last executing test programs: 23.255367722s ago: executing program 0 (id=1722): r0 = syz_open_dev$video(0x0, 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0xf00, 0x16d, 0x2, @discrete={0x1, 0x400000}}) 22.872659488s ago: executing program 0 (id=1725): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x8001008, r0, 0x0) fanotify_mark(r2, 0x1, 0x3c, r1, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 22.532195835s ago: executing program 0 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f901d1a6000000000020000000000009"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 21.452220135s ago: executing program 0 (id=1730): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00005a1000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0xf) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r2, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x800) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000040), &(0x7f0000000080)=@udp=r5}, 0x20) close(r5) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 18.184290836s ago: executing program 0 (id=1737): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000059c0)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000900, &(0x7f0000006d00)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x25}, 0x3}, 0x1c) syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf909, 0x800, 0x0, 0x267}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d0309050302000222fc2c4268c2"], 0x0) 15.772674259s ago: executing program 0 (id=1741): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 15.507064556s ago: executing program 32 (id=1741): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) 7.287462555s ago: executing program 4 (id=1762): socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x23, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 7.068496954s ago: executing program 2 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000800)}], 0x4}}], 0x1, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32, @ANYBLOB="136b4ef2254e615658d109a198444a799f9b6b7b03d1e68f663bde81abd287340e47e00b833bdc82edd31a78eaec59ed87591a7350a1d3a4a283b697d06ee034de0bf7625dcf404729566fe9b4b2b94030f61909597afcfb2458a699259ded908f6e8c1017244a618d1882fc5349f18d6181904c98e886ec18414ce40a37b1392981d8f18fc0e637ce3efd82310c532e2fc815ebf5a721"], 0x1c}}, 0x4008054) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.108404149s ago: executing program 2 (id=1769): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 5.046452641s ago: executing program 4 (id=1770): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000ac0)) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_create(0xb, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex_waitv(&(0x7f0000000000)=[{0x4, &(0x7f0000000940)=0xffffffffffffffff, 0x6}], 0x1, 0x0, 0x0, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0xffffffffffffffff, 0x5}}, 0x48) read$msr(r2, 0x0, 0x0) 5.004259834s ago: executing program 2 (id=1771): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) file_setattr(r0, 0x0, &(0x7f0000010580)={0xb000, 0xfffffff7, 0x5, 0x3, 0x2192}, 0x18, 0x1000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000cf4000/0x4000)=nil, 0x4000, 0xa) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) ftruncate(r3, 0xe) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f0000000140)={&(0x7f0000000080)=[{0x3f8000000, 0x2, 0xfffffffffffffff9, 0x8}, {0x6, 0x0, 0x4, 0x5}], 0x2, 0x20, 0x0, 0x6}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fdatasync(r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0xcc840) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x14}, 0x18) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="98be786badd06d89ba445366fef953e341fcdf5b31324227281e7fb9df39eb5272eff86939d573be9b5029a5e3179fdc10d7dfc90df069e0fa23eed0595fd722d1c4f1346f8ffe85a382bed54a6e949d187b921de87a34f77869dce878a897371a0d530a63468dce303048e4096baaba40af1f055f52f8f5349b25452e9d6c79be94b5a06d41339020cfb092acdcffcf7cc9cd6eab471c881baa246e065699308c4f520f3bebf79d", @ANYBLOB="a408214223d458c4b57f47de144804eabe09b5685c150849359d70aeb49e59fed60c6713479eefd1c0140fc44eb32f89bff2cedfbe13d670f707addde94e0dd5f43970abf6d3c7ee2837e4717a544db8aec858986c3a2e9cd2edcd978fd3a3f7a33b462a7e3fbd854144918738bc8b0a9d1793f6a0fe50a2618ba14f66a94e580feab003c6ac120280a3e9017ef36b4765e26dc600e6ef44e5133e58b54ee2f3e95dc5bcafe0bc98c7abc3afacf304ed77a736b90778238432c8bab21bed2ad174af66f5ba5e8a9cbd19319e5c0235d2c07b034ca8f59260c8b35a1d8d1e58bc06375ba9", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.821490774s ago: executing program 4 (id=1772): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82, 0x700}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 4.63264909s ago: executing program 4 (id=1773): syz_usb_connect$uac1(0x5, 0x79, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000010fd0704004000010203010902670003011448010904000000010100000a24010c0001000201020904f311610100000102000009040101010102000009050109ff03fee78107258504050180090402000001020000090402010101020000072401be08020025058209ff0700000000001004"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50042, 0x140) fanotify_mark(r4, 0x1, 0x8001008, r2, 0x0) fanotify_mark(r4, 0x1, 0x3c, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = fsopen(&(0x7f0000000340)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) 4.373012594s ago: executing program 1 (id=1775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 4.038591198s ago: executing program 1 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000080)={&(0x7f00000007c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.714010225s ago: executing program 1 (id=1777): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x24060400) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.400718764s ago: executing program 1 (id=1780): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 2.400228921s ago: executing program 3 (id=1781): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x8) syz_usb_connect(0x2, 0x98, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x2b, 0x74, 0xf9, 0x40, 0xccd, 0x38, 0xe99c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x8, 0x4, 0x414d15eab034c115, 0x7f, "", [{{0x9, 0x4, 0xd0, 0xfd, 0x4, 0x62, 0x17, 0xf6, 0x4f, [], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0xd4, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x3, 0x6c, 0x9}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x4, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x1, 0xc4}}]}}, {{0x9, 0x4, 0xe9, 0x5, 0x3, 0x80, 0xfe, 0xe2, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0xdf5, 0x4, 0xa, 0x99}}, @uac_control={{0xa, 0x24, 0x1, 0x101, 0xa}}], [{{0x9, 0x5, 0x0, 0x1, 0x10, 0xac, 0x9, 0x9}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0xe8, 0x46, 0x1}}, {{0x9, 0x5, 0xc, 0x989ec0b112565278, 0x200, 0x7, 0x5, 0x81, [@generic={0x2, 0xb}, @generic={0x2, 0xd}]}}]}}]}}]}}, &(0x7f0000001040)={0x0, 0x0, 0x5, &(0x7f0000000dc0)={0x5, 0xf, 0x5}}) mknod$loop(0x0, 0xfff, 0x0) execve(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 2.351610593s ago: executing program 1 (id=1782): r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x180) unshare(0x22020600) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@local, 0x5}, 0x1, 0x2, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) unshare(0x4000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000f00d4c130ff92aec2ca0000000000"], 0x48) syz_ublk_setup_io_uring(0x494, &(0x7f0000000200)={0x0, 0x12a8, 0x4, 0x2, 0x1fe, 0x0, r2}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000019c0)=@newchain={0x64, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_mpls={0x30, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x64}}, 0x44004) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) 2.055913927s ago: executing program 1 (id=1783): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x25, 0x1}, 0xe) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x7ff, &(0x7f0000000bc0)={{0x12, 0x1, 0x200, 0xd1, 0xd8, 0xd8, 0xff, 0x2040, 0x721b, 0x15ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7ed, 0x2, 0x4, 0x0, 0x0, 0x8c, "", [{{0x9, 0x4, 0xc3, 0xc, 0x7, 0xba, 0x19, 0x5f, 0x9, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xa, 0xaf, 0x81, 0x7f}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x2, 0x2, "64fee35c"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x1, 0x6, 0xf9, "e0d24e9de10784f9"}]}], [{{0x9, 0x5, 0x0, 0x4, 0x40, 0x3, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x401}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x8, 0xf7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}, @generic={0x63, 0x21, "22aa9dfcf21172d166c77393eb099b9f9dde8c3c1b69726c0b27cd76a53576f8eb45f6cee64226e4749d07be146ba6b24faff53b6d2375c6a3d3ed0439575abafa8c280d69a085c915187e018f18f9b31fbed5090609eacaa61a98acf8ce5b5e8d"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x2, 0x6, 0x5, [@generic={0xf8, 0x23, "0635230dbb50e7f4429e261c71a9c07fed616e4583135fce83f00c50ee799c4b7c12aac9270d47f497b6965ea727f3710b2134175949636e32a59627bacf55c62da65ad3ed2a2dcaa1d66862d8b5935c0fc08be055a8ba947b99105abc06a8ad9232caf6c13673daceb70830681c9a4b15d020f2e859046335d068b6539b763432f95a70cf858e6d09cb6213802eb6936efbdc1a47cae9b295415d183fbe6f6d26433d9e52f1c1e7bcc6171c0deb1c9213df68a83c7f83b05635f2b5b989ef36176c6febbf8fd58052e568f7336f2d7d4a765c3d2504c991e9ab43aeee280932b3ec8294535a3139081908ede3355d250fa625a3c867"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x5, 0xe7, 0x3, [@generic={0xb0, 0x23, "cdba4ea0523bfe504c080de58af640cb4e88c653e667321c3285612e9b9387988a2b42b22920ac81a42936009bb65f456748edf5e1b29d3a5900fe664ae21a1430333da2156baf7ae068336bb65efaa54d4a007e12b49658b68559ee33c51ac2a87961b7fbe909d72b53063d9feba10d70057d3ff59b2a25828b15d0cd19c3bebe4ccb196b243eb06b9875d48798fc28968ee132c5b445534250c6af950ceb6c74d6015123078d8098689f08e4d5"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x2}]}}]}}, {{0x9, 0x4, 0x7, 0x8, 0xc, 0x2f, 0x2b, 0xbf, 0x3, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "cf25"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x8001, 0x1, 0xf}, {0x6, 0x24, 0x1a, 0x5, 0x31}, [@mbim_extended={0x8, 0x24, 0x1c, 0xf18b, 0x4, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x6b, 0x3, 0xd9}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x3, 0x4, 0x5}]}], [{{0x9, 0x5, 0x6, 0x10, 0x0, 0x31, 0x7f, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x0, 0x2, 0xf, [@generic={0xe1, 0xe, "6a1d9cb95864db1b6bd78f8dee4b2df5f79d8a9ffce98c67d9c4ab7f7d088c9d869c1edf4f6c1723d0ddc719c4807c397b77c627def488c9c7943068829750496ebc20d4bb95dba8878d1f124b3a04d880f8e67a29d577412dd059ff9c1fbd1ebdd438048d9e08a12c8f9299c07ea9c57ee2ccacf6d6d11355080fa2f4a5ba2ce2d6829d42e0ff23236fea712865458536d2cb450c91056602d4fd3a9b25c1ac9c8dfd71e53e7ce4c3d9af42c72d15842c63aeed2b4f138d86b0a58c578f5cef427b79a4cabbac5c828bc8184e16a099c04aabcfb1f4be478871e5fd8c91e3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x5a, 0x1, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x2, 0x5, 0xed, [@generic={0x19, 0x9, "a05a65f95ef140db2398f04a92b8aa00d58923608561e0"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x4, 0x1, 0x7f, [@generic={0x5f, 0x31, "842eb426a158ab7f1a46649b2e740b4e1c31f2948c55a28e7d88f26e09613b416ca73fe3eea1d9a7016bbd756adf4568aef5aa10d1325db888a46a508b957043732e799ddc500931825cf5cfd9bee6b11cdb15090e8e1a11974b089c82"}, @generic={0x80, 0x5, "42eda5fd515c2c99ac4f0ba5b8505f06d549287e434882b857a04b018e3cb48a19bda0d3d537c2dadca07974f7c052124ef15b69559d2d92614bc705ee746854f3306bbaab507455f4933feab3b7bd27da943ad6dd7b2016f8c3d319262a12fb8ea5b2def949f8f8c74e2f575c46fc7207a10a7802b2b7561cf68e707fd8"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x9, 0x4, 0xfa, [@generic={0x9d, 0x9, "a51bf60eb59636bdf1a21a3c3a1b1f310a1c92db3c443dcf912e238764031b4380a36812c6a6db02acbf967c396f4b14738071f7418e6b8e7bf7db9b555160275ca9c64b83d06d43977cec0705f937b0d9e10921074d3e6e531451e36291152d8842fa16f6f49c4af5ee8933fac2416a159013e555fa188c1b59768c2c3074d1cce526fca71b9344e709001b4d7a027d863923043c100e68b2e7b2"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x7}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0x9, 0x5, [@generic={0x100, 0x7, "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"}, @generic={0x1b, 0x24, "5eafd1827d9974ee223f1e1bfccf754358943dcf1c75433997"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x0, 0x10, 0x0, 0x8, [@generic={0xb5, 0xb, "008c43d18468c40ac6528378f0e4128db6f0f9c7337242fe848d114f1fff7e855faac2d260a4c23ed8d9ca9813f1cda0165f87872d18ca613c1d5e14ce4ce5e48b366663690953d14e8bd132c74d033a80516b6bc23469f7ddf1141a19d2dc754731dc8ffdbb192a643c84a0a121758098fcf44742c56f376b57a318b3085adb25e3878f613a20905647cd2da16d5a5e4b59b472b2d4a7e18fc4df2f6e14a99683d55b153170103aac46925ebd969517419238"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0xfe, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x31, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x75, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x6}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x4, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf618}]}}]}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x250, 0x4, 0x6, 0x69, 0x10, 0x81}, 0x3c, &(0x7f0000001400)={0x5, 0xf, 0x3c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x7, 0xee00, 0x3, [0x30, 0x0, 0x41c0, 0xff0030]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x2, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x86, 0x9}, @ptm_cap={0x3}]}, 0x32, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x2808}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x407}}, {0xd9, &(0x7f0000001500)=@string={0xd9, 0x3, "cf355f1176ee917be8090dce258e6d9b7397f097b782ade13162aa15beb19d6de27a80449397a60d333caf3c94732db8dbb68bba32876b04e2d5cbca7f0090841447005226b90701f8269d2d747ce2428122760ae862e2632936c282c9123c03ce0f7ac8b6de5526798fe1113c2bdc7640756d911eee6f9dab6d59a3f86dfaf975efd945d5c68891ebfa127ffacabb1802b1bbd659da29be6691b0fabe3b8b6fc744541ad593fd304cf6103bcc4cca3d30790964517c372272541fe7a4e3a887ff5d155c9ad62ad46f1e06c19a485e7a5af0a9ecfb48c1"}}, {0xe6, &(0x7f0000001600)=@string={0xe6, 0x3, "0e4a72780c04acb9d30a795a377a61946d228ea3370feaa81b086c5a6ec6fb0357d924c52ed9b8482b8703bdbec597abe9ac078c94fd38c8d6b1f425ff31c71cf86799638d3f41d939bfc5aeccf76675b80113f55c70a40b52a777ec6f9624cd92301d9716ab681c348cca43c796674af3d2c5ee6c908b7dc8835576e5d5d3ed7cca8d72e1be2bb7b899ae977498fb9cdfe267d84140d90cfb409da736085b57ddbde9ad2747194e28ab7db21d5f7a8274d2242cd86136e1ef4c4b7bddaab0aa849ce9c9659d29879001cc09984d7717c4b234f94cca907bad115149bbb1b970fe3e69c2"}}]}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000, 0x40}, 0x94) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.372659838s ago: executing program 4 (id=1784): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x150, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe0e5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x90, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf04414605200a", 0xe9}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0xff95}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$media(&(0x7f0000000080), 0x47f, 0x400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000001c0)={0x80000000, 0x0, &(0x7f0000002c40)}) openat$mice(0xffffffffffffff9c, 0x0, 0x101042) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.288712935s ago: executing program 2 (id=1785): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000100001"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.019708606s ago: executing program 3 (id=1786): modify_ldt$read(0x0, &(0x7f0000000000)=""/245, 0xf5) r0 = semget(0x3, 0x2, 0x86e) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000100)=""/4096) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001100)={0x2, 0x4e21, @multicast2}, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000001140)={[{0x2, 0x1, 0x7, 0x7, 0x4, 0x2, 0x2, 0x3, 0x2, 0x7, 0x4, 0x14, 0x7fff}, {0x1, 0x6, 0x1, 0x7, 0x3, 0x28, 0x61, 0x4, 0x0, 0x2, 0x7f, 0x0, 0x3}, {0x2, 0x6, 0x7, 0x2, 0xff, 0x7, 0xe, 0xfc, 0x9, 0x3, 0x0, 0xc0, 0x9}], 0x7}) modify_ldt$read(0x0, &(0x7f00000011c0)=""/119, 0x77) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001240)={0x1f, 0x2, 0x4}, 0x6) msgsnd(0x0, &(0x7f0000001280)={0x2, "da8796a7fd2a17bffd08dda8e786f5e705de49f15ca6643df0113be0fe9b66f9351b35c08fd5b10a4469bb36dc42cb085784d1692078dcb9613944b21a2760070408557f0fe23074f16f57371f1963a16157262e13b12facfc416ae4f348eb9685f35d51c9767070a6b69e311024b051483072d1152ce529175bcfd9fcb43054784d29ba5010ec4533a4f2706db5aa4b1e6ec1935ae380094d67470df49500e96638f3009beac58ea4f34983d62ff11651de84261fdf8ddee9efcf891abd47ebd0c388cd17be89a775976e32d200da"}, 0xd7, 0x800) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001380)=[0x7fff, 0x4, 0x1, 0x3, 0xcc0, 0x0, 0x0, 0x1000]) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000013c0)=0x1, 0x4) modify_ldt$read(0x0, &(0x7f0000001400)=""/119, 0x77) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000014c0)={0x400, 0x7, {0x0}, {0xee01}, 0x6, 0x2}) sendmsg$nl_generic(r5, &(0x7f00000017c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001500)={0x248, 0x3c, 0x100, 0x70bd2d, 0x25dfdbff, {0x5}, [@generic="11ba915c9baec2eac64a05743cf8d49fc0c869f6518a3e8c5ee587288dc5632dfbfb0cb541c35931e2a06ca17d3a7c4d3d474fa366c43bf3fe977a999d237bc8f75e4914e0b492b2051f029451bd6b0da8357772c0ec667432", @generic="64eaef1139d535b927ac471f5b826affdf12d36b3517cc18c5feb1f60ca0b071f61ad8e05271cfd2b5b63f8f2074ac7d407c484323282f05cf4be962e2d7750bca60cc61caac2e8d40fda421dc6d46ee2077a94bd594646ae88fca77741b20e2726c0e0981fbe3c99108ab4ce23f76e1f722a15411d120b9688c42780d0b9922c564", @typed={0x8, 0x158, 0x0, 0x0, @fd=r1}, @nested={0xd4, 0xd0, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x4, 0xab}, @generic="6a4c1b98c5efb9b8bc735babcbc86e318c6a23fdb3e8b1240f5b8e7a50c83fe3238e87fa7e62bb8be2664b08c2ed197daf6d8691011fa667c77f1f267438b0b1a1f9a528841e776e2c4455a602093d3e1bf8f31ec334d64829a26ce9a8df1640c96dfa6fe26e8a9eab2a9852febd8c938faf315b03dd062df9fdef160cc5e59c65a24b9326090dc2dfbefbeae38290e162278c9bb605b7821385d99951a9efcb0a0bb3c60555ca481853cea1", @typed={0x14, 0x119, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r6}]}, @generic="a6eb1237da7ca22da21996090b50d4c0096f6d3933f4b950fbb8acebf166c65da3221de2f2593ec491e3e51b9d88a122db9dc388f170a09f6632ef40e453ed9ffe7d7f81bcd2a8fbb6ae630f167f9c63e9fd5f37fe3a3eb0d309da073f6c4c0eb27b14cd93df8b9dcd9ab3e0f9488d663ece8ed1286ade7b3fdf6e"]}, 0x248}, 0x1, 0x0, 0x0, 0x8000}, 0x40050) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000001840)={{@my=0x1, 0x4}, 0x1, 0x2}) r8 = add_key(&(0x7f0000001880)='syzkaller\x00', &(0x7f00000018c0)={'syz', 0x1}, &(0x7f0000001900)="2df8033e8f446121c85892c89db7679253f304103e534d3c0c62d1a1110966d41387940a7d6ae4892bec7f40c940f12d5a3aaefff7db16873021718e9e00ee5e195721405c7885f634214155ed8f4aa200910f8d44c5da0a6445ee63ff7260806886285fa6302b57f751022b14e006", 0x6f, 0xfffffffffffffff9) r9 = add_key$fscrypt_v1(&(0x7f0000001980), &(0x7f00000019c0)={'fscrypt:', @auto=[0x37, 0x61, 0x39, 0x33, 0x3e, 0x39, 0x53, 0x62, 0x65, 0x39, 0x63, 0x39, 0x7faec5b1f2c5696a, 0x66, 0x33, 0x30]}, &(0x7f0000001a00)={0x0, "56ce1934a6ccb0e9942de2dff3de2b65dd348a7935ae081899ac89ad650f55e4b67f06cd9511695ab5826bf75c12788c29489d0640dfc342764a2e98c9b9df8e", 0x20}, 0x48, 0xfffffffffffffffd) r10 = add_key$keyring(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r8, r9, r10, 0x0) modify_ldt$read(0x0, &(0x7f0000001b00)=""/4096, 0x1000) write$bt_hci(r4, &(0x7f0000002b00)={0x1, @auth_requested={{0x411, 0x2}, {0xc8}}}, 0x6) r11 = msgget$private(0x0, 0x11) msgctl$IPC_STAT(r11, 0x2, &(0x7f0000002b40)=""/169) semctl$IPC_RMID(r0, 0x0, 0x0) keyctl$instantiate(0xc, r10, &(0x7f0000002c00)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '', 0x20, 0x3}, 0x2b, r8) 729.390523ms ago: executing program 3 (id=1787): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00005a1000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0xf) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r2, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x800) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) 434.825498ms ago: executing program 2 (id=1788): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000001000)={r3, 0x400}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0xcca, 0x7}, &(0x7f0000000040)=0xc) setreuid(0x0, 0xee01) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 275.65393ms ago: executing program 2 (id=1789): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{}, {0xfe, @none}}}, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=r0, @ANYRESDEC, @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffff6, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x24c01, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="48000000140081fb7059ae08060c040002ff0fe78f00c6627326c5c39f113c6e00000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200", 0x48}], 0x1}, 0x0) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000480)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)}) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r7, r7, 0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r4, &(0x7f00000007c0)="8bcbfe7dec54bd", 0x7, 0x6}]) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = dup(r8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r9, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) 236.261062ms ago: executing program 4 (id=1790): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$smc(&(0x7f00000056c0), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000076c0)={0x0, 0x0, &(0x7f0000007680)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000000)="24d7f783afe2b5868eba253044b34068a7b0e6bc07de2877260792a662190c12ae9d776fdd1260fb3ecf1970ffbe738a597fe012e201c9c37a90e95a4e58743c92f69d4a7ffc7a91c480bdb1e7f60553ed319d757e1dc4eadf356a1457ad2c10461e373d92305c25b3c0343e1557db3cf4882bb6fbc94fa57228ddac1d7d177fb683bd6abd49369bfdb7fdc2a4a9cd9495a9bdc8", &(0x7f00000000c0)=""/236, &(0x7f00000001c0)="c8402138961bac79", &(0x7f0000000200)="a20b996711b853877068d6da02d407fc58195d9a80037d6bdf3b33386b12c7b45cf166a0af17639898c40a40ceda8c8709a4ebfcf239fc5187655e0293064bc3d32c2a02e7f118e1c576c9e8ed033f8267f5f4a8023ac2900cda4f2e54d651b06cf47aeaa0640acb9a393c495583eb1896da2c55bd64186cef250c329bd14c4977fd8f6412eff394b3e8bd521228ff5eebf77f34e0ebc415ca36c88a31852052d1603659d9a22e03ab2f2dab75f33c2a9ecb0ac73d1eb34f9c287e60146569939d51c0769343183622a021f4c09887", 0x5, r1, 0x4}, 0x38) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000340)=""/29) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) syz_usb_connect(0x1, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000307cc5708eb0404e0dd7b010203010902120201ad067064090439ff0020e4d540"], &(0x7f0000001000)={0x0, 0x0, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="2907e1c900"/15], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 185.18516ms ago: executing program 3 (id=1791): pipe(&(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x0, 0x2000000}) 133.543088ms ago: executing program 3 (id=1792): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000173000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) accept4$vsock_stream(r3, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000140)=0xffffffbb) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000480)={0x4, 0xffe, 0x201, 0x42000}, 0x10) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0x0, 0x0) 0s ago: executing program 3 (id=1793): syz_usb_connect$uac1(0x5, 0x79, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000010fd0704004000010203010902670003011448010904000000010100000a24010c0001000201020904f311610100000102000009040101010102000009050109ff03fee78107258504050180090402000001020000090402010101020000072401be08020025058209ff0700000000001004"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50042, 0x140) fanotify_mark(r4, 0x1, 0x8001008, r2, 0x0) fanotify_mark(r4, 0x1, 0x3c, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = fsopen(&(0x7f0000000340)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) kernel console output (not intermixed with test programs): 01][ T9926] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 374.584414][ T9926] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.584427][ T9926] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 374.584438][ T9926] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 374.584453][ T9926] ? reacquire_held_locks+0x104/0x190 [ 374.584469][ T9926] ? rt_spin_lock+0x1e0/0x400 [ 374.584487][ T9926] ? rt_spin_unlock+0x14f/0x200 [ 374.584511][ T9926] ? __pfx_current_check_access_path+0x10/0x10 [ 374.584524][ T9926] ? simple_lookup+0x12c/0x1c0 [ 374.584539][ T9926] ? lookup_one_qstr_excl+0x1d4/0x360 [ 374.584553][ T9926] tomoyo_path_mkdir+0xb0/0xf0 [ 374.584564][ T9926] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 374.584576][ T9926] ? __pfx_filename_create+0x10/0x10 [ 374.584592][ T9926] security_path_mkdir+0x169/0x350 [ 374.584606][ T9926] filename_mkdirat+0x204/0x520 [ 374.584622][ T9926] ? __pfx_filename_mkdirat+0x10/0x10 [ 374.584636][ T9926] ? do_getname+0x151/0x250 [ 374.584650][ T9926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.584662][ T9926] __se_sys_mkdirat+0x35/0x150 [ 374.584674][ T9926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.584685][ T9926] do_syscall_64+0x15f/0xf80 [ 374.584696][ T9926] ? trace_irq_disable+0x3b/0x140 [ 374.584708][ T9926] ? clear_bhb_loop+0x40/0x90 [ 374.584721][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.584731][ T9926] RIP: 0033:0x7f189533cdd9 [ 374.584756][ T9926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.584765][ T9926] RSP: 002b:00007f189352f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 374.584777][ T9926] RAX: ffffffffffffffda RBX: 00007f18955b6180 RCX: 00007f189533cdd9 [ 374.584785][ T9926] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 374.584791][ T9926] RBP: 00007f189352f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.584798][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.584804][ T9926] R13: 00007f18955b6218 R14: 00007f18955b6180 R15: 00007ffe834e2418 [ 374.584821][ T9926] [ 374.584832][ T9926] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.268468][ T9940] vcan0: tx address claim with different name [ 375.687244][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.687379][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.687573][ T9782] bridge_slave_0: entered allmulticast mode [ 375.799387][ T5737] usb 2-1: USB disconnect, device number 41 [ 375.844847][ T9782] bridge_slave_0: entered promiscuous mode [ 375.984772][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 376.037783][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 376.116140][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.116255][ T9782] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.116483][ T9782] bridge_slave_1: entered allmulticast mode [ 376.138495][ T9782] bridge_slave_1: entered promiscuous mode [ 376.549110][ T37] audit: type=1804 audit(1777826410.743:127): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1465" name="bus" dev="ramfs" ino=24185 res=1 errno=0 [ 376.549163][ T37] audit: type=1804 audit(1777826410.743:128): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1465" name="bus" dev="ramfs" ino=24185 res=1 errno=0 [ 377.053356][ T5854] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 377.223585][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 377.226527][ T5854] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.228351][ T5854] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 377.232146][ T5854] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 377.232177][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.232197][ T5854] usb 4-1: Product: syz [ 377.232212][ T5854] usb 4-1: Manufacturer: syz [ 377.232226][ T5854] usb 4-1: SerialNumber: syz [ 377.420920][ T9990] vcan0: tx address claim with different name [ 377.533922][ T5854] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 377.542774][ T5854] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 378.206201][ T1068] hsr_slave_0: left promiscuous mode [ 378.243769][ T1068] hsr_slave_1: left promiscuous mode [ 378.244847][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.244873][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.306474][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.306494][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.405120][ T1068] veth1_macvtap: left promiscuous mode [ 378.407440][ T1068] veth0_macvtap: left promiscuous mode [ 378.407591][ T1068] veth1_vlan: left promiscuous mode [ 378.407684][ T1068] veth0_vlan: left promiscuous mode [ 378.435580][ T5854] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 378.563359][ T5722] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 378.595848][ T5854] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 378.595866][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.595877][ T5854] usb 1-1: Product: syz [ 378.595884][ T5854] usb 1-1: Manufacturer: syz [ 378.595892][ T5854] usb 1-1: SerialNumber: syz [ 378.635568][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.635644][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.726617][ T5722] usb 5-1: Using ep0 maxpacket: 16 [ 378.732654][ T5722] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.732689][ T5722] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 378.732714][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.732746][ T5722] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 378.732768][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.777913][ T5722] usb 5-1: config 0 descriptor?? [ 379.061921][ T5854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 379.061979][ T5854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 379.843306][ T5737] usb 4-1: USB disconnect, device number 45 [ 380.100846][ T5854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 380.100902][ T5854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 380.223776][ T5854] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 380.257246][ T5854] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 380.334888][ T5854] usb 1-1: USB disconnect, device number 55 [ 381.143446][ T5854] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 381.311624][ T5854] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 381.311651][ T5854] usb 4-1: config 0 has no interface number 0 [ 381.311702][ T5854] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 381.311728][ T5854] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.333970][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 381.362427][ T5854] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 381.362451][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.362470][ T5854] usb 4-1: Product: syz [ 381.362483][ T5854] usb 4-1: Manufacturer: syz [ 381.362497][ T5854] usb 4-1: SerialNumber: syz [ 381.427169][ T1068] team0 (unregistering): Port device team_slave_1 removed [ 381.427558][ T5854] usb 4-1: config 0 descriptor?? [ 381.434613][T10004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 381.477978][ T5722] usbhid 5-1:0.0: can't add hid device: -71 [ 381.478099][ T5722] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 381.494197][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 381.496652][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 381.496679][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.570961][ T5854] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 381.572054][ T5722] usb 5-1: USB disconnect, device number 52 [ 381.610313][ T5854] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 381.629579][ T10] usb 1-1: config 0 descriptor?? [ 381.766582][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 381.804666][ T1068] team0 (unregistering): Port device team_slave_0 removed [ 381.879915][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 381.905737][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.906573][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 381.906627][ T10] usb 1-1: media controller created [ 381.991178][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.117900][ T10] DVB: Unable to find symbol dib7000p_attach() [ 382.117972][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 382.243406][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 382.243427][ T10] Registered IR keymap rc-empty [ 382.788601][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 382.924824][ T9782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.035489][ T9782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.109154][ T36] usb 4-1: USB disconnect, device number 46 [ 383.173806][ T36] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 383.174669][ T36] cyberjack 4-1:0.69: device disconnected [ 383.559499][ T9782] team0: Port device team_slave_0 added [ 383.576555][ T9782] team0: Port device team_slave_1 added [ 384.774367][T10031] vcan0: tx address claim with dest, not broadcast [ 386.942496][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.942513][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.942539][ T9782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.166178][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.166195][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.166222][ T9782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.215866][ T10] dvb-usb: could not initialize remote control. [ 387.215882][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 387.386409][ T5723] usb 1-1: USB disconnect, device number 56 [ 387.481121][ T9782] hsr_slave_0: entered promiscuous mode [ 387.524924][ T9782] hsr_slave_1: entered promiscuous mode [ 387.526002][ T9782] debugfs: 'hsr0' already exists in 'hsr' [ 387.526026][ T9782] Cannot create hsr debugfs directory [ 387.908039][ T5723] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 388.223820][T10060] netlink: 'syz.0.1485': attribute type 4 has an invalid length. [ 388.274406][T10064] netlink: 'syz.0.1485': attribute type 4 has an invalid length. [ 388.623379][ T5723] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 388.766479][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 388.830009][ T5723] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 388.830036][ T5723] usb 2-1: config 0 has no interface number 0 [ 388.830078][ T5723] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 388.830116][ T5723] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.878601][ T5723] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 388.878630][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.878649][ T5723] usb 2-1: Product: syz [ 388.878662][ T5723] usb 2-1: Manufacturer: syz [ 388.878676][ T5723] usb 2-1: SerialNumber: syz [ 388.923486][ T5723] usb 2-1: config 0 descriptor?? [ 388.931361][T10075] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.961405][ T5723] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 389.465647][ T5723] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 390.802910][ T36] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 390.984177][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 390.987173][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 391.052242][ T36] usb 5-1: config 1 has an invalid interface number: 243 but max is 2 [ 391.052269][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.052288][ T36] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 391.052307][ T36] usb 5-1: config 1 has no interface number 1 [ 391.052350][ T36] usb 5-1: too many endpoints for config 1 interface 243 altsetting 17: 97, using maximum allowed: 30 [ 391.052393][ T36] usb 5-1: config 1 interface 243 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 391.052419][ T36] usb 5-1: config 1 interface 243 has no altsetting 0 [ 391.224410][ T36] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 391.224441][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.224461][ T36] usb 5-1: Product: syz [ 391.224475][ T36] usb 5-1: Manufacturer: syz [ 391.224489][ T36] usb 5-1: SerialNumber: syz [ 391.346069][ T5723] usb 2-1: USB disconnect, device number 42 [ 391.452752][T10105] FAULT_INJECTION: forcing a failure. [ 391.452752][T10105] name failslab, interval 1, probability 0, space 0, times 0 [ 391.452794][T10105] CPU: 1 UID: 0 PID: 10105 Comm: syz.3.1492 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 391.452820][T10105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.452833][T10105] Call Trace: [ 391.452841][T10105] [ 391.452849][T10105] dump_stack_lvl+0xe8/0x150 [ 391.452880][T10105] should_fail_ex+0x46b/0x600 [ 391.452915][T10105] should_failslab+0xa8/0x100 [ 391.452941][T10105] kmem_cache_alloc_noprof+0x87/0x680 [ 391.452963][T10105] ? __netlink_lookup+0xc6/0x8b0 [ 391.452988][T10105] ? skb_clone+0x212/0x3a0 [ 391.453017][T10105] skb_clone+0x212/0x3a0 [ 391.453045][T10105] __netlink_deliver_tap+0x404/0x850 [ 391.453081][T10105] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.453106][T10105] netlink_deliver_tap+0x19c/0x1b0 [ 391.453132][T10105] netlink_unicast+0x754/0x920 [ 391.453163][T10105] netlink_sendmsg+0x813/0xb40 [ 391.453194][T10105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.453216][T10105] ? unwind_get_return_address+0x4d/0x90 [ 391.453244][T10105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.453266][T10105] ____sys_sendmsg+0x94c/0x9c0 [ 391.453294][T10105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.453325][T10105] ? import_iovec+0x73/0xa0 [ 391.453349][T10105] ___sys_sendmsg+0x2a5/0x360 [ 391.453372][T10105] ? __lock_acquire+0x6b5/0x2cf0 [ 391.453402][T10105] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.453463][T10105] ? __fget_files+0x2a/0x420 [ 391.453481][T10105] ? __fget_files+0x3a6/0x420 [ 391.453508][T10105] __x64_sys_sendmsg+0x1c3/0x2a0 [ 391.453534][T10105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.453568][T10105] ? __pfx_ksys_write+0x10/0x10 [ 391.453596][T10105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.453616][T10105] do_syscall_64+0x15f/0xf80 [ 391.453638][T10105] ? trace_irq_disable+0x3b/0x140 [ 391.453660][T10105] ? clear_bhb_loop+0x40/0x90 [ 391.453683][T10105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.453702][T10105] RIP: 0033:0x7f4458dccdd9 [ 391.453722][T10105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.453738][T10105] RSP: 002b:00007f445701e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.453767][T10105] RAX: ffffffffffffffda RBX: 00007f4459045fa0 RCX: 00007f4458dccdd9 [ 391.453780][T10105] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 391.453791][T10105] RBP: 00007f445701e090 R08: 0000000000000000 R09: 0000000000000000 [ 391.453802][T10105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.453813][T10105] R13: 00007f4459046038 R14: 00007f4459045fa0 R15: 00007ffd023b6068 [ 391.453842][T10105] [ 391.481079][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 391.493114][ T5723] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 391.503750][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1493'. [ 391.503774][T10104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1493'. [ 391.508921][ T5723] cyberjack 2-1:0.69: device disconnected [ 392.112848][ T36] usb 5-1: 0:1 : does not exist [ 392.112873][ T36] usb 5-1: 0:2 : does not exist [ 392.238424][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 392.330633][T10114] FAULT_INJECTION: forcing a failure. [ 392.330633][T10114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.338034][T10114] CPU: 1 UID: 0 PID: 10114 Comm: syz.3.1494 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.338063][T10114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 392.338075][T10114] Call Trace: [ 392.338083][T10114] [ 392.338092][T10114] dump_stack_lvl+0xe8/0x150 [ 392.338123][T10114] should_fail_ex+0x46b/0x600 [ 392.338160][T10114] fpu__restore_sig+0x213/0x1170 [ 392.338189][T10114] ? __pfx_fpu__restore_sig+0x10/0x10 [ 392.338236][T10114] __ia32_sys_rt_sigreturn+0x777/0x8e0 [ 392.338258][T10114] ? __lock_acquire+0x6b5/0x2cf0 [ 392.338291][T10114] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 392.338338][T10114] ? __task_pid_nr_ns+0x28/0x470 [ 392.338370][T10114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.338391][T10114] do_syscall_64+0x15f/0xf80 [ 392.338415][T10114] ? clear_bhb_loop+0x40/0x90 [ 392.338440][T10114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.338459][T10114] RIP: 0033:0x7f4458dccdd7 [ 392.338485][T10114] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 392.338501][T10114] RSP: 002b:00007f4456ffd028 EFLAGS: 00000246 [ 392.338519][T10114] RAX: 0000000000000000 RBX: 00007f4459046090 RCX: 00007f4458dccdd9 [ 392.338532][T10114] RDX: 0000000000000023 RSI: 0000200000000000 RDI: 0000000000000004 [ 392.338545][T10114] RBP: 00007f4456ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 392.338557][T10114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.338569][T10114] R13: 00007f4459046128 R14: 00007f4459046090 R15: 00007ffd023b6068 [ 392.338600][T10114] [ 392.566747][ T36] usb 5-1: USB disconnect, device number 53 [ 392.776732][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.949554][T10120] FAULT_INJECTION: forcing a failure. [ 392.949554][T10120] name failslab, interval 1, probability 0, space 0, times 0 [ 392.949589][T10120] CPU: 0 UID: 0 PID: 10120 Comm: syz.3.1496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.949610][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 392.949622][T10120] Call Trace: [ 392.949630][T10120] [ 392.949639][T10120] dump_stack_lvl+0xe8/0x150 [ 392.949664][T10120] should_fail_ex+0x46b/0x600 [ 392.949697][T10120] should_failslab+0xa8/0x100 [ 392.949720][T10120] __kmalloc_noprof+0xdf/0x7b0 [ 392.949742][T10120] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 392.949774][T10120] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 392.949801][T10120] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 392.949825][T10120] genl_family_rcv_msg_doit+0xd9/0x330 [ 392.949854][T10120] ? __asan_memcpy+0x40/0x70 [ 392.949886][T10120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 392.949914][T10120] ? rcu_is_watching+0x15/0xb0 [ 392.949944][T10120] ? rcu_is_watching+0x15/0xb0 [ 392.949971][T10120] ? cap_capable+0x123/0x460 [ 392.949995][T10120] ? safesetid_security_capable+0xa9/0x1a0 [ 392.950022][T10120] ? bpf_lsm_capable+0x9/0x20 [ 392.950046][T10120] ? security_capable+0x7e/0x2c0 [ 392.950079][T10120] genl_rcv_msg+0x61c/0x7a0 [ 392.950115][T10120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.950141][T10120] ? ref_tracker_free+0x673/0x820 [ 392.950159][T10120] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 392.950188][T10120] ? __pfx_ref_tracker_free+0x10/0x10 [ 392.950204][T10120] ? __asan_memcpy+0x40/0x70 [ 392.950228][T10120] ? __skb_clone+0x63/0x7a0 [ 392.950257][T10120] netlink_rcv_skb+0x232/0x4b0 [ 392.950281][T10120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.950311][T10120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.950347][T10120] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.950369][T10120] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.950395][T10120] genl_rcv+0x28/0x40 [ 392.950422][T10120] netlink_unicast+0x780/0x920 [ 392.950461][T10120] netlink_sendmsg+0x813/0xb40 [ 392.950491][T10120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.950518][T10120] ? unwind_get_return_address+0x4d/0x90 [ 392.950549][T10120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.950574][T10120] ____sys_sendmsg+0x94c/0x9c0 [ 392.950610][T10120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.950645][T10120] ? import_iovec+0x73/0xa0 [ 392.950672][T10120] ___sys_sendmsg+0x2a5/0x360 [ 392.950695][T10120] ? __lock_acquire+0x6b5/0x2cf0 [ 392.950723][T10120] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.950785][T10120] ? __fget_files+0x2a/0x420 [ 392.950803][T10120] ? __fget_files+0x3a6/0x420 [ 392.950832][T10120] __x64_sys_sendmsg+0x1c3/0x2a0 [ 392.950860][T10120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.950896][T10120] ? __pfx_ksys_write+0x10/0x10 [ 392.950928][T10120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.950949][T10120] do_syscall_64+0x15f/0xf80 [ 392.950971][T10120] ? trace_irq_disable+0x3b/0x140 [ 392.950994][T10120] ? clear_bhb_loop+0x40/0x90 [ 392.951019][T10120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.951039][T10120] RIP: 0033:0x7f4458dccdd9 [ 392.951059][T10120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.951076][T10120] RSP: 002b:00007f445701e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.951097][T10120] RAX: ffffffffffffffda RBX: 00007f4459045fa0 RCX: 00007f4458dccdd9 [ 392.951112][T10120] RDX: 0000000004000000 RSI: 0000200000000540 RDI: 000000000000001a [ 392.951126][T10120] RBP: 00007f445701e090 R08: 0000000000000000 R09: 0000000000000000 [ 392.951139][T10120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.951151][T10120] R13: 00007f4459046038 R14: 00007f4459045fa0 R15: 00007ffd023b6068 [ 392.951183][T10120] [ 393.763351][ T5737] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 393.913492][ T5737] usb 1-1: Using ep0 maxpacket: 16 [ 393.916352][ T5737] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.916419][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.916445][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 393.916467][ T5737] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 393.916488][ T5737] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.919494][ T5737] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 393.919522][ T5737] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 393.919541][ T5737] usb 1-1: Manufacturer: syz [ 394.019696][ T5737] usb 1-1: config 0 descriptor?? [ 394.494937][T10145] netlink: 'syz.4.1503': attribute type 16 has an invalid length. [ 394.494958][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 394.827652][T10159] FAULT_INJECTION: forcing a failure. [ 394.827652][T10159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.827696][T10159] CPU: 0 UID: 0 PID: 10159 Comm: syz.1.1505 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 394.827719][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.827732][T10159] Call Trace: [ 394.827739][T10159] [ 394.827748][T10159] dump_stack_lvl+0xe8/0x150 [ 394.827777][T10159] should_fail_ex+0x46b/0x600 [ 394.827814][T10159] _copy_from_iter+0x1d3/0x1670 [ 394.827840][T10159] ? trace_kmem_cache_alloc+0x29/0xe0 [ 394.827861][T10159] ? __alloc_skb+0x27d/0x7d0 [ 394.827883][T10159] ? __pfx__copy_from_iter+0x10/0x10 [ 394.827899][T10159] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 394.827920][T10159] ? __alloc_skb+0x27d/0x7d0 [ 394.827946][T10159] ? netlink_sendmsg+0x650/0xb40 [ 394.827968][T10159] ? skb_put+0x11b/0x210 [ 394.827993][T10159] netlink_sendmsg+0x6c0/0xb40 [ 394.828025][T10159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.828050][T10159] ? update_curr+0x75/0x4e0 [ 394.828079][T10159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.828110][T10159] ____sys_sendmsg+0x94c/0x9c0 [ 394.828140][T10159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.828176][T10159] ? import_iovec+0x73/0xa0 [ 394.828201][T10159] ___sys_sendmsg+0x2a5/0x360 [ 394.828224][T10159] ? __lock_acquire+0x6b5/0x2cf0 [ 394.828253][T10159] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.828315][T10159] ? __fget_files+0x2a/0x420 [ 394.828333][T10159] ? __fget_files+0x3a6/0x420 [ 394.828361][T10159] __x64_sys_sendmsg+0x1c3/0x2a0 [ 394.828389][T10159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.828423][T10159] ? __pfx_ksys_write+0x10/0x10 [ 394.828452][T10159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.828473][T10159] do_syscall_64+0x15f/0xf80 [ 394.828503][T10159] ? clear_bhb_loop+0x40/0x90 [ 394.828526][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.828545][T10159] RIP: 0033:0x7fd93971cdd9 [ 394.828562][T10159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.828579][T10159] RSP: 002b:00007fd93796e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.828599][T10159] RAX: ffffffffffffffda RBX: 00007fd939995fa0 RCX: 00007fd93971cdd9 [ 394.828613][T10159] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 394.828625][T10159] RBP: 00007fd93796e090 R08: 0000000000000000 R09: 0000000000000000 [ 394.828637][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.828649][T10159] R13: 00007fd939996038 R14: 00007fd939995fa0 R15: 00007ffc92d151e8 [ 394.828680][T10159] [ 395.247439][ T36] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 395.450106][ T36] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 395.450131][ T36] usb 4-1: config 0 has no interface number 0 [ 395.450256][ T36] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 395.450413][ T36] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.452963][ T36] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 395.452990][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.453061][ T36] usb 4-1: Product: syz [ 395.453077][ T36] usb 4-1: Manufacturer: syz [ 395.453091][ T36] usb 4-1: SerialNumber: syz [ 395.558660][ T36] usb 4-1: config 0 descriptor?? [ 395.561304][T10141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 395.588135][ T36] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 395.635381][ T36] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 396.254760][ T951] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 396.418738][ T951] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 396.418757][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.418767][ T951] usb 2-1: Product: syz [ 396.418775][ T951] usb 2-1: Manufacturer: syz [ 396.418782][ T951] usb 2-1: SerialNumber: syz [ 396.803551][ T5737] rc_core: IR keymap rc-hauppauge not found [ 396.803573][ T5737] Registered IR keymap rc-empty [ 396.803865][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 396.831777][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 396.932487][ T951] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 396.932531][ T951] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 396.986748][ T5737] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 397.583849][ T5737] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 398.088178][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.115468][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.133480][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.168341][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.193977][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.195701][ T5610] usb 4-1: USB disconnect, device number 47 [ 398.214309][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.250490][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.274019][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.293596][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.324236][ T5737] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 398.368119][ T5610] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 398.370817][ T951] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 398.370867][ T951] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 398.371357][ T951] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 398.432847][ T5737] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 398.432873][ T5737] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 398.449392][ T951] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 398.482377][ T5737] usb 1-1: USB disconnect, device number 57 [ 398.500254][ T5610] cyberjack 4-1:0.69: device disconnected [ 398.537332][ T951] usb 2-1: USB disconnect, device number 43 [ 399.304061][ T5737] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 399.903453][ T5737] usb 4-1: Using ep0 maxpacket: 32 [ 399.905351][ T5737] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.905386][ T5737] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.907460][ T5737] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 399.907490][ T5737] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 399.907510][ T5737] usb 4-1: Product: syz [ 399.907523][ T5737] usb 4-1: Manufacturer: syz [ 400.004250][ T5737] hub 4-1:4.0: USB hub found [ 400.254889][ T5737] hub 4-1:4.0: 1 port detected [ 400.546724][ T5737] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 400.546750][ T5737] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 400.740200][ T5737] usb 4-1: USB disconnect, device number 48 [ 400.783449][ T5705] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 400.879562][ T9782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.946907][ T9782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.963718][ T9782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.973694][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 400.975875][ T5705] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 400.975899][ T5705] usb 5-1: config 0 has no interface number 0 [ 400.975941][ T5705] usb 5-1: config 0 interface 184 has no altsetting 0 [ 400.978672][ T5705] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 400.978697][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.978724][ T5705] usb 5-1: Product: syz [ 400.978737][ T5705] usb 5-1: Manufacturer: syz [ 400.978750][ T5705] usb 5-1: SerialNumber: syz [ 400.987244][ T5705] usb 5-1: config 0 descriptor?? [ 401.079569][ T9782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.080972][ T9782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.152326][ T9782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.165451][ T9782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.366543][ T9782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.566282][ T951] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 401.665657][ T5705] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 401.665688][ T5705] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 401.715857][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 401.720045][ T951] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 401.720074][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.759275][ T951] usb 1-1: config 0 descriptor?? [ 401.775092][ T951] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 401.803440][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 401.958747][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 401.962403][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.962458][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.962554][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 401.962576][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 401.962598][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.968232][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 401.968261][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 401.969262][ T10] usb 2-1: Manufacturer: syz [ 402.017856][ T10] usb 2-1: config 0 descriptor?? [ 402.478889][ T5705] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 402.478968][ T5705] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 402.478989][ T5705] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 402.479381][ T5705] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 402.500315][ T5610] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 402.664313][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.686768][ T5610] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 402.686795][ T5610] usb 4-1: config 0 has no interface number 0 [ 402.686837][ T5610] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 402.687247][ T5610] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.735452][ T5610] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 402.735482][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.735555][ T5610] usb 4-1: Product: syz [ 402.735569][ T5610] usb 4-1: Manufacturer: syz [ 402.735623][ T5610] usb 4-1: SerialNumber: syz [ 402.814973][ T5610] usb 4-1: config 0 descriptor?? [ 402.818336][T10248] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 402.848216][ T5610] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 402.910585][ T5610] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 403.019332][ T5705] usb 1-1: USB disconnect, device number 58 [ 403.218539][ T9782] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.727286][ T1759] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.777003][ T1759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.827693][ T5610] usb 5-1: USB disconnect, device number 54 [ 405.513976][ T1759] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.514117][ T1759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.461784][ T5830] usb 4-1: USB disconnect, device number 49 [ 407.495280][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 407.514405][ T10] rc_core: IR keymap rc-hauppauge not found [ 407.514426][ T10] Registered IR keymap rc-empty [ 407.514580][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.540551][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.545280][ T5830] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 407.583963][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 407.593133][ T5830] cyberjack 4-1:0.69: device disconnected [ 407.753861][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input40 [ 407.774479][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.818133][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.836618][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.855636][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.873409][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.877736][T10273] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 407.893429][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.917724][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.934403][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.953471][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 407.973541][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.027965][ T10] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 408.027989][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 408.098054][ T10] usb 2-1: USB disconnect, device number 44 [ 409.763465][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 409.914020][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 409.919117][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 409.919147][ T10] usb 2-1: config 0 has no interface number 0 [ 409.919191][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 409.926780][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 409.926808][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.926828][ T10] usb 2-1: Product: syz [ 409.926841][ T10] usb 2-1: Manufacturer: syz [ 409.926855][ T10] usb 2-1: SerialNumber: syz [ 409.933548][ T36] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 409.942579][ T10] usb 2-1: config 0 descriptor?? [ 410.123324][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 410.129078][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.129133][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.129160][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 410.129181][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 410.129203][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.132012][ T36] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 410.132041][ T36] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 410.132060][ T36] usb 4-1: Manufacturer: syz [ 410.221754][ T36] usb 4-1: config 0 descriptor?? [ 410.442663][ T9782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.600492][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 410.600524][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 411.226919][T10342] FAULT_INJECTION: forcing a failure. [ 411.226919][T10342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.226952][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.0.1543 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.226974][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.226986][T10342] Call Trace: [ 411.226993][T10342] [ 411.227001][T10342] dump_stack_lvl+0xe8/0x150 [ 411.227034][T10342] should_fail_ex+0x46b/0x600 [ 411.227069][T10342] _copy_from_user+0x2d/0xb0 [ 411.227091][T10342] sock_do_ioctl+0x195/0x320 [ 411.227120][T10342] ? __pfx_sock_do_ioctl+0x10/0x10 [ 411.227150][T10342] ? __asan_memset+0x22/0x50 [ 411.227178][T10342] ? smack_file_ioctl+0x263/0x360 [ 411.227208][T10342] sock_ioctl+0x5c9/0x7f0 [ 411.227237][T10342] ? __pfx_sock_ioctl+0x10/0x10 [ 411.227263][T10342] ? __fget_files+0x2a/0x420 [ 411.227278][T10342] ? __fget_files+0x3a6/0x420 [ 411.227294][T10342] ? __fget_files+0x2a/0x420 [ 411.227312][T10342] ? bpf_lsm_file_ioctl+0x9/0x20 [ 411.227333][T10342] ? __pfx_sock_ioctl+0x10/0x10 [ 411.227361][T10342] __se_sys_ioctl+0xff/0x170 [ 411.227381][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.227401][T10342] do_syscall_64+0x15f/0xf80 [ 411.227421][T10342] ? trace_irq_disable+0x3b/0x140 [ 411.227443][T10342] ? clear_bhb_loop+0x40/0x90 [ 411.227466][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.227484][T10342] RIP: 0033:0x7fcf1039cdd9 [ 411.227502][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.227520][T10342] RSP: 002b:00007fcf0e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.227540][T10342] RAX: ffffffffffffffda RBX: 00007fcf10615fa0 RCX: 00007fcf1039cdd9 [ 411.227555][T10342] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 411.227567][T10342] RBP: 00007fcf0e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.227579][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.227590][T10342] R13: 00007fcf10616038 R14: 00007fcf10615fa0 R15: 00007fff676d5a88 [ 411.227619][T10342] [ 411.417711][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 411.417740][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 411.417757][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 411.418130][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 411.588404][ T9782] veth0_vlan: entered promiscuous mode [ 411.638520][ T5854] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 411.660358][ T9782] veth1_vlan: entered promiscuous mode [ 411.825911][ T9782] veth0_macvtap: entered promiscuous mode [ 411.874844][ T5854] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 411.874872][ T5854] usb 5-1: config 0 has no interface number 0 [ 411.875295][ T5854] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 411.875323][ T5854] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.931422][ T5854] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 411.931452][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.931529][ T5854] usb 5-1: Product: syz [ 411.931543][ T5854] usb 5-1: Manufacturer: syz [ 411.931557][ T5854] usb 5-1: SerialNumber: syz [ 411.987390][ T5854] usb 5-1: config 0 descriptor?? [ 412.046475][T10340] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 412.072240][ T5854] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 412.118277][ T5854] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 412.146207][ T9782] veth1_macvtap: entered promiscuous mode [ 412.254856][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.286341][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.329812][ T1759] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.366802][ T1759] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.372081][ T1759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.391700][ T1759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.793760][ T5722] usb 2-1: USB disconnect, device number 45 [ 412.963425][ T36] rc_core: IR keymap rc-hauppauge not found [ 412.963449][ T36] Registered IR keymap rc-empty [ 412.963737][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 412.984128][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.097459][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 413.139987][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41 [ 413.219218][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.258038][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.283384][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.317952][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.333373][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.356619][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.374209][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.393389][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.413375][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.434181][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.535752][ T36] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 413.752583][ T36] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 414.169553][T10366] overlay: Unknown parameter '/' [ 414.243395][T10367] overlayfs: missing 'lowerdir' [ 415.114796][ T5722] usb 5-1: USB disconnect, device number 55 [ 415.173308][ T36] usb 4-1: USB disconnect, device number 50 [ 416.662838][ T5722] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 416.693362][ T5722] cyberjack 5-1:0.69: device disconnected [ 416.978257][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.978278][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.044302][T10390] netlink: 'syz.3.1556': attribute type 17 has an invalid length. [ 417.044324][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'. [ 417.109072][T10390] bond0: option all_slaves_active: invalid value (191) [ 417.169575][T10392] netlink: 'syz.1.1557': attribute type 16 has an invalid length. [ 417.169588][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 417.244810][ T951] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 417.374708][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.374727][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.424631][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 417.427085][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.427117][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 417.427132][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 417.427152][ T951] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 417.427164][ T951] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.428446][ T951] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 417.428464][ T951] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 417.428474][ T951] usb 1-1: Manufacturer: syz [ 417.446839][ T951] usb 1-1: config 0 descriptor?? [ 417.495643][ T36] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 417.683382][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 417.729925][ T36] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 417.729954][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.729973][ T36] usb 4-1: Product: syz [ 417.729987][ T36] usb 4-1: Manufacturer: syz [ 417.730002][ T36] usb 4-1: SerialNumber: syz [ 417.769589][ T36] usb 4-1: config 0 descriptor?? [ 417.818573][T10401] FAULT_INJECTION: forcing a failure. [ 417.818573][T10401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.819106][T10401] CPU: 1 UID: 0 PID: 10401 Comm: syz.2.1560 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 417.819133][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.819146][T10401] Call Trace: [ 417.819154][T10401] [ 417.819163][T10401] dump_stack_lvl+0xe8/0x150 [ 417.819193][T10401] should_fail_ex+0x46b/0x600 [ 417.819231][T10401] _copy_to_iter+0x404/0x17d0 [ 417.819279][T10401] ? __pfx__copy_to_iter+0x10/0x10 [ 417.819326][T10401] seq_read_iter+0xbf6/0xe20 [ 417.819370][T10401] seq_read+0x36a/0x490 [ 417.819391][T10401] ? kstrtoull+0x12f/0x1d0 [ 417.819426][T10401] ? __pfx_seq_read+0x10/0x10 [ 417.819456][T10401] ? __import_iovec+0x40e/0x7e0 [ 417.819487][T10401] ? __pfx_seq_read+0x10/0x10 [ 417.819509][T10401] proc_reg_read+0x1f6/0x2f0 [ 417.819536][T10401] vfs_readv+0x597/0x850 [ 417.819566][T10401] ? __pfx_proc_reg_read+0x10/0x10 [ 417.819598][T10401] ? __pfx_vfs_readv+0x10/0x10 [ 417.819640][T10401] ? __fget_files+0x2a/0x420 [ 417.819662][T10401] ? __fget_files+0x3a6/0x420 [ 417.819679][T10401] ? __fget_files+0x2a/0x420 [ 417.819705][T10401] __x64_sys_preadv+0x1a2/0x2b0 [ 417.819734][T10401] ? __pfx___x64_sys_preadv+0x10/0x10 [ 417.819767][T10401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.819790][T10401] do_syscall_64+0x15f/0xf80 [ 417.819814][T10401] ? clear_bhb_loop+0x40/0x90 [ 417.819839][T10401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.819859][T10401] RIP: 0033:0x7fe20729cdd9 [ 417.819879][T10401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.819896][T10401] RSP: 002b:00007fe2054f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 417.819917][T10401] RAX: ffffffffffffffda RBX: 00007fe207515fa0 RCX: 00007fe20729cdd9 [ 417.819930][T10401] RDX: 0000000000000002 RSI: 00002000000027c0 RDI: 0000000000000006 [ 417.819943][T10401] RBP: 00007fe2054f6090 R08: 000000000000051b R09: 0000000000000000 [ 417.819955][T10401] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 417.819968][T10401] R13: 00007fe207516038 R14: 00007fe207515fa0 R15: 00007fff6480a9c8 [ 417.820001][T10401] [ 417.827058][ T951] rc_core: IR keymap rc-hauppauge not found [ 417.827077][ T951] Registered IR keymap rc-empty [ 417.827406][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 417.850541][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 417.899986][ T951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 417.944425][ T951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 418.103527][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.129885][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.157462][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.183995][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.203428][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.236136][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.255370][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.278551][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.289531][ T36] airspy 4-1:0.0: Board ID: 00 [ 418.289552][ T36] airspy 4-1:0.0: Firmware version: [ 418.310593][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.341386][ T951] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 418.362607][ T951] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 418.362631][ T951] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 418.387309][ T951] usb 1-1: USB disconnect, device number 59 [ 418.424904][ T5857] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 418.553653][ T5857] usb 5-1: device descriptor read/64, error -71 [ 418.887900][T10414] 8021q: VLANs not supported on ipvlan0 [ 419.438104][ T36] airspy 4-1:0.0: usb_control_msg() failed -32 request 0f [ 419.443122][ T36] airspy 4-1:0.0: Registered as swradio24 [ 419.443137][ T36] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 419.555949][ T5857] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 419.717192][ T5857] usb 5-1: device descriptor read/64, error -71 [ 420.364325][ T5857] usb usb5-port1: attempt power cycle [ 420.706537][ T5857] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 420.754412][ T5857] usb 5-1: device descriptor read/8, error -71 [ 421.263825][ T5857] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 421.306135][ T5857] usb 5-1: device descriptor read/8, error -71 [ 421.712819][ T5857] usb usb5-port1: unable to enumerate USB device [ 421.816077][T10433] netlink: 'syz.1.1568': attribute type 16 has an invalid length. [ 421.816099][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 421.907270][ T36] usb 4-1: USB disconnect, device number 51 [ 422.302463][T10446] fuse: Unknown parameter 'f' [ 424.373151][ T5600] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 425.982701][T10475] netlink: 'syz.0.1583': attribute type 16 has an invalid length. [ 425.982723][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 426.107472][ T5857] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 426.272226][ T5857] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 426.272255][ T5857] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 426.272275][ T5857] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 426.272294][ T5857] usb 5-1: config 220 has no interface number 2 [ 426.272361][ T5857] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 426.272386][ T5857] usb 5-1: config 220 interface 0 has no altsetting 0 [ 426.272404][ T5857] usb 5-1: config 220 interface 76 has no altsetting 0 [ 426.272422][ T5857] usb 5-1: config 220 interface 1 has no altsetting 0 [ 426.312405][ T5857] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 426.312435][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.312454][ T5857] usb 5-1: Product: syz [ 426.312467][ T5857] usb 5-1: Manufacturer: syz [ 426.312481][ T5857] usb 5-1: SerialNumber: syz [ 427.725882][ T5857] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 427.725914][ T5857] uvcvideo 5-1:220.0: No valid video chain found. [ 427.725974][ T5857] usb 5-1: selecting invalid altsetting 0 [ 427.792081][ T5857] usb 5-1: selecting invalid altsetting 0 [ 427.792116][ T5857] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 427.810305][ T5857] usb 5-1: USB disconnect, device number 60 [ 428.153731][ T5722] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 428.322189][ T5722] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 428.322225][ T5722] usb 3-1: can't read configurations, error -61 [ 428.526472][ T5600] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 428.578544][ T5600] Bluetooth: hci2: Injecting HCI hardware error event [ 428.788385][ T5600] Bluetooth: hci2: hardware error 0x00 [ 429.128613][T10506] netlink: 'syz.0.1593': attribute type 16 has an invalid length. [ 429.128635][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 429.353459][ T5722] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 429.471845][T10513] netlink: 'syz.4.1595': attribute type 16 has an invalid length. [ 429.471867][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 429.507541][ T5722] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 429.507580][ T5722] usb 3-1: can't read configurations, error -61 [ 429.508202][ T5722] usb usb3-port1: attempt power cycle [ 429.638658][ T5857] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 429.813960][ T5857] usb 2-1: device descriptor read/64, error -71 [ 430.163407][ T5722] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 430.187001][ T5722] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 430.187038][ T5722] usb 3-1: can't read configurations, error -61 [ 430.234481][ T5857] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 430.313844][ T5722] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 430.340227][ T5722] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 430.340263][ T5722] usb 3-1: can't read configurations, error -61 [ 430.340615][ T5722] usb usb3-port1: unable to enumerate USB device [ 430.373884][ T5857] usb 2-1: device descriptor read/64, error -71 [ 430.483658][ T5857] usb usb2-port1: attempt power cycle [ 430.493404][ T5722] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 430.643932][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 430.646329][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.646440][ T5722] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.649173][ T5722] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 430.649198][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.649208][ T5722] usb 4-1: Product: syz [ 430.649216][ T5722] usb 4-1: Manufacturer: syz [ 430.649223][ T5722] usb 4-1: SerialNumber: syz [ 430.652515][ T5722] usb 4-1: config 0 descriptor?? [ 430.679800][ T5722] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 430.704571][ T5830] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 430.743364][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 430.833352][ T5857] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 430.860280][ T5857] usb 2-1: device descriptor read/8, error -71 [ 430.864303][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x23, changing to 0x3 [ 430.864335][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 430.864374][ T5830] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 430.864396][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.893760][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 430.897079][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 430.897106][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.919160][ T10] usb 5-1: config 0 descriptor?? [ 430.920208][ T5830] usb 1-1: config 0 descriptor?? [ 430.957807][ T5600] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 431.445804][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 431.500805][ T5705] usb 4-1: USB disconnect, device number 52 [ 431.643610][ T5857] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 431.666353][ T5857] usb 2-1: device descriptor read/8, error -71 [ 431.698384][ T5830] ath6kl: Failed to submit usb control message: -71 [ 431.698418][ T5830] ath6kl: unable to send the bmi data to the device: -71 [ 431.698431][ T5830] ath6kl: Unable to send get target info: -71 [ 431.786237][ T5830] ath6kl: Failed to init ath6kl core: -71 [ 431.789342][ T5857] usb usb2-port1: unable to enumerate USB device [ 431.794470][ T5830] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 431.887026][ T5830] usb 1-1: USB disconnect, device number 60 [ 432.393957][ T5830] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 432.543363][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 432.551389][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.551422][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.551511][ T5830] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 432.551534][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.637566][ T5830] usb 4-1: config 0 descriptor?? [ 432.743743][ T5857] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 432.916119][ T5857] usb 1-1: Using ep0 maxpacket: 32 [ 432.930581][ T5830] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 432.936185][ T5857] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.936218][ T5857] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.936238][ T5857] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.961724][ T5857] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 432.961753][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 432.961773][ T5857] usb 1-1: Product: syz [ 432.961786][ T5857] usb 1-1: Manufacturer: syz [ 432.961799][ T5857] usb 1-1: SerialNumber: syz [ 433.046874][ T5857] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input43 [ 433.079692][T10542] iowarrior 4-1:0.0: Error -90 while submitting URB [ 433.081244][ T951] usb 4-1: USB disconnect, device number 53 [ 433.102210][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 433.134898][ T36] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 433.283618][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 433.288958][ T36] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 433.288987][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.289006][ T36] usb 3-1: Product: syz [ 433.289020][ T36] usb 3-1: Manufacturer: syz [ 433.289033][ T36] usb 3-1: SerialNumber: syz [ 433.295504][ T36] usb 3-1: config 0 descriptor?? [ 434.032614][ T36] airspy 3-1:0.0: Board ID: 00 [ 434.032636][ T36] airspy 3-1:0.0: Firmware version: [ 434.489176][T10566] 8021q: VLANs not supported on ipvlan0 [ 435.023663][ T5857] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 435.132884][ T10] gspca_vc032x: reg_w err -71 [ 435.132904][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132914][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132932][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132941][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132950][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132959][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132966][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132972][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132977][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132984][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.132992][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.133000][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.133007][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.133016][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.133023][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.133069][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.133079][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.133088][ T10] gspca_vc032x: Unknown sensor... [ 435.133161][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 435.164835][ T10] usb 5-1: USB disconnect, device number 61 [ 435.293303][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 435.295526][ T5857] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 435.295551][ T5857] usb 2-1: config 0 has no interface number 0 [ 435.295649][ T5857] usb 2-1: config 0 interface 184 has no altsetting 0 [ 435.298533][ T5857] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 435.298561][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.298580][ T5857] usb 2-1: Product: syz [ 435.298647][ T5857] usb 2-1: Manufacturer: syz [ 435.298663][ T5857] usb 2-1: SerialNumber: syz [ 435.356263][ T36] airspy 3-1:0.0: usb_control_msg() failed -32 request 0f [ 435.379054][ T5857] usb 2-1: config 0 descriptor?? [ 435.380504][ T36] airspy 3-1:0.0: Registered as swradio24 [ 435.380523][ T36] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 435.453433][ T10] usb 1-1: USB disconnect, device number 61 [ 435.602501][ T10] appletouch 1-1:1.0: input: appletouch disconnected [ 435.635389][ T5830] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 435.863645][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 436.708138][ T5830] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.730443][ T5830] usb 4-1: config 1 has an invalid interface number: 243 but max is 2 [ 436.730470][ T5830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.730487][ T5830] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 436.730506][ T5830] usb 4-1: config 1 has no interface number 1 [ 436.730543][ T5830] usb 4-1: too many endpoints for config 1 interface 243 altsetting 17: 97, using maximum allowed: 30 [ 436.730578][ T5830] usb 4-1: config 1 interface 243 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 436.730603][ T5830] usb 4-1: config 1 interface 243 has no altsetting 0 [ 436.785917][ T5857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 436.785948][ T5857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 436.786273][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 436.786573][ T5857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 436.786595][ T5857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 436.786613][ T5857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 436.786630][ T5857] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 436.786907][ T5857] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 436.810693][ T5830] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 436.810722][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.810740][ T5830] usb 4-1: Product: syz [ 436.810753][ T5830] usb 4-1: Manufacturer: syz [ 436.810767][ T5830] usb 4-1: SerialNumber: syz [ 436.965049][ T5857] usb 2-1: USB disconnect, device number 50 [ 436.981811][ T36] usb 3-1: USB disconnect, device number 38 [ 437.153358][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 437.753443][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 437.758232][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 437.758315][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.758345][ T10] usb 5-1: Product: syz [ 437.758359][ T10] usb 5-1: Manufacturer: syz [ 437.758373][ T10] usb 5-1: SerialNumber: syz [ 437.800438][ T10] usb 5-1: config 0 descriptor?? [ 437.824885][ T10] gspca_main: spca508-2.14.0 probing 041e:4018 [ 438.232656][T10577] hfsplus: unable to find HFS+ superblock [ 438.378397][ T36] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 438.593882][T10603] 8021q: VLANs not supported on ipvlan0 [ 438.899289][ T10] gspca_spca508: reg_read err -110 [ 438.899957][ T10] gspca_spca508: reg_read err -32 [ 438.900432][ T10] gspca_spca508: reg_read err -32 [ 438.900931][ T10] gspca_spca508: reg_read err -32 [ 438.902686][ T10] gspca_spca508: reg write: error -32 [ 438.902842][ T10] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 439.047377][ T36] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 439.047405][ T36] usb 1-1: config 0 has no interface number 0 [ 439.047448][ T36] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 439.049957][ T36] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 439.049986][ T36] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 439.050004][ T36] usb 1-1: Manufacturer: syz [ 439.050015][ T36] usb 1-1: SerialNumber: syz [ 439.111907][ T36] usb 1-1: config 0 descriptor?? [ 439.287843][ T10] usb 5-1: USB disconnect, device number 62 [ 439.578479][ T5830] usb 4-1: 0:1 : does not exist [ 439.578501][ T5830] usb 4-1: 0:2 : does not exist [ 440.395569][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.395637][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.625592][ T5830] usb 4-1: USB disconnect, device number 54 [ 440.689470][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 441.132322][ T5600] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 441.193092][ T5600] Bluetooth: hci5: Injecting HCI hardware error event [ 441.249748][ T5609] Bluetooth: hci5: hardware error 0x00 [ 441.304035][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 441.382041][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 441.382071][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.382090][ T10] usb 3-1: Product: syz [ 441.382104][ T10] usb 3-1: Manufacturer: syz [ 441.382117][ T10] usb 3-1: SerialNumber: syz [ 441.432911][ T10] usb 3-1: config 0 descriptor?? [ 441.479355][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.727718][ T5722] usb 1-1: USB disconnect, device number 62 [ 441.871365][ T10] airspy 3-1:0.0: Board ID: 00 [ 441.871380][ T10] airspy 3-1:0.0: Firmware version: [ 442.691582][T10629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1634'. [ 442.691599][T10629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1634'. [ 442.714566][T10634] 8021q: VLANs not supported on ipvlan0 [ 443.055323][ T10] airspy 3-1:0.0: usb_control_msg() failed -32 request 0f [ 443.057822][ T10] airspy 3-1:0.0: Registered as swradio24 [ 443.057840][ T10] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 443.277879][T10654] FAULT_INJECTION: forcing a failure. [ 443.277879][T10654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.277907][T10654] CPU: 0 UID: 0 PID: 10654 Comm: syz.4.1642 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 443.277925][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.277945][T10654] Call Trace: [ 443.277951][T10654] [ 443.277958][T10654] dump_stack_lvl+0xe8/0x150 [ 443.277981][T10654] should_fail_ex+0x46b/0x600 [ 443.278008][T10654] _copy_to_user+0x31/0xb0 [ 443.278027][T10654] simple_read_from_buffer+0xe1/0x170 [ 443.278053][T10654] proc_fail_nth_read+0x1be/0x230 [ 443.278079][T10654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.278103][T10654] ? rw_verify_area+0x2ac/0x4e0 [ 443.278120][T10654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.278144][T10654] vfs_read+0x212/0xa80 [ 443.278168][T10654] ? __pfx_vfs_read+0x10/0x10 [ 443.278187][T10654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.278205][T10654] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.278222][T10654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.278238][T10654] ? mutex_lock_nested+0x152/0x1d0 [ 443.278256][T10654] ? fdget_pos+0x252/0x320 [ 443.278277][T10654] ksys_read+0x156/0x270 [ 443.278294][T10654] ? __pfx_ksys_read+0x10/0x10 [ 443.278314][T10654] ? __secure_computing+0xe1/0x2a0 [ 443.278334][T10654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.278350][T10654] do_syscall_64+0x15f/0xf80 [ 443.278366][T10654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.278382][T10654] ? clear_bhb_loop+0x40/0x90 [ 443.278400][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.278415][T10654] RIP: 0033:0x7f18952fd60e [ 443.278431][T10654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.278444][T10654] RSP: 002b:00007f1893595fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.278460][T10654] RAX: ffffffffffffffda RBX: 00007f18935966c0 RCX: 00007f18952fd60e [ 443.278479][T10654] RDX: 000000000000000f RSI: 00007f18935960a0 RDI: 0000000000000004 [ 443.278491][T10654] RBP: 00007f1893596090 R08: 0000000000000000 R09: 0000000000000000 [ 443.278504][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.278512][T10654] R13: 00007f18955b6038 R14: 00007f18955b5fa0 R15: 00007ffe834e2418 [ 443.278536][T10654] [ 443.583339][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 443.755682][ T5609] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 443.784290][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 444.113244][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 444.321411][ T5830] usb 3-1: USB disconnect, device number 39 [ 444.371756][ T10] usb 2-1: config 1 has an invalid interface number: 243 but max is 2 [ 444.371782][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.371801][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 444.371820][ T10] usb 2-1: config 1 has no interface number 1 [ 444.371861][ T10] usb 2-1: too many endpoints for config 1 interface 243 altsetting 17: 97, using maximum allowed: 30 [ 444.371895][ T10] usb 2-1: config 1 interface 243 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 444.371909][ T10] usb 2-1: config 1 interface 243 has no altsetting 0 [ 444.384711][ T10] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 444.384739][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.384758][ T10] usb 2-1: Product: syz [ 444.384772][ T10] usb 2-1: Manufacturer: syz [ 444.384785][ T10] usb 2-1: SerialNumber: syz [ 446.133142][T10691] 8021q: VLANs not supported on ipvlan0 [ 447.876781][T10708] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1654'. [ 448.441701][ T10] usb 2-1: 0:1 : does not exist [ 448.441724][ T10] usb 2-1: 0:2 : does not exist [ 448.559893][T10717] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 448.559917][T10717] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1659'. [ 448.559944][T10717] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1659'. [ 448.559958][T10717] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1659'. [ 448.560999][ T37] audit: type=1326 audit(1777826482.813:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10715 comm="syz.1.1659" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd93971cdd9 code=0x0 [ 448.659086][ T10] usb 2-1: USB disconnect, device number 51 [ 448.684651][ T5696] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 448.965385][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 449.224339][ T5696] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 449.224369][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.224388][ T5696] usb 4-1: Product: syz [ 449.224401][ T5696] usb 4-1: Manufacturer: syz [ 449.224414][ T5696] usb 4-1: SerialNumber: syz [ 449.277132][ T5696] usb 4-1: config 0 descriptor?? [ 449.375219][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.673366][ T5737] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 449.688618][ T5696] airspy 4-1:0.0: Board ID: 00 [ 449.688632][ T5696] airspy 4-1:0.0: Firmware version: [ 449.758777][T10735] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6454] was attempted by ""[10735] [ 449.823365][ T5737] usb 3-1: Using ep0 maxpacket: 32 [ 449.826276][T10736] trusted_key: syz.4.1665 sent an empty control message without MSG_MORE. [ 449.851016][ T5737] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 449.851306][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.851329][ T5737] usb 3-1: Product: syz [ 449.851343][ T5737] usb 3-1: Manufacturer: syz [ 449.851357][ T5737] usb 3-1: SerialNumber: syz [ 449.899707][ T5737] usb 3-1: config 0 descriptor?? [ 449.931333][ T5737] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 450.024589][T10739] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.1665'. [ 450.268043][T10743] FAULT_INJECTION: forcing a failure. [ 450.268043][T10743] name failslab, interval 1, probability 0, space 0, times 0 [ 450.268064][T10743] CPU: 1 UID: 0 PID: 10743 Comm: syz.0.1668 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 450.268079][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.268087][T10743] Call Trace: [ 450.268091][T10743] [ 450.268097][T10743] dump_stack_lvl+0xe8/0x150 [ 450.268115][T10743] should_fail_ex+0x46b/0x600 [ 450.268135][T10743] should_failslab+0xa8/0x100 [ 450.268149][T10743] __kmalloc_noprof+0xdf/0x7b0 [ 450.268160][T10743] ? mutex_rt_init_lockdep+0x66/0x80 [ 450.268171][T10743] ? security_task_alloc+0x4d/0x330 [ 450.268189][T10743] security_task_alloc+0x4d/0x330 [ 450.268205][T10743] copy_process+0x1d1a/0x4450 [ 450.268226][T10743] ? copy_process+0xd87/0x4450 [ 450.268243][T10743] ? __pfx_copy_process+0x10/0x10 [ 450.268261][T10743] vhost_task_create+0x1f9/0x380 [ 450.268276][T10743] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 450.268291][T10743] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 450.268306][T10743] ? __pfx_vhost_task_create+0x10/0x10 [ 450.268325][T10743] ? __pfx_vhost_task_fn+0x10/0x10 [ 450.268341][T10743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.268353][T10743] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.268365][T10743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 450.268376][T10743] ? mutex_lock_nested+0x152/0x1d0 [ 450.268390][T10743] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 450.268408][T10743] kvm_mmu_post_init_vm+0x147/0x2d0 [ 450.268425][T10743] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 450.268444][T10743] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 450.268457][T10743] ? do_raw_spin_lock+0x12b/0x2f0 [ 450.268475][T10743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.268486][T10743] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.268497][T10743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 450.268509][T10743] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 450.268527][T10743] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 450.268542][T10743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.268553][T10743] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.268564][T10743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 450.268575][T10743] ? rt_write_unlock+0x190/0x230 [ 450.268592][T10743] kvm_vcpu_ioctl+0xa65/0xfe0 [ 450.268610][T10743] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 450.268626][T10743] ? __asan_memset+0x22/0x50 [ 450.268641][T10743] ? smack_file_ioctl+0x331/0x360 [ 450.268655][T10743] ? __pfx_smack_file_ioctl+0x10/0x10 [ 450.268673][T10743] ? __fget_files+0x2a/0x420 [ 450.268682][T10743] ? __fget_files+0x3a6/0x420 [ 450.268691][T10743] ? __fget_files+0x2a/0x420 [ 450.268702][T10743] ? bpf_lsm_file_ioctl+0x9/0x20 [ 450.268714][T10743] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 450.268729][T10743] __se_sys_ioctl+0xff/0x170 [ 450.268741][T10743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.268752][T10743] do_syscall_64+0x15f/0xf80 [ 450.268763][T10743] ? trace_irq_disable+0x3b/0x140 [ 450.268775][T10743] ? clear_bhb_loop+0x40/0x90 [ 450.268788][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.268798][T10743] RIP: 0033:0x7fcf1039cdd9 [ 450.268809][T10743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.268818][T10743] RSP: 002b:00007fcf0e5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.268829][T10743] RAX: ffffffffffffffda RBX: 00007fcf10616090 RCX: 00007fcf1039cdd9 [ 450.268837][T10743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 450.268843][T10743] RBP: 00007fcf0e5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 450.268849][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.268855][T10743] R13: 00007fcf10616128 R14: 00007fcf10616090 R15: 00007fff676d5a88 [ 450.268872][T10743] [ 450.525755][ T5696] airspy 4-1:0.0: usb_control_msg() failed -32 request 0f [ 450.826125][ T5696] airspy 4-1:0.0: Registered as swradio24 [ 450.826375][ T5696] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 451.180481][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 451.337972][T10750] ceph: No mds server is up or the cluster is laggy [ 451.364884][ T36] libceph: connect (1)[c::]:6789 error -101 [ 451.373010][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 451.430178][ T5696] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 451.604582][ T5857] usb 4-1: USB disconnect, device number 55 [ 451.634050][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 451.636527][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 451.637705][ T5696] usb 5-1: config 1 has an invalid interface number: 243 but max is 2 [ 451.637730][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.637747][ T5696] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 451.637768][ T5696] usb 5-1: config 1 has no interface number 1 [ 451.637844][ T5696] usb 5-1: too many endpoints for config 1 interface 243 altsetting 17: 97, using maximum allowed: 30 [ 451.637865][ T5696] usb 5-1: config 1 interface 243 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 451.637880][ T5696] usb 5-1: config 1 interface 243 has no altsetting 0 [ 451.645197][ T10] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 451.676836][ T5696] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 451.676864][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.676883][ T5696] usb 5-1: Product: syz [ 451.676897][ T5696] usb 5-1: Manufacturer: syz [ 451.676910][ T5696] usb 5-1: SerialNumber: syz [ 451.855520][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.855548][ T10] usb 1-1: config 0 has no interface number 0 [ 451.858353][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 451.858381][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.858400][ T10] usb 1-1: Product: syz [ 451.858414][ T10] usb 1-1: Manufacturer: syz [ 451.858427][ T10] usb 1-1: SerialNumber: syz [ 451.904501][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 452.022050][ T10] usb 1-1: config 0 descriptor?? [ 452.039544][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 452.039587][ T10] usb 1-1: selecting invalid altsetting 1 [ 452.039604][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 452.074335][ T10] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 452.333814][ T5857] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 452.362075][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 452.375755][ T5737] gspca_ov534_9: reg_r err -32 [ 452.726340][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 452.731771][ T5857] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 452.731797][ T5857] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 452.761448][ T5857] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 452.761477][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.761552][ T5857] usb 4-1: Product: syz [ 452.761567][ T5857] usb 4-1: Manufacturer: syz [ 452.761581][ T5857] usb 4-1: SerialNumber: syz [ 452.775585][ T5737] gspca_ov534_9: Unknown sensor 0000 [ 452.775737][ T5737] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 452.853699][ T10] usb 1-1: USB disconnect, device number 63 [ 452.943882][ T5737] usb 3-1: USB disconnect, device number 40 [ 453.080229][ T5857] usb 4-1: USB disconnect, device number 56 [ 453.273752][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 453.426277][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 453.430468][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.430494][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.459872][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.459902][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.459920][ T9] usb 2-1: Product: syz [ 453.459933][ T9] usb 2-1: Manufacturer: syz [ 453.459945][ T9] usb 2-1: SerialNumber: syz [ 453.510600][ T9] usb 2-1: 0:2 : does not exist [ 453.533533][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 453.721521][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 453.810188][ T9] usb 2-1: USB disconnect, device number 52 [ 453.884868][ T5844] udevd[5844]: setting owner of /dev/bus/usb/002/052 to uid=0, gid=0 failed: No such file or directory [ 453.925090][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.974619][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 454.269173][ T5696] usb 5-1: 0:1 : does not exist [ 454.269197][ T5696] usb 5-1: 0:2 : does not exist [ 454.323739][ T5857] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 454.484627][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 454.490032][ T5857] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 454.490061][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.490079][ T5857] usb 3-1: Product: syz [ 454.490092][ T5857] usb 3-1: Manufacturer: syz [ 454.490105][ T5857] usb 3-1: SerialNumber: syz [ 454.511855][ T5857] usb 3-1: config 0 descriptor?? [ 454.528018][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 454.854817][ T5696] usb 5-1: USB disconnect, device number 63 [ 454.930083][ T5857] airspy 3-1:0.0: Board ID: 00 [ 454.930106][ T5857] airspy 3-1:0.0: Firmware version: [ 454.932978][T10799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1688'. [ 455.218545][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.730414][ T5696] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 455.736618][ T5857] airspy 3-1:0.0: usb_control_msg() failed -32 request 0f [ 455.769716][ T5857] airspy 3-1:0.0: Registered as swradio24 [ 455.769738][ T5857] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 455.883369][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 455.891845][ T5696] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 455.891875][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.891894][ T5696] usb 5-1: Product: syz [ 455.891908][ T5696] usb 5-1: Manufacturer: syz [ 455.891922][ T5696] usb 5-1: SerialNumber: syz [ 455.928234][ T5609] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 455.928557][ T5609] Bluetooth: hci3: Injecting HCI hardware error event [ 455.931501][ T5600] Bluetooth: hci3: hardware error 0x00 [ 455.975543][ T5696] usb 5-1: config 0 descriptor?? [ 456.014247][ T5696] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 456.607242][T10817] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1690'. [ 456.607270][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 457.033490][ T5830] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 457.163407][ T5830] usb 2-1: device descriptor read/64, error -71 [ 457.212352][ T5857] usb 3-1: USB disconnect, device number 41 [ 457.463372][ T5830] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 457.594147][ T5830] usb 2-1: device descriptor read/64, error -71 [ 457.594345][ T5609] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 457.594700][ T5609] Bluetooth: hci0: Injecting HCI hardware error event [ 457.608517][ T5609] Bluetooth: hci0: hardware error 0x00 [ 457.705057][ T5830] usb usb2-port1: attempt power cycle [ 458.077187][ T5830] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 458.095527][ T5830] usb 2-1: device descriptor read/8, error -71 [ 458.343405][ T5830] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 458.364242][ T5830] usb 2-1: device descriptor read/8, error -71 [ 458.473543][ T5600] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 458.473877][ T5830] usb usb2-port1: unable to enumerate USB device [ 458.799885][ T5696] gspca_ov534_9: reg_r err -32 [ 459.003358][ T5696] gspca_ov534_9: Unknown sensor 0000 [ 459.003461][ T5696] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 459.010291][ T5696] usb 5-1: USB disconnect, device number 64 [ 460.043100][ T5609] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 462.042297][T10897] FAULT_INJECTION: forcing a failure. [ 462.042297][T10897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.042330][T10897] CPU: 0 UID: 0 PID: 10897 Comm: syz.4.1714 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 462.042352][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.042365][T10897] Call Trace: [ 462.042373][T10897] [ 462.042382][T10897] dump_stack_lvl+0xe8/0x150 [ 462.042411][T10897] should_fail_ex+0x46b/0x600 [ 462.042449][T10897] _copy_from_user+0x2d/0xb0 [ 462.042473][T10897] get_itimerspec64+0xaa/0x310 [ 462.042505][T10897] ? __pfx_get_itimerspec64+0x10/0x10 [ 462.042533][T10897] ? lockdep_hardirqs_on+0x7a/0x110 [ 462.042558][T10897] ? rt_mutex_slowunlock+0x1cb/0x300 [ 462.042593][T10897] __x64_sys_timerfd_settime+0x149/0x240 [ 462.042625][T10897] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 462.042678][T10897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.042699][T10897] do_syscall_64+0x15f/0xf80 [ 462.042720][T10897] ? trace_irq_disable+0x3b/0x140 [ 462.042743][T10897] ? clear_bhb_loop+0x40/0x90 [ 462.042768][T10897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.042788][T10897] RIP: 0033:0x7f189533cdd9 [ 462.042807][T10897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.042824][T10897] RSP: 002b:00007f1893596028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 462.042846][T10897] RAX: ffffffffffffffda RBX: 00007f18955b5fa0 RCX: 00007f189533cdd9 [ 462.042861][T10897] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 462.042873][T10897] RBP: 00007f1893596090 R08: 0000000000000000 R09: 0000000000000000 [ 462.042886][T10897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.042898][T10897] R13: 00007f18955b6038 R14: 00007f18955b5fa0 R15: 00007ffe834e2418 [ 462.042928][T10897] [ 462.426635][ T951] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 462.574382][ T951] usb 3-1: Using ep0 maxpacket: 32 [ 462.577947][ T951] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 462.577978][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.605944][ T951] usb 3-1: config 0 descriptor?? [ 463.029151][ T951] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 463.077921][ T951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.078992][ T951] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 463.079042][ T951] usb 3-1: media controller created [ 463.621826][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.790340][T10903] syz.3.1718 (10903) used greatest stack depth: 17056 bytes left [ 464.062907][ T951] DVB: Unable to find symbol dib7000p_attach() [ 464.062922][ T951] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 464.287142][T10927] FAULT_INJECTION: forcing a failure. [ 464.287142][T10927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.287177][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.3.1726 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 464.287200][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 464.287214][T10927] Call Trace: [ 464.287222][T10927] [ 464.287231][T10927] dump_stack_lvl+0xe8/0x150 [ 464.287265][T10927] should_fail_ex+0x46b/0x600 [ 464.287305][T10927] _copy_to_user+0x31/0xb0 [ 464.287331][T10927] simple_read_from_buffer+0xe1/0x170 [ 464.287369][T10927] proc_fail_nth_read+0x1be/0x230 [ 464.287406][T10927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.287442][T10927] ? rw_verify_area+0x2ac/0x4e0 [ 464.287463][T10927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.287497][T10927] vfs_read+0x212/0xa80 [ 464.287529][T10927] ? __pfx_vfs_read+0x10/0x10 [ 464.287556][T10927] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 464.287580][T10927] ? lockdep_hardirqs_on+0x7a/0x110 [ 464.287603][T10927] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 464.287626][T10927] ? mutex_lock_nested+0x152/0x1d0 [ 464.287654][T10927] ? fdget_pos+0x252/0x320 [ 464.287683][T10927] ksys_read+0x156/0x270 [ 464.287728][T10927] ? __pfx_ksys_read+0x10/0x10 [ 464.287748][T10927] ? fput+0xa0/0xd0 [ 464.287785][T10927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.287808][T10927] do_syscall_64+0x15f/0xf80 [ 464.287830][T10927] ? trace_irq_disable+0x3b/0x140 [ 464.287855][T10927] ? clear_bhb_loop+0x40/0x90 [ 464.287882][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.287903][T10927] RIP: 0033:0x7f4458d8d60e [ 464.287923][T10927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 464.287942][T10927] RSP: 002b:00007f445701dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.287963][T10927] RAX: ffffffffffffffda RBX: 00007f445701e6c0 RCX: 00007f4458d8d60e [ 464.287978][T10927] RDX: 000000000000000f RSI: 00007f445701e0a0 RDI: 0000000000000004 [ 464.287991][T10927] RBP: 00007f445701e090 R08: 0000000000000000 R09: 0000000000000000 [ 464.288004][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.288016][T10927] R13: 00007f4459046038 R14: 00007f4459045fa0 R15: 00007ffd023b6068 [ 464.288050][T10927] [ 464.293526][ T951] rc_core: IR keymap rc-dib0700-rc5 not found [ 464.293544][ T951] Registered IR keymap rc-empty [ 464.377480][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 464.634009][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 464.640860][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 464.640891][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.640966][ T9] usb 5-1: Product: syz [ 464.640981][ T9] usb 5-1: Manufacturer: syz [ 464.640995][ T9] usb 5-1: SerialNumber: syz [ 464.912825][ T9] usb 5-1: config 0 descriptor?? [ 465.211550][T10936] openvswitch: netlink: Message has 129 unknown bytes. [ 465.339859][ T9] airspy 5-1:0.0: Board ID: 00 [ 465.339882][ T9] airspy 5-1:0.0: Firmware version: [ 466.614924][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 466.697573][ T9] airspy 5-1:0.0: usb_control_msg() failed -32 request 10 [ 467.656914][ T9] airspy 5-1:0.0: Registered as swradio24 [ 467.656935][ T9] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 467.890281][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 468.077356][ T5696] usb 5-1: USB disconnect, device number 65 [ 468.419287][T10961] FAULT_INJECTION: forcing a failure. [ 468.419287][T10961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.419310][T10961] CPU: 0 UID: 0 PID: 10961 Comm: syz.4.1734 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.419326][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.419333][T10961] Call Trace: [ 468.419337][T10961] [ 468.419342][T10961] dump_stack_lvl+0xe8/0x150 [ 468.419360][T10961] should_fail_ex+0x46b/0x600 [ 468.419380][T10961] _copy_from_user+0x2d/0xb0 [ 468.419394][T10961] __se_sys_splice+0x28d/0x490 [ 468.419418][T10961] ? __pfx___se_sys_splice+0x10/0x10 [ 468.419449][T10961] ? __x64_sys_splice+0x21/0xf0 [ 468.419469][T10961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.419489][T10961] do_syscall_64+0x15f/0xf80 [ 468.419511][T10961] ? trace_irq_disable+0x3b/0x140 [ 468.419535][T10961] ? clear_bhb_loop+0x40/0x90 [ 468.419560][T10961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.419580][T10961] RIP: 0033:0x7f189533cdd9 [ 468.419597][T10961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.419609][T10961] RSP: 002b:00007f1893596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 468.419627][T10961] RAX: ffffffffffffffda RBX: 00007f18955b5fa0 RCX: 00007f189533cdd9 [ 468.419639][T10961] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 468.419650][T10961] RBP: 00007f1893596090 R08: 0000200000000005 R09: 0000000000000006 [ 468.419663][T10961] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 468.419676][T10961] R13: 00007f18955b6038 R14: 00007f18955b5fa0 R15: 00007ffe834e2418 [ 468.419706][T10961] [ 468.648868][ T951] dvb-usb: could not initialize remote control. [ 468.648884][ T951] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 468.752937][ T5857] usb 3-1: USB disconnect, device number 42 [ 468.944313][ T5722] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 469.007750][ T5857] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 469.035891][ T951] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 469.110559][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 469.131715][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.131742][ T5722] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 469.159714][ T5722] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 469.159743][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.159763][ T5722] usb 4-1: Product: syz [ 469.159776][ T5722] usb 4-1: Manufacturer: syz [ 469.159790][ T5722] usb 4-1: SerialNumber: syz [ 469.193772][ T951] usb 2-1: Using ep0 maxpacket: 16 [ 469.196038][ T951] usb 2-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 469.196094][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.196121][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.196141][ T951] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.196163][ T951] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.197428][ T951] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.197454][ T951] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.197473][ T951] usb 2-1: Manufacturer: syz [ 469.219695][ T951] usb 2-1: config 0 descriptor?? [ 469.289301][ T5722] usb 4-1: config 0 descriptor?? [ 469.343349][ T5696] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 469.363650][ T5857] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 469.646598][ T951] rc_core: IR keymap rc-hauppauge not found [ 469.646618][ T951] Registered IR keymap rc-empty [ 469.646766][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.647382][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 469.647732][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 469.650439][ T5857] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 469.650464][ T5857] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 469.650483][ T5857] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 469.650503][ T5857] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 469.650573][ T5857] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 469.650592][ T5857] usb 3-1: config 0 has no interface number 0 [ 469.650635][ T5857] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 469.650661][ T5857] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 469.650731][ T5857] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.650765][ T5857] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.650790][ T5857] usb 3-1: config 0 interface 125 has no altsetting 0 [ 469.650807][ T5857] usb 3-1: config 0 interface 125 has no altsetting 2 [ 469.658724][ T5857] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 469.658754][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.658824][ T5857] usb 3-1: Product: syz [ 469.658838][ T5857] usb 3-1: Manufacturer: syz [ 469.658853][ T5857] usb 3-1: SerialNumber: syz [ 469.663462][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.671976][ T5857] usb 3-1: config 0 descriptor?? [ 469.685550][ T951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 469.710476][ T951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input45 [ 469.735962][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 469.742416][ T5696] usb 5-1: config 1 has an invalid interface number: 243 but max is 2 [ 469.742444][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.742462][ T5696] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 469.742482][ T5696] usb 5-1: config 1 has no interface number 1 [ 469.742523][ T5696] usb 5-1: too many endpoints for config 1 interface 243 altsetting 17: 97, using maximum allowed: 30 [ 469.742567][ T5696] usb 5-1: config 1 interface 243 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 469.742592][ T5696] usb 5-1: config 1 interface 243 has no altsetting 0 [ 469.755462][ T5696] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 469.755490][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.755508][ T5696] usb 5-1: Product: syz [ 469.755521][ T5696] usb 5-1: Manufacturer: syz [ 469.755535][ T5696] usb 5-1: SerialNumber: syz [ 469.757674][ T5857] usb 3-1: selecting invalid altsetting 2 [ 469.782171][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.793821][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.818681][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.851278][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.863398][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.883771][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.907376][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.924738][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.943709][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 469.966699][ T951] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 470.024138][ T951] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 470.024164][ T951] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 470.080992][ T951] usb 2-1: USB disconnect, device number 57 [ 470.579036][ C1] usb 3-1: async_complete: urb error -32 [ 470.591978][ T5857] get_1284_register: usb error -32 [ 470.599818][ T5696] usb 5-1: 0:1 : does not exist [ 470.599838][ T5696] usb 5-1: 0:2 : does not exist [ 470.817850][ T5696] usb 5-1: USB disconnect, device number 66 [ 470.885808][ T9] usb 4-1: USB disconnect, device number 57 [ 470.999150][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.483407][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 471.614346][ T9] usb 4-1: device descriptor read/64, error -71 [ 471.853454][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 471.901720][ T951] usb 3-1: USB disconnect, device number 43 [ 472.004219][ T9] usb 4-1: device descriptor read/64, error -71 [ 472.108055][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.119199][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.124019][ T9] usb usb4-port1: attempt power cycle [ 472.230800][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.240899][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.253974][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.595852][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.623442][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 472.644222][ T9] usb 4-1: device descriptor read/8, error -71 [ 472.895223][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 472.923982][ T9] usb 4-1: device descriptor read/8, error -71 [ 473.033926][ T9] usb usb4-port1: unable to enumerate USB device [ 473.103353][ T5830] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 473.211849][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.253364][ T5722] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 473.254183][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 473.257950][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 473.261438][ T5830] usb 3-1: config 8 has an invalid interface number: 135 but max is 0 [ 473.261462][ T5830] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 473.261479][ T5830] usb 3-1: config 8 has no interface number 0 [ 473.261519][ T5830] usb 3-1: config 8 interface 135 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 473.261556][ T5830] usb 3-1: config 8 interface 135 has no altsetting 0 [ 473.264369][ T5830] usb 3-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=56.1a [ 473.264396][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.264415][ T5830] usb 3-1: Product: syz [ 473.264429][ T5830] usb 3-1: Manufacturer: syz [ 473.264442][ T5830] usb 3-1: SerialNumber: syz [ 473.436975][ T5722] usb 5-1: Using ep0 maxpacket: 32 [ 473.451772][ T5722] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 473.451802][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.451821][ T5722] usb 5-1: Product: syz [ 473.451886][ T5722] usb 5-1: Manufacturer: syz [ 473.451901][ T5722] usb 5-1: SerialNumber: syz [ 473.479236][ T5722] usb 5-1: config 0 descriptor?? [ 473.493337][ T951] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 473.521054][ T5722] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 473.592868][ T5830] rndis_host 3-1:8.135: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 473.616730][ T5830] usb 3-1: USB disconnect, device number 44 [ 473.683572][ T951] usb 2-1: Using ep0 maxpacket: 32 [ 473.725053][ T951] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 473.725083][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.725104][ T951] usb 2-1: Product: syz [ 473.725117][ T951] usb 2-1: Manufacturer: syz [ 473.725137][ T951] usb 2-1: SerialNumber: syz [ 473.777243][ T951] usb 2-1: config 0 descriptor?? [ 473.795915][ T951] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 473.833009][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.393111][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.395390][ T5600] Bluetooth: hci0: command tx timeout [ 475.113787][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 475.496434][ T5722] gspca_ov534_9: reg_r err -110 [ 475.763283][ T5722] gspca_ov534_9: Unknown sensor 0000 [ 475.763379][ T5722] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 476.316853][ T5722] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 476.464778][ T5830] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 476.473793][ T5600] Bluetooth: hci0: command tx timeout [ 476.493450][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 476.495483][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 476.496559][ T5722] usb 4-1: config 1 has an invalid interface number: 243 but max is 2 [ 476.496582][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.496601][ T5722] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 476.496621][ T5722] usb 4-1: config 1 has no interface number 1 [ 476.496646][ T5722] usb 4-1: too many endpoints for config 1 interface 243 altsetting 17: 97, using maximum allowed: 30 [ 476.496666][ T5722] usb 4-1: config 1 interface 243 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 476.496679][ T5722] usb 4-1: config 1 interface 243 has no altsetting 0 [ 476.498710][ T5722] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 476.498736][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.498748][ T5722] usb 4-1: Product: syz [ 476.498755][ T5722] usb 4-1: Manufacturer: syz [ 476.498763][ T5722] usb 4-1: SerialNumber: syz [ 476.644406][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.644452][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 476.644476][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 476.644547][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 476.644566][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 476.647464][ T5830] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 476.647572][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 476.647593][ T5830] usb 3-1: Product: syz [ 476.647606][ T5830] usb 3-1: Manufacturer: syz [ 476.647619][ T5830] usb 3-1: SerialNumber: syz [ 476.751640][ T5830] usb 3-1: config 0 descriptor?? [ 476.977486][ T5830] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 476.977512][ T5830] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 477.178608][ T5830] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 477.178634][ T5830] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 477.178707][ T5830] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 477.381347][ T5830] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 477.506481][ T951] gspca_ov534_9: reg_r err -32 [ 477.531714][ T5722] usb 4-1: 0:1 : does not exist [ 477.531736][ T5722] usb 4-1: 0:2 : does not exist [ 477.552420][ T5696] usb 5-1: USB disconnect, device number 67 [ 477.700786][ T5722] usb 4-1: USB disconnect, device number 62 [ 477.718173][ T951] gspca_ov534_9: Unknown sensor 0000 [ 477.718254][ T951] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 477.739077][ T951] usb 2-1: USB disconnect, device number 58 [ 477.913058][ T5844] udevd[5844]: setting mode of /dev/bus/usb/004/062 to 020664 failed: No such file or directory [ 477.919322][ T5844] udevd[5844]: setting owner of /dev/bus/usb/004/062 to uid=0, gid=0 failed: No such file or directory [ 477.958706][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.041910][ T5830] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 478.042272][ T5830] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 478.078427][ T5830] usb 3-1: USB disconnect, device number 45 [ 478.212895][T10986] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.213059][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.232675][T10986] bridge_slave_0: entered allmulticast mode [ 478.246286][T11049] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 478.247321][T10986] bridge_slave_0: entered promiscuous mode [ 478.251538][T11049] vivid-007: ================= START STATUS ================= [ 478.252214][T11049] vivid-007: Generate PTS: true [ 478.252249][T11049] vivid-007: Generate SCR: true [ 478.252270][T11049] tpg source WxH: 320x240 (Y'CbCr) [ 478.252282][T11049] tpg field: 1 [ 478.252289][T11049] tpg crop: (0,0)/320x240 [ 478.252300][T11049] tpg compose: (0,0)/320x240 [ 478.252312][T11049] tpg colorspace: 8 [ 478.252320][T11049] tpg transfer function: 0/0 [ 478.252330][T11049] tpg Y'CbCr encoding: 0/0 [ 478.252339][T11049] tpg quantization: 0/0 [ 478.252348][T11049] tpg RGB range: 0/2 [ 478.252358][T11049] vivid-007: ================== END STATUS ================== [ 478.733391][ T5600] Bluetooth: hci0: command tx timeout [ 478.757559][ T5722] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 479.620188][ T67] pimreg: left allmulticast mode [ 479.786272][ T67] pimreg9: left allmulticast mode [ 479.786649][ T5722] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 479.786675][ T5722] usb 2-1: config 0 has no interface number 0 [ 479.786716][ T5722] usb 2-1: config 0 interface 176 altsetting 117 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 479.786744][ T5722] usb 2-1: config 0 interface 176 has no altsetting 0 [ 479.847281][ T5722] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 479.847310][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.847327][ T5722] usb 2-1: Product: syz [ 479.847339][ T5722] usb 2-1: Manufacturer: syz [ 479.847353][ T5722] usb 2-1: SerialNumber: syz [ 479.904627][ T5722] usb 2-1: config 0 descriptor?? [ 479.971261][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 480.293171][T11069] hfsplus: unable to find HFS+ superblock [ 480.424413][ T5722] usb 2-1: USB disconnect, device number 59 [ 480.540739][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.793679][ T5600] Bluetooth: hci0: command tx timeout [ 481.764299][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.824308][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.875422][ T67] bond0 (unregistering): Released all slaves [ 481.894140][T10986] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.894274][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.894439][T10986] bridge_slave_1: entered allmulticast mode [ 481.896114][T10986] bridge_slave_1: entered promiscuous mode [ 482.583458][ T5830] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 482.644061][T11080] 8021q: VLANs not supported on ipvlan0 [ 482.673423][ T5854] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 482.718250][ T5830] usb 3-1: device descriptor read/64, error -71 [ 482.747092][T10986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.750967][T10986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.823403][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 482.827716][ T5854] usb 5-1: unable to get BOS descriptor or descriptor too short [ 482.828873][ T5854] usb 5-1: config 1 has an invalid interface number: 243 but max is 2 [ 482.828897][ T5854] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.828914][ T5854] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 482.828933][ T5854] usb 5-1: config 1 has no interface number 1 [ 482.828971][ T5854] usb 5-1: too many endpoints for config 1 interface 243 altsetting 17: 97, using maximum allowed: 30 [ 482.829009][ T5854] usb 5-1: config 1 interface 243 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 482.829035][ T5854] usb 5-1: config 1 interface 243 has no altsetting 0 [ 482.831328][ T5854] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 482.831355][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.831376][ T5854] usb 5-1: Product: syz [ 482.831390][ T5854] usb 5-1: Manufacturer: syz [ 482.831403][ T5854] usb 5-1: SerialNumber: syz [ 482.973419][ T5830] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 483.134783][ T5830] usb 3-1: device descriptor read/64, error -71 [ 483.227737][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 483.406134][ T5830] usb usb3-port1: attempt power cycle [ 483.840306][ T5854] usb 5-1: 0:1 : does not exist [ 483.840321][ T5854] usb 5-1: 0:2 : does not exist [ 484.143501][ T5830] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 484.169873][ T5830] usb 3-1: device descriptor read/8, error -71 [ 484.203058][ T5854] usb 5-1: USB disconnect, device number 68 [ 484.249207][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.337874][T11099] kthread_run failed with err -4 [ 484.413337][ T5830] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 484.434379][ T5830] usb 3-1: device descriptor read/8, error -71 [ 484.546057][ T5830] usb usb3-port1: unable to enumerate USB device [ 484.780096][T11116] netlink: 'syz.1.1782': attribute type 4 has an invalid length. [ 484.816563][T10986] team0: Port device team_slave_0 added [ 484.828558][T10986] team0: Port device team_slave_1 added [ 484.993381][ T5854] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 485.081453][T10986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.081469][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.081495][T10986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.094692][T10986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.094710][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.094737][T10986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.204574][ T5854] usb 4-1: not running at top speed; connect to a high speed hub [ 485.206093][ T5854] usb 4-1: config 8 has an invalid interface number: 208 but max is 1 [ 485.206118][ T5854] usb 4-1: config 8 has an invalid interface number: 233 but max is 1 [ 485.206129][ T5854] usb 4-1: config 8 has an invalid interface association descriptor of length 2, skipping [ 485.206139][ T5854] usb 4-1: config 8 has no interface number 0 [ 485.206148][ T5854] usb 4-1: config 8 has no interface number 1 [ 485.206182][ T5854] usb 4-1: config 8 interface 208 altsetting 253 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 485.206196][ T5854] usb 4-1: config 8 interface 208 altsetting 253 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 485.206216][ T5854] usb 4-1: config 8 interface 233 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 485.206228][ T5854] usb 4-1: config 8 interface 233 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 485.206240][ T5854] usb 4-1: config 8 interface 233 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 485.206251][ T5854] usb 4-1: config 8 interface 208 has no altsetting 0 [ 485.206260][ T5854] usb 4-1: config 8 interface 233 has no altsetting 0 [ 485.208847][ T5854] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=e9.9c [ 485.208878][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.208897][ T5854] usb 4-1: Product: syz [ 485.208909][ T5854] usb 4-1: Manufacturer: syz [ 485.208922][ T5854] usb 4-1: SerialNumber: syz [ 485.433624][ T5857] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 485.530702][ T5854] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 485.530738][ T5854] dvb-usb: bulk message failed: -22 (2/0) [ 485.530750][ T5854] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 485.530772][ T5854] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-19) [ 485.565320][ T5854] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 485.565383][ T5854] dvb-usb: bulk message failed: -22 (2/0) [ 485.583749][ T5854] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 485.583798][ T5854] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-19) [ 485.617295][ T5857] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 485.617325][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.617335][ T5857] usb 2-1: Product: syz [ 485.617343][ T5857] usb 2-1: Manufacturer: syz [ 485.617350][ T5857] usb 2-1: SerialNumber: syz [ 485.714696][ T5854] usb 4-1: USB disconnect, device number 63 [ 485.758768][ T5857] usb 2-1: config 0 descriptor?? [ 485.910004][T11132] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1785'. [ 485.971777][ T5857] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 486.589959][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 487.194469][ T67] hsr_slave_0: left promiscuous mode [ 487.213635][ T5722] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 487.213663][ T5722] #PF: supervisor read access in kernel mode [ 487.213675][ T5722] #PF: error_code(0x0000) - not-present page [ 487.213686][ T5722] PGD 800000005e6ce067 P4D 800000005e6ce067 PUD 0 [ 487.213712][ T5722] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 487.213733][ T5722] CPU: 0 UID: 0 PID: 5722 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 487.213750][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.213756][ T5722] Workqueue: usb_hub_wq hub_event [ 487.213772][ T5722] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 487.213785][ T5722] Code: 8a 8d 4c 8b b8 08 04 6b 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 20 57 02 8e 4d 8b 3f 49 81 ff 20 57 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 81 58 e7 02 84 c0 74 0e 49 8b 07 49 [ 487.213796][ T5722] RSP: 0018:ffffc900053677c8 EFLAGS: 00010203 [ 487.213811][ T5722] RAX: 0000000000000000 RBX: ffff88801cfc9ec0 RCX: 0000000000000000 [ 487.213824][ T5722] RDX: 00000000f4d02600 RSI: 0000000000000001 RDI: ffffffff8ba74d00 [ 487.213837][ T5722] RBP: 0000000000100000 R08: ffffffff8b1ea760 R09: ffffffff8dfc8140 [ 487.213851][ T5722] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: 0000000000000002 [ 487.213865][ T5722] R13: 0000000000000001 R14: ffff888035393900 R15: 0000000000000000 [ 487.213878][ T5722] FS: 0000000000000000(0000) GS:ffff888126179000(0000) knlGS:0000000000000000 [ 487.213894][ T5722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.213907][ T5722] CR2: 0000000000000010 CR3: 000000005d18e000 CR4: 00000000003526f0 [ 487.213918][ T5722] Call Trace: [ 487.213922][ T5722] [ 487.213930][ T5722] hub_event+0x150/0x4f60 [ 487.213943][ T5722] ? __lock_acquire+0x6b5/0x2cf0 [ 487.213957][ T5722] ? look_up_lock_class+0x57/0x110 [ 487.213981][ T5722] ? __lock_acquire+0x6b5/0x2cf0 [ 487.214011][ T5722] ? lock_acquire+0x106/0x350 [ 487.214036][ T5722] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.214059][ T5722] ? __pfx_hub_event+0x10/0x10 [ 487.214073][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 487.214085][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 487.214095][ T5722] ? process_scheduled_works+0xa70/0x1860 [ 487.214105][ T5722] process_scheduled_works+0xb5d/0x1860 [ 487.214123][ T5722] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.214145][ T5722] ? assign_work+0x3d5/0x5e0 [ 487.214166][ T5722] worker_thread+0xa53/0xfc0 [ 487.214198][ T5722] kthread+0x388/0x470 [ 487.214223][ T5722] ? __pfx_worker_thread+0x10/0x10 [ 487.214234][ T5722] ? __pfx_kthread+0x10/0x10 [ 487.214247][ T5722] ret_from_fork+0x514/0xb70 [ 487.214258][ T5722] ? __pfx_ret_from_fork+0x10/0x10 [ 487.214269][ T5722] ? __switch_to+0xc79/0x1410 [ 487.214287][ T5722] ? __pfx_kthread+0x10/0x10 [ 487.214311][ T5722] ret_from_fork_asm+0x1a/0x30 [ 487.214342][ T5722] [ 487.214355][ T5722] Modules linked in: [ 487.214378][ T5722] CR2: 0000000000000010 [ 487.214389][ T5722] ---[ end trace 0000000000000000 ]--- [ 487.214397][ T5722] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 487.214409][ T5722] Code: 8a 8d 4c 8b b8 08 04 6b 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 20 57 02 8e 4d 8b 3f 49 81 ff 20 57 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 81 58 e7 02 84 c0 74 0e 49 8b 07 49 [ 487.214418][ T5722] RSP: 0018:ffffc900053677c8 EFLAGS: 00010203 [ 487.214426][ T5722] RAX: 0000000000000000 RBX: ffff88801cfc9ec0 RCX: 0000000000000000 [ 487.214432][ T5722] RDX: 00000000f4d02600 RSI: 0000000000000001 RDI: ffffffff8ba74d00 [ 487.214439][ T5722] RBP: 0000000000100000 R08: ffffffff8b1ea760 R09: ffffffff8dfc8140 [ 487.214453][ T5722] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: 0000000000000002 [ 487.214466][ T5722] R13: 0000000000000001 R14: ffff888035393900 R15: 0000000000000000 [ 487.214478][ T5722] FS: 0000000000000000(0000) GS:ffff888126179000(0000) knlGS:0000000000000000 [ 487.214494][ T5722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.214508][ T5722] CR2: 0000000000000010 CR3: 000000005d18e000 CR4: 00000000003526f0 [ 487.214526][ T5722] Kernel panic - not syncing: Fatal exception [ 487.215050][ T5722] Kernel Offset: disabled