last executing test programs: 5.449824344s ago: executing program 1 (id=314): futex(0x0, 0xa, 0x2, 0x0, 0x0, 0x1) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 4.714179025s ago: executing program 1 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x10}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 4.635092341s ago: executing program 1 (id=321): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000b40)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7fff, 0x1, 0x0, 0x0, 0x0, [{0xaf4, 0x3, 0xa}]}) (fail_nth: 4) 4.280280998s ago: executing program 1 (id=322): syz_usb_connect(0x3, 0x231, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0xf7, 0x39, 0xe5, 0x40, 0x14aa, 0x226, 0x5308, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21f, 0x1, 0xfd, 0x6, 0x30, 0x5, [{{0x9, 0x4, 0xe4, 0x8, 0x3, 0x5c, 0xcd, 0xd6, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x9}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0x7, "901e662a3495"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x44, 0x1, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x0, 0x3, 0xf, 0x1, 0x7, 0x5c}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x4, 0x5, [0x3, 0x6, 0x4, 0xc, 0x3], 0x5}, @extension_unit={0xc, 0x24, 0x8, 0x3, 0x4, 0x1, "02c0afb6c4"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x28, "5f41b777b4f8"}]}], [{{0x9, 0x5, 0x2, 0x8, 0x40, 0x8, 0x3, 0x7, [@generic={0x7a, 0xf, "4e4a7263ee4eda607af331babb1a5924926e9da04297ebe7dc3320a1cacecf98df5667f6385acd1b498641d8e2c222ba2e66a05246437d37725cb8e9116c008be4ca9cc0e282dbdb7846b9a28f37d62f05e20d19fa7fc6c1df3297bc999788bcb8fd1573695c311d3a9f54e432a925fb0f521ea4685a618f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xf31}]}}, {{0x9, 0x5, 0x6, 0x0, 0x208, 0xee, 0x6, 0xfe, [@generic={0x9f, 0x10, "eb485de02aee6d8fcedaa36237e616f90248ddc4ea5d68e277a49bb5e210433e2189a08512d6079b8e76dcbba3ad10a03cd1e09b68024f0f47efa4f1c223478491defdbdce1239b94abb0bfc52f7ec205a30ae03bf236f2c660baf6cc808bbe0f774850237a3c28433ee5029d709ae7634f28ec232faae2d781024d6e6778f4ae2161b5faedef48a33e56b38d5711d88a0f03dcee1e9ebbffe59fa5590"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x8e}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x5, 0x3, 0xd8, [@generic={0x78, 0x23, "19ae2a50fef3acc0f600a7faf92f7916108954296a3e8861c2566404251a8ae0e641fb601578657efe8b434a26bbd083ee3fd9e9a414507a4f9b03231bce0db06d19f7574d55567270dd9f2edb7d68fec944eedd5b9ae6f67dbb10f1c04f4bd56af53409c816ad7ff82d14c97e91ae95cafbb9a98192"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xf, 0x80, 0xd, 0xff, 0x7f}, 0x31, &(0x7f0000000100)={0x5, 0xf, 0x31, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x4, 0x1000}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x1, 0xc46e}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "1c9295836a6159e8ff9bc05c0abc9015"}]}}) socket$kcm(0x10, 0x2, 0x4) 3.953957516s ago: executing program 0 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0203050009000a0040006b3739ed002889ff00000000000000000000000000ff0000ff02"], 0x5e) 3.872036176s ago: executing program 3 (id=327): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a4, &(0x7f0000000180)={{@any, 0xffffffff}, @host}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r2, &(0x7f0000000080)={0x264, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 3.685962571s ago: executing program 3 (id=328): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) mremap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004a6000/0x2000)=nil) 3.479641264s ago: executing program 3 (id=329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x10}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 3.432597806s ago: executing program 3 (id=330): unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000014000000000001"], 0xffe) 2.88298614s ago: executing program 1 (id=331): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x38, {0x2, 0x4e22, @empty}, 'veth1_to_bond\x00'}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x4040054) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 2.401860263s ago: executing program 2 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffff}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 2.401476365s ago: executing program 0 (id=333): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x640a3000) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00", @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) fstat(r2, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(0xee00) setfsuid(r5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r7, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000180)=0x4) r8 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x9, 0x3014, 0x5, 0x1, 0x2, 0x2, 0x5}}) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7fff, 0x45, 0x0, 0x6, 0x0, [{0x9, 0x0, 0x7}, {0x7fffffff, 0x7, 0x402}, {0x8, 0x7b2, 0x7f}, {0xeee, 0x8, 0x8000}, {0x1808, 0xae44, 0x3}, {0x6, 0x3ff, 0x1}, {0x6, 0x5, 0x3}, {0x8, 0x3ff, 0x70a837d0}, {0x7, 0xec8e, 0x6}, {0x2, 0x0, 0x9}, {0x1, 0x8, 0x8}, {0x1, 0x8, 0xbe24}, {0xfffffffc, 0x7, 0x80}, {0xbb, 0xe, 0xd4}, {0x8, 0x3, 0xfffffff8}, {0x0, 0xc, 0x4}, {0x7, 0x6, 0x8}, {0x73c, 0x8, 0x1}, {0xffff7fff, 0x8, 0x4}, {0xd, 0xa5d4, 0x7}, {0xffffffff, 0x40000000, 0xfff}, {0x6, 0x4, 0x6ae0}, {0x0, 0x1}, {0x2, 0x10001, 0x10400}, {0x0, 0x4}, {0x86bf, 0x2, 0x7}, {0x1000, 0xe67, 0x2fba6c43}, {0x3, 0x80000001, 0x4}, {0x5, 0x8, 0x4}, {0x7ff, 0x40, 0x673f}, {0x9, 0x7, 0x4}, {0xffff, 0xe9, 0x3}, {0x8, 0x9, 0x7}, {0x20000, 0x800, 0x9}, {0x81, 0x4, 0x6}, {0x5, 0x76, 0x4102faa0}, {0x3, 0x10000, 0x8}, {0x8, 0x6, 0xfffffff7}, {0xb1e, 0x0, 0x7}, {0x4d6f3b5c, 0x5, 0x9}, {0x80, 0xaab, 0x90}, {0x0, 0xfc, 0x800}, {0x9, 0x8, 0x1}, {0x0, 0x2, 0x6}, {0x586, 0x0, 0xfffffffc}, {0x4, 0x6, 0x4}, {0x78, 0x3, 0xfffff6dd}, {0x101, 0xfffffff9, 0x7f}, {0x5, 0x9, 0x6}, {0x9, 0x9, 0xf}, {0x9e8, 0x6, 0x4}, {0x0, 0x80000000, 0x1}, {0xd, 0x7, 0x8}, {0x5, 0x7, 0xfff}, {0x8001, 0x248ec000, 0x9}, {0x57e95649, 0x5, 0x5}, {0x6, 0x6, 0xa57}, {0x6, 0xc, 0x3}, {0x87a, 0x457, 0x5}, {0x9, 0x6, 0x9}, {0x1000, 0xd, 0x8}, {0x1, 0x7, 0x400}, {0x2, 0x9, 0x10000}, {0x8}, {0x0, 0xbd, 0x80000000}, {0x71e, 0x1, 0xffff8001}, {0x4, 0xfffffff9, 0x6}, {0x1, 0x3, 0x9}, {0x4, 0xe3df, 0x7fffffff}]}) 2.348329397s ago: executing program 2 (id=334): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r2, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) 2.225935858s ago: executing program 0 (id=335): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x64, 0x20044804}, 0x40040) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0x0) 2.125949686s ago: executing program 2 (id=336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000005000000000106"], 0xffe) 2.125644016s ago: executing program 0 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000cc0)=""/260, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000800)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100}, 0x7243}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000940)=""/238, 0x13e}, {&(0x7f0000002b80)=""/4098, 0x1002}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x8, 0x22, 0x0) 2.077366395s ago: executing program 0 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 1.974276961s ago: executing program 0 (id=339): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xce, 0x0, 0x0) shutdown(r0, 0x1) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_connect(0x5, 0xeb, &(0x7f0000000b80)={{0x12, 0x1, 0x110, 0xe5, 0xd1, 0xfe, 0xff, 0x5c6, 0x9010, 0x3c0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x1, 0x1, 0x0, 0x30, 0x81, [{{0x9, 0x4, 0x5, 0x1, 0x2, 0x43, 0x73, 0x91, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ce08"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x40, 0x8}}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x2, 0x81, 0x6, [@generic={0x81, 0x3, "055caebf40b574d31b8c9b2e32188c7a1ee2304a8c04374224d8cf18e11b6825ee52353ff08d1df67baa35c4e0e0431baf7fef22dad53579593b699edb1e010e700e0877a747959b38b3c27c6f04d24478634cc4c2d9d834b3c8a0755508bae20d0fcbb4aa8a96b8620049a59a5b28db13d41def38a2a2a199c6ece5169584"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x8000}, @generic={0x14, 0x2, "564f4da5484cb0f21bc98464ac1f3cd0ab4f"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") getsockopt$ax25_int(r2, 0x101, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) unshare(0x22020600) syz_clone(0x2c9a4080, 0x0, 0x5f5, 0x0, 0x0, 0xfffffffffffffffc) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x1208002, 0x0) 1.909892317s ago: executing program 3 (id=340): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) readv(r2, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/228, 0xe4}], 0x1) 1.84239879s ago: executing program 3 (id=341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x4, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x501680, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002206000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000440)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x40, 0xc, 0x5, "8020a91f06"}, 0x0, 0x0, 0x0, 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r4, 0x99b33000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1.71189295s ago: executing program 2 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x5f00, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x100000000000000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.46532687s ago: executing program 2 (id=343): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r1) chmod(&(0x7f0000000100)='./file2\x00', 0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000080)=""/57, 0x39}], 0x1, 0x5, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x200001d0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r6, &(0x7f0000000080)=[@t={0x81, 0x1}, @l={0x92, 0x0, 0xc0}], 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0300000000080000f9ffffff00000000", @ANYRES8=r4, @ANYRES64=r5/1000+10000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESHEX=r6], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24008044) 1.048287398s ago: executing program 1 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0900000000000000000002000000140001800500200001"], 0x28}}, 0x0) syz_io_uring_setup(0x897, &(0x7f0000000500)={0x0, 0xf43f, 0x1, 0x3, 0x67, 0x0, r1}, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x12480, 0x43) 0s ago: executing program 2 (id=345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): ave_1: entered allmulticast mode [ 87.154894][ T5836] bridge_slave_1: entered promiscuous mode [ 87.264897][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.272157][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.279877][ T5835] bridge_slave_0: entered allmulticast mode [ 87.287763][ T5835] bridge_slave_0: entered promiscuous mode [ 87.317842][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.330565][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.339875][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.347164][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.354401][ T5835] bridge_slave_1: entered allmulticast mode [ 87.362707][ T5835] bridge_slave_1: entered promiscuous mode [ 87.369797][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.377246][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.384424][ T5834] bridge_slave_0: entered allmulticast mode [ 87.392029][ T5834] bridge_slave_0: entered promiscuous mode [ 87.457966][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.465123][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.472962][ T5834] bridge_slave_1: entered allmulticast mode [ 87.481682][ T5834] bridge_slave_1: entered promiscuous mode [ 87.521329][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.544771][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.552322][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.560316][ T5833] bridge_slave_0: entered allmulticast mode [ 87.568840][ T5833] bridge_slave_0: entered promiscuous mode [ 87.578298][ T5836] team0: Port device team_slave_0 added [ 87.591947][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.630891][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.640397][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.648555][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.655802][ T5833] bridge_slave_1: entered allmulticast mode [ 87.663224][ T5833] bridge_slave_1: entered promiscuous mode [ 87.685795][ T5836] team0: Port device team_slave_1 added [ 87.720832][ T5835] team0: Port device team_slave_0 added [ 87.729794][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.769910][ T5835] team0: Port device team_slave_1 added [ 87.790819][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.803889][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.814285][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.821954][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.852793][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.906557][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.913609][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.939602][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.965125][ T5834] team0: Port device team_slave_0 added [ 87.993638][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.000790][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.027309][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.040472][ T5834] team0: Port device team_slave_1 added [ 88.047724][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.054709][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.077967][ T5157] Bluetooth: hci2: command tx timeout [ 88.080954][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.098962][ T5833] team0: Port device team_slave_0 added [ 88.144328][ T5833] team0: Port device team_slave_1 added [ 88.157138][ T5157] Bluetooth: hci3: command tx timeout [ 88.162791][ T5157] Bluetooth: hci0: command tx timeout [ 88.191048][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.198610][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.225545][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.239201][ T5157] Bluetooth: hci1: command tx timeout [ 88.271877][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.279052][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.305849][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.346247][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.353957][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.380145][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.397133][ T5835] hsr_slave_0: entered promiscuous mode [ 88.403687][ T5835] hsr_slave_1: entered promiscuous mode [ 88.411089][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.418454][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.444767][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.461981][ T5836] hsr_slave_0: entered promiscuous mode [ 88.468639][ T5836] hsr_slave_1: entered promiscuous mode [ 88.474779][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.482715][ T5836] Cannot create hsr debugfs directory [ 88.644411][ T5833] hsr_slave_0: entered promiscuous mode [ 88.651310][ T5833] hsr_slave_1: entered promiscuous mode [ 88.658026][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.665609][ T5833] Cannot create hsr debugfs directory [ 88.676495][ T5834] hsr_slave_0: entered promiscuous mode [ 88.684120][ T5834] hsr_slave_1: entered promiscuous mode [ 88.690435][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.698293][ T5834] Cannot create hsr debugfs directory [ 89.122022][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.139679][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.162306][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.173346][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.236569][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.258351][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.279562][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.291495][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.379129][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.413230][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.444635][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.472648][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.527570][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.539245][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.572011][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.579143][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.599760][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.666165][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.710021][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.717393][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.742391][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.763234][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.770430][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.822130][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.845981][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.853428][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.881427][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.888618][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.914668][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.949617][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.054144][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.082133][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.121741][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.128938][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.159521][ T5157] Bluetooth: hci2: command tx timeout [ 90.159531][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.172118][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.237210][ T5157] Bluetooth: hci0: command tx timeout [ 90.242674][ T5157] Bluetooth: hci3: command tx timeout [ 90.275206][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.327675][ T5157] Bluetooth: hci1: command tx timeout [ 90.336744][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.343910][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.372402][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.379634][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.422987][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.446350][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.616107][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.655258][ T5835] veth0_vlan: entered promiscuous mode [ 90.683343][ T5835] veth1_vlan: entered promiscuous mode [ 90.765619][ T5835] veth0_macvtap: entered promiscuous mode [ 90.815735][ T5835] veth1_macvtap: entered promiscuous mode [ 90.839816][ T5836] veth0_vlan: entered promiscuous mode [ 90.864087][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.894824][ T5836] veth1_vlan: entered promiscuous mode [ 90.904925][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.938932][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.951336][ T2926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.984288][ T2926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.004243][ T2926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.014852][ T2926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.064125][ T5836] veth0_macvtap: entered promiscuous mode [ 91.091104][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.102856][ T5836] veth1_macvtap: entered promiscuous mode [ 91.135659][ T5833] veth0_vlan: entered promiscuous mode [ 91.182475][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.224418][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.232271][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.247361][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.260896][ T5833] veth1_vlan: entered promiscuous mode [ 91.274153][ T1166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.283502][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.326037][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.344125][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.354941][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.364621][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.416266][ T5834] veth0_vlan: entered promiscuous mode [ 91.470295][ T5833] veth0_macvtap: entered promiscuous mode [ 91.475962][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.482038][ T5834] veth1_vlan: entered promiscuous mode [ 91.511042][ T5833] veth1_macvtap: entered promiscuous mode [ 91.616383][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.639734][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.655089][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.690676][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.721312][ T5834] veth0_macvtap: entered promiscuous mode [ 91.746448][ T5834] veth1_macvtap: entered promiscuous mode [ 91.771122][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.788170][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.795234][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.814564][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.865971][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'. [ 91.875803][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.884846][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.009246][ T979] cfg80211: failed to load regulatory.db [ 92.013050][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.071542][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.125724][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.145024][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.155965][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.172222][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.193406][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.203284][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.241622][ T5157] Bluetooth: hci2: command tx timeout [ 92.253317][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.261682][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.317332][ T5839] Bluetooth: hci0: command tx timeout [ 92.323545][ T5157] Bluetooth: hci3: command tx timeout [ 92.349254][ T5845] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.398566][ T5157] Bluetooth: hci1: command tx timeout [ 92.441442][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.461724][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.511375][ T5845] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 92.513356][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.522967][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 92.537452][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.541693][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 92.569107][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.603845][ T5845] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 92.623825][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.647196][ T5845] usb 3-1: Product: syz [ 92.664897][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.668468][ T5845] usb 3-1: Manufacturer: syz [ 92.732586][ T5845] usb 3-1: SerialNumber: syz [ 92.738930][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.766955][ T5890] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 92.776427][ T5890] usb 2-1: can't read configurations, error -71 [ 92.779602][ T5845] usb 3-1: config 0 descriptor?? [ 92.893843][ T5946] ======================================================= [ 92.893843][ T5946] WARNING: The mand mount option has been deprecated and [ 92.893843][ T5946] and is ignored by this kernel. Remove the mand [ 92.893843][ T5946] option from the mount to silence this warning. [ 92.893843][ T5946] ======================================================= [ 92.971845][ T30] audit: type=1400 audit(1751357593.884:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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rnullb0): Invalid superblock magic number [ 93.112857][ T5944] usb 3-1: USB disconnect, device number 2 [ 93.206791][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.362440][ T10] usb 1-1: config 253 has an invalid interface number: 228 but max is 0 [ 93.371112][ T10] usb 1-1: config 253 has an invalid interface descriptor of length 5, skipping [ 93.381669][ T10] usb 1-1: config 253 has no interface number 0 [ 93.388969][ T10] usb 1-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.403326][ T10] usb 1-1: config 253 interface 228 has no altsetting 0 [ 93.416713][ T10] usb 1-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 93.425795][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.440785][ T10] usb 1-1: Product: syz [ 93.445019][ T10] usb 1-1: Manufacturer: syz [ 93.453515][ T10] usb 1-1: SerialNumber: syz [ 93.730539][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.741014][ T5946] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.778462][ T5946] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.824041][ T5963] tipc: Started in network mode [ 93.830241][ T5963] tipc: Node identity 00000000f5ffffff0000000000000001, cluster identity 4711 [ 93.842069][ T5963] tipc: Enabling of bearer rejected, failed to enable media [ 94.011813][ T10] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 94.045936][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 94.047972][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.060211][ T10] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 94.075409][ T10] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 94.087064][ T10] usb 1-1: media controller created [ 94.098153][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.129959][ T10] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 94.140687][ T10] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 94.309637][ T10] rc_core: IR keymap rc-dtt200u not found [ 94.322520][ T5157] Bluetooth: hci2: command tx timeout [ 94.330712][ T10] Registered IR keymap rc-empty [ 94.378531][ T10] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 94.417593][ T5839] Bluetooth: hci0: command tx timeout [ 94.423078][ T5157] Bluetooth: hci3: command tx timeout [ 94.445338][ T10] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 94.476930][ T5157] Bluetooth: hci1: command tx timeout [ 94.562380][ T10] dvb-usb: schedule remote query interval to 300 msecs. [ 94.579673][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 94.610282][ T10] usb 1-1: USB disconnect, device number 2 [ 94.813406][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 95.368022][ T6007] input: syz0 as /devices/virtual/input/input7 [ 95.414080][ T6009] XFS (rnullb0): Invalid superblock magic number [ 95.468478][ T30] audit: type=1400 audit(1751357596.404:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.746799][ T5890] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.769684][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.786717][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.839051][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.861898][ T10] usb 2-1: config 0 descriptor?? [ 95.908867][ T5890] usb 4-1: config 253 has an invalid interface number: 228 but max is 0 [ 95.918448][ T5890] usb 4-1: config 253 has an invalid interface descriptor of length 5, skipping [ 95.932031][ T5890] usb 4-1: config 253 has no interface number 0 [ 95.942258][ T5890] usb 4-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.955927][ T5890] usb 4-1: config 253 interface 228 has no altsetting 0 [ 95.966516][ T5890] usb 4-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 95.975819][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.983934][ T5890] usb 4-1: Product: syz [ 95.988253][ T5890] usb 4-1: Manufacturer: syz [ 95.992910][ T5890] usb 4-1: SerialNumber: syz [ 96.209936][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 96.227041][ T6009] netlink: 33 bytes leftover after parsing attributes in process `syz.3.27'. [ 96.236592][ T6009] netlink: 33 bytes leftover after parsing attributes in process `syz.3.27'. [ 96.282693][ T10] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 96.314223][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input8 [ 96.438476][ T10] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 96.534690][ T5890] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 96.565845][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 96.575953][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 96.592439][ T5890] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 96.604084][ T5890] usb 4-1: media controller created [ 96.620941][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.662591][ T5890] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 96.679861][ T5890] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 96.838225][ T5890] rc_core: IR keymap rc-dtt200u not found [ 96.846298][ T5890] Registered IR keymap rc-empty [ 96.853369][ T5890] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 96.869099][ T5890] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 96.887625][ T5890] dvb-usb: schedule remote query interval to 300 msecs. [ 96.894648][ T5890] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 96.921055][ T5890] usb 4-1: USB disconnect, device number 2 [ 96.996799][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.011478][ T5890] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 97.176754][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 97.604207][ T6051] loop6: detected capacity change from 0 to 7 [ 97.634395][ T5841] Dev loop6: unable to read RDB block 7 [ 97.661708][ T5841] loop6: AHDI p3 p4 [ 97.675670][ T5841] loop6: partition table partially beyond EOD, truncated [ 97.707698][ T5841] loop6: p3 start 1886353253 is beyond EOD, truncated [ 97.733714][ T6051] Dev loop6: unable to read RDB block 7 [ 97.756161][ T6051] loop6: AHDI p3 p4 [ 97.779863][ T6051] loop6: partition table partially beyond EOD, truncated [ 97.808213][ T6051] loop6: p3 start 1886353253 is beyond EOD, truncated [ 97.980278][ T10] usb 2-1: USB disconnect, device number 4 [ 98.817907][ T6058] tipc: Started in network mode [ 98.842779][ T6058] tipc: Node identity 00000000ff0000000000000000000001, cluster identity 4711 [ 98.912389][ T6058] tipc: Enabling of bearer rejected, failed to enable media [ 99.075012][ T6061] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 99.700463][ T6069] XFS (rnullb0): Invalid superblock magic number [ 99.734631][ T30] audit: type=1400 audit(1751357600.664:4): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 348 bytes leftover after parsing attributes in process `syz.1.50'. [ 99.825728][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.916856][ T5923] usb 1-1: no configurations [ 99.921753][ T5923] usb 1-1: can't read configurations, error -22 [ 100.037579][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.208842][ T10] usb 3-1: config 253 has an invalid interface number: 228 but max is 0 [ 100.217482][ T10] usb 3-1: config 253 has an invalid interface descriptor of length 5, skipping [ 100.226793][ T10] usb 3-1: config 253 has no interface number 0 [ 100.233099][ T10] usb 3-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.252969][ T10] usb 3-1: config 253 interface 228 has no altsetting 0 [ 100.262008][ T10] usb 3-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 100.273176][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.281428][ T10] usb 3-1: Product: syz [ 100.285646][ T10] usb 3-1: Manufacturer: syz [ 100.292809][ T10] usb 3-1: SerialNumber: syz [ 100.436929][ T5944] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.508137][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 100.520514][ T6068] netlink: 33 bytes leftover after parsing attributes in process `syz.2.48'. [ 100.530600][ T6068] netlink: 33 bytes leftover after parsing attributes in process `syz.2.48'. [ 100.550046][ T5923] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.596837][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 100.612238][ T5944] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 100.626319][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.633646][ T6098] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.58'. [ 100.653501][ T5944] usb 4-1: config 0 descriptor?? [ 100.718365][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 100.727093][ T5923] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 100.735426][ T5923] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.748098][ T5923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.766355][ T5923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.777325][ T10] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 100.790328][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 100.790760][ T5923] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.796119][ T10] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 100.827259][ T10] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 100.832703][ T5923] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.854123][ T10] usb 3-1: media controller created [ 100.863563][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.873063][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 100.877822][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.928046][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 100.945114][ T10] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 101.061768][ T10] rc_core: IR keymap rc-dtt200u not found [ 101.072080][ T10] Registered IR keymap rc-empty [ 101.082447][ T10] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 101.104180][ T5923] usb 1-1: usb_control_msg returned -32 [ 101.109691][ T10] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 101.117596][ T5923] usbtmc 1-1:16.0: can't read capabilities [ 101.137243][ T10] dvb-usb: schedule remote query interval to 300 msecs. [ 101.144822][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 101.191386][ T10] usb 3-1: USB disconnect, device number 3 [ 101.288440][ T5944] usbhid 4-1:0.0: can't add hid device: -71 [ 101.294509][ T5944] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 101.311668][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 101.333217][ T5944] usb 4-1: USB disconnect, device number 3 [ 101.989817][ T6127] netlink: 312 bytes leftover after parsing attributes in process `syz.3.67'. [ 102.211393][ T6134] usb usb8: usbfs: process 6134 (syz.1.71) did not claim interface 0 before use [ 102.224440][ T6135] XFS (rnullb0): Invalid superblock magic number [ 102.267526][ T30] audit: type=1400 audit(1751357603.194:5): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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forcing a failure. [ 102.440809][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 102.497394][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.555297][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.1.74 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 102.555318][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.555332][ T6149] Call Trace: [ 102.555338][ T6149] [ 102.555344][ T6149] dump_stack_lvl+0x189/0x250 [ 102.555371][ T6149] ? __pfx____ratelimit+0x10/0x10 [ 102.555390][ T6149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.555411][ T6149] ? __pfx__printk+0x10/0x10 [ 102.555432][ T6149] ? __pfx___might_resched+0x10/0x10 [ 102.555445][ T6149] ? fs_reclaim_acquire+0x7d/0x100 [ 102.555468][ T6149] should_fail_ex+0x414/0x560 [ 102.555493][ T6149] should_failslab+0xa8/0x100 [ 102.555511][ T6149] __kmalloc_noprof+0xcb/0x4f0 [ 102.555526][ T6149] ? kfree+0x4d/0x440 [ 102.555537][ T6149] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 102.555557][ T6149] tomoyo_realpath_from_path+0xe3/0x5d0 [ 102.555575][ T6149] ? tomoyo_domain+0xd9/0x130 [ 102.555595][ T6149] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 102.555617][ T6149] tomoyo_path_number_perm+0x1e8/0x5a0 [ 102.555640][ T6149] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 102.555673][ T6149] ? __lock_acquire+0xab9/0xd20 [ 102.555707][ T6149] ? __fget_files+0x2a/0x420 [ 102.555729][ T6149] ? __fget_files+0x2a/0x420 [ 102.555746][ T6149] ? __fget_files+0x3a0/0x420 [ 102.555765][ T6149] ? __fget_files+0x2a/0x420 [ 102.555786][ T6149] security_file_ioctl+0xcb/0x2d0 [ 102.555808][ T6149] __se_sys_ioctl+0x47/0x170 [ 102.555826][ T6149] do_syscall_64+0xfa/0x3b0 [ 102.555843][ T6149] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.555865][ T6149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.555884][ T6149] ? clear_bhb_loop+0x60/0xb0 [ 102.555908][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.555927][ T6149] RIP: 0033:0x7fb04f18e929 [ 102.555950][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.555965][ T6149] RSP: 002b:00007fb050075038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.555981][ T6149] RAX: ffffffffffffffda RBX: 00007fb04f3b5fa0 RCX: 00007fb04f18e929 [ 102.555991][ T6149] RDX: 0000200000000b40 RSI: 000000008038550a RDI: 0000000000000003 [ 102.556000][ T6149] RBP: 00007fb050075090 R08: 0000000000000000 R09: 0000000000000000 [ 102.556008][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.556016][ T6149] R13: 0000000000000000 R14: 00007fb04f3b5fa0 R15: 00007fff6a36e7c8 [ 102.556038][ T6149] [ 102.556044][ T6149] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.728908][ T10] usb 4-1: config 253 has an invalid interface number: 228 but max is 0 [ 102.739106][ T6149] usb usb8: usbfs: process 6149 (syz.1.74) did not claim interface 0 before use [ 102.755832][ T10] usb 4-1: config 253 has an invalid interface descriptor of length 5, skipping [ 102.867887][ T10] usb 4-1: config 253 has no interface number 0 [ 102.874300][ T10] usb 4-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.899621][ T10] usb 4-1: config 253 interface 228 has no altsetting 0 [ 102.910175][ T10] usb 4-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 102.919954][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.928128][ T10] usb 4-1: Product: syz [ 102.932462][ T10] usb 4-1: Manufacturer: syz [ 102.937438][ T10] usb 4-1: SerialNumber: syz [ 103.072502][ T5923] usb 1-1: USB disconnect, device number 4 [ 103.128214][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.156311][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 103.170200][ T6135] netlink: 33 bytes leftover after parsing attributes in process `syz.3.70'. [ 103.180185][ T6135] netlink: 33 bytes leftover after parsing attributes in process `syz.3.70'. [ 103.205939][ T10] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 103.220753][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 103.226516][ T10] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 103.227240][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 103.237266][ T10] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 103.252875][ T10] usb 4-1: media controller created [ 103.260231][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.273990][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 103.283530][ T10] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 103.298902][ T9] usb 2-1: New USB device found, idVendor=1477, idProduct=1024, bcdDevice= 0.00 [ 103.324091][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.345504][ T9] usb 2-1: config 0 descriptor?? [ 103.402934][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.419314][ T24] usb 3-1: config 0 has no interface number 0 [ 103.426016][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 103.438926][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.456762][ T10] rc_core: IR keymap rc-dtt200u not found [ 103.462927][ T10] Registered IR keymap rc-empty [ 103.464160][ T24] usb 3-1: config 0 descriptor?? [ 103.474317][ T10] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 103.504936][ T24] usb 3-1: selecting invalid altsetting 1 [ 103.512229][ T10] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11 [ 103.531517][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 103.542212][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 103.572576][ T10] dvb-usb: schedule remote query interval to 300 msecs. [ 103.586068][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 103.631701][ T10] usb 4-1: USB disconnect, device number 4 [ 103.654969][ T24] DVB: Unable to find symbol cx22700_attach() [ 103.685261][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 103.703372][ T6153] Can't find a SQUASHFS superblock on rnullb0 [ 103.769896][ T9] hid-generic 0003:1477:1024.0002: unknown main item tag 0x0 [ 103.778456][ T9] hid-generic 0003:1477:1024.0002: item fetching failed at offset 3/5 [ 103.783332][ T24] DVB: Unable to find symbol tda10046_attach() [ 103.795755][ T9] hid-generic 0003:1477:1024.0002: probe with driver hid-generic failed with error -22 [ 103.830534][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 103.840678][ T6161] syzkaller1: entered promiscuous mode [ 103.846193][ T6161] syzkaller1: entered allmulticast mode [ 103.873589][ T24] usb 3-1: USB disconnect, device number 4 [ 104.041395][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.053762][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.080190][ T6172] capability: warning: `syz.1.75' uses deprecated v2 capabilities in a way that may be insecure [ 104.952730][ T6192] XFS (rnullb0): Invalid superblock magic number [ 104.984067][ T30] audit: type=1400 audit(1751357605.914:6): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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qnx4: no qnx4 filesystem (no root dir). [ 105.312318][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.475671][ T24] usb 3-1: config 253 has an invalid interface number: 228 but max is 0 [ 105.494465][ T24] usb 3-1: config 253 has an invalid interface descriptor of length 5, skipping [ 105.514453][ T24] usb 3-1: config 253 has no interface number 0 [ 105.522314][ T24] usb 3-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.536569][ T24] usb 3-1: config 253 interface 228 has no altsetting 0 [ 105.546430][ T24] usb 3-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 105.561462][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.572102][ T24] usb 3-1: Product: syz [ 105.576315][ T24] usb 3-1: Manufacturer: syz [ 105.584129][ T24] usb 3-1: SerialNumber: syz [ 105.706958][ T5845] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.801983][ T24] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 105.819064][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 105.825679][ T24] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 105.837261][ T24] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 105.854433][ T24] usb 3-1: media controller created [ 105.862859][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.874218][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 105.882285][ T5845] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 105.892535][ T5845] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 105.906314][ T5845] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 105.921340][ T24] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 105.930645][ T24] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 105.939979][ T5845] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 105.954968][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.974096][ T5845] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 105.983560][ T5845] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 105.992319][ T5845] usb 1-1: Product: syz [ 105.999455][ T5157] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.005862][ T5839] Bluetooth: hci4: command 0x1003 tx timeout [ 106.032955][ T5845] usb 1-1: Manufacturer: syz [ 106.045401][ T5845] usb 1-1: SerialNumber: syz [ 106.062520][ T5845] usb 1-1: config 0 descriptor?? [ 106.072845][ T10] usb 2-1: USB disconnect, device number 5 [ 106.085430][ T5845] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 106.107070][ T5845] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 106.146774][ T24] rc_core: IR keymap rc-dtt200u not found [ 106.152639][ T24] Registered IR keymap rc-empty [ 106.163660][ T24] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 106.193978][ T24] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input13 [ 106.227324][ T24] dvb-usb: schedule remote query interval to 300 msecs. [ 106.264977][ T24] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 106.317571][ T24] usb 3-1: USB disconnect, device number 5 [ 106.362800][ T5890] usb 1-1: USB disconnect, device number 5 [ 106.409600][ T5890] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 106.464831][ T24] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 106.584599][ T6224] batadv_slave_1: entered promiscuous mode [ 106.630144][ T6228] __nla_validate_parse: 1 callbacks suppressed [ 106.630162][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.100'. [ 106.722016][ T6234] qnx4: no qnx4 filesystem (no root dir). [ 107.126736][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.410903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.467226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.517275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.604086][ T6222] batadv_slave_1: left promiscuous mode [ 107.611428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.624557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.917030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.946951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.955321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.963945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.972480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.786741][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 109.757481][ T9] usb 4-1: config 1 interface 0 altsetting 43 bulk endpoint 0x82 has invalid maxpacket 8 [ 109.802766][ T9] usb 4-1: config 1 interface 0 altsetting 43 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.870728][ T6254] /dev/rnullb0: Can't open blockdev [ 109.889634][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 109.913855][ T30] audit: type=1400 audit(1751357610.834:7): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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set_ctl: invalid protocol: 1 224.0.0.2:20001 [ 110.117930][ T9] usb 4-1: string descriptor 0 read error: -71 [ 110.124306][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.185697][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.233718][ T9] usb 4-1: can't set config #1, error -71 [ 110.261148][ T9] usb 4-1: USB disconnect, device number 5 [ 110.278928][ T5944] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.440611][ T5944] usb 2-1: config 253 has an invalid interface number: 228 but max is 0 [ 110.452646][ T5944] usb 2-1: config 253 has an invalid interface descriptor of length 5, skipping [ 110.464175][ T6262] NILFS (rnullb0): couldn't find nilfs on the device [ 110.475431][ T5944] usb 2-1: config 253 has no interface number 0 [ 110.483631][ T5944] usb 2-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.511107][ T5944] usb 2-1: config 253 interface 228 has no altsetting 0 [ 110.521499][ T5944] usb 2-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 110.569148][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.586675][ T5944] usb 2-1: Product: syz [ 110.590917][ T5944] usb 2-1: Manufacturer: syz [ 110.595540][ T5944] usb 2-1: SerialNumber: syz [ 110.685292][ T6269] Mount JFS Failure: -22 [ 110.894242][ T5944] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 110.917738][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 110.925715][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 110.971299][ T5944] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 110.986036][ T5944] usb 2-1: media controller created [ 111.008480][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.031509][ T5944] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 111.053576][ T5944] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 111.133092][ T6277] afs: Unknown parameter 'dynkaller1' [ 111.146848][ T5944] rc_core: IR keymap rc-dtt200u not found [ 111.152996][ T5944] Registered IR keymap rc-empty [ 111.162653][ T5944] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 111.177211][ T5944] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14 [ 111.201432][ T5944] dvb-usb: schedule remote query interval to 300 msecs. [ 111.208669][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 111.228137][ T5944] usb 2-1: USB disconnect, device number 6 [ 111.256863][ T5845] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.311188][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 111.427972][ T5845] usb 1-1: Using ep0 maxpacket: 8 [ 111.455534][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.466859][ T6290] FAULT_INJECTION: forcing a failure. [ 111.466859][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.466929][ T6290] CPU: 0 UID: 0 PID: 6290 Comm: syz.2.123 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 111.466953][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.466965][ T6290] Call Trace: [ 111.466974][ T6290] [ 111.466982][ T6290] dump_stack_lvl+0x189/0x250 [ 111.467011][ T6290] ? __pfx____ratelimit+0x10/0x10 [ 111.467036][ T6290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.467060][ T6290] ? __pfx__printk+0x10/0x10 [ 111.467102][ T6290] should_fail_ex+0x414/0x560 [ 111.467144][ T6290] _copy_to_user+0x31/0xb0 [ 111.467167][ T6290] simple_read_from_buffer+0xe1/0x170 [ 111.467204][ T6290] proc_fail_nth_read+0x1df/0x250 [ 111.467242][ T6290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.467279][ T6290] ? rw_verify_area+0x258/0x650 [ 111.467310][ T6290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.467346][ T6290] vfs_read+0x1fd/0x980 [ 111.467379][ T6290] ? __pfx___mutex_lock+0x10/0x10 [ 111.467408][ T6290] ? __pfx_vfs_read+0x10/0x10 [ 111.467436][ T6290] ? __fget_files+0x2a/0x420 [ 111.467486][ T6290] ? __fget_files+0x3a0/0x420 [ 111.467515][ T6290] ? __fget_files+0x2a/0x420 [ 111.467558][ T6290] ksys_read+0x145/0x250 [ 111.467587][ T6290] ? __pfx_ksys_read+0x10/0x10 [ 111.467609][ T6290] ? rcu_is_watching+0x15/0xb0 [ 111.467639][ T6290] ? do_syscall_64+0xbe/0x3b0 [ 111.467672][ T6290] do_syscall_64+0xfa/0x3b0 [ 111.467699][ T6290] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.467725][ T6290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.467748][ T6290] ? clear_bhb_loop+0x60/0xb0 [ 111.467776][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.467797][ T6290] RIP: 0033:0x7fd1a098d33c [ 111.467817][ T6290] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.467835][ T6290] RSP: 002b:00007fd1a1816030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.467860][ T6290] RAX: ffffffffffffffda RBX: 00007fd1a0bb5fa0 RCX: 00007fd1a098d33c [ 111.467877][ T6290] RDX: 000000000000000f RSI: 00007fd1a18160a0 RDI: 0000000000000003 [ 111.467889][ T6290] RBP: 00007fd1a1816090 R08: 0000000000000000 R09: 0000000000000000 [ 111.467904][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.467917][ T6290] R13: 0000000000000000 R14: 00007fd1a0bb5fa0 R15: 00007ffddc7c2db8 [ 111.467952][ T6290] [ 111.569686][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.574709][ T5845] usb 1-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 111.736762][ T5890] usb 4-1: device descriptor read/64, error -71 [ 111.736904][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.763603][ T5845] usb 1-1: config 0 descriptor?? [ 111.837457][ T5944] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 111.977635][ T5890] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.989435][ T5944] usb 2-1: device descriptor read/64, error -71 [ 112.136905][ T5890] usb 4-1: device descriptor read/64, error -71 [ 112.205684][ T5845] wacom 0003:056A:00E5.0003: unknown main item tag 0x0 [ 112.227263][ T5944] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.247461][ T5890] usb usb4-port1: attempt power cycle [ 112.316762][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.356809][ T5944] usb 2-1: device descriptor read/64, error -71 [ 112.404433][ T6281] /dev/rnullb0: Can't open blockdev [ 112.411838][ T9] usb 1-1: USB disconnect, device number 6 [ 112.470268][ T5944] usb usb2-port1: attempt power cycle [ 112.473429][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.487201][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.496281][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.507107][ T24] usb 3-1: config 0 descriptor?? [ 112.586851][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.607481][ T5890] usb 4-1: device descriptor read/8, error -71 [ 112.816840][ T5944] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 112.837504][ T5944] usb 2-1: device descriptor read/8, error -71 [ 112.847705][ T5890] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.869938][ T5890] usb 4-1: device descriptor read/8, error -71 [ 112.919426][ T24] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 112.942606][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input15 [ 112.992123][ T5890] usb usb4-port1: unable to enumerate USB device [ 113.010276][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 113.019930][ T6305] tipc: Invalid UDP bearer configuration [ 113.019987][ T6305] tipc: Enabling of bearer rejected, failed to enable media [ 113.075354][ T24] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 113.100988][ T5944] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.147491][ T5944] usb 2-1: device descriptor read/8, error -71 [ 113.161819][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.200156][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.268527][ T5944] usb usb2-port1: unable to enumerate USB device [ 113.380699][ T6312] /dev/rnullb0: Can't open blockdev [ 113.388503][ T30] audit: type=1400 audit(1751357614.324:8): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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dev/rnullb0: Can't open blockdev [ 113.695493][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.708704][ T5944] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.868589][ T5944] usb 1-1: config 253 has an invalid interface number: 228 but max is 0 [ 113.877242][ T5944] usb 1-1: config 253 has an invalid interface descriptor of length 5, skipping [ 113.886503][ T5944] usb 1-1: config 253 has no interface number 0 [ 113.892930][ T5944] usb 1-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.906246][ T5944] usb 1-1: config 253 interface 228 has no altsetting 0 [ 113.925086][ T5944] usb 1-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 113.934395][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.942720][ T5944] usb 1-1: Product: syz [ 113.946986][ T5944] usb 1-1: Manufacturer: syz [ 113.951603][ T5944] usb 1-1: SerialNumber: syz [ 114.178973][ T5944] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 114.188928][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 114.194696][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 114.204370][ T5944] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 114.214776][ T5944] usb 1-1: media controller created [ 114.222382][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.235871][ T5944] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 114.245023][ T5944] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 114.262513][ T24] usb 3-1: USB disconnect, device number 6 [ 114.357868][ T5944] rc_core: IR keymap rc-dtt200u not found [ 114.390758][ T5944] Registered IR keymap rc-empty [ 114.406369][ T5944] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 114.426829][ T5944] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 114.446154][ T5944] dvb-usb: schedule remote query interval to 300 msecs. [ 114.468022][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 114.498357][ T5944] usb 1-1: USB disconnect, device number 7 [ 114.590139][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 115.287245][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 115.415342][ T6348] XFS (rnullb0): Invalid superblock magic number [ 115.451049][ T30] audit: type=1400 audit(1751357616.384:9): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.573400][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.583472][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.611394][ T9] usb 2-1: config 0 descriptor?? [ 115.696823][ T5944] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.862264][ T5944] usb 1-1: config 253 has an invalid interface number: 228 but max is 0 [ 115.872607][ T5944] usb 1-1: config 253 has an invalid interface descriptor of length 5, skipping [ 115.883957][ T5944] usb 1-1: config 253 has no interface number 0 [ 115.894324][ T5944] usb 1-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.912833][ T5944] usb 1-1: config 253 interface 228 has no altsetting 0 [ 115.931101][ T5944] usb 1-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 115.940542][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.952517][ T5944] usb 1-1: Product: syz [ 115.959339][ T5944] usb 1-1: Manufacturer: syz [ 115.964215][ T5944] usb 1-1: SerialNumber: syz [ 116.025067][ T9] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 116.050941][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input17 [ 116.213730][ T9] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 116.257247][ T5944] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 116.280391][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.286923][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 116.313452][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.334280][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 116.371671][ T5944] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 116.436961][ T5944] usb 1-1: media controller created [ 116.446829][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.510211][ T5944] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 116.541092][ T5944] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 116.594323][ T6359] loop6: detected capacity change from 0 to 7 [ 116.615184][ T6359] Dev loop6: unable to read RDB block 7 [ 116.634513][ T6359] loop6: AHDI p3 p4 [ 116.651583][ T6359] loop6: partition table partially beyond EOD, truncated [ 116.664499][ T6359] loop6: p3 start 1886353253 is beyond EOD, truncated [ 116.674245][ T6364] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 116.691332][ T5944] rc_core: IR keymap rc-dtt200u not found [ 116.711256][ T5944] Registered IR keymap rc-empty [ 116.745092][ T5944] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 116.823067][ T5944] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input18 [ 116.887605][ T5944] dvb-usb: schedule remote query interval to 300 msecs. [ 116.915070][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 116.972334][ T5944] usb 1-1: USB disconnect, device number 8 [ 117.048220][ T6372] tipc: Started in network mode [ 117.074050][ T6372] tipc: Node identity 00100000000000000000000000000001, cluster identity 4711 [ 117.103455][ T6372] tipc: Enabling of bearer rejected, failed to enable media [ 117.138386][ T6375] Zero length message leads to an empty skb [ 117.183912][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 117.502894][ T5845] usb 2-1: USB disconnect, device number 11 [ 117.745302][ T6394] XFS (rnullb0): Invalid superblock magic number [ 117.756730][ T5944] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.783657][ T30] audit: type=1400 audit(1751357618.704:10): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 348 bytes leftover after parsing attributes in process `syz.2.163'. [ 117.976746][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 118.126794][ T5845] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 118.305784][ T5845] usb 2-1: config 253 has an invalid interface number: 228 but max is 0 [ 118.337213][ T6411] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.167'. [ 118.379123][ T5845] usb 2-1: config 253 has an invalid interface descriptor of length 5, skipping [ 118.494254][ T5845] usb 2-1: config 253 has no interface number 0 [ 118.523116][ T5845] usb 2-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.592948][ T5845] usb 2-1: config 253 interface 228 has no altsetting 0 [ 118.633301][ T5845] usb 2-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 118.665949][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.715197][ T5845] usb 2-1: Product: syz [ 118.740863][ T5845] usb 2-1: Manufacturer: syz [ 118.781293][ T5845] usb 2-1: SerialNumber: syz [ 119.087958][ T5845] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 119.139955][ T5845] dvb-usb: bulk message failed: -22 (2/0) [ 119.160015][ T5845] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 119.194194][ T5845] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 119.236790][ T5845] usb 2-1: media controller created [ 119.261675][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.315340][ T5845] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 119.349601][ T5845] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 119.650909][ T5845] rc_core: IR keymap rc-dtt200u not found [ 119.683948][ T5845] Registered IR keymap rc-empty [ 119.739083][ T5845] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 119.858917][ T5845] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input19 [ 119.871810][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.957551][ T5845] dvb-usb: schedule remote query interval to 300 msecs. [ 119.980066][ T5845] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 120.049168][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.063566][ T5845] usb 2-1: USB disconnect, device number 12 [ 120.130073][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.181004][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.227462][ T5845] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 120.250092][ T24] usb 3-1: config 0 descriptor?? [ 120.629770][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.639747][ T5944] usb 1-1: no configurations [ 120.644471][ T5944] usb 1-1: can't read configurations, error -22 [ 120.673649][ T24] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 120.734359][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input20 [ 120.861132][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.871939][ T24] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 120.892076][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.123938][ T6439] usb usb8: usbfs: process 6439 (syz.1.176) did not claim interface 0 before use [ 121.230593][ T6441] /dev/rnullb0: Can't open blockdev [ 121.245254][ T6444] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 121.320784][ T6421] /dev/rnullb0: Can't open blockdev [ 121.658748][ T6451] XFS (rnullb0): Invalid superblock magic number [ 121.685697][ T6458] usb usb8: usbfs: process 6458 (syz.1.181) did not claim interface 0 before use [ 121.736504][ T30] audit: type=1400 audit(1751357622.654:11): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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rnullb0): couldn't find nilfs on the device [ 121.942619][ T5890] usb 3-1: USB disconnect, device number 7 [ 122.010506][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 122.026782][ T5944] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 122.190955][ T5944] usb 4-1: config 253 has an invalid interface number: 228 but max is 0 [ 122.199871][ T5944] usb 4-1: config 253 has an invalid interface descriptor of length 5, skipping [ 122.220300][ T5944] usb 4-1: config 253 has no interface number 0 [ 122.227974][ T5944] usb 4-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.280226][ T5944] usb 4-1: config 253 interface 228 has no altsetting 0 [ 122.294201][ T5944] usb 4-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 122.305130][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.321314][ T5944] usb 4-1: Product: syz [ 122.325619][ T5944] usb 4-1: Manufacturer: syz [ 122.330996][ T5944] usb 4-1: SerialNumber: syz [ 122.445187][ T6482] netlink: 104 bytes leftover after parsing attributes in process `syz.1.190'. [ 122.570511][ T5944] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 122.602777][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 122.621258][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 122.654670][ T5944] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 122.690400][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 122.699413][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 122.723168][ T5944] usb 4-1: media controller created [ 122.736773][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.807854][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.958449][ T5944] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 123.035269][ T5944] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 123.699594][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.721717][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 123.733900][ T24] usb 1-1: can't read configurations, error -71 [ 123.746898][ T5944] rc_core: IR keymap rc-dtt200u not found [ 123.766746][ T5944] Registered IR keymap rc-empty [ 123.788537][ T5944] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 123.843562][ T5944] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input21 [ 123.876074][ T5944] dvb-usb: schedule remote query interval to 300 msecs. [ 123.886046][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 123.939163][ T5944] usb 4-1: USB disconnect, device number 10 [ 123.983215][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 124.039587][ T6510] tipc: Enabling of bearer rejected, failed to enable media [ 124.158138][ T6513] Can't find a SQUASHFS superblock on rnullb0 [ 124.168235][ T6514] Can't find a SQUASHFS superblock on rnullb0 [ 124.262553][ T6518] capability: warning: `syz.2.202' uses 32-bit capabilities (legacy support in use) [ 124.377505][ T6522] XFS (rnullb0): Invalid superblock magic number [ 124.396076][ T6535] FAULT_INJECTION: forcing a failure. [ 124.396076][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.411180][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.0.204 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 124.411209][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.411222][ T6535] Call Trace: [ 124.411230][ T6535] [ 124.411238][ T6535] dump_stack_lvl+0x189/0x250 [ 124.411277][ T6535] ? __pfx____ratelimit+0x10/0x10 [ 124.411302][ T6535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.411325][ T6535] ? __pfx__printk+0x10/0x10 [ 124.411357][ T6535] ? __might_fault+0xb0/0x130 [ 124.411391][ T6535] should_fail_ex+0x414/0x560 [ 124.411426][ T6535] _copy_from_user+0x2d/0xb0 [ 124.411458][ T6535] __sys_sendto+0x25c/0x520 [ 124.411489][ T6535] ? __pfx___sys_sendto+0x10/0x10 [ 124.411514][ T6535] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 124.411553][ T6535] ? __fget_files+0x3a0/0x420 [ 124.411593][ T6535] ? ksys_write+0x22a/0x250 [ 124.411620][ T6535] ? __pfx_ksys_write+0x10/0x10 [ 124.411650][ T6535] __x64_sys_sendto+0xde/0x100 [ 124.411682][ T6535] do_syscall_64+0xfa/0x3b0 [ 124.411706][ T6535] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.411730][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.411749][ T6535] ? clear_bhb_loop+0x60/0xb0 [ 124.411774][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.411793][ T6535] RIP: 0033:0x7fc27b18e929 [ 124.411817][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.411834][ T6535] RSP: 002b:00007fc27bf29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 124.411862][ T6535] RAX: ffffffffffffffda RBX: 00007fc27b3b6080 RCX: 00007fc27b18e929 [ 124.411877][ T6535] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 124.411889][ T6535] RBP: 00007fc27bf29090 R08: 0000200000000000 R09: 0000000000000010 [ 124.411902][ T6535] R10: e61e2840a154b0c4 R11: 0000000000000246 R12: 0000000000000001 [ 124.411914][ T6535] R13: 0000000000000001 R14: 00007fc27b3b6080 R15: 00007ffdb1b66298 [ 124.411944][ T6535] [ 124.420710][ T30] audit: type=1400 audit(1751357625.354:12): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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rnullb0): Invalid superblock magic number [ 124.987189][ T5944] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.097736][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.156923][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 125.191004][ T5944] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 125.202292][ T5944] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 125.215993][ T5944] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.229584][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.238021][ T5944] usb 3-1: Product: ݍ育虍镩ᩜ㮸ꇏ䰹⾾ｗꑟꡎқ絍򈜓㇭樇뤃ྦྷ얶襙ꅭ樏恀榟厪쇊ꑻ玴枖Щ櫚龽錭㬾᭿ [ 125.252307][ T5944] usb 3-1: Manufacturer: 햳駹ꯁ꩐ƒ憟齀嫖ꋂ观㚘謌ᐝ࣏꿁똶菾艧䠰诂㞬婙䪒𢡊䀻衱茴Ɨ䊶䤏㮼⬷䘚흸쏁緦䫦裋螪촽揀峮Ạ頛ㄤ闶 [ 125.269650][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.271665][ T5944] usb 3-1: SerialNumber: syz [ 125.289913][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.308580][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.322495][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.331994][ T24] usb 4-1: SerialNumber: syz [ 125.446831][ T5911] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 125.505987][ T5944] cdc_ncm 3-1:1.0: bind() failure [ 125.517915][ T5944] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 125.524937][ T5944] cdc_ncm 3-1:1.1: bind() failure [ 125.537565][ T5944] usb 3-1: USB disconnect, device number 8 [ 125.557477][ T24] usb 4-1: 0:2 : does not exist [ 125.561304][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.601173][ T24] usb 4-1: USB disconnect, device number 11 [ 125.611039][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.638014][ T5911] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.654170][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.664991][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.688909][ T5911] usb 2-1: config 0 descriptor?? [ 125.734466][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.748866][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 125.756590][ T10] usb 1-1: can't read configurations, error -71 [ 126.107858][ T30] audit: type=1326 audit(1751357627.034:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.2.215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1a098e929 code=0x0 [ 126.141502][ T5911] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 126.165135][ T5911] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input22 [ 126.319882][ T5911] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 126.335329][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.393089][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.415124][ T6569] XFS (rnullb0): Invalid superblock magic number [ 126.709986][ T6583] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 127.125749][ T6603] XFS (rnullb0): Invalid superblock magic number [ 127.164430][ T30] audit: type=1400 audit(1751357628.094:14): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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loop6: detected capacity change from 0 to 7 [ 127.325528][ T6610] Dev loop6: unable to read RDB block 7 [ 127.333687][ T6610] loop6: AHDI p3 p4 [ 127.338334][ T6610] loop6: partition table partially beyond EOD, truncated [ 127.346198][ T6610] loop6: p3 start 1886353253 is beyond EOD, truncated [ 127.538050][ T6613] hfs: can't find a HFS filesystem on dev rnullb0 [ 127.539665][ T3406] usb 2-1: USB disconnect, device number 13 [ 127.557782][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 127.737219][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.749630][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 127.796847][ T24] usb 1-1: can't read configurations, error -71 [ 127.864073][ T6620] kernel profiling enabled (shift: 0) [ 127.888827][ T6621] tipc: Started in network mode [ 127.906779][ T6621] tipc: Node identity 02000000000000000000000000000001, cluster identity 4711 [ 127.915758][ T6621] tipc: Enabling of bearer rejected, failed to enable media [ 128.033608][ T6626] netlink: 348 bytes leftover after parsing attributes in process `syz.3.235'. [ 128.112070][ T6628] /dev/rnullb0: Can't open blockdev [ 128.367060][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.572438][ T10] usb 3-1: config 253 has an invalid interface number: 228 but max is 0 [ 128.581307][ T10] usb 3-1: config 253 has an invalid interface descriptor of length 5, skipping [ 128.594185][ T10] usb 3-1: config 253 has no interface number 0 [ 128.601927][ T10] usb 3-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.631364][ T10] usb 3-1: config 253 interface 228 has no altsetting 0 [ 128.649709][ T10] usb 3-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 128.663784][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.672385][ T10] usb 3-1: Product: syz [ 128.682476][ T10] usb 3-1: Manufacturer: syz [ 128.690415][ T10] usb 3-1: SerialNumber: syz [ 128.866814][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 128.906867][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 128.926363][ T10] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 128.940021][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 128.945799][ T10] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 128.961192][ T10] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 128.973506][ T10] usb 3-1: media controller created [ 128.994497][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.009434][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 129.020016][ T10] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 129.047115][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.068654][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.096829][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.102251][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.121506][ T9] usb 4-1: config 0 descriptor?? [ 129.136768][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.145869][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.176842][ T10] rc_core: IR keymap rc-dtt200u not found [ 129.182667][ T10] Registered IR keymap rc-empty [ 129.196262][ T24] usb 1-1: config 0 descriptor?? [ 129.219632][ T10] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 129.220665][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 129.249748][ T10] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input23 [ 129.270062][ T10] dvb-usb: schedule remote query interval to 300 msecs. [ 129.281889][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 129.344338][ T10] usb 3-1: USB disconnect, device number 9 [ 129.429649][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 129.518526][ T5157] Bluetooth: hci3: command tx timeout [ 129.562750][ T9] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 129.615916][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.629152][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 129.645378][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input24 [ 129.768834][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.803328][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.839622][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 129.864185][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 129.890735][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 129.927101][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 129.933792][ T9] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 129.956444][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 129.976581][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 129.997363][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 130.046810][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 130.073825][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 130.088562][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 130.302629][ T6631] omfs: Invalid superblock (0) [ 130.312389][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.321155][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 130.351401][ T24] pwc: Registered as video103. [ 130.368161][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 130.413737][ T24] usb 1-1: USB disconnect, device number 16 [ 130.467229][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 130.664371][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 130.683466][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 130.693203][ T9] usb 3-1: can't read configurations, error -71 [ 130.826387][ T24] usb 4-1: USB disconnect, device number 12 [ 130.976441][ T6664] hfs: can't find a HFS filesystem on dev rnullb0 [ 131.309534][ T6671] XFS (rnullb0): Invalid superblock magic number [ 131.368503][ T6681] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.253'. [ 131.529346][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 131.703597][ T24] usb 1-1: config 253 has an invalid interface number: 228 but max is 0 [ 131.712152][ T24] usb 1-1: config 253 has an invalid interface descriptor of length 5, skipping [ 131.725842][ T24] usb 1-1: config 253 has no interface number 0 [ 131.737285][ T24] usb 1-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.750647][ T24] usb 1-1: config 253 interface 228 has no altsetting 0 [ 131.788880][ T24] usb 1-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 131.802489][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.815026][ T24] usb 1-1: Product: syz [ 131.823958][ T24] usb 1-1: Manufacturer: syz [ 131.828789][ T24] usb 1-1: SerialNumber: syz [ 132.179093][ T24] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 132.217059][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 132.223114][ T24] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 132.279122][ T24] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 132.294792][ T24] usb 1-1: media controller created [ 132.307385][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.344539][ T24] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 132.353564][ T6688] netlink: 312 bytes leftover after parsing attributes in process `syz.1.256'. [ 132.363543][ T24] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 132.506723][ T24] rc_core: IR keymap rc-dtt200u not found [ 132.512502][ T24] Registered IR keymap rc-empty [ 132.522321][ T24] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 132.567017][ T24] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input26 [ 132.600156][ T24] dvb-usb: schedule remote query interval to 300 msecs. [ 132.607740][ T24] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 132.629490][ T24] usb 1-1: USB disconnect, device number 17 [ 132.706402][ T24] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 132.717257][ T3406] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.879549][ T3406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.912871][ T3406] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.965314][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.975996][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.982874][ T3406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.008170][ T3406] usb 3-1: config 0 descriptor?? [ 133.012672][ T6704] FAULT_INJECTION: forcing a failure. [ 133.012672][ T6704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.058601][ T6704] CPU: 0 UID: 0 PID: 6704 Comm: syz.0.262 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 133.058629][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.058641][ T6704] Call Trace: [ 133.058649][ T6704] [ 133.058658][ T6704] dump_stack_lvl+0x189/0x250 [ 133.058687][ T6704] ? __pfx____ratelimit+0x10/0x10 [ 133.058713][ T6704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.058736][ T6704] ? __pfx__printk+0x10/0x10 [ 133.058758][ T6704] ? __might_fault+0xb0/0x130 [ 133.058792][ T6704] should_fail_ex+0x414/0x560 [ 133.058827][ T6704] _copy_from_user+0x2d/0xb0 [ 133.058860][ T6704] proc_submiturb+0xb5/0x160 [ 133.058893][ T6704] ? __pfx_proc_submiturb+0x10/0x10 [ 133.058951][ T6704] usbdev_ioctl+0x10e7/0x20c0 [ 133.058989][ T6704] ? __pfx_usbdev_ioctl+0x10/0x10 [ 133.059013][ T6704] ? __fget_files+0x2a/0x420 [ 133.059040][ T6704] ? __fget_files+0x3a0/0x420 [ 133.059066][ T6704] ? __fget_files+0x2a/0x420 [ 133.059097][ T6704] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.059117][ T6704] ? __pfx_usbdev_ioctl+0x10/0x10 [ 133.059144][ T6704] __se_sys_ioctl+0xfc/0x170 [ 133.059168][ T6704] do_syscall_64+0xfa/0x3b0 [ 133.059193][ T6704] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.059217][ T6704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.059237][ T6704] ? clear_bhb_loop+0x60/0xb0 [ 133.059262][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.059281][ T6704] RIP: 0033:0x7fc27b18e929 [ 133.059299][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.059316][ T6704] RSP: 002b:00007fc27bf4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.059337][ T6704] RAX: ffffffffffffffda RBX: 00007fc27b3b5fa0 RCX: 00007fc27b18e929 [ 133.059352][ T6704] RDX: 0000200000000b40 RSI: 000000008038550a RDI: 0000000000000003 [ 133.059364][ T6704] RBP: 00007fc27bf4a090 R08: 0000000000000000 R09: 0000000000000000 [ 133.059377][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.059388][ T6704] R13: 0000000000000000 R14: 00007fc27b3b5fa0 R15: 00007ffdb1b66298 [ 133.059420][ T6704] [ 133.336820][ T5923] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.420550][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 133.509275][ T3406] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 133.521170][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.539981][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 133.549777][ T3406] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input28 [ 133.566869][ T5923] usb 4-1: can't read configurations, error -71 [ 133.570730][ T9] usb 2-1: device descriptor read/64, error -71 [ 133.622509][ T6713] 9pnet_fd: Insufficient options for proto=fd [ 133.669287][ T3406] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 133.724462][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.755669][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.847277][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 133.989832][ T9] usb 2-1: device descriptor read/64, error -71 [ 134.062526][ T6723] vxfs: WRONG superblock magic 00000000 at 1 [ 134.069156][ T6723] vxfs: WRONG superblock magic 00000000 at 8 [ 134.075339][ T6723] vxfs: can't find superblock. [ 134.107184][ T9] usb usb2-port1: attempt power cycle [ 134.486740][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 134.496796][ T5944] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 134.507436][ T9] usb 2-1: device descriptor read/8, error -71 [ 134.626786][ T5923] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 134.646771][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 134.779309][ T5923] usb 4-1: config 253 has an invalid interface number: 228 but max is 0 [ 134.792063][ T5923] usb 4-1: config 253 has an invalid interface descriptor of length 5, skipping [ 134.880321][ T5923] usb 4-1: config 253 has no interface number 0 [ 134.886702][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 134.914544][ T3406] usb 3-1: USB disconnect, device number 12 [ 134.928515][ T5923] usb 4-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.004950][ T9] usb 2-1: device descriptor read/8, error -71 [ 135.027514][ T5923] usb 4-1: config 253 interface 228 has no altsetting 0 [ 135.084228][ T5923] usb 4-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 135.137468][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.174283][ T5923] usb 4-1: Product: syz [ 135.192621][ T5923] usb 4-1: Manufacturer: syz [ 135.209747][ T5923] usb 4-1: SerialNumber: syz [ 135.481702][ T5923] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 135.521423][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 135.552825][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 135.592782][ T5923] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 135.625971][ T5923] usb 4-1: media controller created [ 135.653878][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.687034][ T9] usb usb2-port1: unable to enumerate USB device [ 135.710432][ T5923] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 135.742977][ T5923] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 136.012122][ T5923] rc_core: IR keymap rc-dtt200u not found [ 136.044458][ T5923] Registered IR keymap rc-empty [ 136.086343][ T5923] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 136.211320][ T5923] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input29 [ 136.331331][ T5923] dvb-usb: schedule remote query interval to 300 msecs. [ 136.376109][ T5923] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 136.416246][ T6744] vivid-000: disconnect [ 136.454362][ T6741] vivid-000: reconnect [ 136.465951][ T5923] usb 4-1: USB disconnect, device number 14 [ 136.624750][ T5923] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 137.346902][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.356466][ T5944] usb 1-1: no configurations [ 137.361261][ T5944] usb 1-1: can't read configurations, error -22 [ 137.469602][ T6758] netlink: 104 bytes leftover after parsing attributes in process `syz.1.282'. [ 137.653903][ T6766] FAULT_INJECTION: forcing a failure. [ 137.653903][ T6766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.667489][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.0.285 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 137.667509][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.667519][ T6766] Call Trace: [ 137.667525][ T6766] [ 137.667531][ T6766] dump_stack_lvl+0x189/0x250 [ 137.667553][ T6766] ? __pfx____ratelimit+0x10/0x10 [ 137.667571][ T6766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.667588][ T6766] ? __pfx__printk+0x10/0x10 [ 137.667613][ T6766] should_fail_ex+0x414/0x560 [ 137.667639][ T6766] _copy_to_user+0x31/0xb0 [ 137.667655][ T6766] simple_read_from_buffer+0xe1/0x170 [ 137.667677][ T6766] proc_fail_nth_read+0x1df/0x250 [ 137.667701][ T6766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.667724][ T6766] ? rw_verify_area+0x258/0x650 [ 137.667740][ T6766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.667763][ T6766] vfs_read+0x1fd/0x980 [ 137.667783][ T6766] ? __pfx___mutex_lock+0x10/0x10 [ 137.667802][ T6766] ? __pfx_vfs_read+0x10/0x10 [ 137.667819][ T6766] ? __fget_files+0x2a/0x420 [ 137.667843][ T6766] ? __fget_files+0x3a0/0x420 [ 137.667862][ T6766] ? __fget_files+0x2a/0x420 [ 137.667888][ T6766] ksys_read+0x145/0x250 [ 137.667907][ T6766] ? __pfx_ksys_read+0x10/0x10 [ 137.667928][ T6766] ? do_syscall_64+0xbe/0x3b0 [ 137.667949][ T6766] do_syscall_64+0xfa/0x3b0 [ 137.667966][ T6766] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.667984][ T6766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.667997][ T6766] ? clear_bhb_loop+0x60/0xb0 [ 137.668015][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.668029][ T6766] RIP: 0033:0x7fc27b18d33c [ 137.668042][ T6766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 137.668053][ T6766] RSP: 002b:00007fc27bf4a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.668069][ T6766] RAX: ffffffffffffffda RBX: 00007fc27b3b5fa0 RCX: 00007fc27b18d33c [ 137.668079][ T6766] RDX: 000000000000000f RSI: 00007fc27bf4a0a0 RDI: 0000000000000003 [ 137.668088][ T6766] RBP: 00007fc27bf4a090 R08: 0000000000000000 R09: 0000000000000000 [ 137.668096][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.668104][ T6766] R13: 0000000000000000 R14: 00007fc27b3b5fa0 R15: 00007ffdb1b66298 [ 137.668126][ T6766] [ 138.036770][ T5923] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 138.200158][ T5923] usb 2-1: config 253 has an invalid interface number: 228 but max is 0 [ 138.208800][ T5923] usb 2-1: config 253 has an invalid interface descriptor of length 5, skipping [ 138.227169][ T5923] usb 2-1: config 253 has no interface number 0 [ 138.234363][ T5923] usb 2-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.269416][ T5923] usb 2-1: config 253 interface 228 has no altsetting 0 [ 138.285319][ T5923] usb 2-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 138.306858][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.314893][ T5923] usb 2-1: Product: syz [ 138.321249][ T5923] usb 2-1: Manufacturer: syz [ 138.325893][ T5923] usb 2-1: SerialNumber: syz [ 138.509296][ T6789] tipc: Enabling of bearer rejected, failed to enable media [ 138.554971][ T5923] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 138.576934][ T6791] program syz.0.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.586791][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 138.592569][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 138.627197][ T5923] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 138.642329][ T5923] usb 2-1: media controller created [ 138.651037][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.667317][ T5923] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 138.676021][ T5923] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 138.698810][ T6791] netlink: 'syz.0.294': attribute type 29 has an invalid length. [ 138.711822][ T6791] netlink: 'syz.0.294': attribute type 29 has an invalid length. [ 138.767153][ T5923] rc_core: IR keymap rc-dtt200u not found [ 138.776839][ T5923] Registered IR keymap rc-empty [ 138.794712][ T5923] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 138.813982][ T5923] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input30 [ 138.833153][ T5923] dvb-usb: schedule remote query interval to 300 msecs. [ 138.842077][ T5923] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 138.865690][ T5923] usb 2-1: USB disconnect, device number 18 [ 138.921213][ T5923] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 139.069008][ T5944] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 139.245557][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.259593][ T5944] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.269685][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.287688][ T5944] usb 1-1: config 0 descriptor?? [ 139.428808][ T979] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 139.464659][ T6811] FAULT_INJECTION: forcing a failure. [ 139.464659][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 139.478812][ T6811] CPU: 1 UID: 0 PID: 6811 Comm: syz.3.303 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 139.478842][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.478855][ T6811] Call Trace: [ 139.478863][ T6811] [ 139.478872][ T6811] dump_stack_lvl+0x189/0x250 [ 139.478901][ T6811] ? __pfx____ratelimit+0x10/0x10 [ 139.478928][ T6811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.478951][ T6811] ? __pfx__printk+0x10/0x10 [ 139.478982][ T6811] ? __lock_acquire+0xab9/0xd20 [ 139.479017][ T6811] should_fail_ex+0x414/0x560 [ 139.479053][ T6811] should_failslab+0xa8/0x100 [ 139.479080][ T6811] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 139.479105][ T6811] ? __alloc_skb+0x112/0x2d0 [ 139.479138][ T6811] __alloc_skb+0x112/0x2d0 [ 139.479171][ T6811] nf_tables_gettable+0x487/0x670 [ 139.479213][ T6811] ? __pfx_nf_tables_gettable+0x10/0x10 [ 139.479253][ T6811] ? __nla_parse+0x40/0x60 [ 139.479275][ T6811] ? __pfx_nf_tables_gettable+0x10/0x10 [ 139.479320][ T6811] nfnetlink_rcv_msg+0x80b/0x1130 [ 139.479344][ T6811] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 139.479396][ T6811] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 139.479416][ T6811] ? kasan_save_free_info+0x46/0x50 [ 139.479498][ T6811] netlink_rcv_skb+0x205/0x470 [ 139.479527][ T6811] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 139.479551][ T6811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.479591][ T6811] ? bpf_lsm_capable+0x9/0x20 [ 139.479612][ T6811] ? security_capable+0x7e/0x2e0 [ 139.479641][ T6811] nfnetlink_rcv+0x26a/0x2520 [ 139.479672][ T6811] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 139.479699][ T6811] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 139.479725][ T6811] ? __dev_queue_xmit+0x27e/0x3a70 [ 139.479746][ T6811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.479778][ T6811] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 139.479799][ T6811] ? __pfx___dev_queue_xmit+0x10/0x10 [ 139.479835][ T6811] ? ref_tracker_free+0x63a/0x7d0 [ 139.479853][ T6811] ? __copy_skb_header+0xa7/0x550 [ 139.479874][ T6811] ? __pfx_ref_tracker_free+0x10/0x10 [ 139.479894][ T6811] ? __skb_clone+0x63/0x7a0 [ 139.479917][ T6811] ? __skb_clone+0x483/0x7a0 [ 139.479944][ T6811] ? skb_clone+0x246/0x3a0 [ 139.479967][ T6811] ? __netlink_deliver_tap+0x807/0x850 [ 139.479994][ T6811] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.480027][ T6811] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.480053][ T6811] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.480086][ T6811] netlink_unicast+0x758/0x8d0 [ 139.480123][ T6811] netlink_sendmsg+0x805/0xb30 [ 139.480161][ T6811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.480193][ T6811] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.480217][ T6811] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.480245][ T6811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.480274][ T6811] __sock_sendmsg+0x21c/0x270 [ 139.480308][ T6811] ____sys_sendmsg+0x505/0x830 [ 139.480345][ T6811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.480386][ T6811] ? import_iovec+0x74/0xa0 [ 139.480421][ T6811] ___sys_sendmsg+0x21f/0x2a0 [ 139.480455][ T6811] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.480526][ T6811] ? __fget_files+0x2a/0x420 [ 139.480554][ T6811] ? __fget_files+0x3a0/0x420 [ 139.480594][ T6811] __x64_sys_sendmsg+0x19b/0x260 [ 139.480628][ T6811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.480666][ T6811] ? __pfx_ksys_write+0x10/0x10 [ 139.480688][ T6811] ? rcu_is_watching+0x15/0xb0 [ 139.480713][ T6811] ? do_syscall_64+0xbe/0x3b0 [ 139.480744][ T6811] do_syscall_64+0xfa/0x3b0 [ 139.480768][ T6811] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.480793][ T6811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.480813][ T6811] ? clear_bhb_loop+0x60/0xb0 [ 139.480837][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.480856][ T6811] RIP: 0033:0x7fe5e4b8e929 [ 139.480875][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.480891][ T6811] RSP: 002b:00007fe5e29f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.480913][ T6811] RAX: ffffffffffffffda RBX: 00007fe5e4db5fa0 RCX: 00007fe5e4b8e929 [ 139.480928][ T6811] RDX: 0000000000004804 RSI: 0000200000000040 RDI: 0000000000000003 [ 139.480940][ T6811] RBP: 00007fe5e29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.480952][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.480964][ T6811] R13: 0000000000000000 R14: 00007fe5e4db5fa0 R15: 00007ffc50b20118 [ 139.480994][ T6811] [ 139.914733][ T5944] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 139.930122][ T5944] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input31 [ 140.078904][ T5944] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 140.108076][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 140.115613][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.134994][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.159968][ T979] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.198927][ T979] usb 3-1: config 0 has no interface number 0 [ 140.238171][ T979] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 140.262124][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.340201][ T979] usb 3-1: Product: syz [ 140.355946][ T979] usb 3-1: Manufacturer: syz [ 140.363136][ T979] usb 3-1: SerialNumber: syz [ 140.377934][ T979] usb 3-1: config 0 descriptor?? [ 140.407713][ T979] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 140.536711][ T5923] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 140.691109][ T5923] usb 4-1: config 253 has an invalid interface number: 228 but max is 0 [ 140.702582][ T5923] usb 4-1: config 253 has an invalid interface descriptor of length 5, skipping [ 140.712290][ T5923] usb 4-1: config 253 has no interface number 0 [ 140.719784][ T5923] usb 4-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.736312][ T5923] usb 4-1: config 253 interface 228 has no altsetting 0 [ 140.745671][ T5923] usb 4-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 140.755038][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.763380][ T5923] usb 4-1: Product: syz [ 140.769169][ T5923] usb 4-1: Manufacturer: syz [ 140.773807][ T5923] usb 4-1: SerialNumber: syz [ 140.793296][ T979] gspca_spca1528: reg_w err -71 [ 140.820209][ T979] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 140.832531][ T979] usb 3-1: USB disconnect, device number 13 [ 140.973665][ T6827] overlayfs: invalid origin (0000) [ 140.995516][ T5923] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 141.031230][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 141.037485][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 141.051520][ T5923] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 141.064522][ T5923] usb 4-1: media controller created [ 141.089482][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.103599][ T5923] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 141.116804][ T5923] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 141.219672][ T5923] rc_core: IR keymap rc-dtt200u not found [ 141.225457][ T5923] Registered IR keymap rc-empty [ 141.238380][ T5923] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 141.254217][ T979] usb 1-1: USB disconnect, device number 20 [ 141.273130][ T5923] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input32 [ 141.373072][ T5923] dvb-usb: schedule remote query interval to 300 msecs. [ 141.396224][ T5923] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 141.448162][ T5923] usb 4-1: USB disconnect, device number 15 [ 141.610905][ T5923] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 142.524642][ T6866] usb usb8: usbfs: process 6866 (syz.1.321) did not claim interface 0 before use [ 142.539026][ T6866] FAULT_INJECTION: forcing a failure. [ 142.539026][ T6866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.559651][ T6866] CPU: 0 UID: 0 PID: 6866 Comm: syz.1.321 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 142.559679][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.559691][ T6866] Call Trace: [ 142.559699][ T6866] [ 142.559707][ T6866] dump_stack_lvl+0x189/0x250 [ 142.559736][ T6866] ? __pfx____ratelimit+0x10/0x10 [ 142.559762][ T6866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.559784][ T6866] ? __pfx__printk+0x10/0x10 [ 142.559821][ T6866] should_fail_ex+0x414/0x560 [ 142.559864][ T6866] _copy_to_user+0x31/0xb0 [ 142.559884][ T6866] simple_read_from_buffer+0xe1/0x170 [ 142.559916][ T6866] proc_fail_nth_read+0x1df/0x250 [ 142.559951][ T6866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.559984][ T6866] ? rw_verify_area+0x258/0x650 [ 142.560006][ T6866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.560037][ T6866] vfs_read+0x1fd/0x980 [ 142.560066][ T6866] ? __pfx___mutex_lock+0x10/0x10 [ 142.560093][ T6866] ? __pfx_vfs_read+0x10/0x10 [ 142.560118][ T6866] ? __fget_files+0x2a/0x420 [ 142.560150][ T6866] ? __fget_files+0x3a0/0x420 [ 142.560176][ T6866] ? __fget_files+0x2a/0x420 [ 142.560210][ T6866] ksys_read+0x145/0x250 [ 142.560227][ T6866] ? __fget_files+0x3a0/0x420 [ 142.560247][ T6866] ? __pfx_ksys_read+0x10/0x10 [ 142.560268][ T6866] ? do_syscall_64+0xbe/0x3b0 [ 142.560289][ T6866] do_syscall_64+0xfa/0x3b0 [ 142.560307][ T6866] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.560324][ T6866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.560338][ T6866] ? clear_bhb_loop+0x60/0xb0 [ 142.560355][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.560369][ T6866] RIP: 0033:0x7fb04f18d33c [ 142.560383][ T6866] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 142.560394][ T6866] RSP: 002b:00007fb050075030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.560409][ T6866] RAX: ffffffffffffffda RBX: 00007fb04f3b5fa0 RCX: 00007fb04f18d33c [ 142.560420][ T6866] RDX: 000000000000000f RSI: 00007fb0500750a0 RDI: 0000000000000004 [ 142.560429][ T6866] RBP: 00007fb050075090 R08: 0000000000000000 R09: 0000000000000000 [ 142.560438][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.560446][ T6866] R13: 0000000000000000 R14: 00007fb04f3b5fa0 R15: 00007fff6a36e7c8 [ 142.560468][ T6866] [ 143.097012][ T5944] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 143.170937][ T6874] fuse: Bad value for 'user_id' [ 143.175938][ T6874] fuse: Bad value for 'user_id' [ 143.289410][ T5944] usb 2-1: config 253 has an invalid interface number: 228 but max is 0 [ 143.305165][ T5944] usb 2-1: config 253 has an invalid interface descriptor of length 5, skipping [ 143.315873][ T5944] usb 2-1: config 253 has no interface number 0 [ 143.328841][ T5944] usb 2-1: config 253 interface 228 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.344452][ T5944] usb 2-1: config 253 interface 228 has no altsetting 0 [ 143.361186][ T5944] usb 2-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=53.08 [ 143.377153][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.393762][ T5944] usb 2-1: Product: syz [ 143.399041][ T5944] usb 2-1: Manufacturer: syz [ 143.412332][ T5944] usb 2-1: SerialNumber: syz [ 143.659903][ T5944] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 143.670951][ T5944] dvb-usb: bulk message failed: -22 (2/0) [ 143.686040][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 143.704768][ T5944] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 143.724367][ T5944] usb 2-1: media controller created [ 143.742964][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.770957][ T5944] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 143.784166][ T5944] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 143.909953][ T5944] rc_core: IR keymap rc-dtt200u not found [ 143.915733][ T5944] Registered IR keymap rc-empty [ 143.928866][ T5944] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 143.968997][ T5944] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input34 [ 144.003174][ T5944] dvb-usb: schedule remote query interval to 300 msecs. [ 144.010392][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 144.034013][ T5944] usb 2-1: USB disconnect, device number 19 [ 144.092926][ T5944] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 144.604858][ T5944] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 144.628381][ T6891] syzkaller1: entered promiscuous mode [ 144.633935][ T6891] syzkaller1: entered allmulticast mode [ 144.771412][ T6900] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.807121][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 144.817408][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.844954][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.858608][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.921952][ T5944] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 144.933837][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.989893][ T5944] usb 2-1: config 0 descriptor?? [ 145.263946][ T5944] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 145.280815][ T5944] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 145.306077][ T5944] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 145.314949][ T5944] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 145.325015][ T5944] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 145.359425][ T5944] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 145.417055][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 145.444076][ T6917] FAT-fs (rnullb0): bogus number of reserved sectors [ 145.473391][ T6917] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 145.480791][ T6923] tipc: Enabling of bearer rejected, failed to enable media [ 145.506534][ T5944] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 145.530344][ T5944] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 145.570117][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.602121][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.614237][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.618506][ T10] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 145.639697][ T10] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 145.654299][ T5944] usb 2-1: USB disconnect, device number 20 [ 145.661703][ T24] usb 1-1: config 0 descriptor?? [ 145.678584][ T10] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.687054][ T5845] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 145.723589][ T10] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.733253][ T30] audit: type=1326 audit(1751357646.664:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.2.343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1a098e929 code=0x0 [ 145.858846][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.872142][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.882077][ T5845] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.892242][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.903172][ T5845] usb 4-1: config 0 descriptor?? [ 145.915104][ T5845] hub 4-1:0.0: USB hub found [ 146.122331][ T24] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 146.131035][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.147881][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.231262][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 146.240383][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 146.353190][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.375828][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.547974][ T5845] hub 4-1:0.0: 1 port detected [ 146.810365][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000C/input/input36 [ 147.057646][ T5845] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 147.065484][ T5845] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 147.076406][ T5845] ------------[ cut here ]------------ [ 147.082332][ T5845] WARNING: kernel/workqueue.c:4208 at __flush_work+0xabc/0xbc0, CPU#1: kworker/1:3/5845 [ 147.092413][ T5845] Modules linked in: [ 147.096749][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: kworker/1:3 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 147.108426][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.118696][ T5845] Workqueue: usb_hub_wq hub_event [ 147.123924][ T5845] RIP: 0010:__flush_work+0xabc/0xbc0 [ 147.129458][ T5845] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 147.150001][ T5845] RSP: 0018:ffffc90004286940 EFLAGS: 00010283 [ 147.156097][ T5845] RAX: ffffffff818ade3b RBX: 1ffff1100981ae54 RCX: 0000000000100000 [ 147.164719][ T5845] RDX: ffffc900160bf000 RSI: 00000000000212b4 RDI: 00000000000212b5 [ 147.172851][ T5845] RBP: ffffc90004286b10 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 147.181055][ T5845] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000000 [ 147.189237][ T5845] R13: ffff88804c0d72a0 R14: dffffc0000000000 R15: ffff88804c0d7288 [ 147.197522][ T5845] FS: 0000000000000000(0000) GS:ffff888125ae4000(0000) knlGS:0000000000000000 [ 147.206562][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.213425][ T5845] CR2: 0000200000005000 CR3: 0000000030e56000 CR4: 00000000003526f0 [ 147.221641][ T5845] Call Trace: [ 147.225084][ T5845] [ 147.228195][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.234691][ T5845] ? __pfx___flush_work+0x10/0x10 [ 147.240754][ T5845] ? __pfx___might_resched+0x10/0x10 [ 147.246101][ T5845] flush_delayed_work+0x13e/0x190 [ 147.251811][ T5845] ? __pfx_flush_delayed_work+0x10/0x10 [ 147.257544][ T5845] ? _dev_err+0x10a/0x160 [ 147.262006][ T5845] hub_quiesce+0x1f0/0x330 [ 147.266536][ T5845] hub_disconnect+0xc8/0x470 [ 147.271303][ T5845] hub_probe+0x132f/0x36e0 [ 147.275885][ T5845] ? __pfx_hub_probe+0x10/0x10 [ 147.280938][ T5845] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 147.287040][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.292955][ T6933] FAULT_INJECTION: forcing a failure. [ 147.292955][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 147.293570][ T5845] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 147.312036][ T5845] ? pm_runtime_enable+0x1f3/0x340 [ 147.317380][ T5845] usb_probe_interface+0x634/0xbf0 [ 147.322727][ T5845] ? __pfx_usb_probe_interface+0x10/0x10 [ 147.328966][ T5845] really_probe+0x26d/0x9a0 [ 147.333540][ T5845] __driver_probe_device+0x18c/0x2f0 [ 147.339074][ T5845] driver_probe_device+0x4f/0x430 [ 147.344190][ T5845] __device_attach_driver+0x2ce/0x530 [ 147.350534][ T5845] bus_for_each_drv+0x24e/0x2e0 [ 147.355440][ T5845] ? __pfx___device_attach_driver+0x10/0x10 [ 147.362112][ T5845] ? __pfx_bus_for_each_drv+0x10/0x10 [ 147.367696][ T5845] __device_attach+0x2b8/0x400 [ 147.372627][ T5845] ? __pfx___device_attach+0x10/0x10 [ 147.378132][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 147.383497][ T5845] bus_probe_device+0x185/0x260 [ 147.388509][ T5845] device_add+0x7b6/0xb50 [ 147.392949][ T5845] usb_set_configuration+0x1a87/0x20e0 [ 147.398594][ T5845] usb_generic_driver_probe+0x8d/0x150 [ 147.404171][ T5845] usb_probe_device+0x1c4/0x390 [ 147.409177][ T5845] ? __pfx_usb_probe_device+0x10/0x10 [ 147.414654][ T5845] really_probe+0x26d/0x9a0 [ 147.419337][ T5845] __driver_probe_device+0x18c/0x2f0 [ 147.424749][ T5845] driver_probe_device+0x4f/0x430 [ 147.429929][ T5845] __device_attach_driver+0x2ce/0x530 [ 147.435452][ T5845] bus_for_each_drv+0x24e/0x2e0 [ 147.440640][ T5845] ? __pfx___device_attach_driver+0x10/0x10 [ 147.447455][ T5845] ? __pfx_bus_for_each_drv+0x10/0x10 [ 147.452876][ T5845] __device_attach+0x2b8/0x400 [ 147.458297][ T5845] ? __pfx___device_attach+0x10/0x10 [ 147.463705][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 147.469043][ T5845] bus_probe_device+0x185/0x260 [ 147.474010][ T5845] device_add+0x7b6/0xb50 [ 147.478488][ T5845] usb_new_device+0xa39/0x16f0 [ 147.483409][ T5845] ? __pfx_usb_new_device+0x10/0x10 [ 147.488748][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.494048][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.499398][ T5845] hub_event+0x2941/0x4a00 [ 147.503967][ T5845] ? __pfx_hub_event+0x10/0x10 [ 147.508887][ T5845] ? process_scheduled_works+0x9ef/0x17b0 [ 147.514730][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.520093][ T5845] ? process_scheduled_works+0x9ef/0x17b0 [ 147.525940][ T5845] ? process_scheduled_works+0x9ef/0x17b0 [ 147.531805][ T5845] process_scheduled_works+0xae1/0x17b0 [ 147.537526][ T5845] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.543661][ T5845] worker_thread+0x8a0/0xda0 [ 147.549111][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.555476][ T5845] ? __kthread_parkme+0x7b/0x200 [ 147.561013][ T5845] kthread+0x70e/0x8a0 [ 147.565209][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 147.570457][ T5845] ? __pfx_kthread+0x10/0x10 [ 147.575159][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.580519][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.585830][ T5845] ? __pfx_kthread+0x10/0x10 [ 147.590569][ T5845] ret_from_fork+0x3fc/0x770 [ 147.595257][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 147.600507][ T5845] ? __switch_to_asm+0x39/0x70 [ 147.605379][ T5845] ? __switch_to_asm+0x33/0x70 [ 147.610260][ T5845] ? __pfx_kthread+0x10/0x10 [ 147.614951][ T5845] ret_from_fork_asm+0x1a/0x30 [ 147.619855][ T5845] [ 147.622961][ T5845] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.630333][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: kworker/1:3 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 147.641879][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.651944][ T5845] Workqueue: usb_hub_wq hub_event [ 147.656983][ T5845] Call Trace: [ 147.660269][ T5845] [ 147.663200][ T5845] dump_stack_lvl+0x99/0x250 [ 147.667827][ T5845] ? __asan_memcpy+0x40/0x70 [ 147.672438][ T5845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.677743][ T5845] ? __pfx__printk+0x10/0x10 [ 147.682460][ T5845] panic+0x2db/0x790 [ 147.686366][ T5845] ? __pfx_panic+0x10/0x10 [ 147.690802][ T5845] ? ret_from_fork_asm+0x1a/0x30 [ 147.695753][ T5845] __warn+0x334/0x4c0 [ 147.699747][ T5845] ? __flush_work+0xabc/0xbc0 [ 147.704445][ T5845] ? __flush_work+0xabc/0xbc0 [ 147.709129][ T5845] report_bug+0x2be/0x4f0 [ 147.713466][ T5845] ? __flush_work+0xabc/0xbc0 [ 147.718149][ T5845] ? __flush_work+0xabc/0xbc0 [ 147.722836][ T5845] ? __flush_work+0xabe/0xbc0 [ 147.727522][ T5845] handle_bug+0x84/0x160 [ 147.731781][ T5845] exc_invalid_op+0x1a/0x50 [ 147.736297][ T5845] asm_exc_invalid_op+0x1a/0x20 [ 147.741150][ T5845] RIP: 0010:__flush_work+0xabc/0xbc0 [ 147.746440][ T5845] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 147.766051][ T5845] RSP: 0018:ffffc90004286940 EFLAGS: 00010283 [ 147.772130][ T5845] RAX: ffffffff818ade3b RBX: 1ffff1100981ae54 RCX: 0000000000100000 [ 147.780106][ T5845] RDX: ffffc900160bf000 RSI: 00000000000212b4 RDI: 00000000000212b5 [ 147.788112][ T5845] RBP: ffffc90004286b10 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 147.796089][ T5845] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000000 [ 147.804070][ T5845] R13: ffff88804c0d72a0 R14: dffffc0000000000 R15: ffff88804c0d7288 [ 147.812075][ T5845] ? __flush_work+0xabb/0xbc0 [ 147.816796][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.823146][ T5845] ? __pfx___flush_work+0x10/0x10 [ 147.828189][ T5845] ? __pfx___might_resched+0x10/0x10 [ 147.833494][ T5845] flush_delayed_work+0x13e/0x190 [ 147.838530][ T5845] ? __pfx_flush_delayed_work+0x10/0x10 [ 147.844173][ T5845] ? _dev_err+0x10a/0x160 [ 147.848516][ T5845] hub_quiesce+0x1f0/0x330 [ 147.852946][ T5845] hub_disconnect+0xc8/0x470 [ 147.857557][ T5845] hub_probe+0x132f/0x36e0 [ 147.862012][ T5845] ? __pfx_hub_probe+0x10/0x10 [ 147.866792][ T5845] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 147.872700][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.879048][ T5845] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 147.884618][ T5845] ? pm_runtime_enable+0x1f3/0x340 [ 147.889764][ T5845] usb_probe_interface+0x634/0xbf0 [ 147.894913][ T5845] ? __pfx_usb_probe_interface+0x10/0x10 [ 147.900574][ T5845] really_probe+0x26d/0x9a0 [ 147.905102][ T5845] __driver_probe_device+0x18c/0x2f0 [ 147.910406][ T5845] driver_probe_device+0x4f/0x430 [ 147.915449][ T5845] __device_attach_driver+0x2ce/0x530 [ 147.920834][ T5845] bus_for_each_drv+0x24e/0x2e0 [ 147.925703][ T5845] ? __pfx___device_attach_driver+0x10/0x10 [ 147.931621][ T5845] ? __pfx_bus_for_each_drv+0x10/0x10 [ 147.937018][ T5845] __device_attach+0x2b8/0x400 [ 147.941791][ T5845] ? __pfx___device_attach+0x10/0x10 [ 147.947084][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 147.952294][ T5845] bus_probe_device+0x185/0x260 [ 147.957164][ T5845] device_add+0x7b6/0xb50 [ 147.961505][ T5845] usb_set_configuration+0x1a87/0x20e0 [ 147.967001][ T5845] usb_generic_driver_probe+0x8d/0x150 [ 147.972509][ T5845] usb_probe_device+0x1c4/0x390 [ 147.977379][ T5845] ? __pfx_usb_probe_device+0x10/0x10 [ 147.982758][ T5845] really_probe+0x26d/0x9a0 [ 147.987288][ T5845] __driver_probe_device+0x18c/0x2f0 [ 147.992598][ T5845] driver_probe_device+0x4f/0x430 [ 147.997635][ T5845] __device_attach_driver+0x2ce/0x530 [ 148.003025][ T5845] bus_for_each_drv+0x24e/0x2e0 [ 148.007904][ T5845] ? __pfx___device_attach_driver+0x10/0x10 [ 148.013807][ T5845] ? __pfx_bus_for_each_drv+0x10/0x10 [ 148.019203][ T5845] __device_attach+0x2b8/0x400 [ 148.023979][ T5845] ? __pfx___device_attach+0x10/0x10 [ 148.029297][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 148.034508][ T5845] bus_probe_device+0x185/0x260 [ 148.039374][ T5845] device_add+0x7b6/0xb50 [ 148.043717][ T5845] usb_new_device+0xa39/0x16f0 [ 148.048504][ T5845] ? __pfx_usb_new_device+0x10/0x10 [ 148.053734][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.058960][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.064199][ T5845] hub_event+0x2941/0x4a00 [ 148.068666][ T5845] ? __pfx_hub_event+0x10/0x10 [ 148.073439][ T5845] ? process_scheduled_works+0x9ef/0x17b0 [ 148.079185][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.084394][ T5845] ? process_scheduled_works+0x9ef/0x17b0 [ 148.090139][ T5845] ? process_scheduled_works+0x9ef/0x17b0 [ 148.095888][ T5845] process_scheduled_works+0xae1/0x17b0 [ 148.101494][ T5845] ? __pfx_process_scheduled_works+0x10/0x10 [ 148.107593][ T5845] worker_thread+0x8a0/0xda0 [ 148.112190][ T5845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.118535][ T5845] ? __kthread_parkme+0x7b/0x200 [ 148.123492][ T5845] kthread+0x70e/0x8a0 [ 148.127572][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 148.132773][ T5845] ? __pfx_kthread+0x10/0x10 [ 148.137370][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.142574][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.147779][ T5845] ? __pfx_kthread+0x10/0x10 [ 148.152377][ T5845] ret_from_fork+0x3fc/0x770 [ 148.156999][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 148.162149][ T5845] ? __switch_to_asm+0x39/0x70 [ 148.166922][ T5845] ? __switch_to_asm+0x33/0x70 [ 148.171690][ T5845] ? __pfx_kthread+0x10/0x10 [ 148.176383][ T5845] ret_from_fork_asm+0x1a/0x30 [ 148.181168][ T5845] [ 148.184365][ T5845] Kernel Offset: disabled [ 148.188702][ T5845] Rebooting in 86400 seconds..