 descriptor?? [ 187.116016][ T7105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.412'. [ 187.174440][ T7102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.201031][ T5728] ath6kl: Failed to submit usb control message: -71 [ 187.223337][ T5728] ath6kl: unable to send the bmi data to the device: -71 [ 187.243872][ T5728] ath6kl: Unable to send get target info: -71 [ 187.276835][ T5728] ath6kl: Failed to init ath6kl core: -71 [ 187.295434][ T5728] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 187.384273][ T5728] usb 5-1: USB disconnect, device number 28 [ 187.683987][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.413'. [ 188.150854][ T5714] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 188.308682][ T5700] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 188.319751][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 188.340477][ T5714] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 188.370196][ T5714] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 188.396425][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.421770][ T5714] usb 3-1: Product: syz [ 188.435051][ T5714] usb 3-1: Manufacturer: syz [ 188.452155][ T5714] usb 3-1: SerialNumber: syz [ 188.478430][ T5714] usb 3-1: config 0 descriptor?? [ 188.490352][ T5700] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.502744][ T5700] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 188.512315][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.524472][ T5714] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 188.553934][ T5700] usb 5-1: config 0 descriptor?? [ 188.565171][ T5714] usb 3-1: Detected FT232R [ 188.581129][ T5700] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 188.728416][ T5714] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 188.953014][ T5714] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5 [ 188.965274][ T7135] fuse: Unknown parameter 'user_d' [ 188.973872][ T5714] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 189.358838][ T5693] usb 2-1: USB disconnect, device number 36 [ 189.521615][ T5728] usb 5-1: USB disconnect, device number 29 [ 189.548361][ T5714] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 189.587360][ T7142] FAULT_INJECTION: forcing a failure. [ 189.587360][ T7142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.602350][ T7142] CPU: 0 UID: 0 PID: 7142 Comm: syz.4.424 Not tainted syzkaller #0 PREEMPT(full) [ 189.602376][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.602394][ T7142] Call Trace: [ 189.602402][ T7142] [ 189.602409][ T7142] dump_stack_lvl+0xe8/0x150 [ 189.602437][ T7142] should_fail_ex+0x412/0x560 [ 189.602467][ T7142] _copy_from_user+0x2d/0xb0 [ 189.602495][ T7142] ___sys_sendmsg+0x1c6/0x360 [ 189.602527][ T7142] ? __lock_acquire+0x6b5/0x2cf0 [ 189.602555][ T7142] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.602586][ T7142] ? kstrtouint+0x6e/0xe0 [ 189.602629][ T7142] ? __fget_files+0x2a/0x420 [ 189.602650][ T7142] ? __fget_files+0x3a0/0x420 [ 189.602681][ T7142] __sys_sendmmsg+0x27c/0x4e0 [ 189.602713][ T7142] ? __pfx___sys_sendmmsg+0x10/0x10 [ 189.602736][ T7142] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 189.602779][ T7142] ? ksys_write+0x242/0x270 [ 189.602807][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 189.602837][ T7142] __x64_sys_sendmmsg+0xa0/0xc0 [ 189.602864][ T7142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.602883][ T7142] do_syscall_64+0x15f/0xf80 [ 189.602909][ T7142] ? trace_irq_disable+0x3b/0x140 [ 189.602935][ T7142] ? clear_bhb_loop+0x40/0x90 [ 189.602958][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.602976][ T7142] RIP: 0033:0x7fc27b79ce59 [ 189.602993][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.603010][ T7142] RSP: 002b:00007fc27c605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.603030][ T7142] RAX: ffffffffffffffda RBX: 00007fc27ba15fa0 RCX: 00007fc27b79ce59 [ 189.603043][ T7142] RDX: 00000000040000a6 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 189.603056][ T7142] RBP: 00007fc27c605090 R08: 0000000000000000 R09: 0000000000000000 [ 189.603068][ T7142] R10: 0000000000048850 R11: 0000000000000246 R12: 0000000000000001 [ 189.603080][ T7142] R13: 00007fc27ba16038 R14: 00007fc27ba15fa0 R15: 00007fc27bb3fa48 [ 189.603109][ T7142] [ 189.914395][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 189.921966][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.932703][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.944754][ T5693] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 189.953573][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.964603][ T5714] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 189.974336][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.988760][ T5714] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 189.998291][ T5714] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 190.006327][ T5714] usb 4-1: Manufacturer: syz [ 190.014931][ T5714] usb 4-1: config 0 descriptor?? [ 190.034713][ T7147] vlan0: entered promiscuous mode [ 190.098333][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 190.109461][ T5693] usb 2-1: New USB device found, idVendor=0499, idProduct=1033, bcdDevice= 0.40 [ 190.119919][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.128906][ T5693] usb 2-1: Product: 冃⸩ⴲ儡ዲ︫ᆇ燑㽫䫚ᔭ뱄ꚲ䓠컼㭘廪顤鯚寝禫쒪갣晢斃⃪厂䵵쌴䗞櫳弇榴씙뉔➐순斎녭삐हˡ岇䟣陲朏ᩕ隝ݪ綕麣█꧿엞梹䰸⒩ [ 190.150176][ T5693] usb 2-1: Manufacturer: 冹苊ሟ右强໨燎㴭飝⦂놌◫阏搔䀐䙹␣熓㒂부ԷƑꄹ쒠⤕㈥途簚酪珟ퟤ軮㘻鮿鸀揫垸᧤詯灏絒鵡羖㙓࢓ቋ䱯㉔េ釂⿟἖ᩏ⯌뭻 [ 190.185758][ T5693] usb 2-1: SerialNumber: ᮪㵍鞣ﯛ⮴৵돝该璘Ǹ핓ᑛ饟斻ᰲ㝀蕚붨瞋쳱䝑쎿᫥좘巷屼⛨뫁宒㸛䯚๮䅏۩灊ﮣ [ 190.282623][ T5700] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 190.298585][ T5714] rc_core: IR keymap rc-hauppauge not found [ 190.304665][ T5714] Registered IR keymap rc-empty [ 190.310289][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.328386][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.350222][ T5714] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 190.366521][ T5714] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 190.385962][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.408594][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.420720][ T5693] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.430134][ T5693] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 190.448576][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.461956][ T5693] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.469595][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.488080][ T5700] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.491367][ T5693] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 190.508381][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.511833][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.524271][ T5693] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.531639][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.534701][ T5700] usb 1-1: Product: syz [ 190.544425][ T5700] usb 1-1: Manufacturer: syz [ 190.549430][ T5700] usb 1-1: SerialNumber: syz [ 190.557204][ T5700] usb 1-1: config 0 descriptor?? [ 190.558926][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.588303][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.619120][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.632713][ T5693] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 190.647936][ T5693] usb 2-1: USB disconnect, device number 37 [ 190.654134][ T5714] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 190.689589][ T5714] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 190.716695][ T5714] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 190.717029][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.767238][ T5714] usb 4-1: USB disconnect, device number 22 [ 190.779748][ T5700] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.886190][ T5715] usb 3-1: USB disconnect, device number 29 [ 190.991654][ T5715] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 191.026093][ T5715] ftdi_sio 3-1:0.0: device disconnected [ 191.518061][ T7174] netlink: 104 bytes leftover after parsing attributes in process `syz.3.436'. [ 191.558247][ T5728] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 191.731586][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.758457][ T5728] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 191.780923][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.803249][ T5728] usb 2-1: config 0 descriptor?? [ 191.818254][ T5715] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 191.824073][ T5728] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 192.008758][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 192.017429][ T5715] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 192.036784][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.062248][ T5715] usb 4-1: config 0 has no interface number 0 [ 192.073573][ T5715] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 192.083848][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.092528][ T5715] usb 4-1: Product: syz [ 192.101684][ T5715] usb 4-1: Manufacturer: syz [ 192.114927][ T5715] usb 4-1: SerialNumber: syz [ 192.130380][ T5715] usb 4-1: config 0 descriptor?? [ 192.137708][ T7177] fuse: Unknown parameter 'user_d' [ 192.148166][ T5715] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 192.160874][ T5715] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 192.199635][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.208560][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.431593][ T5700] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 192.448548][ T5700] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 192.464237][ T5700] usb 1-1: media controller created [ 192.473267][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.546870][ T5700] i2c i2c-1: Added multiplexed i2c bus 2 [ 192.557835][ T5700] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 192.575819][ T5700] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 192.591622][ T5700] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 192.683367][ T5700] DVB: Unable to find symbol r820t_attach() [ 192.756300][ T5700] usb 1-1: USB disconnect, device number 37 [ 192.836548][ T5715] usb 2-1: USB disconnect, device number 38 [ 193.112842][ T7192] netlink: 188 bytes leftover after parsing attributes in process `syz.4.442'. [ 193.254148][ T7197] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 193.434945][ T7199] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 193.451213][ T7199] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 193.592088][ T7201] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 193.631390][ T7197] bond1: (slave gretap1): making interface the new active one [ 193.643503][ T7197] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 193.685523][ T7213] pimreg1: entered allmulticast mode [ 193.719178][ T5728] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 193.888277][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 193.901657][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.916587][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.939999][ T5728] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 193.969730][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.981947][ T5728] usb 1-1: config 0 descriptor?? [ 193.999067][ T5728] hub 1-1:0.0: USB hub found [ 194.030542][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 194.199224][ T5728] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 194.300983][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307616][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.591603][ T5714] usb 4-1: USB disconnect, device number 23 [ 194.651669][ T5728] hid-generic 0003:046D:C31C.000D: unknown main item tag 0x0 [ 194.741259][ T5728] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 194.903864][ T5728] usb 1-1: USB disconnect, device number 38 [ 195.038267][ T5715] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 195.116324][ T7260] fido_id[7260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 195.230760][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.269073][ T5715] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 195.301889][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.341629][ T5715] usb 2-1: config 0 descriptor?? [ 195.367811][ T5715] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 195.408840][ T5728] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 195.578319][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 195.602238][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.613788][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.454'. [ 195.700951][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.733326][ T5728] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 195.767231][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.782876][ T7278] macsec1: entered promiscuous mode [ 195.799745][ T5728] usb 1-1: config 0 descriptor?? [ 195.821174][ T5728] hub 1-1:0.0: USB hub found [ 196.013774][ T5728] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 196.033363][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 196.220649][ T5728] usbhid 1-1:0.0: can't add hid device: -71 [ 196.227993][ T5728] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 196.260831][ T5728] usb 1-1: USB disconnect, device number 39 [ 196.298564][ T5700] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 196.480016][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.494403][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 196.501281][ T5714] usb 2-1: USB disconnect, device number 39 [ 196.510438][ T5700] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 196.556781][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.600934][ T5700] usb 3-1: config 0 descriptor?? [ 196.738943][ T5728] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 196.825693][ T5700] ath6kl: Failed to submit usb control message: -71 [ 196.833968][ T5700] ath6kl: unable to send the bmi data to the device: -71 [ 196.841595][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 196.853855][ T5700] ath6kl: Unable to send get target info: -71 [ 196.865363][ T5700] ath6kl: Failed to init ath6kl core: -71 [ 196.872905][ T5700] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 196.893321][ T5700] usb 3-1: USB disconnect, device number 30 [ 196.898414][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 196.910020][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.923733][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.934488][ T5728] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.945832][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.964810][ T5728] usb 1-1: config 0 descriptor?? [ 196.977460][ T5728] hub 1-1:0.0: USB hub found [ 197.008292][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 197.019874][ T24] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.039819][ T5715] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 197.058437][ T24] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.074816][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.083661][ T29] audit: type=1326 audit(1779472930.862:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.3.465" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dfab9ce59 code=0x0 [ 197.109571][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 197.120013][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.134441][ T24] usb 5-1: config 0 descriptor?? [ 197.140952][ T7304] gre0: entered allmulticast mode [ 197.173746][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.190277][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.200645][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.224166][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.237472][ T5715] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 197.246227][ T5715] usb 2-1: config 0 has no interface number 0 [ 197.255423][ T5715] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 197.272717][ T5715] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.284451][ T5715] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 197.293716][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 197.302009][ T5715] usb 2-1: Product: syz [ 197.306214][ T5715] usb 2-1: SerialNumber: syz [ 197.313842][ T5715] usb 2-1: config 0 descriptor?? [ 197.323499][ T5715] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 197.332721][ T5715] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input15 [ 197.488255][ T5714] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 197.552974][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.561872][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.569107][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.576330][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.583613][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.590867][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.598055][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.605138][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 197.605236][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.614220][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.621378][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.636796][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 197.650038][ T5715] usb 2-1: USB disconnect, device number 40 [ 197.652778][ T5714] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.661259][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.665995][ T5714] usb 4-1: config 0 has no interface number 0 [ 197.679773][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.703568][ T5714] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 197.705246][ T5715] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 197.713500][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.751083][ T5714] usb 4-1: Product: syz [ 197.761252][ T5728] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 197.771556][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 197.772401][ T5714] usb 4-1: Manufacturer: syz [ 197.790668][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 197.800947][ T5714] usb 4-1: SerialNumber: syz [ 197.806981][ T5728] usbhid 1-1:0.0: can't add hid device: -71 [ 197.814188][ T5728] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 197.839288][ T5714] usb 4-1: config 0 descriptor?? [ 197.843545][ T24] usb 5-1: USB disconnect, device number 30 [ 197.901741][ T5728] usb 1-1: USB disconnect, device number 40 [ 198.074095][ T5714] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 198.091805][ T5714] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.112572][ T5714] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 198.126434][ T5714] usb 4-1: media controller created [ 198.151498][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.168907][ T5715] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 198.339153][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 198.352691][ T5715] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 198.378382][ T5715] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 198.401199][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.414065][ T5715] usb 2-1: Product: syz [ 198.422061][ T5715] usb 2-1: Manufacturer: syz [ 198.427133][ T5715] usb 2-1: SerialNumber: syz [ 198.439114][ T5715] usb 2-1: config 0 descriptor?? [ 198.451384][ T5715] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 198.463857][ T5715] usb 2-1: Detected FT232R [ 198.654926][ T5715] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 198.778491][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 198.876649][ T5715] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 198.890017][ T5715] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 198.950357][ T24] usb 5-1: config 0 has no interfaces? [ 198.961287][ T24] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 198.982341][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.999247][ T24] usb 5-1: Product: syz [ 199.006401][ T24] usb 5-1: Manufacturer: syz [ 199.012606][ T24] usb 5-1: SerialNumber: syz [ 199.029831][ T24] usb 5-1: config 0 descriptor?? [ 199.145516][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.472'. [ 199.261804][ T5714] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 199.320980][ T5715] usb 5-1: USB disconnect, device number 31 [ 199.379115][ T5714] usb 4-1: USB disconnect, device number 24 [ 199.432192][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 199.588754][ T24] usb 3-1: device descriptor read/64, error -71 [ 199.839029][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 199.875003][ T7339] netlink: 188 bytes leftover after parsing attributes in process `syz.0.474'. [ 199.988639][ T24] usb 3-1: device descriptor read/64, error -71 [ 200.064340][ T7341] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 200.119878][ T7341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.129919][ T24] usb usb3-port1: attempt power cycle [ 200.194542][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 200.244798][ T7341] bond2: (slave geneve2): making interface the new active one [ 200.258272][ T5714] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 200.273616][ T7341] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 200.430992][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.447460][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.466449][ T5714] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 200.481749][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.505119][ T5714] usb 1-1: config 0 descriptor?? [ 200.519153][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 200.548962][ T24] usb 3-1: device descriptor read/8, error -71 [ 200.638213][ T5715] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 200.732119][ T5714] usbhid 1-1:0.0: can't add hid device: -71 [ 200.743823][ T5714] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 200.757645][ T5714] usb 1-1: USB disconnect, device number 41 [ 200.788439][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 200.798320][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 200.805596][ T5715] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 200.827791][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.838335][ T5700] usb 2-1: USB disconnect, device number 41 [ 200.845948][ T24] usb 3-1: device descriptor read/8, error -71 [ 200.882418][ T5715] usb 5-1: config 0 descriptor?? [ 200.902580][ T5700] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 200.926038][ T5700] ftdi_sio 2-1:0.0: device disconnected [ 200.953647][ T7352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.973221][ T24] usb usb3-port1: unable to enumerate USB device [ 200.981752][ T7352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.101989][ T5715] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 201.144767][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.162460][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.184110][ T5715] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 201.200851][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.217896][ T5715] usb 5-1: media controller created [ 201.218248][ T5693] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 201.257438][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.354384][ T5715] DVB: Unable to find symbol dib7000p_attach() [ 201.362903][ T5715] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 201.488260][ T5715] rc_core: IR keymap rc-dib0700-rc5 not found [ 201.494553][ T5715] Registered IR keymap rc-empty [ 201.503276][ T5715] dvb-usb: could not initialize remote control. [ 201.509996][ T5715] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 201.543293][ T5715] usb 5-1: USB disconnect, device number 32 [ 201.620237][ T5715] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 201.918298][ T5693] usb 1-1: device descriptor read/64, error -71 [ 201.998920][ T10] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 202.174784][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.189505][ T5693] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 202.207688][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.222540][ T10] usb 4-1: Product: syz [ 202.227000][ T10] usb 4-1: Manufacturer: syz [ 202.232178][ T10] usb 4-1: SerialNumber: syz [ 202.241468][ T10] usb 4-1: config 0 descriptor?? [ 202.369818][ T7379] libceph: resolve '4' (ret=-3): failed [ 202.388999][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 202.402676][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.415765][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.484'. [ 202.424961][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.425773][ T7379] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.446484][ T5693] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.464912][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.493085][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.524602][ T5693] usb 1-1: config 0 descriptor?? [ 202.543569][ T5693] hub 1-1:0.0: USB hub found [ 202.617035][ T7379] warning: `syz.2.486' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 202.743146][ T5693] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 202.946833][ T5693] usbhid 1-1:0.0: can't add hid device: -71 [ 202.965210][ T5693] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 203.019739][ T5693] usb 1-1: USB disconnect, device number 43 [ 203.469558][ T5693] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 203.650039][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 203.671240][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.708113][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.733952][ T5693] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.756921][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.800875][ T5693] usb 1-1: config 0 descriptor?? [ 203.819601][ T5693] hub 1-1:0.0: USB hub found [ 203.895359][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.923668][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.022808][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.047717][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.081042][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.107761][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.163367][ T10] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 204.179365][ T10] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 204.190649][ T10] usb 4-1: media controller created [ 204.206798][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.353675][ T10] i2c i2c-1: Added multiplexed i2c bus 2 [ 204.359724][ T5728] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 204.370915][ T10] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 204.394702][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 204.406980][ T10] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 204.457776][ T10] DVB: Unable to find symbol r820t_attach() [ 204.486467][ T10] usb 4-1: USB disconnect, device number 25 [ 204.537187][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.555763][ T5728] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 204.571390][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.585982][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 204.612975][ T5693] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 204.627663][ T5728] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.643804][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.653645][ T5693] usbhid 1-1:0.0: can't add hid device: -71 [ 204.661033][ T5700] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 204.669006][ T5693] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 204.678969][ T5728] usb 3-1: Product: syz [ 204.684959][ T5728] usb 3-1: Manufacturer: syz [ 204.692532][ T5728] usb 3-1: SerialNumber: syz [ 204.702090][ T5728] usb 3-1: config 0 descriptor?? [ 204.714867][ T5728] usb 3-1: selecting invalid altsetting 0 [ 204.723995][ T5693] usb 1-1: USB disconnect, device number 44 [ 204.818674][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 204.840609][ T5700] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 204.864651][ T5700] usb 2-1: config 0 has no interface number 0 [ 204.887067][ T5700] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 204.915122][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.944025][ T5700] usb 2-1: Product: syz [ 204.961451][ T5700] usb 2-1: Manufacturer: syz [ 204.974820][ T5700] usb 2-1: SerialNumber: syz [ 204.990220][ T5700] usb 2-1: config 0 descriptor?? [ 205.023726][ T5728] usb 3-1: USB disconnect, device number 35 [ 205.239809][ T7413] FAULT_INJECTION: forcing a failure. [ 205.239809][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 205.258329][ T5693] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 205.277044][ T7413] CPU: 1 UID: 0 PID: 7413 Comm: syz.0.494 Not tainted syzkaller #0 PREEMPT(full) [ 205.277064][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.277071][ T7413] Call Trace: [ 205.277079][ T7413] [ 205.277084][ T7413] dump_stack_lvl+0xe8/0x150 [ 205.277102][ T7413] should_fail_ex+0x412/0x560 [ 205.277118][ T7413] ? __d_alloc+0x37/0x6f0 [ 205.277133][ T7413] should_failslab+0xa8/0x100 [ 205.277150][ T7413] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 205.277172][ T7413] __d_alloc+0x37/0x6f0 [ 205.277189][ T7413] d_alloc+0x4b/0x190 [ 205.277201][ T7413] ? lookup_one_qstr_excl+0xc4/0x360 [ 205.277216][ T7413] lookup_one_qstr_excl+0xd8/0x360 [ 205.277230][ T7413] ? lookup_noperm_common+0x245/0x430 [ 205.277244][ T7413] start_dirop+0x5c/0x90 [ 205.277257][ T7413] simple_start_creating+0xcc/0x110 [ 205.277272][ T7413] ? __pfx_simple_start_creating+0x10/0x10 [ 205.277286][ T7413] ? mntput+0x65/0xc0 [ 205.277299][ T7413] debugfs_start_creating+0xdb/0x1a0 [ 205.277311][ T7413] debugfs_create_dir+0x24/0x350 [ 205.277323][ T7413] ieee80211_debugfs_recreate_netdev+0x20c/0x1460 [ 205.277345][ T7413] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 205.277362][ T7413] ? ieee80211_setup_sdata+0x942/0xbf0 [ 205.277379][ T7413] ieee80211_if_change_type+0x508/0x940 [ 205.277396][ T7413] ieee80211_change_iface+0xdf/0x4e0 [ 205.277412][ T7413] cfg80211_change_iface+0x45e/0xa80 [ 205.277431][ T7413] nl80211_set_interface+0x773/0xa90 [ 205.277451][ T7413] ? __pfx_nl80211_set_interface+0x10/0x10 [ 205.277473][ T7413] genl_family_rcv_msg_doit+0x22a/0x330 [ 205.277490][ T7413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 205.277508][ T7413] ? bpf_lsm_capable+0x9/0x20 [ 205.277518][ T7413] ? security_capable+0x7e/0x2c0 [ 205.277543][ T7413] genl_rcv_msg+0x61c/0x7a0 [ 205.277568][ T7413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.277579][ T7413] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 205.277591][ T7413] ? __pfx_nl80211_set_interface+0x10/0x10 [ 205.277604][ T7413] ? __pfx_nl80211_post_doit+0x10/0x10 [ 205.277617][ T7413] ? __pfx_ref_tracker_free+0x10/0x10 [ 205.277630][ T7413] ? __asan_memcpy+0x40/0x70 [ 205.277642][ T7413] ? __skb_clone+0x63/0x7a0 [ 205.277661][ T7413] netlink_rcv_skb+0x232/0x4b0 [ 205.277677][ T7413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.277689][ T7413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.277711][ T7413] ? down_read+0x270/0x2e0 [ 205.277722][ T7413] ? genl_rcv+0xd/0x40 [ 205.277733][ T7413] genl_rcv+0x28/0x40 [ 205.277743][ T7413] netlink_unicast+0x75c/0x8e0 [ 205.277762][ T7413] netlink_sendmsg+0x813/0xb40 [ 205.277782][ T7413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.277798][ T7413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 205.277813][ T7413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.277829][ T7413] ____sys_sendmsg+0x972/0x9f0 [ 205.277844][ T7413] ? __might_fault+0xaf/0x130 [ 205.277861][ T7413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.277880][ T7413] ? import_iovec+0x73/0xa0 [ 205.277898][ T7413] ___sys_sendmsg+0x2a5/0x360 [ 205.277912][ T7413] ? __lock_acquire+0x6b5/0x2cf0 [ 205.277932][ T7413] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.277966][ T7413] ? __fget_files+0x2a/0x420 [ 205.277977][ T7413] ? __fget_files+0x3a0/0x420 [ 205.277995][ T7413] __x64_sys_sendmsg+0x1bd/0x2a0 [ 205.278011][ T7413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.278031][ T7413] ? __pfx_ksys_write+0x10/0x10 [ 205.278050][ T7413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.278061][ T7413] do_syscall_64+0x15f/0xf80 [ 205.278075][ T7413] ? trace_irq_disable+0x3b/0x140 [ 205.278091][ T7413] ? clear_bhb_loop+0x40/0x90 [ 205.278104][ T7413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.278114][ T7413] RIP: 0033:0x7fea0779ce59 [ 205.278130][ T7413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.278144][ T7413] RSP: 002b:00007fea08725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.278162][ T7413] RAX: ffffffffffffffda RBX: 00007fea07a15fa0 RCX: 00007fea0779ce59 [ 205.278174][ T7413] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 205.278185][ T7413] RBP: 00007fea08725090 R08: 0000000000000000 R09: 0000000000000000 [ 205.278195][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.278204][ T7413] R13: 00007fea07a16038 R14: 00007fea07a15fa0 R15: 00007fea07b3fa48 [ 205.278235][ T7413] [ 205.920822][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.968256][ T5693] usb 4-1: Using ep0 maxpacket: 32 [ 205.983481][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.000580][ T5693] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 206.031706][ T5700] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 206.040762][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.048672][ T5700] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.060686][ T5700] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 206.071907][ T5700] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 206.098523][ T5700] usb 2-1: USB disconnect, device number 42 [ 206.115735][ T5693] usb 4-1: config 0 descriptor?? [ 206.161285][ T29] audit: type=1326 audit(1779472939.942:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca659ce59 code=0x7ffc0000 [ 206.162446][ T7421] FAULT_INJECTION: forcing a failure. [ 206.162446][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 206.199365][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.1.498 Not tainted syzkaller #0 PREEMPT(full) [ 206.199389][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.199400][ T7421] Call Trace: [ 206.199407][ T7421] [ 206.199413][ T7421] dump_stack_lvl+0xe8/0x150 [ 206.199437][ T7421] should_fail_ex+0x412/0x560 [ 206.199465][ T7421] should_failslab+0xa8/0x100 [ 206.199494][ T7421] __kmalloc_cache_noprof+0x88/0x660 [ 206.199518][ T7421] ? audit_log_d_path+0xb8/0x1a0 [ 206.199544][ T7421] audit_log_d_path+0xb8/0x1a0 [ 206.199567][ T7421] audit_log_d_path_exe+0x42/0x70 [ 206.199589][ T7421] audit_log_task+0x2c3/0x3d0 [ 206.199611][ T7421] ? __pfx_audit_log_task+0x10/0x10 [ 206.199641][ T7421] audit_seccomp+0x85/0x190 [ 206.199664][ T7421] __seccomp_filter+0xd48/0x1ef0 [ 206.199694][ T7421] ? __pfx___seccomp_filter+0x10/0x10 [ 206.199717][ T7421] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.199739][ T7421] ? __fget_files+0x3a0/0x420 [ 206.199766][ T7421] ? fput+0xa0/0xd0 [ 206.199790][ T7421] ? __pfx_ksys_write+0x10/0x10 [ 206.199818][ T7421] ? __secure_computing+0xe1/0x2a0 [ 206.199835][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.199852][ T7421] do_syscall_64+0xf9/0xf80 [ 206.199877][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.199894][ T7421] ? clear_bhb_loop+0x40/0x90 [ 206.199914][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.199933][ T7421] RIP: 0033:0x7f1ca659ce59 [ 206.199950][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.199966][ T7421] RSP: 002b:00007f1ca7509028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 206.199985][ T7421] RAX: ffffffffffffffda RBX: 00007f1ca6815fa0 RCX: 00007f1ca659ce59 [ 206.200007][ T7421] RDX: 0000000000000001 RSI: 0000000000c00000 RDI: 0000200000400000 [ 206.200019][ T7421] RBP: 00007f1ca7509090 R08: 0000000000000000 R09: 0000000000000002 [ 206.200030][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.200041][ T7421] R13: 00007f1ca6816038 R14: 00007f1ca6815fa0 R15: 00007f1ca693fa48 [ 206.200068][ T7421] [ 206.200264][ T29] audit: type=1326 audit(1779472939.942:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca659ce59 code=0x7ffc0000 [ 206.357746][ T5693] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 206.364983][ T29] audit: type=1326 audit(1779472939.942:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca659ce59 code=0x7ffc0000 [ 206.459631][ T7428] syz_tun: entered allmulticast mode [ 206.478606][ T5693] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.496291][ T29] audit: type=1326 audit(1779472939.942:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca659ce59 code=0x7ffc0000 [ 206.523685][ T7415] tipc: Can't bind to reserved service type 2 [ 206.526322][ T5693] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 206.552957][ T5693] usb 4-1: media controller created [ 206.589668][ T29] audit: type=1326 audit(1779472939.942:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ca655d68e code=0x7ffc0000 [ 206.598008][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.635244][ T7428] bond0: entered promiscuous mode [ 206.648328][ T7428] bond_slave_0: entered promiscuous mode [ 206.668468][ T7428] bond_slave_1: entered promiscuous mode [ 206.675875][ T29] audit: type=1326 audit(1779472939.942:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1ca655d68e code=0x7ffc0000 [ 206.726908][ T29] audit: type=1326 audit(1779472939.942:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f1ca659ce59 code=0x7ffc0000 [ 206.750519][ T29] audit: type=1326 audit(1779472940.052:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1ca655d68e code=0x7ffc0000 [ 206.778233][ T5700] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 206.788497][ T29] audit: type=1326 audit(1779472940.052:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1ca655d68e code=0x7ffc0000 [ 206.814650][ T29] audit: type=1326 audit(1779472940.052:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1ca655d68e code=0x7ffc0000 [ 206.961776][ T5700] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 206.970055][ T5700] usb 5-1: config 2 has an invalid descriptor of length 183, skipping remainder of the config [ 206.981929][ T5700] usb 5-1: config 2 has no interface number 0 [ 206.995350][ T7442] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 207.015668][ T5700] usb 5-1: config 2 interface 79 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 207.036169][ T5700] usb 5-1: config 2 interface 79 has no altsetting 0 [ 207.084640][ T5700] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 207.094352][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.127230][ T5700] usb 5-1: Product: syz [ 207.159943][ T5700] usb 5-1: Manufacturer: syz [ 207.176320][ T5700] usb 5-1: SerialNumber: syz [ 207.437928][ T5700] usb 5-1: USB disconnect, device number 33 [ 207.548612][ T5693] stb0899_attach: Driver disabled by Kconfig [ 207.561745][ T5693] az6027: no front-end attached [ 207.561745][ T5693] [ 207.596731][ T5693] az6027: usb out operation failed. (-71) [ 207.619496][ T5693] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 207.640909][ T5693] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 207.693662][ T5693] dvb-usb: schedule remote query interval to 400 msecs. [ 207.707822][ T5693] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 207.733975][ T7451] binfmt_misc: register: failed to install interpreter file ./file0 [ 207.759419][ T5693] usb 4-1: USB disconnect, device number 26 [ 207.818258][ T5715] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 207.898443][ T5693] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 207.989975][ T5715] usb 2-1: Using ep0 maxpacket: 32 [ 208.003141][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.024760][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.038311][ T5715] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.048711][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.070955][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 208.083251][ T5715] usb 2-1: config 0 descriptor?? [ 208.100245][ T5715] hub 2-1:0.0: USB hub found [ 208.311446][ T5715] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 208.381830][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 208.390896][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 208.498845][ T5627] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 208.576851][ T7462] binder: 7461:7462 ioctl c0404806 200000000000 returned -22 [ 208.586889][ T7462] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 208.680151][ T5627] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.698238][ T5627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.716533][ T5627] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.721848][ T5715] hid-generic 0003:046D:C31C.000E: unknown main item tag 0x0 [ 208.735474][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.752782][ T5627] usb 5-1: Product: syz [ 208.757934][ T5627] usb 5-1: Manufacturer: syz [ 208.764623][ T7473] FAULT_INJECTION: forcing a failure. [ 208.764623][ T7473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.768110][ T5715] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 208.777855][ T5627] usb 5-1: SerialNumber: syz [ 208.794159][ T5728] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 208.798446][ T7473] CPU: 1 UID: 0 PID: 7473 Comm: syz.3.513 Not tainted syzkaller #0 PREEMPT(full) [ 208.798471][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.798483][ T7473] Call Trace: [ 208.798491][ T7473] [ 208.798508][ T7473] dump_stack_lvl+0xe8/0x150 [ 208.798533][ T7473] should_fail_ex+0x412/0x560 [ 208.798562][ T7473] _copy_to_user+0x31/0xb0 [ 208.798590][ T7473] pagemap_read+0x4dc/0x7c0 [ 208.798619][ T7473] ? __pfx_pagemap_read+0x10/0x10 [ 208.798643][ T7473] ? rw_verify_area+0x2a6/0x4d0 [ 208.798667][ T7473] ? __pfx_pagemap_read+0x10/0x10 [ 208.798688][ T7473] vfs_read+0x20c/0xa70 [ 208.798718][ T7473] ? __pfx_vfs_read+0x10/0x10 [ 208.798743][ T7473] ? __fget_files+0x2a/0x420 [ 208.798766][ T7473] ? __fget_files+0x2a/0x420 [ 208.798785][ T7473] ? __fget_files+0x3a0/0x420 [ 208.798805][ T7473] ? __fget_files+0x2a/0x420 [ 208.798833][ T7473] __x64_sys_pread64+0x199/0x230 [ 208.798860][ T7473] ? __pfx___x64_sys_pread64+0x10/0x10 [ 208.798894][ T7473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.798913][ T7473] do_syscall_64+0x15f/0xf80 [ 208.798937][ T7473] ? trace_irq_disable+0x3b/0x140 [ 208.798964][ T7473] ? clear_bhb_loop+0x40/0x90 [ 208.798985][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.799003][ T7473] RIP: 0033:0x7f9dfab9ce59 [ 208.799020][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.799034][ T7473] RSP: 002b:00007f9dfb998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 208.799054][ T7473] RAX: ffffffffffffffda RBX: 00007f9dfae15fa0 RCX: 00007f9dfab9ce59 [ 208.799067][ T7473] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000003 [ 208.799079][ T7473] RBP: 00007f9dfb998090 R08: 0000000000000000 R09: 0000000000000000 [ 208.799090][ T7473] R10: 0000000ffffffff8 R11: 0000000000000246 R12: 0000000000000002 [ 208.799101][ T7473] R13: 00007f9dfae16038 R14: 00007f9dfae15fa0 R15: 00007f9dfaf3fa48 [ 208.799129][ T7473] [ 209.007076][ T5627] usb 5-1: config 0 descriptor?? [ 209.019211][ T5627] usb 5-1: selecting invalid altsetting 0 [ 209.183910][ T5728] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 209.194770][ T5728] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 209.209069][ T5728] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 209.220878][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.229420][ T5728] usb 1-1: Product: syz [ 209.233646][ T5728] usb 1-1: Manufacturer: syz [ 209.243319][ T5728] usb 1-1: SerialNumber: syz [ 209.255153][ T5700] usb 5-1: USB disconnect, device number 34 [ 209.298047][ T7480] netlink: 'syz.2.515': attribute type 46 has an invalid length. [ 209.358574][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 209.373474][ T7449] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 209.538475][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 209.545621][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.556684][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.566569][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.575773][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.591188][ T24] usb 4-1: config 0 descriptor?? [ 209.603636][ T24] hub 4-1:0.0: USB hub found [ 209.678279][ T5728] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 209.811268][ T24] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 209.833518][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.869514][ T5728] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 209.888486][ T5728] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 209.898913][ T5728] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 209.918612][ T5728] usb 3-1: config 3 has no interface number 0 [ 209.926505][ T5728] usb 3-1: config 3 has no interface number 1 [ 209.941320][ T5728] usb 3-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 209.970652][ T5728] usb 3-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 209.985165][ T5728] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 209.998919][ T5627] usb 2-1: USB disconnect, device number 43 [ 210.014513][ T5728] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 210.037018][ T5728] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 210.057520][ T5728] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 210.075192][ T5728] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 210.099890][ T5728] usb 3-1: config 3 interface 19 has no altsetting 0 [ 210.106728][ T5728] usb 3-1: config 3 interface 4 has no altsetting 0 [ 210.116369][ T5728] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 210.125853][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.136639][ T5728] usb 3-1: Product: syz [ 210.141397][ T5728] usb 3-1: Manufacturer: syz [ 210.146165][ T5728] usb 3-1: SerialNumber: syz [ 210.188728][ T5715] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 210.220680][ T24] hid-generic 0003:046D:C31C.000F: unknown main item tag 0x0 [ 210.232455][ T24] hid-generic 0003:046D:C31C.000F: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 210.341735][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.352082][ T5715] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 210.361635][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.372650][ T5715] usb 5-1: config 0 descriptor?? [ 210.392781][ T5715] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 210.433202][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.443507][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.462476][ T5728] pl2303 3-1:3.19: required endpoints missing [ 210.472089][ T5728] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 210.485039][ T5728] usb 3-1: USB disconnect, device number 36 [ 210.538682][ T5627] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 210.550748][ T10] usb 4-1: USB disconnect, device number 27 [ 210.698446][ T5627] usb 2-1: Using ep0 maxpacket: 32 [ 210.705484][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.717112][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.726940][ T5627] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.736336][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.746393][ T5627] usb 2-1: config 0 descriptor?? [ 210.756115][ T5627] hub 2-1:0.0: USB hub found [ 210.957402][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.966595][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.977092][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.986807][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.264146][ T5728] usb 5-1: USB disconnect, device number 35 [ 211.404042][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.442864][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.477455][ T5627] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 211.517048][ T5627] usbhid 2-1:0.0: can't add hid device: -71 [ 211.532586][ T5627] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 211.618659][ T5627] usb 2-1: USB disconnect, device number 44 [ 211.684944][ T5728] IPVS: starting estimator thread 0... [ 211.798229][ T7506] IPVS: using max 54 ests per chain, 129600 per kthread [ 211.832305][ T5700] usb 1-1: USB disconnect, device number 45 [ 212.093678][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 212.467954][ T7518] netlink: 'syz.1.526': attribute type 46 has an invalid length. [ 212.478236][ T5728] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 212.661289][ T5728] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.690237][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.729844][ T5728] usb 1-1: config 0 descriptor?? [ 212.741977][ T5728] cp210x 1-1:0.0: cp210x converter detected [ 212.759479][ T7522] netlink: 188 bytes leftover after parsing attributes in process `syz.2.527'. [ 213.142708][ T5728] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 213.204814][ T5728] usb 1-1: cp210x converter now attached to ttyUSB0 [ 213.310193][ T5714] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 213.406789][ T5627] usb 1-1: USB disconnect, device number 46 [ 213.456796][ T5627] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.500759][ T5714] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.521659][ T5714] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 213.539150][ T5627] cp210x 1-1:0.0: device disconnected [ 213.549776][ T5714] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 213.574985][ T5714] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 213.590486][ T5714] usb 3-1: config 3 has no interface number 0 [ 213.603488][ T5714] usb 3-1: config 3 has no interface number 1 [ 213.619178][ T5714] usb 3-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 213.644906][ T5714] usb 3-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 213.674300][ T5714] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 213.702137][ T5714] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 213.726038][ T5714] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 213.747501][ T5714] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 213.772206][ T5714] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 213.806811][ T5714] usb 3-1: config 3 interface 19 has no altsetting 0 [ 213.825527][ T5714] usb 3-1: config 3 interface 4 has no altsetting 0 [ 213.843909][ T5714] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 213.859639][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.876388][ T5714] usb 3-1: Product: syz [ 213.886572][ T5714] usb 3-1: Manufacturer: syz [ 213.897185][ T5714] usb 3-1: SerialNumber: syz [ 214.098803][ T7534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 214.193037][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.232696][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.285059][ T5714] pl2303 3-1:3.19: required endpoints missing [ 214.344140][ T5714] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 214.403468][ T5714] usb 3-1: USB disconnect, device number 37 [ 214.538175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 214.568273][ T5627] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 214.738275][ T5627] usb 1-1: Using ep0 maxpacket: 32 [ 214.751894][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.768238][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.787839][ T5627] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.799616][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.829999][ T5627] usb 1-1: config 0 descriptor?? [ 214.864513][ T5627] hub 1-1:0.0: USB hub found [ 215.094048][ T5627] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 215.278371][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 215.438308][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 215.451168][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.465762][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.485364][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.503383][ T5627] hid-generic 0003:046D:C31C.0010: unknown main item tag 0x0 [ 215.518662][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.556040][ T10] usb 3-1: config 0 descriptor?? [ 215.563824][ T5627] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 215.585685][ T10] hub 3-1:0.0: USB hub found [ 215.800552][ T10] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 216.213695][ T10] hid-generic 0003:046D:C31C.0011: unknown main item tag 0x0 [ 216.408985][ T7541] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 216.558683][ T7541] usb 1-1: device descriptor read/64, error -71 [ 216.600408][ T7566] netlink: 'syz.1.538': attribute type 46 has an invalid length. [ 216.808383][ T7541] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 216.897787][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 216.979668][ T7541] usb 1-1: device descriptor read/64, error -71 [ 217.208381][ T5700] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 217.228561][ T7541] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 217.259867][ T7541] usb 1-1: device descriptor read/8, error -71 [ 217.368412][ T5700] usb 2-1: Using ep0 maxpacket: 16 [ 217.376015][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.394833][ T5700] usb 2-1: config 1 interface 0 has no altsetting 0 [ 217.411807][ T5700] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 217.431528][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.451112][ T5700] usb 2-1: Product: syz [ 217.464324][ T5700] usb 2-1: Manufacturer: syz [ 217.475983][ T5700] usb 2-1: SerialNumber: syz [ 217.518328][ T7541] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 218.184814][ T5700] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input20 [ 218.242425][ T5700] usb 2-1: USB disconnect, device number 45 [ 218.249911][ T4977] bcm5974 2-1:1.0: could not read from device [ 218.768266][ T5728] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 218.953142][ T5728] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.975170][ T5728] usb 5-1: config 3 has an invalid interface number: 19 but max is 0 [ 218.995904][ T5728] usb 5-1: config 3 has an invalid interface number: 4 but max is 0 [ 219.025476][ T5728] usb 5-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 219.050812][ T5728] usb 5-1: config 3 has no interface number 0 [ 219.071895][ T5728] usb 5-1: config 3 has no interface number 1 [ 219.096466][ T5728] usb 5-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 219.127166][ T5728] usb 5-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 219.169733][ T5728] usb 5-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 219.198289][ T5728] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 219.228327][ T5728] usb 5-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 219.257841][ T5728] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 219.276547][ T5728] usb 5-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 219.300962][ T5728] usb 5-1: config 3 interface 19 has no altsetting 0 [ 219.312519][ T5728] usb 5-1: config 3 interface 4 has no altsetting 0 [ 219.326339][ T5728] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 219.342641][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.357509][ T5728] usb 5-1: Product: syz [ 219.364419][ T5728] usb 5-1: Manufacturer: syz [ 219.372018][ T5728] usb 5-1: SerialNumber: syz [ 219.654298][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.675902][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.707669][ T5728] pl2303 5-1:3.19: required endpoints missing [ 219.727549][ T5728] pl2303 5-1:3.4: required interrupt-in endpoint missing [ 219.748905][ T5728] usb 5-1: USB disconnect, device number 36 [ 219.772315][ T5775] udevd[5775]: setting mode of /dev/bus/usb/005/036 to 020664 failed: No such file or directory [ 219.789816][ T5775] udevd[5775]: setting owner of /dev/bus/usb/005/036 to uid=0, gid=0 failed: No such file or directory [ 220.076263][ T7599] netlink: 'syz.3.546': attribute type 13 has an invalid length. [ 220.084282][ T7599] netlink: 'syz.3.546': attribute type 17 has an invalid length. [ 220.608769][ T5700] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 220.760312][ T5700] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.769242][ T5700] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.780437][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.791391][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 220.803342][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 220.816661][ T5700] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.826649][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.835273][ T5700] usb 5-1: Product: syz [ 220.840397][ T5700] usb 5-1: Manufacturer: syz [ 220.852123][ T5700] cdc_wdm 5-1:1.0: skipping garbage [ 220.857392][ T5700] cdc_wdm 5-1:1.0: skipping garbage [ 220.866807][ T5700] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 220.873590][ T5700] cdc_wdm 5-1:1.0: Unknown control protocol [ 221.089212][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.119157][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.645844][ T7614] netlink: 'syz.1.550': attribute type 46 has an invalid length. [ 222.620201][ T7541] usb 1-1: device descriptor read/8, error -110 [ 222.751181][ T5627] usb 1-1: USB disconnect, device number 47 [ 222.780613][ T10] hid-generic 0003:046D:C31C.0011: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 222.894285][ T10] usb 3-1: USB disconnect, device number 38 [ 223.091401][ T7632] fido_id[7632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 223.375639][ T7644] netlink: 'syz.1.560': attribute type 195 has an invalid length. [ 223.403059][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 223.571419][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 223.602734][ T10] usb 3-1: config 3 has an invalid interface number: 19 but max is 0 [ 223.627140][ T10] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 223.655976][ T10] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 223.694411][ T10] usb 3-1: config 3 has no interface number 0 [ 223.712969][ T10] usb 3-1: config 3 has no interface number 1 [ 223.721552][ T5627] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 223.735559][ T10] usb 3-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 223.758178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 223.766058][ T10] usb 3-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 223.824498][ T10] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 223.859599][ T10] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 223.886112][ T10] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 223.920305][ T10] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 223.932344][ T5627] usb 1-1: Using ep0 maxpacket: 32 [ 223.950292][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.968365][ T10] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 223.983674][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.011515][ T10] usb 3-1: config 3 interface 19 has no altsetting 0 [ 224.019894][ T5627] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 224.036913][ T10] usb 3-1: config 3 interface 4 has no altsetting 0 [ 224.057697][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.075005][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 224.102627][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.111650][ T5627] usb 1-1: config 0 descriptor?? [ 224.141598][ T5627] hub 1-1:0.0: USB hub found [ 224.146548][ T10] usb 3-1: Product: syz [ 224.155680][ T10] usb 3-1: Manufacturer: syz [ 224.170636][ T10] usb 3-1: SerialNumber: syz [ 224.343466][ T5627] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 224.485302][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.512722][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.587310][ T10] pl2303 3-1:3.19: required endpoints missing [ 224.632958][ T10] pl2303 3-1:3.4: required interrupt-in endpoint missing [ 224.688898][ T10] usb 3-1: USB disconnect, device number 39 [ 224.775800][ T5627] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 224.785985][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 224.809452][ T7653] veth0_virt_wifi: entered promiscuous mode [ 224.818820][ T5627] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 224.835620][ T7653] macsec1: entered promiscuous mode [ 224.854414][ T7653] macsec1: entered allmulticast mode [ 224.898286][ T7653] veth0_virt_wifi: entered allmulticast mode [ 225.017739][ T7653] veth0_virt_wifi: left allmulticast mode [ 225.084315][ T7653] veth0_virt_wifi: left promiscuous mode [ 225.298379][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 225.478248][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 225.491777][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.526602][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.567604][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.594258][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 225.605259][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.629037][ T9] usb 2-1: Product: syz [ 225.637045][ T9] usb 2-1: Manufacturer: syz [ 225.647624][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.566'. [ 225.656616][ T9] usb 2-1: SerialNumber: syz [ 225.666828][ T9] usb 2-1: config 0 descriptor?? [ 225.844156][ T7666] netlink: 'syz.2.566': attribute type 2 has an invalid length. [ 225.852099][ T7666] netlink: 'syz.2.566': attribute type 8 has an invalid length. [ 225.862220][ T7666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.566'. [ 225.916479][ T5627] usb 2-1: USB disconnect, device number 46 [ 226.028645][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 226.208404][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 226.222420][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.253321][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.264483][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.273801][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.284820][ T9] usb 4-1: config 0 descriptor?? [ 226.295607][ T9] hub 4-1:0.0: USB hub found [ 226.348978][ T5728] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 226.497073][ T9] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 226.528591][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 226.541961][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 226.542644][ T5627] usb 5-1: USB disconnect, device number 37 [ 226.548607][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 226.548631][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 226.589689][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.601673][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.624870][ T5728] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.651638][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.687464][ T5728] usb 3-1: config 0 descriptor?? [ 226.701145][ T5728] hub 3-1:0.0: USB hub found [ 226.840916][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.570'. [ 226.892919][ T7676] netlink: 'syz.1.570': attribute type 10 has an invalid length. [ 226.900216][ T5728] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 226.913363][ T9] hid-generic 0003:046D:C31C.0013: unknown main item tag 0x0 [ 226.945200][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.960184][ T7676] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 227.312829][ T5728] hid-generic 0003:046D:C31C.0014: unknown main item tag 0x0 [ 227.688355][ T5631] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 227.704139][ T7692] netlink: 'syz.1.574': attribute type 46 has an invalid length. [ 227.848220][ T5631] usb 5-1: Using ep0 maxpacket: 16 [ 227.857832][ T5631] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.868994][ T5631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.880475][ T5631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.890490][ T5631] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.906089][ T5631] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.921505][ T5631] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 227.931103][ T5631] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 227.939243][ T5631] usb 5-1: Manufacturer: syz [ 227.953600][ T5631] usb 5-1: config 0 descriptor?? [ 228.208377][ T5631] rc_core: IR keymap rc-hauppauge not found [ 228.214364][ T5631] Registered IR keymap rc-empty [ 228.222095][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.248353][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.253914][ T10] usb 1-1: USB disconnect, device number 48 [ 228.267457][ T9] hid-generic 0003:046D:C31C.0013: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 228.271288][ T5631] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 228.301046][ T5728] hid-generic 0003:046D:C31C.0014: hidraw2: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 228.302220][ T5631] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 228.370871][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.399856][ T5627] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 228.418796][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.431161][ T7715] FAULT_INJECTION: forcing a failure. [ 228.431161][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.444938][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.0.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.444967][ T7715] Tainted: [L]=SOFTLOCKUP [ 228.444973][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.444984][ T7715] Call Trace: [ 228.444999][ T7715] [ 228.445006][ T7715] dump_stack_lvl+0xe8/0x150 [ 228.445034][ T7715] should_fail_ex+0x412/0x560 [ 228.445066][ T7715] _copy_to_user+0x31/0xb0 [ 228.445095][ T7715] simple_read_from_buffer+0xe1/0x170 [ 228.445121][ T7715] proc_fail_nth_read+0x1bb/0x230 [ 228.445146][ T7715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.445172][ T7715] ? rw_verify_area+0x2a6/0x4d0 [ 228.445197][ T7715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.445219][ T7715] vfs_read+0x20c/0xa70 [ 228.445247][ T7715] ? __pfx___mutex_lock+0x10/0x10 [ 228.445265][ T7715] ? __pfx_vfs_read+0x10/0x10 [ 228.445290][ T7715] ? __fget_files+0x2a/0x420 [ 228.445315][ T7715] ? __fget_files+0x3a0/0x420 [ 228.445335][ T7715] ? __fget_files+0x2a/0x420 [ 228.445364][ T7715] ksys_read+0x150/0x270 [ 228.445389][ T7715] ? __pfx_ksys_read+0x10/0x10 [ 228.445414][ T7715] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 228.445442][ T7715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.445462][ T7715] do_syscall_64+0x15f/0xf80 [ 228.445487][ T7715] ? trace_irq_disable+0x3b/0x140 [ 228.445515][ T7715] ? clear_bhb_loop+0x40/0x90 [ 228.445537][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.445555][ T7715] RIP: 0033:0x7fea0775d68e [ 228.445573][ T7715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.445588][ T7715] RSP: 002b:00007fea08724fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.445609][ T7715] RAX: ffffffffffffffda RBX: 00007fea087256c0 RCX: 00007fea0775d68e [ 228.445622][ T7715] RDX: 000000000000000f RSI: 00007fea087250a0 RDI: 0000000000000008 [ 228.445634][ T7715] RBP: 00007fea08725090 R08: 0000000000000000 R09: 0000000000000000 [ 228.445646][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.445657][ T7715] R13: 00007fea07a16038 R14: 00007fea07a15fa0 R15: 00007fea07b3fa48 [ 228.445688][ T7715] [ 228.666307][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.688300][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.698240][ T5627] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.708711][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.709944][ T9] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 228.728691][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.748601][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.751354][ T5627] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 228.766857][ T5728] usb 3-1: reset high-speed USB device number 40 using dummy_hcd [ 228.768318][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.798720][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.806071][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.819377][ T5631] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 228.821714][ T5627] usb 2-1: config 0 descriptor?? [ 228.846958][ T5627] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 228.850313][ T5631] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 228.874810][ T5631] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 228.881313][ T7718] syzkaller0: entered promiscuous mode [ 228.901145][ T5631] usb 5-1: USB disconnect, device number 38 [ 228.913261][ T7718] syzkaller0: entered allmulticast mode [ 228.939668][ T5728] usb 3-1: device descriptor read/64, error -71 [ 229.065665][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 229.214218][ T7724] misc userio: No port type given on /dev/userio [ 229.265066][ T7732] FAULT_INJECTION: forcing a failure. [ 229.265066][ T7732] name failslab, interval 1, probability 0, space 0, times 0 [ 229.278783][ T7732] CPU: 1 UID: 0 PID: 7732 Comm: syz.2.583 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.278813][ T7732] Tainted: [L]=SOFTLOCKUP [ 229.278819][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.278830][ T7732] Call Trace: [ 229.278838][ T7732] [ 229.278852][ T7732] dump_stack_lvl+0xe8/0x150 [ 229.278879][ T7732] should_fail_ex+0x412/0x560 [ 229.278909][ T7732] should_failslab+0xa8/0x100 [ 229.278945][ T7732] __kmalloc_noprof+0xe8/0x760 [ 229.278971][ T7732] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.279004][ T7732] tomoyo_realpath_from_path+0xe3/0x5d0 [ 229.279031][ T7732] ? tomoyo_domain+0xd7/0x130 [ 229.279062][ T7732] ? tomoyo_path_number_perm+0x219/0x630 [ 229.279084][ T7732] tomoyo_path_number_perm+0x246/0x630 [ 229.279109][ T7732] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.279130][ T7732] ? __lock_acquire+0x6b5/0x2cf0 [ 229.279166][ T7732] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 229.279209][ T7732] ? __fget_files+0x2a/0x420 [ 229.279233][ T7732] ? __fget_files+0x2a/0x420 [ 229.279254][ T7732] ? __fget_files+0x3a0/0x420 [ 229.279275][ T7732] ? __fget_files+0x2a/0x420 [ 229.279301][ T7732] security_file_ioctl+0xc3/0x2a0 [ 229.279325][ T7732] __se_sys_ioctl+0x47/0x170 [ 229.279351][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.279372][ T7732] do_syscall_64+0x15f/0xf80 [ 229.279397][ T7732] ? trace_irq_disable+0x3b/0x140 [ 229.279424][ T7732] ? clear_bhb_loop+0x40/0x90 [ 229.279447][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.279466][ T7732] RIP: 0033:0x7f3c3e19ce59 [ 229.279484][ T7732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.279500][ T7732] RSP: 002b:00007f3c3f0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.279520][ T7732] RAX: ffffffffffffffda RBX: 00007f3c3e415fa0 RCX: 00007f3c3e19ce59 [ 229.279534][ T7732] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 229.279545][ T7732] RBP: 00007f3c3f0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 229.279557][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.279568][ T7732] R13: 00007f3c3e416038 R14: 00007f3c3e415fa0 R15: 00007f3c3e53fa48 [ 229.279598][ T7732] [ 229.279717][ T7732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.591756][ T9] usb 4-1: USB disconnect, device number 28 [ 229.938886][ T9] usb 2-1: USB disconnect, device number 47 [ 230.019329][ T7748] netlink: 56 bytes leftover after parsing attributes in process `syz.1.588'. [ 230.160055][ T5728] usb 3-1: USB disconnect, device number 40 [ 230.199787][ T5627] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 230.389834][ T5627] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.415275][ T5627] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 230.445927][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.463545][ T5627] usb 1-1: config 0 descriptor?? [ 230.484588][ T5627] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 230.578270][ T5728] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 230.608307][ T5700] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 230.765123][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 230.775357][ T5700] usb 2-1: Using ep0 maxpacket: 16 [ 230.779538][ T5700] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 230.794540][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.803176][ T5728] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 230.803579][ T5700] usb 2-1: Product: syz [ 230.820792][ T5700] usb 2-1: Manufacturer: syz [ 230.825464][ T5700] usb 2-1: SerialNumber: syz [ 230.830449][ T5728] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 230.850324][ T5700] r8152-cfgselector 2-1: Unknown version 0x0000 [ 230.853156][ T5728] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 230.880030][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.880047][ T5700] r8152-cfgselector 2-1: config 0 descriptor?? [ 230.899807][ T5728] usb 3-1: Product: syz [ 230.904126][ T5728] usb 3-1: Manufacturer: syz [ 230.910234][ T5728] usb 3-1: SerialNumber: syz [ 231.083422][ T5700] r8152-cfgselector 2-1: Needed 2 retries to read version [ 231.099394][ T5700] r8152-cfgselector 2-1: Unknown version 0x0000 [ 231.112748][ T5700] r8152-cfgselector 2-1: No union descriptors [ 231.162009][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.175431][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.200691][ T7736] syz_tun: entered promiscuous mode [ 231.259323][ T5627] usb 3-1: USB disconnect, device number 41 [ 231.401161][ T5700] usb 1-1: USB disconnect, device number 49 [ 231.798316][ T5700] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 231.968279][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 231.984811][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.013352][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.037102][ T5700] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.067764][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.083610][ T5700] usb 1-1: config 0 descriptor?? [ 232.098332][ T5700] hub 1-1:0.0: USB hub found [ 232.294587][ T5700] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 232.348340][ T5631] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 232.508221][ T5631] usb 3-1: Using ep0 maxpacket: 8 [ 232.521297][ T5631] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 232.537496][ T5631] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.559620][ T5631] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.596962][ T5631] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.625846][ T5631] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.670355][ T5631] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.693521][ T5631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.707034][ T5700] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0 [ 232.785436][ T5700] hid-generic 0003:046D:C31C.0015: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 232.957552][ T5631] usb 3-1: GET_CAPABILITIES returned 0 [ 232.979644][ T5631] usbtmc 3-1:16.0: can't read capabilities [ 233.059231][ T59] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 233.194634][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.204558][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.213705][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.222815][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.234455][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.243566][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.252985][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.262066][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.278771][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.288009][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.297086][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.306164][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.316546][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 233.323814][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.328350][ T10] usb 3-1: USB disconnect, device number 42 [ 233.332939][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.351843][ T59] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 233.361147][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.382136][ T7761] usb 1-1: reset high-speed USB device number 50 using dummy_hcd [ 233.406654][ T59] usb 5-1: config 0 descriptor?? [ 233.436743][ T5631] r8152-cfgselector 2-1: USB disconnect, device number 48 [ 233.643200][ T59] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 233.664724][ T59] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.688720][ T59] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 233.706729][ T59] usb 5-1: media controller created [ 233.767248][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.893129][ T5631] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 233.956589][ T24] usb 1-1: USB disconnect, device number 50 [ 234.043481][ T59] DVB: Unable to find symbol dib7000p_attach() [ 234.066625][ T59] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 234.081527][ T5631] usb 2-1: Using ep0 maxpacket: 32 [ 234.115724][ T5631] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 234.161538][ T5631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.214565][ T5631] usb 2-1: config 0 descriptor?? [ 234.221283][ T59] rc_core: IR keymap rc-dib0700-rc5 not found [ 234.235227][ T59] Registered IR keymap rc-empty [ 234.449870][ T5631] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 234.459697][ T5631] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.469505][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 234.478249][ T5631] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 234.485999][ T5631] usb 2-1: media controller created [ 234.503556][ T5631] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.548928][ T5715] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 234.628269][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 234.636001][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.647543][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.660922][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.670066][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.681956][ T24] usb 1-1: config 0 descriptor?? [ 234.691088][ T24] hub 1-1:0.0: USB hub found [ 234.720751][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.732182][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.742090][ T5715] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 234.751475][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.763123][ T5715] usb 4-1: config 0 descriptor?? [ 234.891997][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.902574][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.913186][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.923649][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.334997][ T7761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.346981][ T7761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.360318][ T24] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 235.376000][ T5715] usb 4-1: string descriptor 0 read error: -22 [ 235.391736][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 235.399239][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 235.401068][ T7793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.599'. [ 235.419979][ T24] usb 1-1: USB disconnect, device number 51 [ 235.586663][ T5715] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71 [ 235.597369][ T5715] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 235.606407][ T5715] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71 [ 235.620405][ T5715] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 235.629805][ T5715] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 235.653213][ T5715] usb 4-1: USB disconnect, device number 29 [ 235.868314][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 235.931297][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.602'. [ 235.958348][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 235.967384][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 236.044258][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.054625][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 236.064939][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.079275][ T24] usb 3-1: config 0 descriptor?? [ 236.103479][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 236.211152][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 236.214355][ T7808] binder: 7806:7808 ioctl c0046209 0 returned -22 [ 236.538629][ T5631] az6027: usb out operation failed. (-110) [ 236.546856][ T5631] az6027: usb out operation failed. (-32) [ 236.552697][ T5631] stb0899_attach: Driver disabled by Kconfig [ 236.558916][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 236.569232][ T5631] az6027: no front-end attached [ 236.569232][ T5631] [ 236.576626][ T5631] az6027: usb out operation failed. (-32) [ 236.582449][ T5631] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 236.593007][ T5631] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 236.608388][ T5631] dvb-usb: schedule remote query interval to 400 msecs. [ 236.615613][ T5631] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 236.718255][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 236.724920][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.736002][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.746080][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 236.755211][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.767309][ T10] usb 1-1: config 0 descriptor?? [ 236.972044][ T5631] usb 3-1: USB disconnect, device number 43 [ 237.271543][ T7818] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.274639][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 237.291762][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 237.318554][ T10] usb 1-1: USB disconnect, device number 52 [ 237.388238][ T5631] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 237.538635][ T5631] usb 3-1: Using ep0 maxpacket: 16 [ 237.549436][ T5631] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 237.559264][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.567326][ T5631] usb 3-1: Product: syz [ 237.587313][ T5631] usb 3-1: Manufacturer: syz [ 237.598353][ T5631] usb 3-1: SerialNumber: syz [ 237.620958][ T5631] r8152-cfgselector 3-1: Unknown version 0x0000 [ 237.631051][ T5631] r8152-cfgselector 3-1: config 0 descriptor?? [ 237.842445][ T5631] r8152-cfgselector 3-1: Needed 2 retries to read version [ 237.848353][ T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 237.849937][ T5631] r8152-cfgselector 3-1: Unknown version 0x0000 [ 237.865219][ T5631] r8152-cfgselector 3-1: No union descriptors [ 238.006375][ T7831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.015727][ T10] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 238.024840][ T10] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 238.027290][ T7831] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 238.035493][ T10] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 238.035521][ T10] usb 4-1: config 150 has no interface number 0 [ 238.035554][ T10] usb 4-1: config 150 interface 204 has no altsetting 0 [ 238.038045][ T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 238.074680][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.082979][ T10] usb 4-1: Product: syz [ 238.087839][ T10] usb 4-1: Manufacturer: syz [ 238.093302][ T10] usb 4-1: SerialNumber: syz [ 238.314157][ T10] usb 4-1: USB disconnect, device number 30 [ 238.860627][ T59] dvb-usb: could not initialize remote control. [ 238.863296][ T7783] ------------[ cut here ]------------ [ 238.873585][ T7783] usb 5-1: BOGUS control dir, pipe 80002780 doesn't match bRequestType c0 [ 238.874495][ T59] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 238.882244][ T7783] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.1.597/7783 [ 238.882288][ T7783] Modules linked in: [ 238.882348][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.1.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.882372][ T7783] Tainted: [L]=SOFTLOCKUP [ 238.882379][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.882392][ T7783] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 238.882415][ T7783] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 238.882432][ T7783] RSP: 0018:ffffc9001bac7948 EFLAGS: 00010246 [ 238.965615][ T7783] RAX: 0000000000000000 RBX: ffff888030923d00 RCX: 0000000080002780 [ 238.974025][ T7783] RDX: ffff888027920c60 RSI: ffffffff8c809dc0 RDI: ffffffff903e3f40 [ 238.982196][ T7783] RBP: 1ffff1100376922c R08: 00000000000000c0 R09: 0000000000000000 [ 238.991568][ T7783] R10: ffffc9001bac7a40 R11: fffff52003758f54 R12: ffff8880289d4100 [ 238.999706][ T7783] R13: ffff88801bb49160 R14: 0000000080002780 R15: ffff888027920c60 [ 239.007881][ T7783] FS: 00007f1ca75096c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 239.017447][ T7783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.025389][ T7783] CR2: 00007fea07a17dac CR3: 000000007b550000 CR4: 00000000003526f0 [ 239.033741][ T7783] Call Trace: [ 239.037042][ T7783] [ 239.040072][ T7783] ? __init_swait_queue_head+0xa9/0x150 [ 239.045647][ T7783] usb_start_wait_urb+0x13f/0x5b0 [ 239.050776][ T7783] ? rcu_is_watching+0x15/0xb0 [ 239.055571][ T7783] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 239.061207][ T7783] ? trace_kmalloc+0x2a/0xf0 [ 239.061634][ T7837] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 239.065884][ T7783] usb_control_msg+0x234/0x3e0 [ 239.065924][ T7783] dib0700_i2c_xfer+0xbb2/0xf80 [ 239.078729][ T5631] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 239.082920][ T7783] __i2c_transfer+0x79a/0x1f70 [ 239.095325][ T7783] ? i2c_transfer+0xc8/0x2d0 [ 239.100974][ T7783] i2c_transfer+0x1cc/0x2d0 [ 239.105698][ T7783] i2cdev_ioctl_rdwr+0x460/0x740 [ 239.110721][ T7783] i2cdev_ioctl+0x6a5/0x880 [ 239.115703][ T7783] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 239.121286][ T7783] ? __fget_files+0x3a0/0x420 [ 239.125999][ T7783] ? __fget_files+0x2a/0x420 [ 239.130677][ T7783] ? bpf_lsm_file_ioctl+0x9/0x20 [ 239.135656][ T7783] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 239.140736][ T7783] __se_sys_ioctl+0xfc/0x170 [ 239.145746][ T7783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.151913][ T7783] do_syscall_64+0x15f/0xf80 [ 239.156518][ T7783] ? trace_irq_disable+0x3b/0x140 [ 239.158386][ T7837] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 239.161604][ T7783] ? clear_bhb_loop+0x40/0x90 [ 239.175214][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.181680][ T7783] RIP: 0033:0x7f1ca659ce59 [ 239.184776][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'. [ 239.186113][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.186135][ T7783] RSP: 002b:00007f1ca7509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.224233][ T7783] RAX: ffffffffffffffda RBX: 00007f1ca6815fa0 RCX: 00007f1ca659ce59 [ 239.232784][ T7783] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 239.240881][ T7783] RBP: 00007f1ca6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 239.248953][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.256938][ T7783] R13: 00007f1ca6816038 R14: 00007f1ca6815fa0 R15: 00007f1ca693fa48 [ 239.258250][ T5631] usb 1-1: Using ep0 maxpacket: 16 [ 239.265231][ T7783] [ 239.273199][ T7783] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 239.280498][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.1.597 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.291274][ T7783] Tainted: [L]=SOFTLOCKUP [ 239.295612][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.305683][ T7783] Call Trace: [ 239.308971][ T7783] [ 239.312147][ T7783] vpanic+0x56c/0xa60 [ 239.316242][ T7783] ? __pfx__printk+0x10/0x10 [ 239.320952][ T7783] ? __pfx_vpanic+0x10/0x10 [ 239.325563][ T7783] ? is_bpf_text_address+0x292/0x2b0 [ 239.330873][ T7783] ? is_bpf_text_address+0x26/0x2b0 [ 239.336101][ T7783] panic+0xc5/0xd0 [ 239.339835][ T7783] ? __pfx_panic+0x10/0x10 [ 239.344295][ T7783] __warn+0x315/0x4c0 [ 239.348296][ T7783] ? usb_submit_urb+0x1053/0x18b0 [ 239.353433][ T7783] ? usb_submit_urb+0x1053/0x18b0 [ 239.358480][ T7783] __report_bug+0x29a/0x540 [ 239.363116][ T7783] ? usb_submit_urb+0x1053/0x18b0 [ 239.368149][ T7783] ? __pfx___report_bug+0x10/0x10 [ 239.373207][ T7783] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.378438][ T7783] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 239.384258][ T7783] report_bug_entry+0x19a/0x290 [ 239.389203][ T7783] ? usb_submit_urb+0x1115/0x18b0 [ 239.394228][ T7783] ? usb_submit_urb+0x111a/0x18b0 [ 239.399267][ T7783] handle_bug+0xce/0x200 [ 239.403524][ T7783] exc_invalid_op+0x1a/0x50 [ 239.408027][ T7783] asm_exc_invalid_op+0x1a/0x20 [ 239.412889][ T7783] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 239.418523][ T7783] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 239.438142][ T7783] RSP: 0018:ffffc9001bac7948 EFLAGS: 00010246 [ 239.444221][ T7783] RAX: 0000000000000000 RBX: ffff888030923d00 RCX: 0000000080002780 [ 239.452190][ T7783] RDX: ffff888027920c60 RSI: ffffffff8c809dc0 RDI: ffffffff903e3f40 [ 239.460337][ T7783] RBP: 1ffff1100376922c R08: 00000000000000c0 R09: 0000000000000000 [ 239.468322][ T7783] R10: ffffc9001bac7a40 R11: fffff52003758f54 R12: ffff8880289d4100 [ 239.476387][ T7783] R13: ffff88801bb49160 R14: 0000000080002780 R15: ffff888027920c60 [ 239.484373][ T7783] ? usb_submit_urb+0x10a4/0x18b0 [ 239.489413][ T7783] ? __init_swait_queue_head+0xa9/0x150 [ 239.494964][ T7783] usb_start_wait_urb+0x13f/0x5b0 [ 239.499994][ T7783] ? rcu_is_watching+0x15/0xb0 [ 239.504780][ T7783] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 239.510324][ T7783] ? trace_kmalloc+0x2a/0xf0 [ 239.514943][ T7783] usb_control_msg+0x234/0x3e0 [ 239.519708][ T7783] dib0700_i2c_xfer+0xbb2/0xf80 [ 239.524571][ T7783] __i2c_transfer+0x79a/0x1f70 [ 239.529343][ T7783] ? i2c_transfer+0xc8/0x2d0 [ 239.533928][ T7783] i2c_transfer+0x1cc/0x2d0 [ 239.538426][ T7783] i2cdev_ioctl_rdwr+0x460/0x740 [ 239.543376][ T7783] i2cdev_ioctl+0x6a5/0x880 [ 239.547871][ T7783] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 239.552894][ T7783] ? __fget_files+0x3a0/0x420 [ 239.557568][ T7783] ? __fget_files+0x2a/0x420 [ 239.562251][ T7783] ? bpf_lsm_file_ioctl+0x9/0x20 [ 239.567189][ T7783] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 239.572204][ T7783] __se_sys_ioctl+0xfc/0x170 [ 239.576812][ T7783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.582880][ T7783] do_syscall_64+0x15f/0xf80 [ 239.587470][ T7783] ? trace_irq_disable+0x3b/0x140 [ 239.592492][ T7783] ? clear_bhb_loop+0x40/0x90 [ 239.597160][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.603047][ T7783] RIP: 0033:0x7f1ca659ce59 [ 239.607452][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.627047][ T7783] RSP: 002b:00007f1ca7509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.635462][ T7783] RAX: ffffffffffffffda RBX: 00007f1ca6815fa0 RCX: 00007f1ca659ce59 [ 239.643524][ T7783] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 239.651501][ T7783] RBP: 00007f1ca6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 239.659471][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.667520][ T7783] R13: 00007f1ca6816038 R14: 00007f1ca6815fa0 R15: 00007f1ca693fa48 [ 239.675682][ T7783] [ 239.679415][ T7783] Kernel Offset: disabled [ 239.683768][ T7783] Rebooting in 86400 seconds..