last executing test programs: 1m28.342346962s ago: executing program 2 (id=49): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x4460}}, './file0\x00'}) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x2) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000080)=""/249) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000180)={0x40, 0x7}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth1_to_bond\x00', &(0x7f00000001c0)=@ethtool_test={0x1a, 0x3, 0x1, 0x3, [0x3b8, 0x0, 0x2]}}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000300), 0x8, 0x300) (async) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002380)={0x0, 0x0}, &(0x7f00000023c0)=0xc) fstat(r0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$video(&(0x7f0000002480), 0x7, 0x101080) (async) r8 = getpgrp(0xffffffffffffffff) (async) r9 = geteuid() (async) stat(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002580)=0x0) sendmsg$netlink(r0, &(0x7f00000026c0)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000280)={0x1c, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@generic="f6", @typed={0x8, 0x47, 0x0, 0x0, @fd=r0}]}, 0x1c}], 0x1, &(0x7f00000025c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r7, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11}}}], 0xd8, 0x4000c005}, 0x20000000) (async) r12 = userfaultfd(0x800) (async) setfsuid(r3) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000002700)) (async) fadvise64(r7, 0x1, 0x1, 0x4) fchmod(r7, 0x4) (async) r13 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r13, 0x5646, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000002780)=0x7, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000027c0)={0x0, 0xff, [0xff, 0x8000, 0xffffffffffff0001, 0xf, 0x2, 0x4]}) (async, rerun: 64) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000002800)={0x5, "9056204d156e7f6689cf7280b0b0b5eaa35c8442cab47ea8442ec9d83db2b94c", 0x1, 0xffffffff, 0x7, 0x800000, 0x2}) (rerun: 64) sendfile(r12, r7, &(0x7f0000002880), 0x9) (async) flock(r12, 0xd) (async) write$FUSE_GETXATTR(r0, &(0x7f00000028c0)={0x18, 0x0, r2, {0x1}}, 0x18) (async) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000002900)) 1m28.338477794s ago: executing program 2 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) clock_gettime(0x0, &(0x7f0000000200)) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 1m28.284077564s ago: executing program 2 (id=51): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xc) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) 1m26.810572426s ago: executing program 2 (id=60): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80200, 0x482) r3 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_netfilter(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="dbdf2501000006000005000000001eec000000001b21e919971051ed50cdf7f625b5"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) chmod(&(0x7f0000000180)='./file0\x00', 0x22) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbf6, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xffffffffffffffad, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffff30df}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40) lseek(r4, 0x100000000004, 0x1) getdents64(r4, 0x0, 0x4f) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x102b82, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x1, &(0x7f0000000300)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r9, 0x9df48000) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r10, &(0x7f0000000200)="a3", 0x1) getpeername$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) 1m26.606945474s ago: executing program 2 (id=61): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0xa, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffffff7, 0x161040) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x44}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) 1m26.323381959s ago: executing program 2 (id=62): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x101a82, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) 1m26.048260064s ago: executing program 32 (id=62): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x4}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x101a82, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) 8.479527613s ago: executing program 3 (id=377): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) getpeername$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000480)=0x6e) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101ae84c320a584353017fc010203010c0483070075b6cc00"], 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af12, &(0x7f0000000080)) write$sysctl(r3, &(0x7f0000000100)='6\x00', 0x2) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40a2012, r5, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000200)='\xa7q\x18\f\xb6%\xfd\xec\xfc\x14\xd4\fX\xa7\x00\xbfd\xff\x8f,\xe6OZ\x1b\xcc\rU\x00\x8at\xa37\ne\xa6\x83\x9b\x94nC\x82\xc0\x18\x89MR\xf7\xd24\x18E\x8d\xd3\xd4N~\xa9#\xdf\xf1\x01\xa8;\xa4\x7f\xa5V\x94\x15?\xb3\xa4\x0e\xd5\xad\xbc\xe3\x13K{\xd4\xf0{\xddx\xc6\x1c\xe0%\x1d\x81*T\xbe\nV\x82\xddd.\n/d\xe9\xb5\x064\x98\xee<']}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r2, 0x202, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HIDDEN_SSID={0x15, 0x7e, @random="888be53c2dd736c3b8e0109e6ecd459b52"}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048004}, 0x50) 5.388870888s ago: executing program 3 (id=391): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000000)={0x4, 0xd73}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) getpeername(r1, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109021b000200000000781fdf09049c0000010351000904000000ffffff00ac1d215051f8efa962cf1f4b9d30da0594b44f958f1773e1f31b641fb69cd8484eaf411cb3c1dae70b34b27d945332"], 0x0) 4.013586692s ago: executing program 3 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) socketpair(0x28, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x434, 0x3f3, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x2, 0x7, [0x949d, 0x28d9dfad, 0xb, 0x5870, 0x69b8, 0x2, 0x8, 0x1, 0x10001, 0x8, 0x4, 0x8, 0x8, 0x1, 0x1ff, 0x10000, 0x10000, 0x4, 0x0, 0x5e, 0xfffffffa, 0x9, 0x1, 0x0, 0x6, 0x4, 0x3, 0x2, 0x76a, 0xd, 0x0, 0x10000, 0x9000000, 0x2, 0xd2, 0x0, 0x1, 0x985, 0x7ff, 0x5, 0x5, 0xb, 0x9, 0x2, 0xb, 0x101, 0xf, 0x1, 0xff, 0x1, 0x6, 0xfff, 0x5, 0x7, 0x10000, 0x9, 0xff, 0x3a65, 0xfffffffe, 0x6, 0x2c4, 0x8, 0x3, 0x49], [0x3, 0x8, 0x1, 0xdc, 0x6, 0x9, 0xb, 0x3, 0x7, 0x1, 0x0, 0x7fff, 0xfffffff7, 0x1, 0x0, 0x8, 0x9, 0x4, 0x7, 0x4, 0xff88, 0x1, 0x2, 0x4, 0x2095, 0xa, 0x81, 0xf90, 0x4, 0xd, 0x3cf, 0xac, 0x100, 0x7fffffff, 0xfffffffd, 0x40, 0x3, 0x0, 0xffff, 0x3, 0xfffffffd, 0x5, 0x40, 0x7, 0x8, 0x5, 0xfffffc08, 0xfffff801, 0x6e0, 0x1ff, 0x40, 0x3ff, 0xd11, 0xb, 0x8, 0x490, 0xfffffff5, 0x7, 0xffff, 0x8000, 0x3, 0x7, 0x3, 0xee95], [0xc, 0x6, 0xffffffff, 0xe7, 0x8001, 0x7fffffff, 0x21, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x7, 0x4, 0x9, 0xfffffff0, 0x7fffffff, 0x9, 0x9, 0x5, 0x3ff, 0x10001, 0xfffffffa, 0x62, 0x7, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100, 0x7, 0x9, 0x0, 0x1, 0x8001, 0x7, 0x0, 0x6, 0x8, 0x9, 0x9, 0x9, 0x7fffffff, 0xe4, 0x5, 0x2a86, 0x1, 0x2d6, 0x2, 0x1, 0x3, 0xfc1, 0x6, 0x80000001, 0x5, 0xbe8, 0x2, 0x0, 0xe988, 0xb12d, 0x1, 0xa, 0x7fffffff], [0x7, 0x4, 0x401, 0xc99, 0x331, 0xfffffffc, 0x2c47, 0x9, 0x1, 0xffff, 0xb, 0x0, 0x9, 0x4, 0x8, 0x1, 0x2, 0x7cfc, 0x70, 0x8, 0xd, 0xfffffffe, 0x200, 0x9, 0xcf3, 0x7, 0x7, 0x2, 0x1, 0x2, 0x4686, 0x1, 0x81, 0x3, 0x4, 0x2, 0x2, 0x4, 0xdc1, 0x9, 0x7, 0x5, 0x4, 0x1, 0xffff, 0x3, 0x7f, 0x43, 0x800, 0x80000001, 0x9, 0x3f019eae, 0x0, 0x8fc7, 0x17, 0x7, 0x9, 0x1, 0x5, 0xc233, 0x2ce, 0x8, 0x7, 0x5], 0x11, ['/:\x00', 'batadv0\x00', '/\x00', '[%\xde\x00']}, ["", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40001}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES8, @ANYRES64=r1, @ANYRESHEX=r1, @ANYBLOB="08002c0001000000080039000700000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 3.91883552s ago: executing program 3 (id=396): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b3c0a208b8106e1e8d30000000010902120001941f00d01aa70950b73700"/45], 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x7f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2b}}}, 0xb) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0x400ca}, 0x1c) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x2004) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000200)={0x1, 0xffffffff, 0x7, 0x4, 0x7, 0x7, 0xfffffff9, 0xf8e, 0x4e, 0x4, 0x5, 0x1, 0xe, 0x3d}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000200)={0x19980330}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) syslog(0x4, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, 0x0, 0x8) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r6, 0x7aa, &(0x7f00000000c0)={{@my=0x1}, 0x6, 0x7}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000000)={{@host, 0x3}, 0x1, 0x0, 0x5a56}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) 3.727241483s ago: executing program 1 (id=398): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0xa91, 0x4, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000256f0b08bb00a40d6b6a0102030a0902120001000000000904000000ef"], 0x0) 3.153251456s ago: executing program 1 (id=400): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8f, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0x4, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb6, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x5, 0x3, 0x0, 0x8, 0xa}, 0xea, &(0x7f00000001c0)={0x5, 0xf, 0xea, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xe, 0xf, 0x8f0, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x2, 0xf, 0x100, [0xc000, 0x3fc0, 0x8, 0x3fc0, 0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "850bb3808990601feacd2a6ada767110"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x1}, @generic={0x9c, 0x10, 0xa, "7d222cff6b003cf94fd9156e20d1d5e830327911d482fb6b27e19be3d8473fd98d2a4311d980103b3c63989ace4f1c0fce963338b3b4f69cc6e70ef69d33b5a79abdc4402cd06575b3d776ff9e828e32056d5931758e3c0bbaa69394f4d135ef78f76da174f8bd7c66603d5fb970d51f46f1a167173bbbd9e3c11dc590b760d0eeec01a648b112d61063b2e6caf3b3bcca0c4bb5aa865c5133"}]}, 0x3, [{0x4a, &(0x7f0000000100)=@string={0x4a, 0x3, "788893c005beef806a15f9799f205ba99b21b080b0c579a9c1ec40752da0064eeda84a80c441b3468ba9cd240e269c81beb5ad3cd4c6f666f13d0b2cdbcdd8ddcf9b17c0bad8d675"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x408}}, {0xdc, &(0x7f0000000300)=@string={0xdc, 0x3, "f9cbcdc562e5b5d10c569c2a2344456aa7615454148309dc935b8a747db6253840e0e8c14022ebf8f8777d6e316ab3b6ceddd256572d297b669a4695c6918506563c5a0c0dd2619cab754573e8e9eec46e32677a034ac1763ec4216f2435ffc0a9572f4e6c6605aea2f61bbce46dbcc98102d1364afe950091649e8393b04519ff35b1dd6d18718ed308f1c25a47cff6503d3598ca1342c826592da8c0c52f5c609e2bc5510afe553337af55f399b97f81dc883dd2bc7828cde3f8e95b98e285e554c59c2d9d328086bdb69dee5a60e4e66f2c8bee19ac54cc3d"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="000003e6f2a11e610f"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.589791042s ago: executing program 0 (id=404): r0 = socket(0x33, 0xfd5aeac888db474e, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000000)={0x6, 0x6, 0x8, 0x7fffffffffffffff}) mmap$snddsp_status(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x4, 0x140873, 0xffffffffffffffff, 0x82000000) ioctl$COMEDI_RANGEINFO(r2, 0x80106408, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[{}, {}]}) 2.384412519s ago: executing program 0 (id=407): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/249, 0xf9}], 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 2.298217716s ago: executing program 0 (id=409): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x13}], 0x1, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}, 0x1, 0x0, 0x0, 0x3dc06331d0ffc133}, 0x0) write$binfmt_script(r1, &(0x7f00000010c0)={'#! ', './file0'}, 0xb) close(r1) r4 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r8, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x7) (async) socket$netlink(0x10, 0x3, 0x7) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=r10, @ANYBLOB="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"], 0x8) 1.659017281s ago: executing program 3 (id=413): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES8], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) dup(r2) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x1, 0x5c, {0x5c, 0xc, "5dc68518e8584416e99f1fa734437754d41835b27d6fce37382a9d6170e3658f180faa4baf875bf9658bbd3d8e45cd2fbe8bc99b1ef745325dad05fdbb9358d1e6a5f03727594c12afe7392d1b5f3d796091217c9b0117af0481"}}, &(0x7f0000000080)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "5c35719a19e0a273aab5b560e3eb29384bbd39b0778a4c6f5d2c11159f9e870b51853cf07a6dbef687cb5385837b298df5d421def8ff01ea07e21d82f8e1074f5145bc38bf016506a2df5640ddca8844c96c86e63a65932e42d9fb9448f39634879748cfd18dc627e06b21947b5d25bd45aa5b135548f7bf57e3e36465dd0f606f671291dac4cded9985918c26159280839e3b8cc9f4563fe79b32006ac5a995f75edb20067f40a85d71e6c694c94fc3bd7d"}}, &(0x7f0000000140)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "113f38376826ceb517459f80c2e238dd"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x798, 0xff00, 0xffff, [0x3f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x67, 0x8, 0x0, 0x6, 0x63}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x8, 0x5}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x8, 0x9, 0x0, "8e0584ab", "7b5b2fb4"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x0, 0x8, 0xa, 0x6, 0x9}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0xe, 0x6f, "c7b2765394992bd8116ef2ad661d63ca33a7db8cf0ccda21d8a1046dc2b7162d737d3a4aa7cf029b688cbdb05d1a2aa01c7e1e6509c635e099eb9a9a73c6998a3e143c2403fa3df4880da528b6a5354cf6ec90fe74774adea1f7d9340826dc3beda9f02b0566a0028d7b7d7921b48e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1c00, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000480)={0x40, 0xb, 0x2, "27c8"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="12b5625dd3e5"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "88f9"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x5}}) 1.598458729s ago: executing program 4 (id=414): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r2, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) listen(r1, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x4, @vbi={0x7, 0x80000001, 0x9, 0x0, [0x6, 0x1], [0x8, 0x9], 0x3}}) 1.494677999s ago: executing program 4 (id=415): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xc8, &(0x7f0000000040)=ANY=[@ANYBLOB="20160c00000000f7f288000040f400bec073cfda74f291e4e7265858177ea343d0402e146339a8e261d2dc1c9f949990cb80e374e4fe2bc3be73827b8fb3d2aa76c6bd18003e9b9dee4a35cdd2d29dab3acfedf2d1ece79f5e2b20db6593554925837f0277c1c723c4239b9121ba1eb7f12ab4fdc5c130ae2e22c3255bb68178fc5422ffc6dbfa72fd039512"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x31, 0x28, "3d5fd26e523ccff6a6e058541e233d050b0aac7fad24401fe2bcabbd3bf77bba9355adec6c02caf0"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1}}) 1.37374762s ago: executing program 1 (id=416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000004c0)=0x5e, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf251b00000008009a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d", 0x21) keyctl$set_reqkey_keyring(0xe, 0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0)=0x1fe, 0x7, 0x2, 0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000500)={0x51, 0x26, 0x219, {0x7, 0xcac}, {0x7ffc, 0x7}, @period={0x59, 0x166a, 0x0, 0xc, 0xa, {0x1, 0x1, 0x2, 0x800}, 0x0, 0x0}}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf251e00000008000400ffffffff080001"], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x40010) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000580)=""/4096) 1.316768025s ago: executing program 1 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0xcc, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xea6}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x59}, {0x6, 0x11, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040084}, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0xcc, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xea6}, {0x6, 0x11, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x59}, {0x6, 0x11, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040084}, 0x40080) (async) 1.230858985s ago: executing program 1 (id=418): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ec8616203e13150827840102030109021b0001070e80030904b6b301ff"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110026bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000000fcffffff1400040070696d72656700000000000000000000080005000800000008000500040000001400"], 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) 960.039833ms ago: executing program 4 (id=419): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000200)='\xa7q\x18\f\xb6%\xfd\xec\xfc\x14\xd4\fX\xa7\x00\xbfd\xff\x8f,\xe6OZ\x1b\xcc\rU \x8at\xa37\ne\xa6\x83\x9b\x94nC\x82\xc0\x18\x89MR\xf7\xd24\x18E\x8d\xd3\xd4N~\xa9#\xdf\xf1\x01\xa8;\xa4\x7f\xa5V\x94\x15?\xb3\xa4\x0e\xd5\xad\xbc\xe3\x13K{\xd4\xf0{\xddx\xc6\x1c\xe0%\x1d\x81*T\xbe\nV\x82\xddd.\n/d\xe9\xb5\x064\x98\xee<']}, 0x0) 918.469312ms ago: executing program 4 (id=420): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0xffffffffffffffff, &(0x7f0000000500)=0x89) r2 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x3a8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) fcntl$setlease(r2, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20401, 0x18f) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001440)=""/126, 0x7e, 0x41) 807.002954ms ago: executing program 4 (id=421): mount$9p_fd(0x0, 0x0, 0x0, 0x102005, 0x0) timer_create(0x0, 0x0, 0x0) syslog(0x2, &(0x7f0000000080)=""/214, 0xd6) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x4, 0x4) 282.003875ms ago: executing program 4 (id=422): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0x4, r1) keyctl$clear(0x7, r2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x8000002, {0xa, 0x3, 0xdca7, @empty, 0x6}}}, 0x3a) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$kcm(0x10, 0x5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000580)=[@mss={0x2, 0x8000}, @sack_perm, @window={0x3, 0x1, 0x8001}, @window={0x3, 0x2, 0x4}], 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x2000008, 0x50, r3, 0x8640f000) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000086d040cc5400001020301090224000101f600a109040007010300000000000000000122000709058103000006050f"], &(0x7f0000000600)={0xa, &(0x7f0000000180)={0x8, 0x6, 0x250, 0xde, 0x4, 0x81, 0x8, 0x68}, 0x34, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f349d8a1010010c4200037b09004803100b0a1003020117040704001471041017596aa15d51964d2db571f2882632e903100b", @ANYRESDEC=0x0, @ANYRESHEX=r2], 0x8, [{0xea, &(0x7f00000006c0)=@string={0xea, 0x3, "a0a67597ffc641c4816fa7525cca907f294d77c2348ecfb0bb510ff3c1f35eb558407e02a7a1fa64a3310766e0f96855f4f3fef1a117a515c008efde8462177810081b61b609955593f2a53c213af22fbe4464d26832d72567f16f25f1c5144927d4066078b700f1f7e25fd9d6244aab65d4ded575875c851197fcff275a9aaf3303d1ebdfe65bbf175b6dc9c86dc34e67b6319a3d4b51dd6ec5094a41afca6ae5e1ad6576c28c180f77c89a11470537d82c89ae8b49edd87c32fe1f967a7cb1be38162fa3ba131a0a01150e4760ae85b993eeefdde05788c46c70b79ca3114d68a8bfe6c4dbf5fa"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xfcff}}, {0x86, &(0x7f0000000700)=ANY=[]}, {0xd0, &(0x7f0000000440)=ANY=[@ANYBLOB="d00384a75f7de6137493dab8fd46615312b310c93f658ff7e43d478a4728773931a7b7f00872168c6a3d6b8f61e4b30a7b3ac65d0b15adc9a72a76967f52ea1c4c937bb88e4f5f17492ebfbccfa845127c4eb00b4a5df430b55bb4b6917d8ac0e1ca4966ffe90d4fe540bb3362a9b1941460ba241c0f1cfc71cee77ca436769221b68fd474a94e7d4cb6d19060f2cbe6ea7735994c5227c620ddd026b4d245090bb10fe28b1be75587bd924b09cc9f8e50e47789a08d9e53f53dd7e9000000000000000000"]}, {0xc3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]}, {0xe9, &(0x7f00000009c0)=ANY=[]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x401}}]}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2141) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f00000000c0)={{0x80, 0xfd}, 'port0\x00', 0x302, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x101}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x6, r4, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x10000}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000fff003040040000102030109022400010106101409040002010701017d090501023b00030908090582024000d21010"], &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xb, 0x8, 0x2, 0x40, 0xc8}, 0x47, &(0x7f0000000080)=ANY=[@ANYBLOB="050f4700023b100268cf98f26b638999e11438ce3abe56fee36fe38607d569016db724ff5b12d482af65942ffe12d1b3b275a9d22c15ad9001b4816f3394430d07100206a90000"]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2f) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_FPU(r11, 0x41a0ae8d, &(0x7f0000000480)={'\x00', 0x400, 0x9, 0x29, 0x0, 0x7, 0x8080000, 0x5000, '\x00', 0x4}) 206.080639ms ago: executing program 0 (id=423): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x94}}, 0x4) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18808, &(0x7f0000000200)={[{@nfs_export_off}, {@xino_on}, {@nfs_export_on}, {@nfs_export_off}, {@nfs_export_on}, {@xino_on}], [{@dont_hash}, {@fowner_gt={'fowner>', r2}}, {@dont_hash}, {@flag='nolazytime'}, {@dont_hash}]}) (async) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) mount$nfs4(&(0x7f00000002c0)='\xf1*},-+/@%.\'\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x64000, &(0x7f0000000380)={[{'nfs_export=on'}, {'@'}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, 'dont_hash'}}]}) 98.928257ms ago: executing program 0 (id=424): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = getpid() capget(&(0x7f0000000100)={0x19980330, r1}, &(0x7f0000000300)={0xe80d, 0x639, 0x40, 0xa, 0x8, 0x1}) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 86.927217ms ago: executing program 0 (id=425): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001d40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x0, 0x8, [0xf0]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x1d}, &(0x7f0000001b00)={0x40, 0xb, 0x2, "057c"}, &(0x7f0000001b40)={0x40, 0xf, 0x2, 0x2fa}, &(0x7f0000001b80)={0x40, 0x13, 0x6, @random="ad2d2c0c53ac"}, &(0x7f0000001bc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001c00)={0x40, 0x19, 0x2, "8884"}, &(0x7f0000001c40)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000001c80)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000001cc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001d00)={0x40, 0x21, 0x1, 0x7}}) 0s ago: executing program 1 (id=426): r0 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x88, @multicast2, 0x4e24, 0x4, 'dh\x00', 0x37, 0x5, 0xb}, {@broadcast, 0x4e22, 0x4, 0x5, 0xfff, 0x8}}, 0x44) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = socket(0x1e, 0x5, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x15, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) write(r0, &(0x7f0000000500)="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"/465, 0x1d1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000307002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): -1: SerialNumber: syz [ 124.868700][ T24] usb 1-1: config 0 descriptor?? [ 124.886981][ T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 125.080742][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.093181][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.168344][ T5947] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 125.320796][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 125.341984][ T5947] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 125.359363][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.367926][ T5947] usb 2-1: Product: syz [ 125.372245][ T5947] usb 2-1: Manufacturer: syz [ 125.377206][ T5947] usb 2-1: SerialNumber: syz [ 125.389788][ T5947] usb 2-1: config 0 descriptor?? [ 125.558391][ T5944] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.611676][ T5947] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.698197][ T5944] usb 5-1: device descriptor read/64, error -71 [ 125.842180][ T5947] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 125.854854][ T5947] usb 2-1: USB disconnect, device number 29 [ 125.938225][ T5944] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 126.068249][ T5944] usb 5-1: device descriptor read/64, error -71 [ 126.075079][ T5908] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 126.112601][ T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 126.125412][ T24] usb 1-1: USB disconnect, device number 21 [ 126.189492][ T5944] usb usb5-port1: attempt power cycle [ 126.208215][ T5908] usb 4-1: device descriptor read/64, error -71 [ 126.458388][ T5908] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 126.528230][ T5944] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 126.548835][ T5944] usb 5-1: device descriptor read/8, error -71 [ 126.588221][ T5908] usb 4-1: device descriptor read/64, error -71 [ 126.668284][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 126.698527][ T5908] usb usb4-port1: attempt power cycle [ 126.788192][ T5944] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 126.809294][ T5944] usb 5-1: device descriptor read/8, error -71 [ 126.818206][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 126.825516][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.837215][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.847434][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.856722][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.867992][ T24] usb 2-1: config 0 descriptor?? [ 126.877038][ T24] hub 2-1:0.0: USB hub found [ 126.919046][ T5944] usb usb5-port1: unable to enumerate USB device [ 127.038146][ T5908] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 127.058631][ T5908] usb 4-1: device descriptor read/8, error -71 [ 127.080029][ T24] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 127.294009][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 127.300306][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 127.308202][ T5908] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 127.328948][ T24] usb 2-1: USB disconnect, device number 30 [ 127.339336][ T5908] usb 4-1: device descriptor read/8, error -71 [ 127.469105][ T5908] usb usb4-port1: unable to enumerate USB device [ 127.893039][ T6702] netlink: 'syz.1.187': attribute type 21 has an invalid length. [ 128.138225][ T5944] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 128.141500][ T6710] netlink: 'syz.0.189': attribute type 29 has an invalid length. [ 128.298149][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 128.306813][ T5944] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 128.329553][ T5944] usb 2-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 128.335692][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.190'. [ 128.358548][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.367930][ T5944] usb 2-1: Product: syz [ 128.375106][ T5944] usb 2-1: Manufacturer: syz [ 128.381111][ T5944] usb 2-1: SerialNumber: syz [ 128.399477][ T5944] usb 2-1: config 0 descriptor?? [ 128.615872][ T5944] usb 2-1: USB disconnect, device number 31 [ 128.643030][ T6727] syzkaller1: entered promiscuous mode [ 128.649009][ T6727] syzkaller1: entered allmulticast mode [ 128.661803][ T5926] IPVS: starting estimator thread 0... [ 128.718551][ T24] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 128.748284][ T6728] IPVS: using max 28 ests per chain, 67200 per kthread [ 128.846846][ T6732] mmap: syz.3.197 (6732) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.883022][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.898352][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.914081][ T24] usb 1-1: config 0 descriptor?? [ 128.926887][ T24] cp210x 1-1:0.0: cp210x converter detected [ 129.018234][ T5925] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 129.168132][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 129.175355][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.187473][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.188191][ T5944] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 129.197986][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.215567][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.227331][ T5925] usb 5-1: config 0 descriptor?? [ 129.247624][ T5925] hub 5-1:0.0: USB hub found [ 129.335219][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 129.369951][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 129.377315][ T5944] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 129.386599][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.398157][ T5944] usb 4-1: config 0 has no interface number 0 [ 129.404424][ T5944] usb 4-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.418179][ T5944] usb 4-1: config 0 interface 196 has no altsetting 0 [ 129.427958][ T5944] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 129.437164][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.445836][ T5944] usb 4-1: Product: syz [ 129.450191][ T5944] usb 4-1: Manufacturer: syz [ 129.454910][ T5944] usb 4-1: SerialNumber: syz [ 129.462336][ T5925] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 129.462837][ T5944] usb 4-1: config 0 descriptor?? [ 129.481068][ T5944] ipheth 4-1:0.196: Unable to find alternate settings interface [ 129.508381][ T5926] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 129.530710][ T6718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.540029][ T6718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.551813][ T24] usb 1-1: USB disconnect, device number 22 [ 129.563635][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.577816][ T24] cp210x 1-1:0.0: device disconnected [ 129.658265][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 129.665643][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.677892][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.678613][ T5944] usb 4-1: USB disconnect, device number 31 [ 129.690037][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.709627][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 129.715657][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 129.727992][ T5926] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.740149][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.750746][ T5926] usb 2-1: config 0 descriptor?? [ 129.761214][ T5925] usb 5-1: USB disconnect, device number 15 [ 130.300007][ T6749] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 130.309927][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.205'. [ 130.321036][ T6749] dummy0: entered promiscuous mode [ 130.331377][ T6749] bridge0: port 3(dummy0) entered blocking state [ 130.338451][ T6749] bridge0: port 3(dummy0) entered disabled state [ 130.345234][ T6749] dummy0: entered allmulticast mode [ 130.353478][ T6749] bridge0: port 3(dummy0) entered blocking state [ 130.360065][ T6749] bridge0: port 3(dummy0) entered forwarding state [ 130.371383][ T5926] usbhid 2-1:0.0: can't add hid device: -71 [ 130.380152][ T5926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 130.399097][ T5926] usb 2-1: USB disconnect, device number 32 [ 130.458178][ T5925] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 130.578152][ T5908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 130.618105][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 130.628192][ T5925] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 130.636766][ T5925] usb 1-1: config 0 has no interface number 0 [ 130.643547][ T5925] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 130.654030][ T5925] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.667936][ T5925] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 130.678456][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.686698][ T5925] usb 1-1: Product: syz [ 130.691829][ T5925] usb 1-1: Manufacturer: syz [ 130.696436][ T5925] usb 1-1: SerialNumber: syz [ 130.705519][ T5925] usb 1-1: config 0 descriptor?? [ 130.711678][ T6745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.720867][ T6745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.738152][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 130.745505][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.757176][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.767545][ T5908] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 130.778015][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.788952][ T5908] usb 5-1: config 0 descriptor?? [ 130.898157][ T5947] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 130.935980][ T6745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.944638][ T6745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 131.058233][ T5947] usb 4-1: Using ep0 maxpacket: 8 [ 131.065437][ T5947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.076318][ T5947] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 131.088752][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.108638][ T5947] usb 4-1: config 0 descriptor?? [ 131.178301][ T5926] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 131.201939][ T5908] ft260 0003:0403:6030.000B: item fetching failed at offset 0/2 [ 131.210456][ T5908] ft260 0003:0403:6030.000B: failed to parse HID [ 131.216921][ T5908] ft260 0003:0403:6030.000B: probe with driver ft260 failed with error -22 [ 131.333609][ T5926] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 131.346770][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.357188][ T5925] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 131.368912][ T5926] usb 2-1: Product: syz [ 131.373494][ T5926] usb 2-1: Manufacturer: syz [ 131.379869][ T5925] asix 1-1:0.251: probe with driver asix failed with error -524 [ 131.389626][ T5926] usb 2-1: SerialNumber: syz [ 131.405769][ T5926] usb 2-1: config 0 descriptor?? [ 131.418984][ T24] usb 5-1: USB disconnect, device number 16 [ 131.448364][ T5926] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 131.567354][ T5908] usb 1-1: USB disconnect, device number 23 [ 131.652728][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.663791][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.081746][ T5926] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 132.098318][ T5926] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 132.137278][ T5926] usb 2-1: USB disconnect, device number 33 [ 132.449781][ T5925] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 132.617697][ T5925] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.634915][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.660759][ T5925] usb 1-1: config 0 descriptor?? [ 132.680157][ T5925] cp210x 1-1:0.0: cp210x converter detected [ 132.948412][ T5926] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 133.006002][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.013267][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.079559][ T5925] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 133.089058][ T5925] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 133.097190][ T5925] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 133.104201][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 133.116843][ T5926] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.129422][ T5925] usb 1-1: cp210x converter now attached to ttyUSB0 [ 133.144534][ T5926] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.175495][ T5926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.186347][ T5926] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 133.196686][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.220419][ T5926] usb 2-1: config 0 descriptor?? [ 133.342882][ T5908] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 133.501226][ T5947] usb 1-1: USB disconnect, device number 24 [ 133.514048][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.525335][ T5947] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.533231][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.543539][ T5947] cp210x 1-1:0.0: device disconnected [ 133.553080][ T5908] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.566056][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 133.574264][ T5908] usb 5-1: SerialNumber: syz [ 133.691019][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.729309][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.774198][ T5926] hid (null): invalid report_size 27700 [ 133.791271][ T5926] hid (null): unknown global tag 0xc [ 133.819058][ T5926] hid (null): unknown global tag 0xd [ 133.843111][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.856417][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.865031][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.873143][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.880837][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.892563][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.900868][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.908139][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.915314][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.922662][ T5926] cougar 0003:060B:500A.000C: unknown main item tag 0x0 [ 133.930947][ T5926] cougar 0003:060B:500A.000C: reserved main item tag 0xe [ 133.938824][ T5926] cougar 0003:060B:500A.000C: unexpected long global item [ 133.946977][ T5926] cougar 0003:060B:500A.000C: parse failed [ 133.954007][ T5926] cougar 0003:060B:500A.000C: probe with driver cougar failed with error -22 [ 134.018802][ T5947] usb 4-1: USB disconnect, device number 32 [ 134.241118][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.253960][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.300823][ T5908] usb 5-1: 0:2 : does not exist [ 134.349639][ T5908] usb 5-1: USB disconnect, device number 17 [ 134.398777][ T5926] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 134.421966][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.498152][ T5895] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 134.558516][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 134.565745][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.587487][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.599978][ T5926] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.609917][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.622860][ T5926] usb 1-1: config 0 descriptor?? [ 134.631936][ T5926] hub 1-1:0.0: USB hub found [ 134.658305][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 134.667730][ T5895] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 134.677799][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.700907][ T5895] usb 4-1: config 0 descriptor?? [ 134.728128][ T5908] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 134.804792][ T6810] FAULT_INJECTION: forcing a failure. [ 134.804792][ T6810] name failslab, interval 1, probability 0, space 0, times 1 [ 134.821479][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT(full) [ 134.821504][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.821515][ T6810] Call Trace: [ 134.821523][ T6810] [ 134.821531][ T6810] dump_stack_lvl+0x189/0x250 [ 134.821556][ T6810] ? __pfx____ratelimit+0x10/0x10 [ 134.821576][ T6810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.821593][ T6810] ? __pfx__printk+0x10/0x10 [ 134.821615][ T6810] ? __pfx___might_resched+0x10/0x10 [ 134.821636][ T6810] ? fs_reclaim_acquire+0x7d/0x100 [ 134.821660][ T6810] should_fail_ex+0x414/0x560 [ 134.821690][ T6810] should_failslab+0xa8/0x100 [ 134.821712][ T6810] kmem_cache_alloc_noprof+0x74/0x6e0 [ 134.821737][ T6810] ? getname_flags+0xb8/0x540 [ 134.821764][ T6810] getname_flags+0xb8/0x540 [ 134.821791][ T6810] __x64_sys_execve+0x7a/0xb0 [ 134.821811][ T6810] do_syscall_64+0xfa/0xfa0 [ 134.821830][ T6810] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.821848][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.821866][ T6810] ? clear_bhb_loop+0x60/0xb0 [ 134.821887][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.821904][ T6810] RIP: 0033:0x7f16e658eec9 [ 134.821920][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.821949][ T6810] RSP: 002b:00007f16e73a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 134.821969][ T6810] RAX: ffffffffffffffda RBX: 00007f16e67e5fa0 RCX: 00007f16e658eec9 [ 134.821982][ T6810] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 134.821994][ T6810] RBP: 00007f16e73a3090 R08: 0000000000000000 R09: 0000000000000000 [ 134.822006][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.822016][ T6810] R13: 00007f16e67e6038 R14: 00007f16e67e5fa0 R15: 00007ffc91e8ffa8 [ 134.822046][ T6810] [ 134.836005][ T5926] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 134.888868][ T5908] usb 5-1: device descriptor read/64, error -71 [ 134.909759][ T6799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.051806][ T6798] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 135.100684][ T5926] usbhid 1-1:0.0: can't add hid device: -71 [ 135.106924][ T5926] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.139381][ T5926] usb 1-1: USB disconnect, device number 25 [ 135.189493][ T6820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.207573][ T5895] magicmouse 0003:05AC:0269.000D: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 135.229599][ T5908] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 135.239831][ T6820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.288779][ T6820] delete_channel: no stack [ 135.293929][ T6820] delete_channel: no stack [ 135.329579][ T6820] wireguard: wg1: Could not create IPv4 socket [ 135.388421][ T5908] usb 5-1: device descriptor read/64, error -71 [ 135.401035][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.415451][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.440927][ T5944] usb 4-1: USB disconnect, device number 33 [ 135.518628][ T5908] usb usb5-port1: attempt power cycle [ 135.544202][ T5947] usb 2-1: USB disconnect, device number 34 [ 135.868186][ T5908] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 135.898856][ T5908] usb 5-1: device descriptor read/8, error -71 [ 136.060819][ T6831] netlink: 'syz.3.224': attribute type 21 has an invalid length. [ 136.151681][ T5908] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 136.190577][ T5908] usb 5-1: device descriptor read/8, error -71 [ 136.238529][ T5925] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 136.312462][ T5908] usb usb5-port1: unable to enumerate USB device [ 136.338146][ T5944] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 136.388229][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 136.395930][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 136.409214][ T5925] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 136.419568][ T5925] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 136.435819][ T5925] usb 2-1: Product: syz [ 136.440644][ T5925] usb 2-1: Manufacturer: syz [ 136.445605][ T5925] usb 2-1: SerialNumber: syz [ 136.508214][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 136.517559][ T5944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.530706][ T5944] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 136.539992][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.562780][ T5944] usb 1-1: config 0 descriptor?? [ 136.671043][ T5925] usb 2-1: Invalid connection information received from device [ 137.285663][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.299203][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.309713][ T6837] netlink: 124 bytes leftover after parsing attributes in process `syz.1.223'. [ 137.325307][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.337285][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.517225][ T6841] 9pnet_fd: Insufficient options for proto=fd [ 137.801958][ T6831] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 137.809953][ T6831] netlink: 144 bytes leftover after parsing attributes in process `syz.3.224'. [ 137.820671][ T6825] dummy0: entered promiscuous mode [ 137.830657][ T6825] dummy0: entered allmulticast mode [ 137.868715][ T5926] usb 1-1: USB disconnect, device number 26 [ 137.919810][ T5925] usb 2-1: USB disconnect, device number 35 [ 138.004463][ T6850] FAULT_INJECTION: forcing a failure. [ 138.004463][ T6850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.018996][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.1.228 Not tainted syzkaller #0 PREEMPT(full) [ 138.019017][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.019025][ T6850] Call Trace: [ 138.019032][ T6850] [ 138.019037][ T6850] dump_stack_lvl+0x189/0x250 [ 138.019056][ T6850] ? __pfx____ratelimit+0x10/0x10 [ 138.019072][ T6850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.019085][ T6850] ? __pfx__printk+0x10/0x10 [ 138.019106][ T6850] should_fail_ex+0x414/0x560 [ 138.019131][ T6850] strncpy_from_user+0x36/0x290 [ 138.019153][ T6850] getname_flags+0xf3/0x540 [ 138.019175][ T6850] __x64_sys_execve+0x7a/0xb0 [ 138.019190][ T6850] do_syscall_64+0xfa/0xfa0 [ 138.019204][ T6850] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.019219][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.019231][ T6850] ? clear_bhb_loop+0x60/0xb0 [ 138.019248][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.019261][ T6850] RIP: 0033:0x7f16e658eec9 [ 138.019274][ T6850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.019287][ T6850] RSP: 002b:00007f16e73a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 138.019302][ T6850] RAX: ffffffffffffffda RBX: 00007f16e67e5fa0 RCX: 00007f16e658eec9 [ 138.019311][ T6850] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 138.019320][ T6850] RBP: 00007f16e73a3090 R08: 0000000000000000 R09: 0000000000000000 [ 138.019334][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.019341][ T6850] R13: 00007f16e67e6038 R14: 00007f16e67e5fa0 R15: 00007ffc91e8ffa8 [ 138.019365][ T6850] [ 138.203461][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.240562][ T6853] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 138.249450][ T6853] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.230'. [ 138.288155][ T5908] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 138.439465][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 138.448387][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.457592][ T5908] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 138.467938][ T5908] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 138.478928][ T5908] usb 4-1: config 8 interface 0 has no altsetting 0 [ 138.488731][ T5908] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 138.498294][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.507622][ T5908] usb 4-1: Product: syz [ 138.511888][ T5908] usb 4-1: Manufacturer: syz [ 138.516584][ T5908] usb 4-1: SerialNumber: syz [ 138.618182][ T5926] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 138.628203][ T5947] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 138.768404][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 138.776026][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.790852][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 138.791881][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.814005][ T5947] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.819415][ T5926] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 138.837594][ T5947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.847915][ T5947] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 138.855321][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.858708][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.881916][ T5926] usb 2-1: config 0 descriptor?? [ 138.885325][ T5947] usb 5-1: config 0 descriptor?? [ 138.891486][ T5926] hub 2-1:0.0: USB hub found [ 138.941604][ T5908] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.951458][ T5908] usb 4-1: selecting invalid altsetting 0 [ 139.035389][ T5908] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 139.076654][ T5908] usb 4-1: USB disconnect, device number 34 [ 139.093992][ T5926] hub 2-1:0.0: 1 port detected [ 139.110675][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.153182][ T5947] usbhid 5-1:0.0: can't add hid device: -71 [ 139.167585][ T5947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 139.204742][ T5947] usb 5-1: USB disconnect, device number 22 [ 139.242579][ T6878] netlink: 'syz.0.237': attribute type 21 has an invalid length. [ 139.269636][ T6878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.237'. [ 139.475546][ T6884] FAULT_INJECTION: forcing a failure. [ 139.475546][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 139.490149][ T6884] CPU: 1 UID: 0 PID: 6884 Comm: syz.3.238 Not tainted syzkaller #0 PREEMPT(full) [ 139.490175][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.490186][ T6884] Call Trace: [ 139.490194][ T6884] [ 139.490202][ T6884] dump_stack_lvl+0x189/0x250 [ 139.490228][ T6884] ? __pfx____ratelimit+0x10/0x10 [ 139.490248][ T6884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.490265][ T6884] ? __pfx__printk+0x10/0x10 [ 139.490288][ T6884] ? __pfx___might_resched+0x10/0x10 [ 139.490308][ T6884] ? fs_reclaim_acquire+0x7d/0x100 [ 139.490332][ T6884] should_fail_ex+0x414/0x560 [ 139.490360][ T6884] should_failslab+0xa8/0x100 [ 139.490379][ T6884] kmem_cache_alloc_noprof+0x74/0x6e0 [ 139.490403][ T6884] ? alloc_empty_file+0x55/0x1d0 [ 139.490429][ T6884] alloc_empty_file+0x55/0x1d0 [ 139.490451][ T6884] path_openat+0x107/0x3830 [ 139.490479][ T6884] ? is_bpf_text_address+0x26/0x2b0 [ 139.490501][ T6884] ? is_bpf_text_address+0x292/0x2b0 [ 139.490512][ T6884] ? is_bpf_text_address+0x26/0x2b0 [ 139.490525][ T6884] ? kernel_text_address+0xa5/0xe0 [ 139.490538][ T6884] ? __kernel_text_address+0xd/0x40 [ 139.490549][ T6884] ? __pfx_path_openat+0x10/0x10 [ 139.490558][ T6884] ? arch_stack_walk+0xfc/0x150 [ 139.490580][ T6884] do_filp_open+0x1fa/0x410 [ 139.490591][ T6884] ? __pfx_do_filp_open+0x10/0x10 [ 139.490615][ T6884] ? __lock_acquire+0xab9/0xd20 [ 139.490627][ T6884] ? do_open_execat+0x93/0x560 [ 139.490640][ T6884] do_open_execat+0x135/0x560 [ 139.490651][ T6884] ? __pfx_do_open_execat+0x10/0x10 [ 139.490666][ T6884] alloc_bprm+0x28/0x5c0 [ 139.490678][ T6884] do_execveat_common+0x1b3/0x6a0 [ 139.490694][ T6884] __x64_sys_execve+0x94/0xb0 [ 139.490706][ T6884] do_syscall_64+0xfa/0xfa0 [ 139.490717][ T6884] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.490728][ T6884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.490738][ T6884] ? clear_bhb_loop+0x60/0xb0 [ 139.490755][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.490765][ T6884] RIP: 0033:0x7f712d18eec9 [ 139.490775][ T6884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.490783][ T6884] RSP: 002b:00007f712dfa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 139.490795][ T6884] RAX: ffffffffffffffda RBX: 00007f712d3e5fa0 RCX: 00007f712d18eec9 [ 139.490802][ T6884] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 139.490809][ T6884] RBP: 00007f712dfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 139.490815][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.490820][ T6884] R13: 00007f712d3e6038 R14: 00007f712d3e5fa0 R15: 00007ffd083fdfc8 [ 139.490836][ T6884] [ 139.496435][ T6860] delete_channel: no stack [ 139.777125][ T6860] delete_channel: no stack [ 139.842240][ T5925] hub 2-1:0.0: activate --> -90 [ 139.938518][ T5926] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 140.088820][ T5926] usb 4-1: device descriptor read/64, error -71 [ 140.190463][ T6898] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 140.251074][ T43] usb 2-1: USB disconnect, device number 36 [ 140.329651][ T5926] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 140.379118][ T5944] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 140.440980][ T5895] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 140.472148][ T5926] usb 4-1: device descriptor read/64, error -71 [ 140.548510][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 140.557364][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.567968][ T5944] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 140.577978][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.593260][ T5926] usb usb4-port1: attempt power cycle [ 140.601347][ T5944] usb 5-1: config 0 descriptor?? [ 140.614421][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.624134][ T5895] usb 1-1: not running at top speed; connect to a high speed hub [ 140.636230][ T5895] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 140.645120][ T5895] usb 1-1: config 1 has no interface number 0 [ 140.651991][ T5895] usb 1-1: config 1 interface 121 has no altsetting 0 [ 140.938314][ T5926] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 140.958958][ T5926] usb 4-1: device descriptor read/8, error -71 [ 141.138916][ T5947] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 141.198476][ T5926] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 141.236294][ T5926] usb 4-1: device descriptor read/8, error -71 [ 141.307048][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 141.315863][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 141.331610][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.348740][ T5926] usb usb4-port1: unable to enumerate USB device [ 141.375699][ T5947] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.385224][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.395801][ T5947] usb 2-1: Product: syz [ 141.401155][ T5947] usb 2-1: Manufacturer: syz [ 141.405827][ T5947] usb 2-1: SerialNumber: syz [ 141.414049][ T5947] usb 2-1: config 0 descriptor?? [ 141.429329][ T5947] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.439266][ T5947] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 142.051379][ T5947] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 142.063632][ T5947] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 142.186968][ T43] usb 5-1: USB disconnect, device number 23 [ 142.683255][ T5947] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 142.691381][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 142.754805][ T6905] FAULT_INJECTION: forcing a failure. [ 142.754805][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 142.768392][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.3.247 Not tainted syzkaller #0 PREEMPT(full) [ 142.768418][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.768428][ T6905] Call Trace: [ 142.768436][ T6905] [ 142.768443][ T6905] dump_stack_lvl+0x189/0x250 [ 142.768469][ T6905] ? __pfx____ratelimit+0x10/0x10 [ 142.768489][ T6905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.768505][ T6905] ? __pfx__printk+0x10/0x10 [ 142.768526][ T6905] ? __pfx___might_resched+0x10/0x10 [ 142.768547][ T6905] ? fs_reclaim_acquire+0x7d/0x100 [ 142.768569][ T6905] should_fail_ex+0x414/0x560 [ 142.768596][ T6905] should_failslab+0xa8/0x100 [ 142.768615][ T6905] kmem_cache_alloc_noprof+0x74/0x6e0 [ 142.768637][ T6905] ? alloc_empty_file+0x55/0x1d0 [ 142.768664][ T6905] alloc_empty_file+0x55/0x1d0 [ 142.768688][ T6905] path_openat+0x107/0x3830 [ 142.768719][ T6905] ? is_bpf_text_address+0x26/0x2b0 [ 142.768746][ T6905] ? is_bpf_text_address+0x292/0x2b0 [ 142.768765][ T6905] ? is_bpf_text_address+0x26/0x2b0 [ 142.768788][ T6905] ? kernel_text_address+0xa5/0xe0 [ 142.768807][ T6905] ? __kernel_text_address+0xd/0x40 [ 142.768826][ T6905] ? __pfx_path_openat+0x10/0x10 [ 142.768842][ T6905] ? arch_stack_walk+0xfc/0x150 [ 142.768883][ T6905] do_filp_open+0x1fa/0x410 [ 142.768902][ T6905] ? __pfx_do_filp_open+0x10/0x10 [ 142.768948][ T6905] ? __lock_acquire+0xab9/0xd20 [ 142.768966][ T6905] ? do_open_execat+0x93/0x560 [ 142.768988][ T6905] do_open_execat+0x135/0x560 [ 142.769005][ T6905] ? __pfx_do_open_execat+0x10/0x10 [ 142.769030][ T6905] alloc_bprm+0x28/0x5c0 [ 142.769050][ T6905] do_execveat_common+0x1b3/0x6a0 [ 142.769079][ T6905] __x64_sys_execve+0x94/0xb0 [ 142.769101][ T6905] do_syscall_64+0xfa/0xfa0 [ 142.769126][ T6905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.769142][ T6905] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.769159][ T6905] ? clear_bhb_loop+0x60/0xb0 [ 142.769180][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.769196][ T6905] RIP: 0033:0x7f712d18eec9 [ 142.769212][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.769227][ T6905] RSP: 002b:00007f712dfa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 142.769246][ T6905] RAX: ffffffffffffffda RBX: 00007f712d3e5fa0 RCX: 00007f712d18eec9 [ 142.769258][ T6905] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 142.769270][ T6905] RBP: 00007f712dfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 142.769281][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.769291][ T6905] R13: 00007f712d3e6038 R14: 00007f712d3e5fa0 R15: 00007ffd083fdfc8 [ 142.769318][ T6905] [ 143.378436][ T5895] usb 1-1: string descriptor 0 read error: -71 [ 143.384436][ T6914] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 143.384774][ T5895] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 143.438134][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.488222][ T5895] usb 1-1: can't set config #1, error -71 [ 143.496887][ T5895] usb 1-1: USB disconnect, device number 27 [ 143.549435][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 143.579641][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 143.605152][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 143.629943][ T5947] usb 2-1: USB disconnect, device number 37 [ 143.768319][ T5944] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 143.930860][ T5944] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.945751][ T5944] usb 5-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 143.955209][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.963275][ T5908] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 143.973849][ T5944] usb 5-1: config 0 descriptor?? [ 144.079035][ T43] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 144.138145][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 144.146233][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.161685][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.172923][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.186977][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.201054][ T5908] usb 1-1: config 0 descriptor?? [ 144.221644][ T5908] hub 1-1:0.0: USB hub found [ 144.240512][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.252605][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.263009][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.272960][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.289969][ T6910] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 144.303701][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.391317][ T6916] qnx6: unable to read the first superblock [ 144.407449][ T6916] qnx6: unable to read the first superblock [ 144.412862][ T5908] hub 1-1:0.0: 1 port detected [ 144.425113][ T6916] qnx6: unable to read the first superblock [ 144.460993][ T5944] ntrig 0003:1B96:0010.000E: hidraw0: USB HID v0.03 Device [HID 1b96:0010] on usb-dummy_hcd.4-1/input0 [ 144.522153][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.551941][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.578366][ T5947] usb 4-1: USB disconnect, device number 39 [ 144.655300][ T5944] ntrig 0003:1B96:0010.000E: Firmware version: 2.10.21.25.4 (6a84 3cbb) [ 144.819972][ T6920] delete_channel: no stack [ 144.824533][ T6920] delete_channel: no stack [ 144.859319][ T43] usb 5-1: USB disconnect, device number 24 [ 145.018311][ T5944] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 145.040182][ T5947] hub 1-1:0.0: activate --> -90 [ 145.173658][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 145.181570][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.192585][ T5944] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 145.201999][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.220401][ T5944] usb 2-1: config 0 descriptor?? [ 145.463124][ T5908] usb 1-1: USB disconnect, device number 28 [ 145.690230][ T5944] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 145.724833][ T30] audit: type=1326 audit(1759551840.396:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.4.260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3151f8eec9 code=0x0 [ 145.851036][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 145.871874][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.884414][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.894808][ T5944] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.904221][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.929585][ T5944] usb 4-1: config 0 descriptor?? [ 145.946569][ T5944] hub 4-1:0.0: USB hub found [ 146.347395][ T5944] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 146.478319][ T5895] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 146.582821][ T5944] usbhid 4-1:0.0: can't add hid device: -71 [ 146.589992][ T5944] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.630814][ T5944] usb 4-1: USB disconnect, device number 40 [ 146.652726][ T5895] usb 1-1: config 0 has an invalid interface number: 82 but max is 0 [ 146.661291][ T5895] usb 1-1: config 0 has an invalid interface number: 254 but max is 0 [ 146.673953][ T5895] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 146.684010][ T5895] usb 1-1: config 0 has no interface number 0 [ 146.690323][ T5895] usb 1-1: config 0 has no interface number 1 [ 146.697221][ T5895] usb 1-1: config 0 interface 82 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 146.708628][ T5895] usb 1-1: config 0 interface 82 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 146.720137][ T5895] usb 1-1: config 0 interface 82 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 146.731995][ T5895] usb 1-1: config 0 interface 82 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 146.743960][ T5895] usb 1-1: config 0 interface 82 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 10 [ 146.757445][ T5895] usb 1-1: too many endpoints for config 0 interface 254 altsetting 110: 223, using maximum allowed: 30 [ 146.769783][ T5895] usb 1-1: config 0 interface 254 altsetting 110 endpoint 0xF has invalid maxpacket 447, setting to 64 [ 146.780968][ T5895] usb 1-1: config 0 interface 254 altsetting 110 has a duplicate endpoint with address 0xB, skipping [ 146.792304][ T5895] usb 1-1: config 0 interface 254 altsetting 110 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 146.808180][ T5947] usb 2-1: USB disconnect, device number 38 [ 146.817333][ T5895] usb 1-1: config 0 interface 254 altsetting 110 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 146.833589][ T5895] usb 1-1: config 0 interface 254 altsetting 110 has an invalid descriptor for endpoint zero, skipping [ 146.846558][ T5895] usb 1-1: config 0 interface 254 altsetting 110 has 5 endpoint descriptors, different from the interface descriptor's value: 223 [ 146.862804][ T5895] usb 1-1: config 0 interface 254 has no altsetting 0 [ 146.875294][ T5895] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 146.885119][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.893220][ T5895] usb 1-1: Product: syz [ 146.897597][ T5895] usb 1-1: Manufacturer: syz [ 146.903363][ T5895] usb 1-1: SerialNumber: syz [ 146.910125][ T5895] usb 1-1: config 0 descriptor?? [ 146.916198][ T6951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.924587][ T6951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.933554][ T5895] cdc_ether 1-1:0.82: skipping garbage [ 146.939856][ T5895] usb 1-1: bad CDC descriptors [ 146.945753][ T5895] usb 1-1: unsupported MDLM descriptors [ 146.952474][ T5895] cdc_acm 1-1:0.82: skipping garbage [ 147.110222][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 147.258226][ T43] usb 5-1: device descriptor read/64, error -71 [ 147.368482][ T5926] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 147.498551][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 147.553110][ T5926] usb 4-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 147.562641][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=27, SerialNumber=3 [ 147.571493][ T5926] usb 4-1: Product: syz [ 147.575682][ T5926] usb 4-1: Manufacturer: syz [ 147.580343][ T5926] usb 4-1: SerialNumber: syz [ 147.587435][ T5926] usb 4-1: config 0 descriptor?? [ 147.628465][ T43] usb 5-1: device descriptor read/64, error -71 [ 147.728224][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 147.738609][ T43] usb usb5-port1: attempt power cycle [ 147.813030][ T5944] usb 4-1: USB disconnect, device number 41 [ 147.878209][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 147.886523][ T24] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 147.895752][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.906155][ T24] usb 2-1: config 0 descriptor?? [ 147.918268][ T24] as10x_usb: device has been detected [ 147.924721][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 147.945053][ T24] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 147.974629][ T24] as10x_usb: error during firmware upload part1 [ 147.981672][ T24] Registered device nBox DVB-T Dongle [ 148.078187][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 148.108808][ T43] usb 5-1: device descriptor read/8, error -71 [ 148.215214][ T5944] usb 2-1: USB disconnect, device number 39 [ 148.243299][ T5944] Unregistered device nBox DVB-T Dongle [ 148.245104][ T5944] as10x_usb: device has been disconnected [ 148.359180][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 148.379155][ T43] usb 5-1: device descriptor read/8, error -71 [ 148.499297][ T43] usb usb5-port1: unable to enumerate USB device [ 148.648163][ T5947] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 148.788136][ T5947] usb 4-1: device descriptor read/64, error -71 [ 148.956576][ T6974] netlink: 56 bytes leftover after parsing attributes in process `syz.1.270'. [ 149.022374][ T6977] FAULT_INJECTION: forcing a failure. [ 149.022374][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 149.035239][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.1.271 Not tainted syzkaller #0 PREEMPT(full) [ 149.035265][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.035275][ T6977] Call Trace: [ 149.035282][ T6977] [ 149.035289][ T6977] dump_stack_lvl+0x189/0x250 [ 149.035312][ T6977] ? __pfx____ratelimit+0x10/0x10 [ 149.035332][ T6977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.035349][ T6977] ? __pfx__printk+0x10/0x10 [ 149.035371][ T6977] ? __pfx___might_resched+0x10/0x10 [ 149.035392][ T6977] ? fs_reclaim_acquire+0x7d/0x100 [ 149.035415][ T6977] should_fail_ex+0x414/0x560 [ 149.035444][ T6977] should_failslab+0xa8/0x100 [ 149.035466][ T6977] kmem_cache_alloc_noprof+0x74/0x6e0 [ 149.035488][ T6977] ? __kasan_kmalloc+0x93/0xb0 [ 149.035505][ T6977] ? mm_alloc+0x23/0xd0 [ 149.035525][ T6977] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 149.035545][ T6977] mm_alloc+0x23/0xd0 [ 149.035568][ T6977] alloc_bprm+0x398/0x5c0 [ 149.035590][ T6977] do_execveat_common+0x1b3/0x6a0 [ 149.035620][ T6977] __x64_sys_execve+0x94/0xb0 [ 149.035642][ T6977] do_syscall_64+0xfa/0xfa0 [ 149.035659][ T6977] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.035679][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.035696][ T6977] ? clear_bhb_loop+0x60/0xb0 [ 149.035726][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.035743][ T6977] RIP: 0033:0x7f16e658eec9 [ 149.035759][ T6977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.035773][ T6977] RSP: 002b:00007f16e73a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 149.035792][ T6977] RAX: ffffffffffffffda RBX: 00007f16e67e5fa0 RCX: 00007f16e658eec9 [ 149.035806][ T6977] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 149.035818][ T6977] RBP: 00007f16e73a3090 R08: 0000000000000000 R09: 0000000000000000 [ 149.035829][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.035840][ T6977] R13: 00007f16e67e6038 R14: 00007f16e67e5fa0 R15: 00007ffc91e8ffa8 [ 149.035869][ T6977] [ 149.254779][ T5947] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 149.342020][ T5895] cdc_acm 1-1:0.254: skipping garbage [ 149.364349][ T6986] netlink: 'syz.1.272': attribute type 2 has an invalid length. [ 149.388146][ T5947] usb 4-1: device descriptor read/64, error -71 [ 149.397561][ T5895] usb 1-1: USB disconnect, device number 29 [ 149.499231][ T5947] usb usb4-port1: attempt power cycle [ 149.758151][ T5895] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 149.841066][ T5947] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 149.885200][ T5947] usb 4-1: device descriptor read/8, error -71 [ 149.928243][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 149.940478][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.957715][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.969312][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.980663][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.006543][ T5895] usb 1-1: config 0 descriptor?? [ 150.026357][ T5895] hub 1-1:0.0: USB hub found [ 150.113976][ T5841] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 150.143395][ T5947] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 150.180147][ T5947] usb 4-1: device descriptor read/8, error -71 [ 150.270972][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 150.293776][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.304766][ T5947] usb usb4-port1: unable to enumerate USB device [ 150.311313][ T5841] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 150.321423][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.333718][ T5841] usb 2-1: config 0 descriptor?? [ 150.423915][ T5895] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 150.641503][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 150.649475][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 150.657272][ T5895] usbhid 1-1:0.0: can't add hid device: -71 [ 150.665381][ T5895] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.694003][ T5895] usb 1-1: USB disconnect, device number 30 [ 151.663634][ T5926] usb 2-1: USB disconnect, device number 40 [ 151.766185][ T7022] FAULT_INJECTION: forcing a failure. [ 151.766185][ T7022] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 151.780570][ T7022] CPU: 1 UID: 0 PID: 7022 Comm: syz.4.280 Not tainted syzkaller #0 PREEMPT(full) [ 151.780596][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.780610][ T7022] Call Trace: [ 151.780615][ T7022] [ 151.780619][ T7022] dump_stack_lvl+0x189/0x250 [ 151.780639][ T7022] ? __pfx____ratelimit+0x10/0x10 [ 151.780651][ T7022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.780660][ T7022] ? __pfx__printk+0x10/0x10 [ 151.780671][ T7022] ? fs_reclaim_acquire+0x7d/0x100 [ 151.780686][ T7022] should_fail_ex+0x414/0x560 [ 151.780707][ T7022] prepare_alloc_pages+0x213/0x610 [ 151.780730][ T7022] __alloc_frozen_pages_noprof+0x123/0x370 [ 151.780752][ T7022] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.780775][ T7022] ? percpu_ref_get_many+0x19/0x140 [ 151.780796][ T7022] ? policy_nodemask+0x27c/0x720 [ 151.780816][ T7022] alloc_pages_mpol+0x232/0x4a0 [ 151.780829][ T7022] alloc_pages_noprof+0xa9/0x190 [ 151.780841][ T7022] pgd_alloc+0x44/0x710 [ 151.780857][ T7022] mm_init+0x65d/0xfa0 [ 151.780870][ T7022] ? __asan_memset+0x22/0x50 [ 151.780886][ T7022] alloc_bprm+0x398/0x5c0 [ 151.780899][ T7022] do_execveat_common+0x1b3/0x6a0 [ 151.780914][ T7022] __x64_sys_execve+0x94/0xb0 [ 151.780925][ T7022] do_syscall_64+0xfa/0xfa0 [ 151.780936][ T7022] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.780947][ T7022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.780956][ T7022] ? clear_bhb_loop+0x60/0xb0 [ 151.780968][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.780977][ T7022] RIP: 0033:0x7f3151f8eec9 [ 151.780987][ T7022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.780996][ T7022] RSP: 002b:00007f3152f11038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 151.781008][ T7022] RAX: ffffffffffffffda RBX: 00007f31521e5fa0 RCX: 00007f3151f8eec9 [ 151.781015][ T7022] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 151.781022][ T7022] RBP: 00007f3152f11090 R08: 0000000000000000 R09: 0000000000000000 [ 151.781028][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.781033][ T7022] R13: 00007f31521e6038 R14: 00007f31521e5fa0 R15: 00007ffe0f0b59b8 [ 151.781049][ T7022] [ 152.052326][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 152.138219][ T5895] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 152.299911][ T5895] usb 4-1: config 8 has an invalid interface number: 5 but max is 1 [ 152.308547][ T5895] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 152.319502][ T5895] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 152.329686][ T5895] usb 4-1: config 8 has no interface number 0 [ 152.329880][ T5841] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 152.336018][ T5895] usb 4-1: config 8 interface 5 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 152.361994][ T5895] usb 4-1: config 8 interface 5 has no altsetting 0 [ 152.369162][ T5895] usb 4-1: New USB device found, idVendor=1e2d, idProduct=0082, bcdDevice=e2.a0 [ 152.380797][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.528135][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 152.547513][ T5841] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.557390][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.567020][ T5841] usb 5-1: Product: syz [ 152.572058][ T5841] usb 5-1: Manufacturer: syz [ 152.577104][ T5841] usb 5-1: SerialNumber: syz [ 152.678159][ T5944] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 152.768183][ T5926] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 152.806574][ T5841] cdc_ncm 5-1:1.0: bind() failure [ 152.820666][ T5841] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 152.827894][ T5841] cdc_ncm 5-1:1.1: bind() failure [ 152.835412][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.852729][ T5841] usb 5-1: USB disconnect, device number 29 [ 152.859301][ T5944] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 152.872983][ T5944] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 152.885408][ T5944] usb 1-1: config 1 interface 0 has no altsetting 0 [ 152.899012][ T5944] usb 1-1: string descriptor 0 read error: -22 [ 152.905555][ T5944] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.916574][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.925425][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 152.938844][ T7026] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.947279][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 152.951195][ T7026] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.964899][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.979101][ T5926] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 152.982335][ T5944] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 152.989095][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.006116][ T5926] usb 2-1: Product: syz [ 153.012048][ T5926] usb 2-1: Manufacturer: syz [ 153.016907][ T5926] usb 2-1: SerialNumber: syz [ 153.024868][ T5926] usb 2-1: config 0 descriptor?? [ 153.032512][ T5926] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 153.182984][ T5944] usb 1-1: USB disconnect, device number 31 [ 153.233670][ T5841] usb 2-1: USB disconnect, device number 41 [ 153.838174][ T5841] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 153.978205][ T5926] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 153.988622][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 153.995855][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.007666][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.008370][ T43] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 154.019809][ T5841] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.036315][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.049097][ T5841] usb 5-1: config 0 descriptor?? [ 154.060899][ T5841] hub 5-1:0.0: USB hub found [ 154.109204][ T5926] usb 1-1: device descriptor read/64, error -71 [ 154.148319][ T43] usb 2-1: device descriptor read/64, error -71 [ 154.348243][ T5926] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 154.388399][ T43] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 154.464584][ T5841] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 154.478181][ T5926] usb 1-1: device descriptor read/64, error -71 [ 154.522621][ T43] usb 2-1: device descriptor read/64, error -71 [ 154.590281][ T5926] usb usb1-port1: attempt power cycle [ 154.638611][ T43] usb usb2-port1: attempt power cycle [ 154.677735][ T5841] usbhid 5-1:0.0: can't add hid device: -71 [ 154.688456][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 154.728543][ T5841] usb 5-1: USB disconnect, device number 30 [ 154.741649][ T5895] usb 4-1: string descriptor 0 read error: -71 [ 154.782432][ T5895] usb 4-1: USB disconnect, device number 46 [ 154.923101][ T7047] FAULT_INJECTION: forcing a failure. [ 154.923101][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 154.936363][ T5926] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 154.943399][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.3.289 Not tainted syzkaller #0 PREEMPT(full) [ 154.943426][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.943436][ T7047] Call Trace: [ 154.943443][ T7047] [ 154.943451][ T7047] dump_stack_lvl+0x189/0x250 [ 154.943474][ T7047] ? __pfx____ratelimit+0x10/0x10 [ 154.943493][ T7047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.943509][ T7047] ? __pfx__printk+0x10/0x10 [ 154.943531][ T7047] ? __pfx___might_resched+0x10/0x10 [ 154.943551][ T7047] ? fs_reclaim_acquire+0x7d/0x100 [ 154.943574][ T7047] should_fail_ex+0x414/0x560 [ 154.943604][ T7047] should_failslab+0xa8/0x100 [ 154.943625][ T7047] kmem_cache_alloc_noprof+0x74/0x6e0 [ 154.943650][ T7047] ? vm_area_alloc+0x24/0x140 [ 154.943673][ T7047] vm_area_alloc+0x24/0x140 [ 154.943692][ T7047] create_init_stack_vma+0x28/0x680 [ 154.943715][ T7047] ? do_raw_spin_unlock+0x122/0x240 [ 154.943736][ T7047] alloc_bprm+0x496/0x5c0 [ 154.943759][ T7047] do_execveat_common+0x1b3/0x6a0 [ 154.943788][ T7047] __x64_sys_execve+0x94/0xb0 [ 154.943808][ T7047] do_syscall_64+0xfa/0xfa0 [ 154.943828][ T7047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.943843][ T7047] ? asm_sysvec_call_function_single+0x1a/0x20 [ 154.943860][ T7047] ? clear_bhb_loop+0x60/0xb0 [ 154.943879][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.943896][ T7047] RIP: 0033:0x7f712d18eec9 [ 154.943912][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.943926][ T7047] RSP: 002b:00007f712dfa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 154.943945][ T7047] RAX: ffffffffffffffda RBX: 00007f712d3e5fa0 RCX: 00007f712d18eec9 [ 154.943958][ T7047] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 154.943970][ T7047] RBP: 00007f712dfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 154.943980][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.943990][ T7047] R13: 00007f712d3e6038 R14: 00007f712d3e5fa0 R15: 00007ffd083fdfc8 [ 154.944019][ T7047] [ 155.159856][ T43] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 155.188876][ T5926] usb 1-1: device descriptor read/8, error -71 [ 155.195976][ T43] usb 2-1: device descriptor read/8, error -71 [ 155.438266][ T43] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 155.446220][ T5926] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 155.469101][ T5926] usb 1-1: device descriptor read/8, error -71 [ 155.476150][ T43] usb 2-1: device descriptor read/8, error -71 [ 155.593961][ T5926] usb usb1-port1: unable to enumerate USB device [ 155.601296][ T43] usb usb2-port1: unable to enumerate USB device [ 155.738239][ T5947] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 155.888366][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 155.888421][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 155.895716][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.914553][ T5947] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 155.923897][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.934713][ T5947] usb 5-1: config 0 descriptor?? [ 156.054989][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.066139][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.076175][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.091960][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.101153][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.113651][ T43] usb 4-1: config 0 descriptor?? [ 156.537389][ T43] plantronics 0003:047F:FFFF.000F: item 0 0 0 9 parsing failed [ 156.546318][ T43] plantronics 0003:047F:FFFF.000F: parse failed [ 156.553022][ T43] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 156.753297][ T43] usb 4-1: USB disconnect, device number 47 [ 157.012597][ T7064] netlink: 'syz.1.296': attribute type 3 has an invalid length. [ 157.036534][ T7064] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 157.046090][ T7064] netlink: 216 bytes leftover after parsing attributes in process `syz.1.296'. [ 157.058524][ T7064] NCSI netlink: No device for ifindex 33022 [ 157.226857][ T5947] usb 5-1: USB disconnect, device number 31 [ 157.347228][ T30] audit: type=1326 audit(1759551852.016:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.0.299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf9ff8eec9 code=0x0 [ 157.354038][ T7073] FAULT_INJECTION: forcing a failure. [ 157.354038][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 157.398132][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: syz.1.298 Not tainted syzkaller #0 PREEMPT(full) [ 157.398160][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.398171][ T7073] Call Trace: [ 157.398178][ T7073] [ 157.398185][ T7073] dump_stack_lvl+0x189/0x250 [ 157.398207][ T7073] ? __pfx____ratelimit+0x10/0x10 [ 157.398226][ T7073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.398242][ T7073] ? __pfx__printk+0x10/0x10 [ 157.398263][ T7073] ? __pfx___might_resched+0x10/0x10 [ 157.398283][ T7073] ? fs_reclaim_acquire+0x7d/0x100 [ 157.398303][ T7073] should_fail_ex+0x414/0x560 [ 157.398329][ T7073] should_failslab+0xa8/0x100 [ 157.398348][ T7073] kmem_cache_alloc_noprof+0x74/0x6e0 [ 157.398372][ T7073] ? mas_alloc_nodes+0x291/0x350 [ 157.398394][ T7073] mas_alloc_nodes+0x291/0x350 [ 157.398414][ T7073] mas_preallocate+0x2e0/0x670 [ 157.398432][ T7073] ? mt_find+0x15c/0x5e0 [ 157.398448][ T7073] ? __pfx_mas_preallocate+0x10/0x10 [ 157.398476][ T7073] ? __mas_set_range+0x12f/0x3c0 [ 157.398499][ T7073] vma_link+0xfd/0x440 [ 157.398520][ T7073] ? __pfx_vma_link+0x10/0x10 [ 157.398547][ T7073] ? percpu_counter_add_batch+0xea/0x1e0 [ 157.398571][ T7073] ? __vm_enough_memory+0x11b/0x380 [ 157.398594][ T7073] insert_vm_struct+0x199/0x260 [ 157.398619][ T7073] create_init_stack_vma+0x2de/0x680 [ 157.398650][ T7073] alloc_bprm+0x496/0x5c0 [ 157.398670][ T7073] do_execveat_common+0x1b3/0x6a0 [ 157.398700][ T7073] __x64_sys_execve+0x94/0xb0 [ 157.398717][ T7073] do_syscall_64+0xfa/0xfa0 [ 157.398735][ T7073] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.398763][ T7073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.398780][ T7073] ? clear_bhb_loop+0x60/0xb0 [ 157.398801][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.398816][ T7073] RIP: 0033:0x7f16e658eec9 [ 157.398831][ T7073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.398846][ T7073] RSP: 002b:00007f16e73a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 157.398865][ T7073] RAX: ffffffffffffffda RBX: 00007f16e67e5fa0 RCX: 00007f16e658eec9 [ 157.398878][ T7073] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 157.398890][ T7073] RBP: 00007f16e73a3090 R08: 0000000000000000 R09: 0000000000000000 [ 157.398901][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.398911][ T7073] R13: 00007f16e67e6038 R14: 00007f16e67e5fa0 R15: 00007ffc91e8ffa8 [ 157.398941][ T7073] [ 157.731427][ T7079] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 157.753313][ T7079] syzkaller1: entered promiscuous mode [ 157.760124][ T7079] syzkaller1: entered allmulticast mode [ 158.172932][ T7099] syzkaller1: entered promiscuous mode [ 158.178656][ T7099] syzkaller1: entered allmulticast mode [ 158.399970][ T7119] overlayfs: failed to resolve './file0': -2 [ 158.510931][ T7122] FAULT_INJECTION: forcing a failure. [ 158.510931][ T7122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.631142][ T7122] CPU: 0 UID: 0 PID: 7122 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 158.631188][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.631210][ T7122] Call Trace: [ 158.631224][ T7122] [ 158.631239][ T7122] dump_stack_lvl+0x189/0x250 [ 158.631281][ T7122] ? __pfx____ratelimit+0x10/0x10 [ 158.631321][ T7122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.631360][ T7122] ? __pfx__printk+0x10/0x10 [ 158.631400][ T7122] ? fs_reclaim_acquire+0x7d/0x100 [ 158.631454][ T7122] should_fail_ex+0x414/0x560 [ 158.631484][ T7122] prepare_alloc_pages+0x213/0x610 [ 158.631511][ T7122] __alloc_frozen_pages_noprof+0x123/0x370 [ 158.631531][ T7122] ? unwind_get_return_address+0x4d/0x90 [ 158.631557][ T7122] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 158.631584][ T7122] ? policy_nodemask+0x27c/0x720 [ 158.631604][ T7122] ? stack_trace_save+0x9c/0xe0 [ 158.631623][ T7122] alloc_pages_mpol+0x232/0x4a0 [ 158.631648][ T7122] alloc_pages_noprof+0xa9/0x190 [ 158.631669][ T7122] __pud_alloc+0x3f/0x450 [ 158.631705][ T7122] __handle_mm_fault+0x3372/0x5400 [ 158.631739][ T7122] ? mt_find+0x46f/0x5e0 [ 158.631761][ T7122] ? __pfx___handle_mm_fault+0x10/0x10 [ 158.631804][ T7122] ? __pfx___might_resched+0x10/0x10 [ 158.631832][ T7122] handle_mm_fault+0x40a/0x8e0 [ 158.631866][ T7122] __get_user_pages+0x165c/0x2a00 [ 158.631928][ T7122] get_user_pages_remote+0x2f1/0xac0 [ 158.631961][ T7122] ? __pfx_get_user_pages_remote+0x10/0x10 [ 158.631982][ T7122] ? down_read+0x1ad/0x2e0 [ 158.632006][ T7122] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 158.632030][ T7122] get_arg_page+0x104/0x330 [ 158.632046][ T7122] ? __might_fault+0xb0/0x130 [ 158.632064][ T7122] ? __pfx_get_arg_page+0x10/0x10 [ 158.632093][ T7122] copy_string_kernel+0x191/0x2a0 [ 158.632117][ T7122] do_execveat_common+0x3c5/0x6a0 [ 158.632148][ T7122] __x64_sys_execve+0x94/0xb0 [ 158.632172][ T7122] do_syscall_64+0xfa/0xfa0 [ 158.632190][ T7122] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.632209][ T7122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.632227][ T7122] ? clear_bhb_loop+0x60/0xb0 [ 158.632247][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.632263][ T7122] RIP: 0033:0x7f712d18eec9 [ 158.632279][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.632294][ T7122] RSP: 002b:00007f712dfa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 158.632313][ T7122] RAX: ffffffffffffffda RBX: 00007f712d3e5fa0 RCX: 00007f712d18eec9 [ 158.632326][ T7122] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 158.632337][ T7122] RBP: 00007f712dfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 158.632348][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.632359][ T7122] R13: 00007f712d3e6038 R14: 00007f712d3e5fa0 R15: 00007ffd083fdfc8 [ 158.632389][ T7122] [ 158.933439][ T7128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.943511][ T7128] block device autoloading is deprecated and will be removed. [ 159.090506][ T7133] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 159.198246][ T5841] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 159.328145][ T5841] usb 2-1: device descriptor read/64, error -71 [ 159.403957][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.413157][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.588123][ T5841] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 159.689472][ T5926] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 159.719128][ T5841] usb 2-1: device descriptor read/64, error -71 [ 159.831999][ T5841] usb usb2-port1: attempt power cycle [ 159.861654][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 159.885878][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.896542][ T5926] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 159.907155][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.918233][ T5926] usb 1-1: config 0 descriptor?? [ 160.132726][ T5944] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 160.180811][ T5841] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 160.215382][ T5841] usb 2-1: device descriptor read/8, error -71 [ 160.308260][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 160.321395][ T5944] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 160.331874][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.340169][ T5944] usb 4-1: Product: syz [ 160.344816][ T5944] usb 4-1: Manufacturer: syz [ 160.349819][ T5944] usb 4-1: SerialNumber: syz [ 160.366056][ T5944] usb 4-1: config 0 descriptor?? [ 160.468280][ T5841] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 160.499586][ T5841] usb 2-1: device descriptor read/8, error -71 [ 160.575535][ T5944] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.624256][ T5841] usb usb2-port1: unable to enumerate USB device [ 161.157428][ T5926] usb 1-1: USB disconnect, device number 36 [ 161.493799][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.506640][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.600717][ T5841] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 161.650468][ T5944] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 161.760226][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 161.771316][ T5841] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 161.788220][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.809105][ T5841] usb 5-1: config 0 descriptor?? [ 161.815510][ T7155] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 161.928333][ T5926] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 162.014685][ T7164] FAULT_INJECTION: forcing a failure. [ 162.014685][ T7164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.045201][ T7164] CPU: 0 UID: 0 PID: 7164 Comm: syz.0.321 Not tainted syzkaller #0 PREEMPT(full) [ 162.045227][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.045237][ T7164] Call Trace: [ 162.045245][ T7164] [ 162.045253][ T7164] dump_stack_lvl+0x189/0x250 [ 162.045278][ T7164] ? __pfx____ratelimit+0x10/0x10 [ 162.045298][ T7164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.045326][ T7164] ? __pfx__printk+0x10/0x10 [ 162.045344][ T7164] ? fs_reclaim_acquire+0x7d/0x100 [ 162.045372][ T7164] should_fail_ex+0x414/0x560 [ 162.045403][ T7164] prepare_alloc_pages+0x213/0x610 [ 162.045430][ T7164] __alloc_frozen_pages_noprof+0x123/0x370 [ 162.045454][ T7164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.045472][ T7164] ? __lock_acquire+0xab9/0xd20 [ 162.045510][ T7164] alloc_pages_mpol+0x232/0x4a0 [ 162.045535][ T7164] alloc_pages_noprof+0xa9/0x190 [ 162.045555][ T7164] __pmd_alloc+0x3a/0x540 [ 162.045585][ T7164] __handle_mm_fault+0x9ad/0x5400 [ 162.045625][ T7164] ? __pfx___handle_mm_fault+0x10/0x10 [ 162.045667][ T7164] ? __pfx___might_resched+0x10/0x10 [ 162.045695][ T7164] handle_mm_fault+0x40a/0x8e0 [ 162.045730][ T7164] __get_user_pages+0x165c/0x2a00 [ 162.045786][ T7164] get_user_pages_remote+0x2f1/0xac0 [ 162.045820][ T7164] ? __pfx_get_user_pages_remote+0x10/0x10 [ 162.045840][ T7164] ? down_read+0x1ad/0x2e0 [ 162.045864][ T7164] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 162.045887][ T7164] get_arg_page+0x104/0x330 [ 162.045903][ T7164] ? __might_fault+0xb0/0x130 [ 162.045921][ T7164] ? __pfx_get_arg_page+0x10/0x10 [ 162.045948][ T7164] copy_string_kernel+0x191/0x2a0 [ 162.046019][ T7164] do_execveat_common+0x3c5/0x6a0 [ 162.046050][ T7164] __x64_sys_execve+0x94/0xb0 [ 162.046072][ T7164] do_syscall_64+0xfa/0xfa0 [ 162.046093][ T7164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.046109][ T7164] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.046126][ T7164] ? clear_bhb_loop+0x60/0xb0 [ 162.046147][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.046164][ T7164] RIP: 0033:0x7fbf9ff8eec9 [ 162.046180][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.046195][ T7164] RSP: 002b:00007fbfa0e5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 162.046215][ T7164] RAX: ffffffffffffffda RBX: 00007fbfa01e5fa0 RCX: 00007fbf9ff8eec9 [ 162.046228][ T7164] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 162.046240][ T7164] RBP: 00007fbfa0e5a090 R08: 0000000000000000 R09: 0000000000000000 [ 162.046251][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.046261][ T7164] R13: 00007fbfa01e6038 R14: 00007fbfa01e5fa0 R15: 00007ffe5aa36cb8 [ 162.046292][ T7164] [ 162.078190][ T5926] usb 2-1: device descriptor read/64, error -71 [ 162.334464][ T7172] netlink: 'syz.3.323': attribute type 10 has an invalid length. [ 162.384537][ T5841] usbhid 5-1:0.0: can't add hid device: -71 [ 162.407566][ T5841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 162.446720][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.470603][ T7172] macvlan0: entered promiscuous mode [ 162.509857][ T5841] usb 5-1: USB disconnect, device number 32 [ 162.514674][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.531619][ T7172] macvlan0: entered allmulticast mode [ 162.545185][ T7172] veth1_vlan: entered allmulticast mode [ 162.574489][ T7172] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 162.587001][ T43] usb 4-1: USB disconnect, device number 48 [ 162.638251][ T5926] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 162.748166][ T5895] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 162.768286][ T5926] usb 2-1: device descriptor read/64, error -71 [ 162.858373][ T5841] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 162.878648][ T5926] usb usb2-port1: attempt power cycle [ 162.928093][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 162.935359][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.946644][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.956841][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 162.968157][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.981304][ T5895] usb 1-1: config 0 descriptor?? [ 163.003108][ T5895] hub 1-1:0.0: USB hub found [ 163.020751][ T5841] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 163.030057][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.038519][ T5841] usb 5-1: Product: syz [ 163.042703][ T5841] usb 5-1: Manufacturer: syz [ 163.047495][ T5841] usb 5-1: SerialNumber: syz [ 163.193509][ T5895] hub 1-1:0.0: 1 port detected [ 163.248325][ T5926] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 163.278741][ T5926] usb 2-1: device descriptor read/8, error -71 [ 163.480519][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 163.516084][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.518245][ T5926] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 163.526392][ T5841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.552027][ T5841] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 163.568530][ T5926] usb 2-1: device descriptor read/8, error -71 [ 163.588424][ T5841] usb 5-1: USB disconnect, device number 33 [ 163.700481][ T5926] usb usb2-port1: unable to enumerate USB device [ 163.810144][ T5895] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 163.817471][ T5841] usb 1-1: USB disconnect, device number 37 [ 164.202194][ T5895] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 164.358482][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 164.365872][ T5895] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 164.378524][ T5895] usb 5-1: config 0 has no interface number 0 [ 164.387799][ T5895] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=3b.fa [ 164.399215][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.407360][ T5895] usb 5-1: Product: syz [ 164.412226][ T5895] usb 5-1: Manufacturer: syz [ 164.416913][ T5895] usb 5-1: SerialNumber: syz [ 164.426825][ T5895] usb 5-1: config 0 descriptor?? [ 164.647296][ T5895] usb 5-1: unsupported MDLM descriptors [ 164.664722][ T5895] usb 5-1: USB disconnect, device number 34 [ 164.767252][ T7196] loop4: detected capacity change from 0 to 2559 [ 164.791008][ T6874] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.802110][ T6874] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.811269][ T6874] Buffer I/O error on dev loop4, logical block 0, async page read [ 164.827778][ T7196] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 164.836382][ T5925] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 164.844853][ T7196] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 164.850207][ T6874] Buffer I/O error on dev loop4, logical block 319, async page read [ 164.854836][ T7196] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 164.871721][ T7196] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 164.880706][ T7196] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 164.889548][ T7196] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 164.945922][ T7199] FAULT_INJECTION: forcing a failure. [ 164.945922][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 164.960466][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT(full) [ 164.960491][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.960503][ T7199] Call Trace: [ 164.960510][ T7199] [ 164.960518][ T7199] dump_stack_lvl+0x189/0x250 [ 164.960541][ T7199] ? __pfx____ratelimit+0x10/0x10 [ 164.960561][ T7199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.960579][ T7199] ? __pfx__printk+0x10/0x10 [ 164.960602][ T7199] ? __pfx___might_resched+0x10/0x10 [ 164.960629][ T7199] should_fail_ex+0x414/0x560 [ 164.960659][ T7199] should_failslab+0xa8/0x100 [ 164.960680][ T7199] kmem_cache_alloc_noprof+0x74/0x6e0 [ 164.960706][ T7199] ? __pmd_alloc+0xc2/0x540 [ 164.960735][ T7199] __pmd_alloc+0xc2/0x540 [ 164.960764][ T7199] __handle_mm_fault+0x9ad/0x5400 [ 164.960805][ T7199] ? __pfx___handle_mm_fault+0x10/0x10 [ 164.960849][ T7199] ? __pfx___might_resched+0x10/0x10 [ 164.960876][ T7199] handle_mm_fault+0x40a/0x8e0 [ 164.960911][ T7199] __get_user_pages+0x165c/0x2a00 [ 164.960984][ T7199] get_user_pages_remote+0x2f1/0xac0 [ 164.961017][ T7199] ? __pfx_get_user_pages_remote+0x10/0x10 [ 164.961038][ T7199] ? down_read+0x1ad/0x2e0 [ 164.961062][ T7199] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 164.961086][ T7199] get_arg_page+0x104/0x330 [ 164.961102][ T7199] ? __might_fault+0xb0/0x130 [ 164.961120][ T7199] ? __pfx_get_arg_page+0x10/0x10 [ 164.961149][ T7199] copy_string_kernel+0x191/0x2a0 [ 164.961174][ T7199] do_execveat_common+0x3c5/0x6a0 [ 164.961204][ T7199] __x64_sys_execve+0x94/0xb0 [ 164.961230][ T7199] do_syscall_64+0xfa/0xfa0 [ 164.961248][ T7199] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.961267][ T7199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.961284][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 164.961306][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.961323][ T7199] RIP: 0033:0x7f16e658eec9 [ 164.961339][ T7199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.961354][ T7199] RSP: 002b:00007f16e73a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 164.961375][ T7199] RAX: ffffffffffffffda RBX: 00007f16e67e5fa0 RCX: 00007f16e658eec9 [ 164.961388][ T7199] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 164.961401][ T7199] RBP: 00007f16e73a3090 R08: 0000000000000000 R09: 0000000000000000 [ 164.961412][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.961422][ T7199] R13: 00007f16e67e6038 R14: 00007f16e67e5fa0 R15: 00007ffc91e8ffa8 [ 164.961454][ T7199] [ 165.238096][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 165.245020][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.255543][ T5925] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 165.284193][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.321143][ T7201] netlink: 19 bytes leftover after parsing attributes in process `syz.3.334'. [ 165.331469][ T5925] usb 1-1: config 0 descriptor?? [ 165.364988][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 165.451927][ T7205] netlink: 'syz.4.335': attribute type 4 has an invalid length. [ 165.470933][ T7205] netlink: 'syz.4.335': attribute type 4 has an invalid length. [ 165.878135][ T5944] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 165.942544][ T5947] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 166.048132][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 166.057741][ T5944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.067308][ T5944] usb 2-1: config 8 interface 0 has no altsetting 0 [ 166.078540][ T5944] usb 2-1: string descriptor 0 read error: -22 [ 166.084956][ T5944] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca [ 166.094365][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.124039][ T5947] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 166.145447][ T5947] usb 5-1: config 0 has no interface number 0 [ 166.160379][ T5947] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 166.169785][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.177829][ T5947] usb 5-1: Product: syz [ 166.182170][ T5947] usb 5-1: Manufacturer: syz [ 166.186882][ T5947] usb 5-1: SerialNumber: syz [ 166.194468][ T5947] usb 5-1: config 0 descriptor?? [ 166.415726][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.436387][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.489057][ T7215] netlink: 'syz.4.338': attribute type 4 has an invalid length. [ 166.498107][ T7215] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.338'. [ 167.241438][ T5925] usb 1-1: USB disconnect, device number 38 [ 167.253705][ T5947] usb 5-1: Firmware version (0.0) predates our first public release. [ 167.274306][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.288820][ T5947] usb 5-1: Please update to version 0.2 or newer [ 167.289400][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.347074][ T7230] FAULT_INJECTION: forcing a failure. [ 167.347074][ T7230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.365037][ T7230] CPU: 0 UID: 0 PID: 7230 Comm: syz.3.341 Not tainted syzkaller #0 PREEMPT(full) [ 167.365062][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.365072][ T7230] Call Trace: [ 167.365079][ T7230] [ 167.365088][ T7230] dump_stack_lvl+0x189/0x250 [ 167.365110][ T7230] ? __pfx____ratelimit+0x10/0x10 [ 167.365129][ T7230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.365147][ T7230] ? __pfx__printk+0x10/0x10 [ 167.365166][ T7230] ? fs_reclaim_acquire+0x7d/0x100 [ 167.365193][ T7230] should_fail_ex+0x414/0x560 [ 167.365222][ T7230] prepare_alloc_pages+0x213/0x610 [ 167.365245][ T7230] __alloc_frozen_pages_noprof+0x123/0x370 [ 167.365268][ T7230] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.365292][ T7230] ? __lock_acquire+0xab9/0xd20 [ 167.365315][ T7230] ? policy_nodemask+0x27c/0x720 [ 167.365340][ T7230] alloc_pages_mpol+0x232/0x4a0 [ 167.365365][ T7230] alloc_pages_noprof+0xa9/0x190 [ 167.365386][ T7230] pte_alloc_one+0x23/0x310 [ 167.365409][ T7230] ? __pte_alloc+0x1d/0x1a0 [ 167.365432][ T7230] __pte_alloc+0x25/0x1a0 [ 167.365452][ T7230] __handle_mm_fault+0x4985/0x5400 [ 167.365486][ T7230] ? __pfx___handle_mm_fault+0x10/0x10 [ 167.365522][ T7230] ? __pfx___might_resched+0x10/0x10 [ 167.365548][ T7230] handle_mm_fault+0x40a/0x8e0 [ 167.365585][ T7230] __get_user_pages+0x165c/0x2a00 [ 167.365639][ T7230] get_user_pages_remote+0x2f1/0xac0 [ 167.365672][ T7230] ? __pfx_get_user_pages_remote+0x10/0x10 [ 167.365691][ T7230] ? down_read+0x1ad/0x2e0 [ 167.365712][ T7230] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 167.365735][ T7230] get_arg_page+0x104/0x330 [ 167.365750][ T7230] ? __might_fault+0xb0/0x130 [ 167.365766][ T7230] ? __pfx_get_arg_page+0x10/0x10 [ 167.365795][ T7230] copy_string_kernel+0x191/0x2a0 [ 167.365816][ T7230] do_execveat_common+0x3c5/0x6a0 [ 167.365840][ T7230] __x64_sys_execve+0x94/0xb0 [ 167.365857][ T7230] do_syscall_64+0xfa/0xfa0 [ 167.365872][ T7230] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.365887][ T7230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.365901][ T7230] ? clear_bhb_loop+0x60/0xb0 [ 167.365918][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.365931][ T7230] RIP: 0033:0x7f712d18eec9 [ 167.365946][ T7230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.365958][ T7230] RSP: 002b:00007f712dfa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 167.365975][ T7230] RAX: ffffffffffffffda RBX: 00007f712d3e5fa0 RCX: 00007f712d18eec9 [ 167.365985][ T7230] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 167.366003][ T7230] RBP: 00007f712dfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 167.366012][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.366020][ T7230] R13: 00007f712d3e6038 R14: 00007f712d3e5fa0 R15: 00007ffd083fdfc8 [ 167.366044][ T7230] [ 168.129072][ T5926] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 168.288237][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 168.295644][ T5926] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 168.306804][ T5926] usb 4-1: config 0 has no interface number 0 [ 168.320453][ T5926] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 168.348855][ T5926] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 168.364033][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.380250][ T5925] usb 2-1: USB disconnect, device number 54 [ 168.389603][ T5926] usb 4-1: Product: syz [ 168.406142][ T5926] usb 4-1: Manufacturer: syz [ 168.417446][ T5926] usb 4-1: SerialNumber: syz [ 168.436893][ T5926] usb 4-1: config 0 descriptor?? [ 168.455216][ T5926] smsc95xx v2.0.0 [ 168.463924][ T5926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 168.483555][ T5841] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 168.483803][ T5926] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 168.549089][ T7252] fuse: Bad value for 'fd' [ 168.576605][ T7252] @0Ù: renamed from bond_slave_1 (while UP) [ 168.581278][ T7254] FAULT_INJECTION: forcing a failure. [ 168.581278][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 168.596117][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.4.350 Not tainted syzkaller #0 PREEMPT(full) [ 168.596139][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.596149][ T7254] Call Trace: [ 168.596155][ T7254] [ 168.596162][ T7254] dump_stack_lvl+0x189/0x250 [ 168.596184][ T7254] ? __pfx____ratelimit+0x10/0x10 [ 168.596203][ T7254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.596220][ T7254] ? __pfx__printk+0x10/0x10 [ 168.596237][ T7254] ? __pfx___might_resched+0x10/0x10 [ 168.596257][ T7254] ? fs_reclaim_acquire+0x7d/0x100 [ 168.596278][ T7254] should_fail_ex+0x414/0x560 [ 168.596304][ T7254] should_failslab+0xa8/0x100 [ 168.596324][ T7254] kmem_cache_alloc_noprof+0x74/0x6e0 [ 168.596347][ T7254] ? ptlock_alloc+0x20/0x70 [ 168.596361][ T7254] ? set_page_refcounted+0xa0/0x1e0 [ 168.596384][ T7254] ptlock_alloc+0x20/0x70 [ 168.596400][ T7254] pte_alloc_one+0x7a/0x310 [ 168.596420][ T7254] ? __pte_alloc+0x1d/0x1a0 [ 168.596441][ T7254] __pte_alloc+0x25/0x1a0 [ 168.596463][ T7254] __handle_mm_fault+0x4985/0x5400 [ 168.596503][ T7254] ? __pfx___handle_mm_fault+0x10/0x10 [ 168.596541][ T7254] ? __pfx___might_resched+0x10/0x10 [ 168.596565][ T7254] handle_mm_fault+0x40a/0x8e0 [ 168.596598][ T7254] __get_user_pages+0x165c/0x2a00 [ 168.596652][ T7254] get_user_pages_remote+0x2f1/0xac0 [ 168.596692][ T7254] ? __pfx_get_user_pages_remote+0x10/0x10 [ 168.596712][ T7254] ? down_read+0x1ad/0x2e0 [ 168.596734][ T7254] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 168.596756][ T7254] get_arg_page+0x104/0x330 [ 168.596771][ T7254] ? __might_fault+0xb0/0x130 [ 168.596789][ T7254] ? __pfx_get_arg_page+0x10/0x10 [ 168.596817][ T7254] copy_string_kernel+0x191/0x2a0 [ 168.596840][ T7254] do_execveat_common+0x3c5/0x6a0 [ 168.596871][ T7254] __x64_sys_execve+0x94/0xb0 [ 168.596892][ T7254] do_syscall_64+0xfa/0xfa0 [ 168.596910][ T7254] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.596929][ T7254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.596946][ T7254] ? clear_bhb_loop+0x60/0xb0 [ 168.596968][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.596984][ T7254] RIP: 0033:0x7f3151f8eec9 [ 168.596998][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.597010][ T7254] RSP: 002b:00007f3152f11038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 168.597027][ T7254] RAX: ffffffffffffffda RBX: 00007f31521e5fa0 RCX: 00007f3151f8eec9 [ 168.597037][ T7254] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 168.597049][ T7254] RBP: 00007f3152f11090 R08: 0000000000000000 R09: 0000000000000000 [ 168.597059][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.597069][ T7254] R13: 00007f31521e6038 R14: 00007f31521e5fa0 R15: 00007ffe0f0b59b8 [ 168.597100][ T7254] [ 168.899873][ T5947] usb 4-1: USB disconnect, device number 49 [ 168.914074][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.925905][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 168.937028][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 168.947323][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.961327][ T5841] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.970456][ T5841] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.980085][ T5841] usb 1-1: Manufacturer: syz [ 168.988638][ T5841] usb 1-1: config 0 descriptor?? [ 169.018375][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.027895][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.238174][ T5841] rc_core: IR keymap rc-hauppauge not found [ 169.244178][ T5841] Registered IR keymap rc-empty [ 169.249495][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.268261][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.289074][ T5841] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 169.302286][ T5841] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 169.317252][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.338727][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.358204][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.378191][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.398637][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.418211][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.446592][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.468738][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.488220][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.508362][ T5841] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.541486][ T5841] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 169.550967][ T5841] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 169.576566][ T5841] usb 1-1: USB disconnect, device number 39 [ 169.666949][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.690365][ T7272] nfs4: Unknown parameter 'rdma®$O£¶õ˜Ó ' [ 169.697309][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.971496][ T7279] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 169.978408][ T7279] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 169.986279][ T7279] netlink: 14 bytes leftover after parsing attributes in process `syz.1.357'. [ 169.995731][ T7279] hsr_slave_0: left promiscuous mode [ 170.002343][ T7279] hsr_slave_1: left promiscuous mode [ 170.028175][ T5925] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 170.080243][ T30] audit: type=1326 audit(1759551864.756:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.102072][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.110603][ T30] audit: type=1326 audit(1759551864.756:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.135969][ T30] audit: type=1326 audit(1759551864.756:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.158280][ T30] audit: type=1326 audit(1759551864.756:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.168209][ T5925] usb 4-1: device descriptor read/64, error -71 [ 170.180608][ T30] audit: type=1326 audit(1759551864.756:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.189138][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 170.209204][ T30] audit: type=1326 audit(1759551864.756:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.239433][ T30] audit: type=1326 audit(1759551864.756:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.263742][ T30] audit: type=1326 audit(1759551864.756:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.287335][ T30] audit: type=1326 audit(1759551864.756:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.309916][ T30] audit: type=1326 audit(1759551864.756:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.0.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf9ff8eec9 code=0x50000 [ 170.458214][ T5925] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 170.601220][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.617831][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.782397][ T5925] usb 4-1: device descriptor read/64, error -71 [ 170.898475][ T5925] usb usb4-port1: attempt power cycle [ 171.038300][ T5944] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 171.218521][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 171.232505][ T7313] netlink: 36 bytes leftover after parsing attributes in process `syz.4.366'. [ 171.234830][ T5944] usb 2-1: config 9 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 16143, setting to 1024 [ 171.242030][ T5925] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 171.254516][ T5944] usb 2-1: config 9 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 171.267349][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.281054][ T5944] usb 2-1: config 9 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.283103][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.296026][ T5944] usb 2-1: config 9 interface 0 has no altsetting 0 [ 171.303810][ T5925] usb 4-1: device descriptor read/8, error -71 [ 171.319289][ T5944] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 171.328708][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.336759][ T5944] usb 2-1: SerialNumber: syz [ 171.345531][ T7294] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 171.428206][ T5926] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 171.548273][ T5925] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 171.557668][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.562209][ T5944] usblp 2-1:9.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 255 proto 1 vid 0x0001 pid 0x8000 [ 171.567391][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.586064][ T5925] usb 4-1: device descriptor read/8, error -71 [ 171.593710][ T5926] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 171.618119][ T5926] usb 1-1: config 0 has no interface number 0 [ 171.626876][ T5926] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 171.629395][ T5944] usb 2-1: USB disconnect, device number 55 [ 171.636644][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.650639][ T5926] usb 1-1: Product: syz [ 171.654821][ T5926] usb 1-1: Manufacturer: syz [ 171.659525][ T5926] usb 1-1: SerialNumber: syz [ 171.672448][ T5944] usblp0: removed [ 171.673035][ T5926] usb 1-1: config 0 descriptor?? [ 171.698458][ T5925] usb usb4-port1: unable to enumerate USB device [ 171.895600][ T5926] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.961520][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 171.980677][ T5926] usb 1-1: USB disconnect, device number 40 [ 171.983187][ T7333] netlink: 33 bytes leftover after parsing attributes in process `syz.4.369'. [ 172.005454][ T7333] veth0_to_bridge: entered allmulticast mode [ 172.020467][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.046349][ T7333] netlink: 33 bytes leftover after parsing attributes in process `syz.4.369'. [ 172.088117][ T5944] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 172.117796][ T7333] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 172.127667][ T7339] netlink: 'syz.0.371': attribute type 29 has an invalid length. [ 172.140424][ T7340] netlink: 'syz.0.371': attribute type 29 has an invalid length. [ 172.148755][ T7333] overlayfs: failed to set xattr on upper [ 172.154733][ T7333] overlayfs: ...falling back to redirect_dir=nofollow. [ 172.166339][ T7333] overlayfs: ...falling back to index=off. [ 172.177606][ T7333] overlayfs: ...falling back to uuid=null. [ 172.184172][ T7333] overlayfs: failed to clone lowerpath [ 172.248110][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 172.260043][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.277128][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.293669][ T5944] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 172.305426][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.316630][ T5944] usb 2-1: config 0 descriptor?? [ 172.389421][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.400869][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.638159][ T5841] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 172.809410][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 172.817214][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.833055][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.846601][ T5841] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 172.858422][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.870939][ T5841] usb 1-1: config 0 descriptor?? [ 172.936866][ T5944] usbhid 2-1:0.0: can't add hid device: -71 [ 172.952484][ T5944] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 172.978498][ T5944] usb 2-1: USB disconnect, device number 56 [ 173.128366][ T7359] netlink: 'syz.4.379': attribute type 3 has an invalid length. [ 173.218998][ T5926] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 173.254767][ T7364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.266508][ T7364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.290308][ T5841] hid_parser_main: 64 callbacks suppressed [ 173.290328][ T5841] ft260 0003:0403:6030.0010: unknown main item tag 0x7 [ 173.387884][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 173.400796][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 173.409703][ T5926] usb 4-1: can't read configurations, error -61 [ 173.488639][ T5841] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 173.538246][ T5926] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 173.654459][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 173.665835][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 173.682308][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.691476][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.698162][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 173.709678][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 173.727756][ T5926] usb 4-1: can't read configurations, error -61 [ 173.736653][ T5926] usb usb4-port1: attempt power cycle [ 173.922680][ T5841] usb 1-1: USB disconnect, device number 41 [ 173.981571][ T5947] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 174.078235][ T5926] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 174.098924][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 174.107575][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 174.126656][ T5926] usb 4-1: can't read configurations, error -61 [ 174.182038][ T5947] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 174.198112][ T5947] usb 2-1: config 0 has no interface number 0 [ 174.204345][ T5947] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 174.238907][ T5947] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 174.260454][ T5947] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 174.260481][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.269778][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.269804][ T5947] usb 2-1: Product: syz [ 174.269818][ T5947] usb 2-1: Manufacturer: syz [ 174.269832][ T5947] usb 2-1: SerialNumber: syz [ 174.272486][ T5947] usb 2-1: config 0 descriptor?? [ 174.281097][ T5926] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 174.317075][ T5947] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 174.324440][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.349066][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 174.357553][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 174.365938][ T5926] usb 4-1: can't read configurations, error -61 [ 174.373049][ T5926] usb usb4-port1: unable to enumerate USB device [ 174.541084][ T5947] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 174.567679][ T5947] usb 2-1: USB disconnect, device number 57 [ 174.595096][ T5947] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 174.609766][ T5947] cypress_m8 2-1:0.35: device disconnected [ 174.838194][ T5841] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 174.942707][ T7380] binder: 7378:7380 ioctl 40046205 0 returned -22 [ 174.988244][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 174.995020][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.006655][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.016464][ T5841] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.025774][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.035760][ T5841] usb 1-1: config 0 descriptor?? [ 175.044380][ T5841] hub 1-1:0.0: USB hub found [ 175.252485][ T5841] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 175.458148][ T5926] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 175.608233][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 175.615009][ T5926] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 175.623524][ T5926] usb 2-1: config 0 has no interface number 0 [ 175.629846][ T5926] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 175.644391][ T5926] usb 2-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 175.655397][ T5841] usbhid 1-1:0.0: can't add hid device: -71 [ 175.661316][ T5926] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 175.663583][ T5841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 175.674835][ T5926] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 175.687380][ T5926] usb 2-1: Product: syz [ 175.691795][ T5926] usb 2-1: Manufacturer: syz [ 175.696417][ T5926] usb 2-1: SerialNumber: syz [ 175.703298][ T5926] usb 2-1: config 0 descriptor?? [ 175.709405][ T5841] usb 1-1: USB disconnect, device number 42 [ 175.776126][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.786702][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.914347][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.925092][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.947150][ T5926] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 175.965259][ T5926] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 175.995908][ T5926] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 176.025405][ T5926] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 176.044653][ T5926] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 176.057977][ T5926] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 176.078339][ T5926] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 176.096146][ T5926] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 176.112295][ T5926] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 176.123503][ T5926] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 176.142387][ T5926] usb 2-1: USB disconnect, device number 58 [ 176.163562][ T5926] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 176.245128][ T6875] udevd[6875]: setting mode of /dev/ttyUSB1 to 020660 failed: No such file or directory [ 176.262661][ T5926] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 176.292331][ T6875] udevd[6875]: setting owner of /dev/ttyUSB1 to uid=0, gid=18 failed: No such file or directory [ 176.311868][ T5926] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 176.347251][ T5926] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 176.373791][ T5926] keyspan 2-1:0.107: device disconnected [ 176.388908][ T5895] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 176.452904][ T7392] syzkaller1: entered promiscuous mode [ 176.458608][ T7392] syzkaller1: entered allmulticast mode [ 176.543168][ T7392] sp0: Synchronizing with TNC [ 176.561575][ T5895] usb 4-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 176.564627][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 176.581420][ T5895] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 176.581469][ T5895] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 176.581490][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.589907][ T5895] usb 4-1: config 0 descriptor?? [ 176.604843][ T7395] sp0: Found TNC [ 176.832424][ T5925] usb 4-1: USB disconnect, device number 58 [ 176.898146][ T5895] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 176.988499][ T5926] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 177.088332][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 177.095556][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.107912][ T5895] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.119637][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.126367][ T5895] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 177.144668][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.156066][ T5895] usb 1-1: config 0 descriptor?? [ 177.168226][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 177.183169][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.200325][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.212104][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 177.222585][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 177.233079][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.251917][ T5926] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.257210][ T7387] syz.4.390 (7387): drop_caches: 2 [ 177.261877][ T5926] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.275008][ T5926] usb 2-1: Manufacturer: syz [ 177.284003][ T5926] usb 2-1: config 0 descriptor?? [ 177.494882][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.505017][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.568105][ T5926] rc_core: IR keymap rc-hauppauge not found [ 177.574101][ T5926] Registered IR keymap rc-empty [ 177.583752][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.595077][ T7408] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 177.609120][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.629892][ T5926] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 177.647914][ T5926] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 177.666616][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.674112][ T43] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 177.698259][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.723106][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.749208][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.768210][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.782283][ T7392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.788261][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.793497][ T7392] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.815320][ T7391] [U] è` [ 177.818667][ T5895] usbhid 1-1:0.0: can't add hid device: -71 [ 177.828093][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 177.833486][ T5895] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 177.844814][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.858373][ T43] usb 4-1: config 148 has an invalid descriptor of length 26, skipping remainder of the config [ 177.888814][ T5895] usb 1-1: USB disconnect, device number 43 [ 177.894893][ T43] usb 4-1: config 148 has 0 interfaces, different from the descriptor's value: 1 [ 177.906973][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.927559][ T43] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=30.8d [ 177.939761][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.958249][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.978602][ T5926] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 177.991291][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.006688][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.018508][ T5926] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 178.039652][ T5926] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 178.069954][ T5926] usb 2-1: USB disconnect, device number 59 [ 178.568159][ T5926] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 178.705649][ T43] usb 4-1: string descriptor 0 read error: -71 [ 178.724751][ T43] usb 4-1: USB disconnect, device number 59 [ 178.745913][ T5926] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 178.774259][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.807333][ T5926] usb 2-1: Product: syz [ 178.818329][ T5926] usb 2-1: Manufacturer: syz [ 178.827552][ T5926] usb 2-1: SerialNumber: syz [ 178.847595][ T5926] usb 2-1: config 0 descriptor?? [ 178.870782][ T7436] netlink: 132 bytes leftover after parsing attributes in process `syz.0.404'. [ 179.214974][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.225100][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.262417][ T5926] usb 2-1: Firmware version (0.0) predates our first public release. [ 179.270835][ T5926] usb 2-1: Please update to version 0.2 or newer [ 179.328173][ T5841] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 179.356735][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.370787][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.478116][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 179.485797][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.506795][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.527799][ T5926] usb 2-1: USB disconnect, device number 60 [ 179.527829][ T5841] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 179.547603][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.562960][ T5841] usb 1-1: config 0 descriptor?? [ 179.598131][ T5947] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 179.857655][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.866733][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.884380][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.893300][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.986727][ T5841] ft260 0003:0403:6030.0011: unknown main item tag 0x7 [ 180.184513][ T5841] ft260 0003:0403:6030.0011: chip code: 6424 8183 [ 180.218129][ T5947] usb 4-1: device descriptor read/64, error -71 [ 180.358254][ T5908] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 180.468441][ T5947] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 180.509156][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 180.515952][ T5908] usb 2-1: config 7 has an invalid interface number: 182 but max is 0 [ 180.525037][ T5908] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 180.535534][ T5908] usb 2-1: config 7 has no interface number 0 [ 180.545093][ T5908] usb 2-1: config 7 interface 182 altsetting 179 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.561155][ T5908] usb 2-1: config 7 interface 182 has no altsetting 0 [ 180.571085][ T5908] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=84.27 [ 180.580293][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.588610][ T5908] usb 2-1: Product: syz [ 180.593658][ T5895] usb 1-1: USB disconnect, device number 44 [ 180.594543][ T5908] usb 2-1: Manufacturer: syz [ 180.608491][ T5908] usb 2-1: SerialNumber: syz [ 180.648211][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 180.657208][ T5947] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 180.665623][ T5947] usb 4-1: config 0 has no interface number 0 [ 180.673399][ T5947] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.686061][ T5947] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 180.696395][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 180.704536][ T5947] usb 4-1: Product: syz [ 180.708780][ T5947] usb 4-1: SerialNumber: syz [ 180.715490][ T5947] usb 4-1: config 0 descriptor?? [ 180.723769][ T5947] cm109 4-1:0.8: invalid payload size 255, expected 4 [ 180.732014][ T5947] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 180.850788][ T5908] snd-usb-audio 2-1:7.182: probe with driver snd-usb-audio failed with error -22 [ 180.862686][ T5908] usb 2-1: USB disconnect, device number 61 [ 180.928956][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.937974][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.121135][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.130309][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.192452][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 181.402220][ T7497] netlink: 'syz.1.426': attribute type 33 has an invalid length. [ 181.402897][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 181.412759][ T7497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.426'. [ 181.416920][ C0] ------------[ cut here ]------------ [ 181.431544][ C0] URB ffff888020edb700 submitted while active [ 181.438335][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0xf8c/0x18b0, CPU#0: ksoftirqd/0/15 [ 181.448430][ C0] Modules linked in: [ 181.452538][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 181.461735][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.471786][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 181.477334][ C0] Code: 00 00 00 e8 96 eb c6 fa e9 25 f1 ff ff e8 8c eb c6 fa c6 05 c8 75 8f 08 01 90 48 c7 c7 a0 14 12 8c 48 89 de e8 c5 58 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 66 eb c6 fa c6 05 f7 c0 a5 08 01 41 [ 181.496934][ C0] RSP: 0018:ffffc90000147578 EFLAGS: 00010046 [ 181.503003][ C0] RAX: 5c0e69043cb2d400 RBX: ffff888020edb700 RCX: 0000000000040000 [ 181.510968][ C0] RDX: ffffc900021a1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 181.518928][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 181.526907][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820 [ 181.534872][ C0] R13: ffff8880708ea830 R14: ffff888020edb708 R15: dffffc0000000000 [ 181.542919][ C0] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 181.551836][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.558415][ C0] CR2: 000000110c2f6f57 CR3: 000000007c992000 CR4: 00000000003526f0 [ 181.566379][ C0] Call Trace: [ 181.569650][ C0] [ 181.572588][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 181.578130][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 181.584115][ C0] ? kcov_remote_start+0x97/0x7f0 [ 181.589133][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 181.594504][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 181.599881][ C0] dummy_timer+0x85f/0x44c0 [ 181.604401][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.609764][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 181.615498][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 181.620467][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 181.625404][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 181.630341][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 181.635556][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 181.641307][ C0] ? read_tsc+0x9/0x20 [ 181.645380][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 181.650590][ C0] handle_softirqs+0x286/0x870 [ 181.655352][ C0] ? run_ksoftirqd+0x9b/0x100 [ 181.660028][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 181.665307][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 181.670327][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 181.675494][ C0] run_ksoftirqd+0x9b/0x100 [ 181.680000][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 181.685113][ C0] smpboot_thread_fn+0x542/0xa60 [ 181.690050][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 181.695076][ C0] kthread+0x711/0x8a0 [ 181.699137][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 181.704592][ C0] ? __pfx_kthread+0x10/0x10 [ 181.709176][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 181.714456][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.719677][ C0] ? __pfx_kthread+0x10/0x10 [ 181.724262][ C0] ret_from_fork+0x4bc/0x870 [ 181.728851][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 181.734220][ C0] ? __switch_to_asm+0x39/0x70 [ 181.738977][ C0] ? __switch_to_asm+0x33/0x70 [ 181.743736][ C0] ? __pfx_kthread+0x10/0x10 [ 181.748403][ C0] ret_from_fork_asm+0x1a/0x30 [ 181.753294][ C0] [ 181.756310][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.763583][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 181.772764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.782807][ C0] Call Trace: [ 181.786075][ C0] [ 181.788994][ C0] dump_stack_lvl+0x99/0x250 [ 181.793573][ C0] ? __asan_memcpy+0x40/0x70 [ 181.798164][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.803363][ C0] ? __pfx__printk+0x10/0x10 [ 181.807951][ C0] vpanic+0x237/0x6d0 [ 181.811929][ C0] ? __pfx_vpanic+0x10/0x10 [ 181.816424][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 181.821622][ C0] panic+0xb9/0xc0 [ 181.825338][ C0] ? __pfx_panic+0x10/0x10 [ 181.829768][ C0] __warn+0x334/0x4c0 [ 181.833746][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 181.838681][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 181.843616][ C0] report_bug+0x2be/0x4f0 [ 181.847938][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 181.852869][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 181.857806][ C0] ? usb_submit_urb+0xf8e/0x18b0 [ 181.862738][ C0] handle_bug+0x84/0x160 [ 181.866980][ C0] exc_invalid_op+0x1a/0x50 [ 181.871481][ C0] asm_exc_invalid_op+0x1a/0x20 [ 181.876320][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 181.881863][ C0] Code: 00 00 00 e8 96 eb c6 fa e9 25 f1 ff ff e8 8c eb c6 fa c6 05 c8 75 8f 08 01 90 48 c7 c7 a0 14 12 8c 48 89 de e8 c5 58 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 66 eb c6 fa c6 05 f7 c0 a5 08 01 41 [ 181.901467][ C0] RSP: 0018:ffffc90000147578 EFLAGS: 00010046 [ 181.907531][ C0] RAX: 5c0e69043cb2d400 RBX: ffff888020edb700 RCX: 0000000000040000 [ 181.915501][ C0] RDX: ffffc900021a1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 181.923470][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 181.931438][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820 [ 181.939405][ C0] R13: ffff8880708ea830 R14: ffff888020edb708 R15: dffffc0000000000 [ 181.947402][ C0] ? usb_submit_urb+0xf8b/0x18b0 [ 181.952342][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 181.957702][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 181.963600][ C0] ? kcov_remote_start+0x97/0x7f0 [ 181.968647][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 181.974035][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 181.979569][ C0] dummy_timer+0x85f/0x44c0 [ 181.984113][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.989498][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 181.995247][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 182.000186][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 182.005126][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 182.010142][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 182.015355][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 182.021069][ C0] ? read_tsc+0x9/0x20 [ 182.025138][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 182.030341][ C0] handle_softirqs+0x286/0x870 [ 182.035117][ C0] ? run_ksoftirqd+0x9b/0x100 [ 182.039800][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 182.045081][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 182.050101][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 182.055128][ C0] run_ksoftirqd+0x9b/0x100 [ 182.059629][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 182.064742][ C0] smpboot_thread_fn+0x542/0xa60 [ 182.069676][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 182.074702][ C0] kthread+0x711/0x8a0 [ 182.078763][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 182.084259][ C0] ? __pfx_kthread+0x10/0x10 [ 182.088836][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.094023][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.099212][ C0] ? __pfx_kthread+0x10/0x10 [ 182.103877][ C0] ret_from_fork+0x4bc/0x870 [ 182.108468][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 182.113577][ C0] ? __switch_to_asm+0x39/0x70 [ 182.118329][ C0] ? __switch_to_asm+0x33/0x70 [ 182.123079][ C0] ? __pfx_kthread+0x10/0x10 [ 182.127662][ C0] ret_from_fork_asm+0x1a/0x30 [ 182.132434][ C0] [ 182.135590][ C0] Kernel Offset: disabled [ 182.139895][ C0] Rebooting in 86400 seconds..