last executing test programs: 8.859541852s ago: executing program 0 (id=1524): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r5 = syz_open_dev$hidraw(&(0x7f0000000140), 0x5, 0xc000) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000300)={0x6, "91219988bf5934c1e0081c0b597c35239fc0ed5b84d8a6656b60a06a52f86f07c0591545c95101f6ae96ea8bd82cc2bec481e83afdd3efbd530c1bc706b3c9e4"}) clock_gettime(0xfffffffffffffffd, 0x0) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000002c0)={r10, 0x10, 0x2, "c5c0"}, 0xa) open_by_handle_at(r7, &(0x7f00000000c0)=ANY=[], 0x8e79f0352147ead5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0x15) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) 7.968144577s ago: executing program 4 (id=1528): r0 = socket(0xa, 0x2, 0x0) r1 = inotify_init() r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100}, 0xc) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) 7.447973812s ago: executing program 0 (id=1531): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xffffffffffffff89}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x4}}], 0x48}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x91, 0x20}, &(0x7f00000002c0)=0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000002500)={0x10, 0xfffffffffffffff5}, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000240)=0xc) move_pages(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000340)=[0x2, 0x400, 0x5, 0x9, 0x4], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r6 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r6, 0x0, 0x8000fb00) 6.787364503s ago: executing program 4 (id=1533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x5, 0x8000000, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c899}, 0x14) 6.478435141s ago: executing program 4 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001000010700000000000000000a0000000600010017000000"], 0x24}}, 0x0) 6.323495967s ago: executing program 3 (id=1535): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r10 = socket(0x18, 0x800, 0x0) sendfile(r10, r9, 0x0, 0x8) r11 = socket(0x2d, 0x2, 0x0) connect$qrtr(r11, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r11, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 5.7775933s ago: executing program 4 (id=1537): r0 = inotify_init() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.547659367s ago: executing program 4 (id=1538): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x2dee, &(0x7f0000000140)={0x0, 0xd9, 0x1, 0x2, 0x2af, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000200), &(0x7f00000001c0)) io_uring_enter(r2, 0x214c, 0xc578, 0x14, &(0x7f0000000280)={[0x7fffffffffffffff]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000680)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa0, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x9, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x110}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) getpid() r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103c02, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="40bee0877839589196774f86e15a87b536f87561c16e6e05828bd1bfb1704e12ba6f", 0x22, r8) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.018495187s ago: executing program 0 (id=1539): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000880)=[0x2a, 0x7]) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x3, 0x2]) 4.36723272s ago: executing program 3 (id=1543): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, 0x0, 0xd0060) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000980)={'#! ', './file1/../file0', [{0x20, 'cgroQ\xedB\x9f\xc6\vQ\xf8~up.23\x06\xc6\x8bSG\xfbstat\x00\x88\xd8K\x91\x17\xb3\xe4w\x956\xf1\xce\xdcX\xf5\x03\x1a\x84\xdaj\xf8\v\x00#g\xad\x8d;xu\x16W_!m\xd0I\xe1\x98?3lA\x82\xa1. K\xa6\x9c\xcc\x02:k\x9d\xd4\x14\xb1\xdfK\xf3\x9e$\xe4\x04\x91\xc2\xf6\xc5%+r*zt\"c\x03N%E\xee\x9c9\xfe\xa5\xeb\xda\xa3\xfa\xdf\xbfQS\xcbx'}]}, 0x92) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x10, 0x2, "1501"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x3, &(0x7f0000002080)=[&(0x7f0000001d00)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x80000000, 0x0, 0x3}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x8, 0x10, 0xffffffffffffffff, &(0x7f0000001d80)="7c43dd59bceeed66d0a6f9aa7ef56be4c7fdd8a36cd6620e", 0x18, 0x5, 0x0, 0x2}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000001ec0)="c0cac1054b398828cd955e580c925909ffbc22026bb653c2830bb5e678a8ab603aae6f3f2f6c5656bf12664d3d14fc1f62cbf4d3216b4368f57d3c3cab08c8b0c9068ca9b0f805924f94ad3200fdf77980db6d6155352abb3731a952545eb3d5ae189850ac00d44bcaedcd7c86a8d81215d1701fed53af1b156e09e92b7afdb09b3d97bfab2c6a66f0b9b62ac527e6d9775ea9b8f48ee38ef3c0603c7e592fff4da550d771eb4797fe9fd503571ea30926da95d74924bc00002b1393dd8054ba6493d9b7ac4c03698a51ef9a9d0bfefe93e77570180060f927", 0xd9, 0x2, 0x0, 0x3}]) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000"], 0x610) r5 = socket(0xa, 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000c00)={0x101, 0x20, 0xb, 0x20, 0x39}, 0x48) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000e40)) unshare(0x22020600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000000c0)={0x2, 0x1}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x20, 0x33, 0x99, {0x99, 0x2, "0279bb1ae72695b70722e68f4724f00e722a3c79e8f6cdd8ce7d53952f0266c0ca578994b13ae4f06afda4f8eba0de3dda5bb774c38305dfb7ca2de47d3d5f6dd33abfa2a1cc92acf2236d077fc6f503a72f254bdda59e31d28dcd1a9a3b9cf183725f28523552bbb9e5a43906affdef407cde2e6fccc2a4fcb794f046c67957afd239b00965ea8e16a659ed71bd494fdc192297e90e76"}}, &(0x7f0000000280)={0x0, 0x3, 0x20, @string={0x20, 0x3, "5191dda6cc15dccbd6662972d6981ecf3d7826ad42864502fc1fe2412a5f"}}, &(0x7f00000002c0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x10, 0x0, 0x6, "7f4aa380", "3e3809df"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x10, 0xa, 0x5, 0x80, 0x2, 0x77a}}}, &(0x7f0000000b40)={0x84, &(0x7f00000003c0)={0x20, 0x1, 0x2a, "9267bda3ab671a193660ee4d96f72a32e50d9493aa64e06ccff7887f6f2c69ba786bde0ca17e1cdd9465"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000600)=ANY=[@ANYBLOB="2000080000000400208000000000"], &(0x7f0000000640)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x6b}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "6006"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x13, 0x6}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @random="44446bb5e0cb"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "b2a3"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b00)={0x40, 0x21, 0x1}}) 4.280846788s ago: executing program 2 (id=1545): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000300), 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0xc32d, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r2, &(0x7f0000000140)="53f96c5da638fd45ead0d4ee42a35c9e9092497a08d5d949270dd889ab89583d1ff074b59aa395d2013fe2a858b8ab1cad0e08632dcbc707f75a54c2363b759b00168c789f7fe03c98806c13a06f165eed1a3f2c300bddd9d503c30e89b3a0ffb9cc3c3fa587dfeffe97b5fdcb4f611a352faa6b7a9ce3f2eda3d974d9f8f41e5bb3c13a85bb75714f3d193c91665f25657ee317b2658336ddced0e81c4547c50b7abd45c0348d76073d3bcfa8e8d39330593604e37fd80259d5419ff41ca85e73ab1dc3ef0761a657bb99c864ed93acabe7fcedde150c6dac9bd698df9faaa1e5e21ebd06f7eac92a53548814", &(0x7f0000000240)=""/17, 0x4}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8e}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}]}, &(0x7f0000000940)='GPL\x00', 0x3, 0x65, &(0x7f0000000980)=""/101, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0xf, 0x400, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[r2, r2, r2, r2, r4, r2, r2, r8, r2], &(0x7f0000000b40)=[{0x4, 0x1, 0x7, 0x7}, {0x3, 0x5, 0xb, 0xb}, {0x0, 0x1, 0xc, 0x3}], 0x10, 0x9}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000029c000/0x1000)=nil, 0x1000, 0x9) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400010004000000000000002d"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r10) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0x42f, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100e}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x59}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="38635de68d26fa1b105fad3fe3a9f53ef95c185cb7c7499e6d98d7ec1e3c816b6c3b767d45567e01be2725fba221aabc0100c0569441befb55cce4494bb308ca0540f61b3f41edc2ca780b0ce9cbdbc51a6fc6c0d57929ee537ed3bbb93072e4", 0x60}, {&(0x7f0000000340)="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", 0x561}], 0x2}, 0x0) 3.906027367s ago: executing program 2 (id=1546): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="84650000", 0x4) 3.761776597s ago: executing program 2 (id=1548): r0 = inotify_init() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.641635374s ago: executing program 2 (id=1550): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x8d4b518a5b0265d7, 0x1, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x14, 0x303000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf2541000000", @ANYRES32=r4, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040004) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2000, 0x2, 0xf2}) syz_emit_ethernet(0x33, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0806010e880906020007bbbbbbbbbbbb8f66b9341b64905847f2bbbbbbbbbbbb3b82767d46ed929733178484301f4f53a7f5362f216c42021de1517020429de2"], 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0x7d1d, 0xa], 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x100000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4048800}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x8000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 3.527913285s ago: executing program 1 (id=1551): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000540)=0x73, 0x4) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/4096, 0x1000, 0x2400}, 0x6}], 0x1, 0x40010022, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4080) 3.458897913s ago: executing program 1 (id=1552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x80, 0x80}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) 3.315276395s ago: executing program 1 (id=1553): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r10 = socket(0x18, 0x800, 0x0) sendfile(r10, r9, 0x0, 0x8) r11 = socket(0x2d, 0x2, 0x0) connect$qrtr(r11, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r11, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.259535811s ago: executing program 3 (id=1554): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0xe2}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000000)=[{r1, 0xe2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000002c0)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TCFLSH(r2, 0x540b, 0x2) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f00000000c0)=[{r0, 0x832308415e7c5548}], 0x1, 0x0, 0x0, 0xfffffe96) 1.999504729s ago: executing program 1 (id=1555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x40, r1, 0x1, 0x5, 0x8000000, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c899}, 0x14) 1.960938468s ago: executing program 3 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000074000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d367265673100000000e1ff000008000240000000020900020073797a31000000000900010073797a30000000000800074000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x40801}, 0x0) (fail_nth: 5) 1.924545261s ago: executing program 0 (id=1557): r0 = socket(0xa, 0x2, 0x0) r1 = inotify_init() r2 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r3}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r3}, 0xc) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r3}, 0xc) 1.916371833s ago: executing program 1 (id=1558): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(0xffffffffffffffff, &(0x7f0000000140)="84650000", 0x4) 1.760410983s ago: executing program 0 (id=1559): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0xa082}], 0x1, 0x0, 0x0, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7fffffc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000301000000000000000000de9cb700000000000001000400002e7255ddecd89a00000000000000000000000000000000000000000000000000691d0f76e7b625"], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x8850) 1.434091412s ago: executing program 2 (id=1560): r0 = inotify_init() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.36034355s ago: executing program 1 (id=1561): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0xa, 0x7fff, 0x0, 0x9, 0x1, 0x81, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r0, 0x0, 0x7c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x2c, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x94, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0xdc00, 0x0, 0x2800, 0x2, 0xbb6, 0x0, 0x1d, {0x80008, 0xffffffff}, 0xd0, 0x9}}) 1.359639124s ago: executing program 2 (id=1562): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x141040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x0, 0x0, 0xb49, 0x9, 0x401, 0x7d3d, 0x3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) syz_open_dev$usbmon(0x0, 0x4, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r6, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) epoll_create(0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.265740716s ago: executing program 3 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x80, 0x80}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) 1.26040987s ago: executing program 4 (id=1564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200004, 0x0, 0x0, 0xff}) r2 = msgget$private(0x0, 0x10) msgrcv(r2, 0x0, 0x0, 0x1, 0x800) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x113800, 0x0) io_uring_enter(r3, 0x40ac, 0x3e52, 0x48, &(0x7f0000000240)={[0x32]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r4, 0x5601, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0042, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x38) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x74c8, &(0x7f0000000040)={0x0, 0x1d36, 0xc000, 0x3, 0x37f}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)="b5", 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r7, 0x2219, 0x1adf, 0x16, 0x0, 0x0) io_uring_setup(0x1219, &(0x7f0000000100)={0x0, 0x751c, 0x400, 0x2, 0x1eb}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, 0x0, 0x0) 1.23275253s ago: executing program 3 (id=1565): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r10 = socket(0x18, 0x800, 0x0) sendfile(r10, r9, 0x0, 0x8) r11 = socket(0x2d, 0x2, 0x0) connect$qrtr(r11, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r11, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 0 (id=1566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r2, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000640)=""/126, 0x7e}, {&(0x7f0000000540)=""/228, 0xe4}], 0x3}, 0x3f}], 0x2, 0x2041, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async, rerun: 64) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) (async) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) fanotify_init(0x200, 0x0) (rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async) syz_io_uring_setup(0x10497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, 0x0, 0x0, &(0x7f0000000000)) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521}, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): ing ep0 maxpacket: 16 [ 243.967492][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.991910][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.017789][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.086571][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 244.108980][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.125872][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 244.136753][ T5898] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.178575][ T5898] usb 5-1: Manufacturer: syz [ 244.199580][ T5898] usb 5-1: config 0 descriptor?? [ 244.358215][ T8261] io-wq is not configured for unbound workers [ 244.418290][ T8277] FAULT_INJECTION: forcing a failure. [ 244.418290][ T8277] name fail_futex, interval 1, probability 0, space 0, times 1 [ 244.504809][ T8277] CPU: 0 UID: 0 PID: 8277 Comm: syz.2.716 Not tainted syzkaller #0 PREEMPT(full) [ 244.504837][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.504848][ T8277] Call Trace: [ 244.504857][ T8277] [ 244.504865][ T8277] dump_stack_lvl+0xe8/0x150 [ 244.504897][ T8277] should_fail_ex+0x412/0x560 [ 244.504932][ T8277] get_futex_key+0x1ac/0x1690 [ 244.504966][ T8277] ? __pfx_get_futex_key+0x10/0x10 [ 244.504989][ T8277] ? __lock_acquire+0x6b5/0x2cf0 [ 244.505023][ T8277] futex_wake+0x114/0x580 [ 244.505050][ T8277] ? __lock_acquire+0x6b5/0x2cf0 [ 244.505076][ T8277] ? __pfx_futex_wake+0x10/0x10 [ 244.505109][ T8277] ? exit_mm_release+0x1a/0x30 [ 244.505142][ T8277] do_futex+0x395/0x420 [ 244.505173][ T8277] ? __pfx_do_futex+0x10/0x10 [ 244.505201][ T8277] ? __might_fault+0xaf/0x130 [ 244.505223][ T8277] mm_release+0x103/0x290 [ 244.505251][ T8277] exit_mm+0x51/0x220 [ 244.505270][ T8277] ? unwind_deferred_task_exit+0x67/0xa0 [ 244.505299][ T8277] do_exit+0x6a2/0x23c0 [ 244.505322][ T8277] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 244.505349][ T8277] ? __pfx_do_exit+0x10/0x10 [ 244.505372][ T8277] ? do_raw_spin_lock+0x12b/0x2f0 [ 244.505402][ T8277] do_group_exit+0x21b/0x2d0 [ 244.505422][ T8277] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.505449][ T8277] get_signal+0x1284/0x1330 [ 244.505493][ T8277] arch_do_signal_or_restart+0xbc/0x830 [ 244.505521][ T8277] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.505564][ T8277] exit_to_user_mode_loop+0x86/0x480 [ 244.505584][ T8277] ? rcu_is_watching+0x15/0xb0 [ 244.505613][ T8277] do_syscall_64+0x32d/0xf80 [ 244.505636][ T8277] ? trace_irq_disable+0x3b/0x150 [ 244.505651][ T8277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.505669][ T8277] ? clear_bhb_loop+0x40/0x90 [ 244.505691][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.505711][ T8277] RIP: 0033:0x7f254279c819 [ 244.505730][ T8277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.505746][ T8277] RSP: 002b:00007f25409f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 244.505768][ T8277] RAX: 0000000000000000 RBX: 00007f2542a16090 RCX: 00007f254279c819 [ 244.505781][ T8277] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 244.505802][ T8277] RBP: 00007f25409f6090 R08: 0000000000000000 R09: 0000000000000000 [ 244.505814][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.505826][ T8277] R13: 00007f2542a16128 R14: 00007f2542a16090 R15: 00007f2542b3fa48 [ 244.505857][ T8277] [ 244.818881][ T5898] rc_core: IR keymap rc-hauppauge not found [ 244.833062][ T5898] Registered IR keymap rc-empty [ 244.856935][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 244.959461][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.020669][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 245.103130][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 245.213002][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.255104][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.304866][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.348693][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.414516][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.434373][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.465147][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.492688][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.512719][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.568072][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 245.596487][ T5898] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 245.625328][ T5898] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 245.689052][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 245.733618][ T5898] usb 5-1: USB disconnect, device number 25 [ 248.282249][ T8341] geneve1: Caught tx_queue_len zero misconfig [ 248.313403][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 249.288799][ T5874] usb 2-1: 0:2 : does not exist [ 249.293819][ T5874] usb 2-1: unit 48 not found! [ 249.298501][ T5874] usb 2-1: unit 120 not found! [ 249.322850][ T5874] usb 2-1: unit 102 not found! [ 249.629828][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.785691][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.832322][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.251879][ T8395] loop6: detected capacity change from 0 to 524288000 [ 251.688923][ T5874] usb 2-1: USB disconnect, device number 27 [ 252.600888][ T8441] FAULT_INJECTION: forcing a failure. [ 252.600888][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 252.631676][ T8441] CPU: 1 UID: 0 PID: 8441 Comm: syz.0.750 Not tainted syzkaller #0 PREEMPT(full) [ 252.631706][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.631717][ T8441] Call Trace: [ 252.631726][ T8441] [ 252.631734][ T8441] dump_stack_lvl+0xe8/0x150 [ 252.631769][ T8441] should_fail_ex+0x412/0x560 [ 252.631805][ T8441] should_failslab+0xa8/0x100 [ 252.631833][ T8441] __kmalloc_noprof+0xe8/0x760 [ 252.631857][ T8441] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 252.631885][ T8441] tomoyo_realpath_from_path+0xe3/0x5d0 [ 252.631917][ T8441] ? tomoyo_path_number_perm+0x219/0x630 [ 252.631944][ T8441] tomoyo_path_number_perm+0x246/0x630 [ 252.631983][ T8441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 252.632014][ T8441] ? __lock_acquire+0x6b5/0x2cf0 [ 252.632051][ T8441] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 252.632100][ T8441] ? __fget_files+0x2a/0x420 [ 252.632123][ T8441] ? __fget_files+0x2a/0x420 [ 252.632139][ T8441] ? __fget_files+0x3a0/0x420 [ 252.632156][ T8441] ? __fget_files+0x2a/0x420 [ 252.632179][ T8441] security_file_ioctl+0xc3/0x2a0 [ 252.632208][ T8441] __se_sys_ioctl+0x47/0x170 [ 252.632234][ T8441] do_syscall_64+0x14d/0xf80 [ 252.632259][ T8441] ? trace_irq_disable+0x3b/0x150 [ 252.632276][ T8441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.632296][ T8441] ? clear_bhb_loop+0x40/0x90 [ 252.632320][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.632345][ T8441] RIP: 0033:0x7fdf60f9c819 [ 252.632363][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.632378][ T8441] RSP: 002b:00007fdf61e83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.632400][ T8441] RAX: ffffffffffffffda RBX: 00007fdf61215fa0 RCX: 00007fdf60f9c819 [ 252.632412][ T8441] RDX: 0000200000000540 RSI: 00000000c050561a RDI: 0000000000000003 [ 252.632423][ T8441] RBP: 00007fdf61e83090 R08: 0000000000000000 R09: 0000000000000000 [ 252.632434][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.632443][ T8441] R13: 00007fdf61216038 R14: 00007fdf61215fa0 R15: 00007fdf6133fa48 [ 252.632472][ T8441] [ 252.896305][ T8441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.194487][ T5884] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 253.374411][ T5884] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 253.383315][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.418154][ T5884] usb 5-1: config 0 has no interface number 0 [ 253.453206][ T5884] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 253.489021][ T5884] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.546291][ T5884] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 253.566689][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.584503][ T5884] usb 5-1: Product: syz [ 253.594646][ T5884] usb 5-1: Manufacturer: syz [ 253.613444][ T5884] usb 5-1: SerialNumber: syz [ 253.650555][ T5884] usb 5-1: config 0 descriptor?? [ 254.323089][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.332926][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.333354][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 254.354160][ T5884] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input24 [ 254.671868][ T10] usb 1-1: device descriptor read/64, error -71 [ 254.972478][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 255.102705][ T10] usb 1-1: device descriptor read/64, error -71 [ 255.306294][ T10] usb usb1-port1: attempt power cycle [ 255.419445][ T5884] usb 5-1: USB disconnect, device number 26 [ 255.723336][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 255.763086][ T10] usb 1-1: device descriptor read/8, error -71 [ 255.954984][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.961680][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.013191][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 256.046423][ T10] usb 1-1: device descriptor read/8, error -71 [ 256.172989][ T10] usb usb1-port1: unable to enumerate USB device [ 257.260556][ T8533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 257.934405][ T5905] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 258.116175][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 258.127424][ T5905] usb 3-1: config 2 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.139140][ T5905] usb 3-1: config 2 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.151910][ T5905] usb 3-1: config 2 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 258.211611][ T5905] usb 3-1: config 2 interface 0 has no altsetting 0 [ 258.225210][ T5905] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 258.245950][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.580745][ T8552] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 258.767081][ T5905] hid_parser_main: 28 callbacks suppressed [ 258.767106][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 258.837034][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 258.850636][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 258.888917][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 258.910314][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 258.950805][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 258.973284][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 259.018378][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 259.045414][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x7 [ 259.151112][ T5905] elo 0003:04E7:0030.0005: unknown main item tag 0x0 [ 259.250518][ T5905] elo 0003:04E7:0030.0005: unexpected long global item [ 259.309581][ T5905] elo 0003:04E7:0030.0005: parse failed [ 259.340386][ T5905] elo 0003:04E7:0030.0005: probe with driver elo failed with error -22 [ 259.492853][ T5905] usb 3-1: USB disconnect, device number 20 [ 259.533469][ T8566] tun0: tun_chr_ioctl cmd 1074025673 [ 259.591008][ T8558] netlink: 72 bytes leftover after parsing attributes in process `syz.1.779'. [ 259.827087][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 261.246783][ T8597] xt_hashlimit: size too large, truncated to 1048576 [ 261.708635][ T8609] xt_CT: No such helper "pptp" [ 262.008998][ T8617] capability: warning: `syz.0.797' uses deprecated v2 capabilities in a way that may be insecure [ 263.234792][ T8651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4013772623 (16055090492 ns) > initial count (2788997612 ns). Using initial count to start timer. [ 265.170303][ T8691] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 265.228139][ T8693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'. [ 265.237413][ T8693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'. [ 265.290598][ T8694] tipc: Started in network mode [ 265.302579][ T8694] tipc: Node identity 84e, cluster identity 4711 [ 265.319405][ T8694] tipc: Node number set to 2126 [ 266.202540][ T5884] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 266.326780][ T8720] tipc: Enabling of bearer rejected, failed to enable media [ 266.362578][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 266.369755][ T5884] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.381113][ T5884] usb 1-1: config 0 interface 0 has no altsetting 0 [ 266.425905][ T5884] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 266.437221][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.447612][ T5884] usb 1-1: Product: syz [ 266.524765][ T5884] usb 1-1: Manufacturer: syz [ 266.535741][ T5884] usb 1-1: SerialNumber: syz [ 266.550749][ T5884] usb 1-1: config 0 descriptor?? [ 266.776236][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 266.791826][ T5884] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 266.820106][ T5884] imon:send_packet: packet tx failed (-71) [ 266.853571][ T5884] imon 1-1:0.0: panel buttons/knobs setup failed [ 267.007900][ T5884] rc_core: IR keymap rc-imon-pad not found [ 267.017357][ T5884] Registered IR keymap rc-empty [ 267.027806][ T5884] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 267.051583][ T5884] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 267.064095][ T5884] imon:send_packet: packet tx failed (-71) [ 267.082627][ T5884] imon 1-1:0.0: remote input dev register failed [ 267.091021][ T5884] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 267.134788][ T5884] imon 1-1:0.0: unable to initialize intf0, err 0 [ 267.412760][ T5884] imon:imon_probe: failed to initialize context! [ 267.419263][ T5884] imon 1-1:0.0: unable to register, err -19 [ 267.432722][ T5884] usb 1-1: USB disconnect, device number 23 [ 267.893325][ T5884] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 268.052438][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 268.075879][ T5884] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.116728][ T5884] usb 1-1: config 0 interface 0 has no altsetting 0 [ 268.137763][ T5884] usb 1-1: string descriptor 0 read error: -22 [ 268.152777][ T5884] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 268.175651][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.192119][ T8745] netlink: 'syz.3.844': attribute type 4 has an invalid length. [ 268.227545][ T5884] usb 1-1: config 0 descriptor?? [ 268.249822][ T5884] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 268.583415][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 268.666528][ T8758] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20005 [ 268.733787][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 268.754362][ T5884] imon:send_packet: packet tx failed (-71) [ 268.760452][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 268.769275][ T10] usb 3-1: config 0 has no interfaces? [ 268.775997][ T5884] imon 1-1:0.0: panel buttons/knobs setup failed [ 268.789240][ T10] usb 3-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 268.804851][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.819450][ T10] usb 3-1: Product: syz [ 268.828624][ T10] usb 3-1: Manufacturer: syz [ 268.836584][ T10] usb 3-1: SerialNumber: syz [ 268.861646][ T10] usb 3-1: config 0 descriptor?? [ 269.076247][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.086910][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.104923][ T24] usb 3-1: USB disconnect, device number 21 [ 269.452468][ T5884] rc_core: IR keymap rc-imon-pad not found [ 269.458825][ T5884] Registered IR keymap rc-empty [ 269.469052][ T5884] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 269.511057][ T5884] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 269.540088][ T5884] imon:send_packet: packet tx failed (-71) [ 269.584032][ T5884] imon 1-1:0.0: remote input dev register failed [ 269.590786][ T5884] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 269.655997][ T5884] imon 1-1:0.0: unable to initialize intf0, err 0 [ 269.667574][ T5884] imon:imon_probe: failed to initialize context! [ 269.722838][ T5960] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 269.741015][ T5884] imon 1-1:0.0: unable to register, err -19 [ 269.768137][ T5884] usb 1-1: USB disconnect, device number 24 [ 269.888924][ T5960] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 269.897584][ T5960] usb 3-1: config 0 has no interface number 0 [ 269.906969][ T5960] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.949814][ T5960] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 269.959219][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.010021][ T5960] usb 3-1: Product: syz [ 270.014618][ T5960] usb 3-1: Manufacturer: syz [ 270.019239][ T5960] usb 3-1: SerialNumber: syz [ 270.051391][ T5960] usb 3-1: config 0 descriptor?? [ 270.629447][ T24] usb 3-1: USB disconnect, device number 22 [ 273.076279][ T8818] IPVS: sed: FWM 3 0x00000003 - no destination available [ 273.092588][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 273.507041][ T5884] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 273.509042][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 273.612565][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 273.672418][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 273.679848][ T5884] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.694929][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.789925][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.800234][ T5884] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.824309][ T5884] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.012642][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.241526][ T5884] usb 1-1: GET_CAPABILITIES returned 0 [ 274.284835][ T5884] usbtmc 1-1:16.0: can't read capabilities [ 274.455559][ T8826] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 274.483778][ T5874] usb 1-1: USB disconnect, device number 25 [ 275.723487][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 275.723506][ T29] audit: type=1800 audit(1775258000.310:81): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.885" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 275.803583][ T8862] binder: BINDER_SET_CONTEXT_MGR already set [ 275.809602][ T8862] binder: 8860:8862 ioctl 4018620d 200000004a80 returned -16 [ 276.029683][ T8868] batman_adv: batadv0: Adding interface: dummy0 [ 276.052653][ T8868] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.165874][ T8868] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 276.602443][ T5884] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 276.841106][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 276.860049][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.891652][ T5884] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 276.911109][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.935657][ T5884] usb 1-1: config 0 descriptor?? [ 276.952309][ T8877] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.422578][ T5884] hid_parser_main: 5 callbacks suppressed [ 277.422606][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.437767][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.446007][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.453739][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.461135][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.469166][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.476529][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.540551][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.581840][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.619651][ T5884] a4tech 0003:09DA:001A.0006: unknown main item tag 0x0 [ 277.674536][ T5884] a4tech 0003:09DA:001A.0006: hidraw0: USB HID v0.20 Device [HID 09da:001a] on usb-dummy_hcd.0-1/input0 [ 278.722489][ T5874] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 278.942765][ T5874] usb 2-1: device descriptor read/64, error -71 [ 279.235652][ T5874] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 279.402495][ T5874] usb 2-1: device descriptor read/64, error -71 [ 279.532467][ T5874] usb usb2-port1: attempt power cycle [ 279.822594][ T5884] usb 1-1: USB disconnect, device number 26 [ 280.103419][ T5874] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 280.137059][ T5874] usb 2-1: device descriptor read/8, error -71 [ 280.402930][ T5874] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 280.480813][ T5874] usb 2-1: device descriptor read/8, error -71 [ 280.686909][ T5874] usb usb2-port1: unable to enumerate USB device [ 281.936191][ T8943] xt_hashlimit: size too large, truncated to 1048576 [ 282.596333][ T8965] capability: warning: `syz.1.923' uses 32-bit capabilities (legacy support in use) [ 282.917709][ T8974] macvlan0: entered promiscuous mode [ 283.146956][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 283.255733][ T8980] bond_slave_0: entered promiscuous mode [ 283.261497][ T8980] bond_slave_1: entered promiscuous mode [ 283.458606][ T8980] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 283.469975][ T8980] bond_slave_0: left promiscuous mode [ 283.475610][ T8980] bond_slave_1: left promiscuous mode [ 283.675288][ T8992] netlink: 'syz.3.931': attribute type 6 has an invalid length. [ 284.622254][ T9004] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 284.812472][ T5905] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 285.137948][ T5905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 285.147370][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.156211][ T5905] usb 4-1: Product: syz [ 285.160642][ T5905] usb 4-1: Manufacturer: syz [ 285.206455][ T5905] usb 4-1: SerialNumber: syz [ 285.243538][ T5905] usb 4-1: config 0 descriptor?? [ 285.488368][ T5905] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 286.082721][ T5898] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 286.454713][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.465833][ T5898] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 286.486886][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.518545][ T5898] usb 3-1: config 0 descriptor?? [ 286.543220][ T5898] pwc: Askey VC010 type 2 USB webcam detected. [ 287.103822][ T5905] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 287.152383][ T5905] usb 4-1: USB disconnect, device number 23 [ 287.165977][ T5898] pwc: recv_control_msg error -71 req 02 val 2700 [ 287.193719][ T5898] pwc: recv_control_msg error -71 req 02 val 2c00 [ 287.207769][ T5898] pwc: recv_control_msg error -71 req 04 val 1000 [ 287.219547][ T5898] pwc: recv_control_msg error -71 req 04 val 1300 [ 287.229240][ T5898] pwc: recv_control_msg error -71 req 04 val 1400 [ 287.236688][ T5898] pwc: recv_control_msg error -71 req 02 val 2000 [ 287.237992][ T9040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.952'. [ 287.243950][ T5898] pwc: recv_control_msg error -71 req 02 val 2100 [ 287.259939][ T5898] pwc: recv_control_msg error -71 req 04 val 1500 [ 287.267330][ T5898] pwc: recv_control_msg error -71 req 02 val 2500 [ 287.274834][ T5898] pwc: recv_control_msg error -71 req 02 val 2400 [ 287.284646][ T5898] pwc: recv_control_msg error -71 req 02 val 2600 [ 287.293497][ T5898] pwc: recv_control_msg error -71 req 02 val 2900 [ 287.329679][ T5898] pwc: recv_control_msg error -71 req 02 val 2800 [ 287.342614][ T5898] pwc: recv_control_msg error -71 req 04 val 1100 [ 287.349978][ T5898] pwc: recv_control_msg error -71 req 04 val 1200 [ 287.363608][ T5898] pwc: Registered as video103. [ 287.380041][ T5898] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 287.433313][ T5898] usb 3-1: USB disconnect, device number 23 [ 287.663327][ T5925] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 287.774964][ T9053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.955'. [ 287.826601][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 287.842548][ T5925] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 287.856320][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.888692][ T5925] usb 5-1: Product: syz [ 287.904054][ T5925] usb 5-1: Manufacturer: syz [ 287.916298][ T5925] usb 5-1: SerialNumber: syz [ 287.944608][ T5925] usb 5-1: config 0 descriptor?? [ 288.195698][ T5925] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 027 [ 288.448020][ T9040] i2c i2c-1: failure reading data [ 288.562444][ T5925] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 288.924670][ T5925] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 288.938772][ T5925] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 288.961005][ T5925] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 289.422534][ T5925] usb 3-1: config 0 has no interface number 0 [ 289.447590][ T5925] usb 3-1: config 0 has no interface number 1 [ 289.476656][ T5925] usb 3-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 289.496513][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.524799][ T5925] usb 3-1: Product: syz [ 289.541846][ T5925] usb 3-1: Manufacturer: syz [ 289.555582][ T5925] usb 3-1: SerialNumber: syz [ 289.581479][ T5925] usb 3-1: config 0 descriptor?? [ 289.594882][ T5925] cdc_acm 3-1:0.51: probe with driver cdc_acm failed with error -22 [ 289.812900][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.822069][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.838271][ T5898] usb 3-1: USB disconnect, device number 24 [ 289.896928][ T9083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.164757][ T5898] usb 5-1: USB disconnect, device number 27 [ 290.739855][ T9094] binder: BINDER_SET_CONTEXT_MGR already set [ 290.746009][ T9094] binder: 9088:9094 ioctl 4018620d 200000000040 returned -16 [ 291.016780][ T9091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.967'. [ 291.038844][ T9095] bridge2: entered promiscuous mode [ 291.068389][ T9097] netlink: 'syz.2.966': attribute type 2 has an invalid length. [ 292.296561][ T9109] futex_wake_op: syz.0.971 tries to shift op by -1; fix this program [ 293.247070][ T9112] netlink: 40 bytes leftover after parsing attributes in process `syz.4.972'. [ 293.515786][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 293.555191][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.978'. [ 293.583559][ T5884] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 293.675283][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 293.688948][ T5925] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 293.709970][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.731522][ T5925] usb 4-1: Product: syz [ 293.741639][ T5925] usb 4-1: Manufacturer: syz [ 293.749803][ T5884] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 293.764985][ T5884] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 293.938639][ T9139] xt_hashlimit: size too large, truncated to 1048576 [ 293.995104][ T5884] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 294.050659][ T5925] usb 4-1: SerialNumber: syz [ 294.102554][ T5905] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 294.127684][ T5925] usb 4-1: config 0 descriptor?? [ 294.140681][ T5884] usb 2-1: config 0 has no interface number 0 [ 294.188325][ T5884] usb 2-1: config 0 has no interface number 1 [ 294.206963][ T5884] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 294.216472][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.262702][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 294.300541][ T5884] usb 2-1: Product: syz [ 294.301793][ T5905] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 294.313049][ T5884] usb 2-1: Manufacturer: syz [ 294.314313][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.318868][ T5884] usb 2-1: SerialNumber: syz [ 294.443208][ T5884] usb 2-1: config 0 descriptor?? [ 294.456482][ T5884] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22 [ 294.483712][ T5925] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 294.522110][ T5925] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 294.527161][ T5905] usb 3-1: Product: syz [ 294.549551][ T5905] usb 3-1: Manufacturer: syz [ 294.564590][ T5905] usb 3-1: SerialNumber: syz [ 294.586486][ T5905] usb 3-1: config 0 descriptor?? [ 294.620648][ T5925] usb 4-1: USB disconnect, device number 24 [ 294.690510][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.713262][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.760734][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.800423][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.834472][ T5905] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 025 [ 294.856327][ T5874] usb 2-1: USB disconnect, device number 32 [ 295.103236][ T9129] i2c i2c-1: failure reading data [ 295.753055][ T5874] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 295.797749][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.990'. [ 295.911434][ T5874] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 295.922483][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.934084][ T5874] usb 2-1: config 0 has no interface number 0 [ 295.940282][ T5874] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 295.952514][ T5874] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.986748][ T5874] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 295.999663][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.008383][ T5874] usb 2-1: Product: syz [ 296.036703][ T5874] usb 2-1: Manufacturer: syz [ 296.047159][ T5874] usb 2-1: SerialNumber: syz [ 296.062975][ T5874] usb 2-1: config 0 descriptor?? [ 296.621086][ T5884] usb 3-1: USB disconnect, device number 25 [ 296.742650][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.780948][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.797812][ T5874] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input30 [ 297.564450][ T9177] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 297.592569][ T9177] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 297.628432][ T9177] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 297.752524][ T5874] usb 2-1: USB disconnect, device number 33 [ 297.792494][ T5925] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 297.952447][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 297.986277][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 297.996074][ T5925] usb 5-1: config 7 has an invalid descriptor of length 204, skipping remainder of the config [ 298.038054][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.996'. [ 298.047224][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.996'. [ 298.063232][ T5925] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 298.104448][ T5925] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 298.114851][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.128776][ T5925] usb 5-1: Product: syz [ 298.144613][ T5925] usb 5-1: Manufacturer: syz [ 298.169863][ T5925] usb 5-1: SerialNumber: syz [ 298.415352][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.432866][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.633113][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 298.665259][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1001'. [ 298.945369][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 298.958602][ T10] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 298.986512][ T10] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 299.035501][ T10] usb 2-1: config 0 has no interface number 0 [ 299.063670][ T10] usb 2-1: config 0 has no interface number 1 [ 299.085089][ T10] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 299.110157][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.135592][ T10] usb 2-1: Product: syz [ 299.151458][ T10] usb 2-1: Manufacturer: syz [ 299.164589][ T10] usb 2-1: SerialNumber: syz [ 299.191603][ T10] usb 2-1: config 0 descriptor?? [ 299.225208][ T10] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22 [ 299.439679][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 299.455312][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.464817][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.481352][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.532646][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.568754][ T5905] usb 2-1: USB disconnect, device number 34 [ 299.962513][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 300.124188][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 300.140317][ T10] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 300.152048][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.264897][ T10] usb 3-1: Product: syz [ 300.596541][ T10] usb 3-1: Manufacturer: syz [ 300.611480][ T10] usb 3-1: SerialNumber: syz [ 300.623485][ T5925] usb 5-1: USB disconnect, device number 28 [ 300.681565][ T10] usb 3-1: config 0 descriptor?? [ 301.012970][ T10] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 026 [ 301.262052][ T9198] i2c i2c-1: failure reading data [ 302.685213][ T5898] usb 3-1: USB disconnect, device number 26 [ 304.155812][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1013'. [ 304.445974][ T9259] netlink: 'syz.4.1017': attribute type 3 has an invalid length. [ 304.933628][ T9265] loop6: detected capacity change from 0 to 524288000 [ 305.802952][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 306.302667][ T5905] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 306.482563][ T5874] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 306.521911][ T5905] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 306.540840][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.582807][ T5905] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 306.622443][ T5905] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 306.630614][ T5905] usb 5-1: Manufacturer: syz [ 306.732168][ T5905] usb 5-1: config 0 descriptor?? [ 306.795013][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 306.819496][ T5874] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 306.831524][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.859378][ T5874] usb 4-1: Product: syz [ 306.868118][ T5874] usb 4-1: Manufacturer: syz [ 306.881827][ T5874] usb 4-1: SerialNumber: syz [ 306.897843][ T5874] usb 4-1: config 0 descriptor?? [ 307.213108][ T5874] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 025 [ 307.223628][ T5905] rc_core: IR keymap rc-hauppauge not found [ 307.238654][ T5905] Registered IR keymap rc-empty [ 307.250069][ T5905] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 307.286631][ T5905] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 307.311553][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 307.432176][ T9280] i2c i2c-1: failure reading data [ 307.453848][ T5905] usb 5-1: USB disconnect, device number 29 [ 307.893740][ T9302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1029'. [ 308.002482][ T5905] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 308.168392][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 308.182257][ T5905] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 308.222646][ T5905] usb 1-1: config 0 has no interface number 0 [ 308.229021][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.287187][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 308.363109][ T5905] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.395250][ T5905] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 308.431649][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.569276][ T5905] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 308.602091][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.637807][ T5905] usb 1-1: config 0 descriptor?? [ 308.665685][ T5905] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 308.856303][ T9304] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90 [ 308.872442][ T5874] usb 1-1: USB disconnect, device number 27 [ 308.884434][ T5874] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 308.901271][ T5905] usb 4-1: USB disconnect, device number 25 [ 310.412519][ T5925] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 310.679575][ T5925] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 310.694806][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.711356][ T5925] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 310.721369][ T5925] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 310.805792][ T5925] usb 1-1: Manufacturer: syz [ 310.903144][ T5925] usb 1-1: config 0 descriptor?? [ 310.972457][ T5925] rc_core: IR keymap rc-hauppauge not found [ 311.022165][ T5925] Registered IR keymap rc-empty [ 311.043275][ T5925] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 311.112887][ T5925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 311.154662][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 311.451195][ T9361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1045'. [ 311.482422][ T5905] usb 1-1: USB disconnect, device number 28 [ 312.043068][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 312.128889][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'. [ 312.138131][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'. [ 312.302432][ T5925] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 312.390650][ T9384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1059'. [ 312.401203][ T9384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1059'. [ 312.468400][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 312.486763][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 312.501767][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 312.539234][ T5925] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 312.568439][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.591316][ T5925] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 312.678683][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 312.689033][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 312.812130][ T5925] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 312.821543][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.830654][ T5925] usb 3-1: Product: syz [ 312.835274][ T5925] usb 3-1: Manufacturer: syz [ 312.851767][ T5925] usb 3-1: SerialNumber: syz [ 312.870123][ T5925] usb 3-1: config 0 descriptor?? [ 313.254784][ T5925] port100 3-1:0.0: NFC: Could not get supported command types [ 313.477590][ T5925] usb 3-1: USB disconnect, device number 27 [ 313.851076][ T9407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1067'. [ 314.013454][ T5925] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 314.022690][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1069'. [ 314.168667][ T5925] usb 4-1: device descriptor read/64, error -71 [ 314.394587][ T5874] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 314.442512][ T5925] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 314.555030][ T9433] bridge3: entered promiscuous mode [ 314.575391][ T9433] netlink: 'syz.1.1077': attribute type 2 has an invalid length. [ 314.590898][ T5874] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 314.593389][ T5925] usb 4-1: device descriptor read/64, error -71 [ 314.599532][ T5874] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 314.713557][ T5925] usb usb4-port1: attempt power cycle [ 314.720047][ T5874] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 314.756115][ T5874] usb 3-1: config 0 has no interface number 0 [ 314.780539][ T5874] usb 3-1: config 0 has no interface number 1 [ 314.789415][ T5874] usb 3-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 314.806444][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.842587][ T5874] usb 3-1: Product: syz [ 314.850505][ T5874] usb 3-1: Manufacturer: syz [ 314.859921][ T5874] usb 3-1: SerialNumber: syz [ 314.880297][ T5874] usb 3-1: config 0 descriptor?? [ 314.905115][ T5874] cdc_acm 3-1:0.51: probe with driver cdc_acm failed with error -22 [ 315.062554][ T5925] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 315.100929][ T5925] usb 4-1: device descriptor read/8, error -71 [ 315.379441][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.390634][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.409397][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.422744][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.442608][ T5925] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 315.537154][ T5925] usb 4-1: device descriptor read/8, error -71 [ 315.621556][ T10] usb 3-1: USB disconnect, device number 28 [ 315.652719][ T5925] usb usb4-port1: unable to enumerate USB device [ 317.109579][ T9461] __nla_validate_parse: 1 callbacks suppressed [ 317.109593][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'. [ 317.125210][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'. [ 317.387343][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.395474][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.572841][ T9467] bond2: Removing last arp target with arp_interval on [ 317.608644][ T9467] bond2: entered promiscuous mode [ 317.620362][ T9467] bond2: entered allmulticast mode [ 317.654825][ T9467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.192673][ T42] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 319.332510][ T42] usb 2-1: device descriptor read/64, error -71 [ 319.593743][ T42] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 319.763113][ T42] usb 2-1: device descriptor read/64, error -71 [ 319.893469][ T42] usb usb2-port1: attempt power cycle [ 320.023634][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1099'. [ 320.042413][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1099'. [ 320.362504][ T42] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 320.382989][ T42] usb 2-1: device descriptor read/8, error -71 [ 320.454226][ T9516] xt_hashlimit: size too large, truncated to 1048576 [ 320.642434][ T42] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 320.675135][ T42] usb 2-1: device descriptor read/8, error -71 [ 320.955074][ T42] usb usb2-port1: unable to enumerate USB device [ 320.969123][ T9522] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 320.987160][ T9522] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 321.012978][ T9522] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 321.354811][ T9536] binder: BINDER_SET_CONTEXT_MGR already set [ 321.361066][ T9536] binder: 9535:9536 ioctl 4018620d 200000004a80 returned -16 [ 321.427683][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 321.453856][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 321.911220][ T9552] xt_hashlimit: size too large, truncated to 1048576 [ 322.263485][ T9561] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1119'. [ 322.283357][ T9561] unsupported nla_type 3072 [ 322.349967][ T9561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.984887][ T9570] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 323.106621][ T9570] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 323.122769][ T9570] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 323.150776][ T9572] binder: BINDER_SET_CONTEXT_MGR already set [ 323.157074][ T9572] binder: 9571:9572 ioctl 4018620d 200000004a80 returned -16 [ 323.625715][ T9580] netlink: 'syz.4.1125': attribute type 3 has an invalid length. [ 323.879940][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'. [ 323.912505][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'. [ 324.022488][ T5884] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 324.378706][ T5884] usb 2-1: device descriptor read/64, error -71 [ 324.748105][ T5884] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 324.892546][ T5884] usb 2-1: device descriptor read/64, error -71 [ 325.152655][ T5884] usb usb2-port1: attempt power cycle [ 325.304657][ T9610] xt_hashlimit: size too large, truncated to 1048576 [ 325.363042][ T9613] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1135'. [ 325.605594][ T5884] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 325.633367][ T5884] usb 2-1: device descriptor read/8, error -71 [ 326.133367][ T9621] loop6: detected capacity change from 0 to 524288000 [ 326.198651][ T9619] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 326.226083][ T9619] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 326.257206][ T9619] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 326.341645][ T5884] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 326.383864][ T5884] usb 2-1: device descriptor read/8, error -71 [ 326.536106][ T5884] usb usb2-port1: unable to enumerate USB device [ 327.851973][ T9652] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1147'. [ 327.861358][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 327.967188][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1145'. [ 327.976480][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1145'. [ 329.579862][ T9672] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 329.588593][ T9672] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 329.604223][ T9672] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 329.882556][ T5905] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 330.044352][ T5905] usb 3-1: device descriptor read/64, error -71 [ 330.344496][ T5905] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 330.492433][ T5905] usb 3-1: device descriptor read/64, error -71 [ 330.614298][ T5905] usb usb3-port1: attempt power cycle [ 330.698829][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'. [ 330.713137][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'. [ 331.312747][ T5905] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 331.347231][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 331.363100][ T5905] usb 3-1: device descriptor read/8, error -71 [ 331.392740][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 331.632438][ T5905] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 331.663221][ T5905] usb 3-1: device descriptor read/8, error -71 [ 331.784861][ T5905] usb usb3-port1: unable to enumerate USB device [ 332.726271][ T9727] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 332.775539][ T9727] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 332.843957][ T9727] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 333.023681][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 333.185098][ T10] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 333.194284][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.211414][ T10] usb 1-1: config 0 has no interface number 0 [ 333.231943][ T10] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 333.244496][ T10] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.259170][ T9740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'. [ 333.270012][ T9740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'. [ 333.281648][ T10] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 333.294461][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.318190][ T10] usb 1-1: Product: syz [ 333.323979][ T10] usb 1-1: Manufacturer: syz [ 333.329172][ T10] usb 1-1: SerialNumber: syz [ 333.336147][ T5898] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 333.342830][ T10] usb 1-1: config 0 descriptor?? [ 333.520480][ T5898] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 333.550352][ T5898] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 333.589369][ T5898] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 333.619969][ T5898] usb 2-1: config 0 has no interface number 0 [ 333.640163][ T5898] usb 2-1: config 0 has no interface number 1 [ 333.661333][ T5898] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 333.678454][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.704983][ T5898] usb 2-1: Product: syz [ 333.722388][ T5898] usb 2-1: Manufacturer: syz [ 333.737458][ T5898] usb 2-1: SerialNumber: syz [ 333.829279][ T9746] loop6: detected capacity change from 0 to 524288000 [ 333.913344][ T5898] usb 2-1: config 0 descriptor?? [ 333.959299][ T5898] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22 [ 334.167100][ T9729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.219373][ T9729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.254505][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.117/input/input33 [ 334.275799][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.311155][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.347713][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.383245][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.423747][ T5925] usb 2-1: USB disconnect, device number 43 [ 334.598805][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 334.783232][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 334.804705][ T10] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 334.817544][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.838587][ T10] usb 5-1: Product: syz [ 334.848449][ T10] usb 5-1: Manufacturer: syz [ 334.859471][ T10] usb 5-1: SerialNumber: syz [ 334.878215][ T10] usb 5-1: config 0 descriptor?? [ 335.111366][ T10] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 030 [ 335.268351][ T9766] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 335.269585][ T5905] usb 1-1: USB disconnect, device number 29 [ 335.277860][ T9766] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 335.314534][ T9766] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 335.369917][ T9750] i2c i2c-1: failure reading data [ 335.544764][ T9772] loop6: detected capacity change from 0 to 524288000 [ 336.983042][ T5905] usb 5-1: USB disconnect, device number 30 [ 337.726491][ T5960] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 338.008350][ T5960] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 338.087767][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.145556][ T5960] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 338.155111][ T5960] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 338.173943][ T5960] usb 4-1: Manufacturer: syz [ 338.189730][ T5960] usb 4-1: config 0 descriptor?? [ 338.442385][ T5960] rc_core: IR keymap rc-hauppauge not found [ 338.448812][ T5960] Registered IR keymap rc-empty [ 338.458111][ T5960] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 338.504171][ T5960] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 338.550666][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 338.736945][ T5960] usb 4-1: USB disconnect, device number 30 [ 338.979685][ T9825] netlink: 'syz.0.1200': attribute type 32 has an invalid length. [ 339.003271][ T5905] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 339.152458][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 339.186228][ T5905] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 339.196506][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.250234][ T5905] usb 5-1: Product: syz [ 339.635006][ T5905] usb 5-1: Manufacturer: syz [ 339.649791][ T5905] usb 5-1: SerialNumber: syz [ 339.677454][ T5905] usb 5-1: config 0 descriptor?? [ 339.914670][ T5905] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 031 [ 340.263316][ T9818] i2c i2c-1: failure reading data [ 340.282470][ T5960] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 340.503021][ T5960] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 340.511343][ T5960] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 340.521481][ T5960] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 340.530838][ T5960] usb 3-1: config 0 has no interface number 0 [ 340.597787][ T5960] usb 3-1: config 0 has no interface number 1 [ 340.683573][ T5960] usb 3-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 340.734384][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.746260][ T5960] usb 3-1: Product: syz [ 340.751666][ T5960] usb 3-1: Manufacturer: syz [ 340.758318][ T5960] usb 3-1: SerialNumber: syz [ 340.913933][ T5960] usb 3-1: config 0 descriptor?? [ 340.930015][ T5960] cdc_acm 3-1:0.51: probe with driver cdc_acm failed with error -22 [ 341.149291][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.158622][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.168600][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.186331][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.228215][ T5960] usb 3-1: USB disconnect, device number 33 [ 341.737315][ T5960] usb 5-1: USB disconnect, device number 31 [ 342.525116][ T5905] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 342.651026][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 343.123893][ T5905] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 343.134107][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.295678][ T5905] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 343.306360][ T5905] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 343.321323][ T5905] usb 3-1: Manufacturer: syz [ 343.344315][ T5905] usb 3-1: config 0 descriptor?? [ 343.462537][ T5905] rc_core: IR keymap rc-hauppauge not found [ 343.468630][ T5905] Registered IR keymap rc-empty [ 343.713869][ T5905] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 343.835612][ T5905] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 343.867342][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 343.953838][ T5925] usb 3-1: USB disconnect, device number 34 [ 344.242837][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 344.410169][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 344.427893][ T10] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 344.463229][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.494377][ T10] usb 1-1: Product: syz [ 344.511903][ T10] usb 1-1: Manufacturer: syz [ 344.529051][ T10] usb 1-1: SerialNumber: syz [ 344.551115][ T10] usb 1-1: config 0 descriptor?? [ 344.722515][ T5884] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 344.767420][ T10] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 030 [ 344.884805][ T5884] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 344.893385][ T5884] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 344.901734][ T5884] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 344.911400][ T5884] usb 2-1: config 0 has no interface number 0 [ 344.918432][ T5884] usb 2-1: config 0 has no interface number 1 [ 344.928435][ T5884] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 344.938190][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.946447][ T5884] usb 2-1: Product: syz [ 344.950901][ T5884] usb 2-1: Manufacturer: syz [ 344.955780][ T5884] usb 2-1: SerialNumber: syz [ 344.980893][ T5884] usb 2-1: config 0 descriptor?? [ 344.989976][ T5884] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22 [ 345.031099][ T9886] i2c i2c-1: failure reading data [ 345.199299][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.208541][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.221505][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.251803][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.277752][ T5898] usb 2-1: USB disconnect, device number 44 [ 345.478010][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.007323][ T9933] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1236'. [ 346.192791][ T9941] netlink: 'syz.3.1238': attribute type 32 has an invalid length. [ 346.312613][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 346.476956][ T5884] usb 1-1: USB disconnect, device number 30 [ 346.499438][ T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 346.541274][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.604877][ T10] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 346.619835][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 346.648151][ T10] usb 2-1: Manufacturer: syz [ 346.676978][ T10] usb 2-1: config 0 descriptor?? [ 346.939519][ T10] rc_core: IR keymap rc-hauppauge not found [ 347.025793][ T10] Registered IR keymap rc-empty [ 347.044163][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 347.077554][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 347.161709][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 347.219558][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1243'. [ 347.233731][ T42] usb 2-1: USB disconnect, device number 45 [ 347.723054][ T5905] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 348.004098][ T5905] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 348.012867][ T5905] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 348.056495][ T5905] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 348.105233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.117014][ T5905] usb 1-1: config 0 has no interface number 0 [ 348.155475][ T5905] usb 1-1: config 0 has no interface number 1 [ 348.173932][ T5905] usb 1-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 348.285749][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.353586][ T5905] usb 1-1: Product: syz [ 348.357840][ T5905] usb 1-1: Manufacturer: syz [ 348.378551][ T5905] usb 1-1: SerialNumber: syz [ 348.393552][ T9972] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1248'. [ 348.408283][ T5905] usb 1-1: config 0 descriptor?? [ 348.423220][ T5905] cdc_acm 1-1:0.51: probe with driver cdc_acm failed with error -22 [ 348.517837][ T9977] binder: BINDER_SET_CONTEXT_MGR already set [ 348.524030][ T9977] binder: 9970:9977 ioctl 4018620d 200000000040 returned -16 [ 348.701750][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.775732][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.874468][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.883581][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.972438][ T5905] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 348.978692][ T10] usb 1-1: USB disconnect, device number 31 [ 349.152511][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 349.169200][ T5905] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 349.185710][ T5905] usb 2-1: config 0 has no interface number 0 [ 349.212785][ T5905] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.417187][ T5905] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.461445][ T5905] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.508411][ T5905] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 349.541118][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.599462][ T5905] usb 2-1: config 0 descriptor?? [ 349.617099][ T5905] ldusb 2-1:0.55: Interrupt in endpoint not found [ 349.780264][ T9999] syzkaller1: entered promiscuous mode [ 349.786675][ T9999] syzkaller1: entered allmulticast mode [ 349.842369][ T5884] usb 2-1: USB disconnect, device number 46 [ 349.911015][ T5905] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 350.276633][ T5905] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 350.296145][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.309334][ T5905] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 350.319319][ T5905] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 350.327994][ T5905] usb 3-1: Manufacturer: syz [ 350.341169][ T5905] usb 3-1: config 0 descriptor?? [ 350.364232][T10007] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1261'. [ 350.463125][ T5905] rc_core: IR keymap rc-hauppauge not found [ 350.470302][ T5905] Registered IR keymap rc-empty [ 350.482674][ T5905] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 350.531095][ T5905] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 350.606840][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 350.687639][ T5884] usb 3-1: USB disconnect, device number 35 [ 350.972926][T10005] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1260'. [ 351.142630][ T5905] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 351.305451][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.348666][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.445481][ T5905] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 351.455246][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.466845][ T5905] usb 2-1: config 0 descriptor?? [ 351.595055][ T5884] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 351.716939][T10018] input: syz1 as /devices/virtual/input/input38 [ 351.864584][ T5884] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 351.873077][ T5884] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 351.884210][ T5884] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 351.950510][ T5884] usb 4-1: config 0 has no interface number 0 [ 351.963599][ T5905] hid_parser_main: 27 callbacks suppressed [ 351.963624][ T5905] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 351.974683][ T5884] usb 4-1: config 0 has no interface number 1 [ 351.976552][ T5898] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 351.995239][ T5884] usb 4-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 352.004965][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.021354][ T5905] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 352.032414][ T5884] usb 4-1: Product: syz [ 352.036682][ T5884] usb 4-1: Manufacturer: syz [ 352.041304][ T5884] usb 4-1: SerialNumber: syz [ 352.064191][ T5905] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 352.071042][ T5905] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 352.109106][ T5884] usb 4-1: config 0 descriptor?? [ 352.121403][ T5884] cdc_acm 4-1:0.51: probe with driver cdc_acm failed with error -22 [ 352.124352][ T5905] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 352.161680][T10018] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1264'. [ 352.185593][ T5905] elan 0003:04F3:0755.0007: failed to start in urb: -90 [ 352.218879][ T5898] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 352.249652][ T5898] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 352.261284][ T5905] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 352.266150][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 352.304442][ T5898] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 352.336843][ T5905] usb 2-1: USB disconnect, device number 47 [ 352.351146][ T5898] usb 5-1: config 220 has no interface number 2 [ 352.367496][ T5898] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 352.382800][T10028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.414183][ T5898] usb 5-1: config 220 interface 0 has no altsetting 0 [ 352.417377][T10028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.437483][T10041] fido_id[10041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 352.451931][ T5898] usb 5-1: config 220 interface 76 has no altsetting 0 [ 352.455768][T10028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.473205][ T5898] usb 5-1: config 220 interface 1 has no altsetting 0 [ 352.506413][ T5898] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 352.526209][T10028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.552948][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.577351][ T5898] usb 5-1: Product: syz [ 352.601167][ T5898] usb 5-1: Manufacturer: syz [ 352.612508][ T5905] usb 4-1: USB disconnect, device number 31 [ 352.625225][ T5898] usb 5-1: SerialNumber: syz [ 352.835459][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1272'. [ 352.862025][T10032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.873771][T10032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.892905][ T5874] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 352.911762][ T5898] usb 5-1: selecting invalid altsetting 0 [ 352.930784][ T5898] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 352.943162][ T5898] uvcvideo 5-1:220.0: No valid video chain found. [ 352.974549][T10050] binder: BINDER_SET_CONTEXT_MGR already set [ 352.982192][T10050] binder: 10047:10050 ioctl 4018620d 200000000040 returned -16 [ 353.142490][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 353.169736][ T5874] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 353.209184][ T5874] usb 1-1: config 0 has no interface number 0 [ 353.254456][ T5898] usb 5-1: selecting invalid altsetting 0 [ 353.260569][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 353.271806][ T5898] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 353.289010][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 353.309836][ T5898] usb 5-1: USB disconnect, device number 32 [ 353.331502][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.444476][ T5874] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 353.511048][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.537156][ T5874] usb 1-1: config 0 descriptor?? [ 353.559873][ T5874] ldusb 1-1:0.55: Interrupt in endpoint not found [ 353.572596][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 353.790560][T10060] FAULT_INJECTION: forcing a failure. [ 353.790560][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 353.804303][ T5884] usb 1-1: USB disconnect, device number 32 [ 353.830075][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 353.842635][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.842726][T10060] CPU: 1 UID: 0 PID: 10060 Comm: syz.4.1277 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.842754][T10060] Tainted: [L]=SOFTLOCKUP [ 353.842760][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 353.842770][T10060] Call Trace: [ 353.842777][T10060] [ 353.842784][T10060] dump_stack_lvl+0xe8/0x150 [ 353.842815][T10060] should_fail_ex+0x412/0x560 [ 353.842846][T10060] should_failslab+0xa8/0x100 [ 353.842869][T10060] __kmalloc_cache_noprof+0x88/0x660 [ 353.842891][T10060] ? vhost_task_create+0x123/0x380 [ 353.842914][T10060] vhost_task_create+0x123/0x380 [ 353.842932][T10060] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 353.842949][T10060] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 353.842967][T10060] ? __pfx_vhost_task_create+0x10/0x10 [ 353.842993][T10060] ? __pfx_vhost_task_fn+0x10/0x10 [ 353.843019][T10060] ? __lock_acquire+0x6b5/0x2cf0 [ 353.843048][T10060] kvm_mmu_post_init_vm+0x14c/0x300 [ 353.843071][T10060] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 353.843099][T10060] ? __mutex_trylock_common+0x158/0x260 [ 353.843126][T10060] ? __pfx___mutex_trylock_common+0x10/0x10 [ 353.843151][T10060] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 353.843170][T10060] ? register_lock_class+0x31/0x2e0 [ 353.843195][T10060] ? __lock_acquire+0x6b5/0x2cf0 [ 353.843224][T10060] ? kasan_quarantine_put+0xbb/0x1f0 [ 353.843244][T10060] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 353.843269][T10060] ? do_raw_write_lock+0x11d/0x260 [ 353.843302][T10060] kvm_vcpu_ioctl+0xa62/0xfd0 [ 353.843325][T10060] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 353.843350][T10060] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 353.843393][T10060] ? __fget_files+0x2a/0x420 [ 353.843412][T10060] ? __fget_files+0x2a/0x420 [ 353.843427][T10060] ? __fget_files+0x3a0/0x420 [ 353.843442][T10060] ? __fget_files+0x2a/0x420 [ 353.843461][T10060] ? bpf_lsm_file_ioctl+0x9/0x20 [ 353.843483][T10060] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 353.843501][T10060] __se_sys_ioctl+0xfc/0x170 [ 353.843540][T10060] do_syscall_64+0x14d/0xf80 [ 353.843570][T10060] ? trace_irq_disable+0x3b/0x150 [ 353.843606][T10060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.843630][T10060] ? clear_bhb_loop+0x40/0x90 [ 353.843651][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.843667][T10060] RIP: 0033:0x7efde3d9c819 [ 353.843685][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.843698][T10060] RSP: 002b:00007efde4c85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.843718][T10060] RAX: ffffffffffffffda RBX: 00007efde4016090 RCX: 00007efde3d9c819 [ 353.843730][T10060] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 353.843740][T10060] RBP: 00007efde4c85090 R08: 0000000000000000 R09: 0000000000000000 [ 353.843750][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.843760][T10060] R13: 00007efde4016128 R14: 00007efde4016090 R15: 00007efde413fa48 [ 353.843789][T10060] [ 354.156340][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 354.219540][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 354.246512][ T10] usb 4-1: Manufacturer: syz [ 354.342728][ T10] usb 4-1: config 0 descriptor?? [ 354.446809][ T10] rc_core: IR keymap rc-hauppauge not found [ 354.457135][ T10] Registered IR keymap rc-empty [ 354.468273][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 354.524394][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input39 [ 354.597229][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 354.638828][ T5898] usb 4-1: USB disconnect, device number 32 [ 354.937782][T10066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1279'. [ 355.412831][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 356.755748][T10104] binder: BINDER_SET_CONTEXT_MGR already set [ 356.761895][T10104] binder: 10099:10104 ioctl 4018620d 200000000040 returned -16 [ 356.852894][ T42] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 356.992409][ T5884] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 357.012392][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 357.023723][ T42] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 357.032445][ T42] usb 4-1: config 0 has no interface number 0 [ 357.039023][ T42] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.051042][ T42] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.062719][ T42] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.080930][ T42] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 357.090484][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.102468][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 357.112744][ T42] usb 4-1: config 0 descriptor?? [ 357.126381][ T42] ldusb 4-1:0.55: Interrupt in endpoint not found [ 357.143723][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 357.151271][ T5884] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 357.159871][ T5884] usb 3-1: config 0 has no interface number 0 [ 357.185651][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.207882][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 357.229241][ T5884] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.249256][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.270572][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 357.281241][ T5884] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 357.290440][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.313880][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.350901][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 357.360493][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 357.377897][ T10] usb 5-1: Manufacturer: syz [ 357.378796][ T5884] usb 3-1: config 0 descriptor?? [ 357.412598][ T5884] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 357.421789][ T10] usb 5-1: config 0 descriptor?? [ 357.442236][ T5898] usb 4-1: USB disconnect, device number 33 [ 357.542631][ T10] rc_core: IR keymap rc-hauppauge not found [ 357.548825][ T10] Registered IR keymap rc-empty [ 357.557584][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 357.573410][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40 [ 357.650947][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 357.666390][ T5874] usb 5-1: USB disconnect, device number 33 [ 357.682182][ T10] usb 3-1: USB disconnect, device number 36 [ 357.682280][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 358.252508][ T5884] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 358.412485][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 358.438896][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.486436][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.541629][ T5884] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 358.589828][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.633149][ T5884] usb 4-1: config 0 descriptor?? [ 359.066685][ T5884] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 359.305226][T10116] netlink: 'syz.3.1294': attribute type 8 has an invalid length. [ 359.317834][ T5898] usb 4-1: USB disconnect, device number 34 [ 359.504588][T10140] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1302'. [ 359.693135][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 359.909175][T10149] binder: BINDER_SET_CONTEXT_MGR already set [ 359.915414][T10149] binder: 10146:10149 ioctl 4018620d 200000000040 returned -16 [ 360.242772][ T5898] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 360.412432][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 360.424853][ T5898] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 360.472471][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 360.481307][ T5898] usb 5-1: config 0 has no interface number 0 [ 360.500336][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.516987][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.528951][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.542690][ T5898] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 360.551930][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.583568][ T5898] usb 5-1: config 0 descriptor?? [ 360.600580][ T5898] ldusb 5-1:0.55: Interrupt in endpoint not found [ 360.683036][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 360.691720][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.790843][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 360.823616][ T5898] usb 5-1: USB disconnect, device number 34 [ 360.864325][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 360.892009][ T10] usb 4-1: Manufacturer: syz [ 360.918115][ T10] usb 4-1: config 0 descriptor?? [ 361.082675][ T10] rc_core: IR keymap rc-hauppauge not found [ 361.098233][ T10] Registered IR keymap rc-empty [ 361.119358][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 361.191834][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41 [ 361.235604][ T10] usb 4-1: USB disconnect, device number 35 [ 361.782498][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 361.943592][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 361.956318][ T10] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 361.968986][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.981658][ T10] usb 3-1: Product: syz [ 361.991432][ T10] usb 3-1: Manufacturer: syz [ 361.999316][ T10] usb 3-1: SerialNumber: syz [ 362.019117][ T10] usb 3-1: config 0 descriptor?? [ 362.142814][ T5898] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 362.314499][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.324754][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.394029][ T5898] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 362.400946][ T10] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 037 [ 362.412379][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 362.492583][ T5898] usb 4-1: SerialNumber: syz [ 362.680604][T10174] i2c i2c-1: failure reading data [ 362.796120][ T5898] usb 4-1: 0:2 : does not exist [ 362.955118][ T5898] usb 4-1: USB disconnect, device number 36 [ 363.000156][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.643248][T10208] binder: BINDER_SET_CONTEXT_MGR already set [ 363.649301][T10208] binder: 10204:10208 ioctl 4018620d 200000000040 returned -16 [ 364.042473][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 364.222629][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 364.232192][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 364.240899][ T10] usb 2-1: config 0 has no interface number 0 [ 364.248604][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.262592][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.341229][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 364.415350][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 364.431798][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 364.436320][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.467766][ T5960] usb 3-1: USB disconnect, device number 37 [ 364.654252][ T10] usb 2-1: config 0 descriptor?? [ 364.675023][ T10] ldusb 2-1:0.55: Interrupt in endpoint not found [ 365.026385][ T5874] usb 2-1: USB disconnect, device number 48 [ 366.208408][T10252] syzkaller0: entered promiscuous mode [ 366.219661][T10252] syzkaller0: entered allmulticast mode [ 366.244148][T10252] tc action pedit offset must be on 32 bit boundaries [ 366.267880][T10252] program syz.1.1339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.858773][T10265] binder: BINDER_SET_CONTEXT_MGR already set [ 366.865111][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 366.875574][T10265] binder: 10261:10265 ioctl 4018620d 200000000040 returned -16 [ 367.075368][ T10] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 367.098309][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.167167][ T10] usb 1-1: config 0 has no interface number 0 [ 367.369986][ T10] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 367.428474][ T10] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.461780][ T10] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 367.475845][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.492548][ T10] usb 1-1: Product: syz [ 367.504752][ T10] usb 1-1: Manufacturer: syz [ 367.517099][ T10] usb 1-1: SerialNumber: syz [ 367.539649][ T10] usb 1-1: config 0 descriptor?? [ 368.142410][ T5960] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 368.182984][T10258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.191907][T10258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.207825][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.117/input/input42 [ 368.352708][ T5960] usb 3-1: Using ep0 maxpacket: 8 [ 368.366625][ T5960] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 368.375025][ T5960] usb 3-1: config 0 has no interface number 0 [ 368.392596][ T5960] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.422470][ T5960] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.452458][ T5960] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 368.492509][ T5960] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 368.512745][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.534454][ T5960] usb 3-1: config 0 descriptor?? [ 368.548863][ T5960] ldusb 3-1:0.55: Interrupt in endpoint not found [ 368.855513][ T42] usb 3-1: USB disconnect, device number 38 [ 369.071977][ T5898] usb 1-1: USB disconnect, device number 33 [ 370.908183][T10320] binder: BINDER_SET_CONTEXT_MGR already set [ 370.914527][T10320] binder: 10313:10320 ioctl 4018620d 200000000040 returned -16 [ 371.249561][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.266789][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.280189][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.295853][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.311593][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.329861][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.345079][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.360858][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.375146][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.389878][ T5960] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 371.417747][ T5960] hid-generic 0000:0000:0004.0009: hidraw0: HID v0.03 Device [syz1] on syz0 [ 371.492464][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 371.642405][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 371.649005][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.659139][ T10] usb 5-1: config 0 has no interface number 0 [ 371.686998][ T10] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 371.708161][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.764822][ T10] usb 5-1: Product: syz [ 371.822608][ T10] usb 5-1: Manufacturer: syz [ 371.831969][ T10] usb 5-1: SerialNumber: syz [ 371.903356][ T10] usb 5-1: config 0 descriptor?? [ 371.926042][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 372.122472][ T5884] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 372.202534][ T5960] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 372.293420][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 372.301219][ T5884] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 372.309840][ T5884] usb 4-1: config 0 has no interface number 0 [ 372.316960][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.329862][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 372.350735][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 372.370213][ T5884] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 372.379769][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.390849][ T5960] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 372.407804][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.471670][ T5960] usb 3-1: config 0 has no interface number 0 [ 372.479624][ T5960] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 372.492407][ T5960] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.523423][ T5884] usb 4-1: config 0 descriptor?? [ 372.533372][ T5960] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 372.545606][ T5884] ldusb 4-1:0.55: Interrupt in endpoint not found [ 372.552446][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.588363][ T5960] usb 3-1: Product: syz [ 372.619519][ T5960] usb 3-1: Manufacturer: syz [ 372.624416][ T5960] usb 3-1: SerialNumber: syz [ 372.635965][ T5960] usb 3-1: config 0 descriptor?? [ 372.741435][ T42] usb 4-1: USB disconnect, device number 37 [ 373.271598][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.286839][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.303950][ T5960] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.117/input/input43 [ 373.543511][ T10] gspca_spca1528: reg_w err -71 [ 373.548710][ T10] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 373.581450][ T10] usb 5-1: USB disconnect, device number 35 [ 374.329257][ T10] usb 3-1: USB disconnect, device number 39 [ 375.230317][T10378] binder: BINDER_SET_CONTEXT_MGR already set [ 375.236542][T10378] binder: 10375:10378 ioctl 4018620d 200000000040 returned -16 [ 375.910162][T10364] syz.4.1376 (10364): drop_caches: 3 [ 376.392764][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 376.555698][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 376.564601][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 376.594199][ T10] usb 2-1: config 0 has no interface number 0 [ 376.631805][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.662521][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.702354][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.721739][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 376.752737][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.780938][ T10] usb 2-1: config 0 descriptor?? [ 376.801477][ T10] ldusb 2-1:0.55: Interrupt in endpoint not found [ 377.009592][ T10] usb 2-1: USB disconnect, device number 49 [ 378.742502][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 378.917444][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.924715][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.049551][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.062797][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 379.072280][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.252016][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.281666][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.332660][ T10] usb 5-1: Product: 俓졻⚿諙嬨匪戈匼曎응ꍯ괍ڻ캣컡୐ঁ쇢㮢鲧䨿떍꓾ⱻ嗡σ待鼏㵛즾㑵髤趀ꛡ䡎ꉺ︿ឩ꫿㝑棃뿟⨟魬몷쳑繁Õ䮊㼛ⵕ☪蘺嘇Ħ釳꒘ɗട굤濠䒴 [ 379.382802][ T10] usb 5-1: Manufacturer: 粧֠飛렑⥩ㅄ楾ꔄ譪杧ꮸ恧ﭮሐ펼閪䒷쏌奎㬌繤䞚盝曜䋼ÿ [ 379.447274][ T10] usb 5-1: SerialNumber: ṑꗩ괶族녖䚅၄⧼ἑꉴ宴櫖᚜㎷ꌻ챗룱嗏熚럶懺䦴偍話⧇䟪䅗鮪귰᮶푦孌㈼쵁띬詝ꑰ軁鎓䍵賅悄㦩ꨝ跛욪᷒﬉⨋퐳陘溗ᯘ퓆霌靛ꍇ㪢놹‐庺͛稽ѱ [ 380.705797][T10469] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 380.774655][T10469] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 380.820028][T10469] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 380.965241][T10471] program syz.0.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.980071][ T29] audit: type=1326 audit(1775258105.560:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf60f9c819 code=0x7ffc0000 [ 381.018051][ T29] audit: type=1326 audit(1775258105.560:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf60f5d04e code=0x7ffc0000 [ 381.041900][ T29] audit: type=1326 audit(1775258105.560:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf60f9c819 code=0x7ffc0000 [ 381.166766][ T29] audit: type=1326 audit(1775258105.590:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf60f5d04e code=0x7ffc0000 [ 381.256451][ T29] audit: type=1326 audit(1775258105.590:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf60f5d04e code=0x7ffc0000 [ 381.312503][ T29] audit: type=1326 audit(1775258105.590:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf60f5d04e code=0x7ffc0000 [ 381.444734][ T5960] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 381.468350][ T29] audit: type=1326 audit(1775258105.590:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf60f5d04e code=0x7ffc0000 [ 381.534920][ T10] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 381.544449][ T10] cdc_ncm 5-1:1.0: bind() failure [ 381.556230][ T29] audit: type=1326 audit(1775258105.600:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf60f5d04e code=0x7ffc0000 [ 381.566630][ T10] usb 5-1: USB disconnect, device number 36 [ 381.608966][ T5960] usb 4-1: device descriptor read/64, error -71 [ 381.674800][ T29] audit: type=1326 audit(1775258105.600:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf60f5d04e code=0x7ffc0000 [ 381.756727][ T29] audit: type=1326 audit(1775258105.600:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.0.1402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf60f5d04e code=0x7ffc0000 [ 381.884046][ T5960] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 382.022944][ T5960] usb 4-1: device descriptor read/64, error -71 [ 382.132757][ T5960] usb usb4-port1: attempt power cycle [ 382.564033][ T5960] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 382.635001][ T5960] usb 4-1: device descriptor read/8, error -71 [ 382.907135][ T5960] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 382.993063][ T5960] usb 4-1: device descriptor read/8, error -71 [ 383.163599][ T5960] usb usb4-port1: unable to enumerate USB device [ 384.045139][T10525] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 384.058571][T10525] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 384.076214][T10525] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 384.391482][T10530] netlink: 'syz.3.1424': attribute type 3 has an invalid length. [ 384.400429][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 386.014796][T10569] netlink: 'syz.2.1437': attribute type 3 has an invalid length. [ 386.101609][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 386.392670][ T5960] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 386.439151][T10572] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1439'. [ 386.609040][ T5960] usb 1-1: device descriptor read/64, error -71 [ 386.716292][T10577] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 386.745163][T10577] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 386.755349][T10577] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 386.893549][ T5960] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 387.042606][ T5960] usb 1-1: device descriptor read/64, error -71 [ 387.077239][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'. [ 387.164043][ T5960] usb usb1-port1: attempt power cycle [ 387.532466][ T5960] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 387.588927][ T5960] usb 1-1: device descriptor read/8, error -71 [ 387.612546][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 387.880665][ T5925] usb 5-1: device descriptor read/64, error -71 [ 387.992555][ T5960] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 388.039014][ T5960] usb 1-1: device descriptor read/8, error -71 [ 388.177675][ T5925] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 388.186664][ T5960] usb usb1-port1: unable to enumerate USB device [ 388.327882][ T5925] usb 5-1: device descriptor read/64, error -71 [ 388.454730][ T5925] usb usb5-port1: attempt power cycle [ 388.823297][ T5925] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 388.844288][ T5925] usb 5-1: device descriptor read/8, error -71 [ 389.082506][ T5925] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 389.128880][ T5925] usb 5-1: device descriptor read/8, error -71 [ 389.192656][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 389.303197][ T5925] usb usb5-port1: unable to enumerate USB device [ 389.842642][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 389.882864][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 220, changing to 7 [ 389.894310][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 389.945659][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 389.955168][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.963801][ T10] usb 3-1: Product: syz [ 389.967991][ T10] usb 3-1: Manufacturer: syz [ 389.979168][ T10] usb 3-1: SerialNumber: syz [ 390.072713][T10586] syz.1.1445 (10586): drop_caches: 3 [ 390.335832][T10620] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 390.770321][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.783902][T10620] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1455'. [ 390.808397][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.881557][ T10] usb 3-1: USB disconnect, device number 40 [ 391.297126][T10632] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 391.323114][T10632] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 391.415499][T10632] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 391.569573][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 392.682401][ T5905] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 392.842409][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 392.890741][ T5905] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.923881][ T5905] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.946888][T10657] netlink: 'syz.2.1466': attribute type 3 has an invalid length. [ 392.982042][ T5905] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 393.018307][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.382465][ T5898] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 393.509830][ T5905] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 393.520730][ T5898] usb 3-1: device descriptor read/64, error -71 [ 393.727052][ T5905] usb 4-1: USB disconnect, device number 42 [ 393.762540][ T5898] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 393.913508][ T5898] usb 3-1: device descriptor read/64, error -71 [ 394.032863][ T5898] usb usb3-port1: attempt power cycle [ 394.223547][T10676] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 394.232397][T10676] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 394.241121][T10676] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 394.372481][ T5898] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 394.416654][ T5898] usb 3-1: device descriptor read/8, error -71 [ 394.633394][T10685] netlink: 'syz.0.1477': attribute type 3 has an invalid length. [ 394.662517][ T5898] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 394.694050][ T5898] usb 3-1: device descriptor read/8, error -71 [ 394.952087][ T5898] usb usb3-port1: unable to enumerate USB device [ 397.083867][T10720] FAULT_INJECTION: forcing a failure. [ 397.083867][T10720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.112715][T10720] CPU: 0 UID: 0 PID: 10720 Comm: syz.1.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.112739][T10720] Tainted: [L]=SOFTLOCKUP [ 397.112744][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 397.112751][T10720] Call Trace: [ 397.112756][T10720] [ 397.112761][T10720] dump_stack_lvl+0xe8/0x150 [ 397.112791][T10720] should_fail_ex+0x412/0x560 [ 397.112812][T10720] _copy_from_iter+0x1d3/0x1670 [ 397.112830][T10720] ? anon_pipe_write+0x15b/0x1480 [ 397.112847][T10720] ? __pfx__copy_from_iter+0x10/0x10 [ 397.112859][T10720] ? __pfx___mutex_lock+0x10/0x10 [ 397.112875][T10720] ? aa_file_perm+0x50e/0x15e0 [ 397.112889][T10720] ? page_copy_sane+0x4e/0x270 [ 397.112902][T10720] copy_page_from_iter+0xdd/0x170 [ 397.112917][T10720] anon_pipe_write+0xa0b/0x1480 [ 397.112932][T10720] ? __pfx_aa_file_perm+0x10/0x10 [ 397.112956][T10720] ? __pfx_anon_pipe_write+0x10/0x10 [ 397.112970][T10720] ? apparmor_file_permission+0x1f4/0x300 [ 397.112986][T10720] ? bpf_lsm_file_permission+0x9/0x20 [ 397.113000][T10720] ? security_file_permission+0x75/0x260 [ 397.113020][T10720] vfs_write+0x61d/0xb90 [ 397.113037][T10720] ? __pfx_vfs_write+0x10/0x10 [ 397.113055][T10720] ? __fget_files+0x2a/0x420 [ 397.113071][T10720] ksys_write+0x150/0x270 [ 397.113085][T10720] ? __pfx_ksys_write+0x10/0x10 [ 397.113104][T10720] do_syscall_64+0x14d/0xf80 [ 397.113118][T10720] ? trace_irq_disable+0x3b/0x150 [ 397.113127][T10720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.113139][T10720] ? clear_bhb_loop+0x40/0x90 [ 397.113152][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.113163][T10720] RIP: 0033:0x7f2f54b5d04e [ 397.113175][T10720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 397.113185][T10720] RSP: 002b:00007f2f52dccce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.113198][T10720] RAX: ffffffffffffffda RBX: 00007f2f52dcd6c0 RCX: 00007f2f54b5d04e [ 397.113207][T10720] RDX: 0000000000000029 RSI: 00007f2f52dcce90 RDI: 0000000000000002 [ 397.113214][T10720] RBP: 00007f2f52dcce90 R08: 0000000000000000 R09: 0000000000000000 [ 397.113221][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 397.113228][T10720] R13: 00007f2f54dec7a0 R14: 00007f2f54de34a0 R15: 0000000000000001 [ 397.113245][T10720] [ 397.727047][T10726] netlink: 'syz.1.1488': attribute type 3 has an invalid length. [ 397.882479][ T5905] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 397.931409][T10730] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 397.965912][T10730] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 397.995981][T10730] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 398.042505][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 398.049226][ T5905] usb 3-1: no configurations [ 398.054297][ T5905] usb 3-1: can't read configurations, error -22 [ 398.192521][ T5905] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 398.342408][ T5898] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 398.350812][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 398.361977][ T5905] usb 3-1: no configurations [ 398.401623][ T5905] usb 3-1: can't read configurations, error -22 [ 398.408659][ T5905] usb usb3-port1: attempt power cycle [ 398.482424][ T5898] usb 1-1: device descriptor read/64, error -71 [ 398.722585][ T5898] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 398.760336][ T5905] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 398.903341][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 398.914830][ T5905] usb 3-1: no configurations [ 398.926218][ T5905] usb 3-1: can't read configurations, error -22 [ 398.942818][ T5898] usb 1-1: device descriptor read/64, error -71 [ 399.052720][ T5898] usb usb1-port1: attempt power cycle [ 399.072609][ T5905] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 399.093427][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 399.101897][ T5905] usb 3-1: no configurations [ 399.111378][ T5905] usb 3-1: can't read configurations, error -22 [ 399.121038][ T5905] usb usb3-port1: unable to enumerate USB device [ 399.152610][ T796] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 399.302787][ T796] usb 2-1: device descriptor read/64, error -71 [ 399.412869][ T5898] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 399.456471][ T5898] usb 1-1: device descriptor read/8, error -71 [ 399.602452][ T796] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 399.707778][ T5898] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 399.734858][ T796] usb 2-1: device descriptor read/64, error -71 [ 399.758073][ T5898] usb 1-1: device descriptor read/8, error -71 [ 399.863604][ T796] usb usb2-port1: attempt power cycle [ 399.882684][ T5898] usb usb1-port1: unable to enumerate USB device [ 400.252540][ T796] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 400.283418][ T796] usb 2-1: device descriptor read/8, error -71 [ 400.532674][ T796] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 400.581766][ T796] usb 2-1: device descriptor read/8, error -71 [ 400.702924][ T796] usb usb2-port1: unable to enumerate USB device [ 400.771363][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 401.041718][T10770] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 401.050413][T10770] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 401.059590][T10770] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 401.948152][T10782] binder: 10781:10782 ioctl 4018620d 0 returned -22 [ 402.742477][ T5898] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 402.904483][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 402.962516][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 402.997487][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 403.122477][ T5898] usb 2-1: config 7 has an invalid descriptor of length 204, skipping remainder of the config [ 403.149240][ T5898] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 403.191899][ T5898] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 403.233124][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.241727][ T5898] usb 2-1: Product: syz [ 403.272361][ T5898] usb 2-1: Manufacturer: syz [ 403.282803][ T5898] usb 2-1: SerialNumber: syz [ 403.349268][T10812] netlink: 'syz.3.1513': attribute type 6 has an invalid length. [ 403.362445][T10812] netlink: 'syz.3.1513': attribute type 7 has an invalid length. [ 403.370221][T10812] netlink: 'syz.3.1513': attribute type 8 has an invalid length. [ 403.555587][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.586995][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.846533][T10817] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 403.972710][T10817] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 403.982162][T10817] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 404.731075][ T796] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 404.882520][ T796] usb 3-1: device descriptor read/64, error -71 [ 405.122451][ T796] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 405.263162][ T796] usb 3-1: device descriptor read/64, error -71 [ 405.332506][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 405.372599][ T796] usb usb3-port1: attempt power cycle [ 405.429338][ T5898] usb 2-1: USB disconnect, device number 54 [ 405.482393][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 405.489369][ T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 405.505211][ T24] usb 5-1: config 0 has no interface number 0 [ 405.517857][ T24] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 405.538361][ T24] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 405.555310][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 405.564872][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.573198][ T24] usb 5-1: Product: syz [ 405.577648][ T24] usb 5-1: Manufacturer: syz [ 405.582721][ T24] usb 5-1: SerialNumber: syz [ 405.826165][ T24] usb 5-1: config 0 descriptor?? [ 405.852907][ T796] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 405.873234][ T796] usb 3-1: device descriptor read/8, error -71 [ 405.952697][ T5898] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 406.042537][ T24] radio-si470x 5-1:0.35: this is not a si470x device. [ 406.112395][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 406.119862][ T5898] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 406.142463][ T796] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 406.213745][ T5898] usb 2-1: config 0 has no interface number 0 [ 406.220002][ T5898] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.237697][ T796] usb 3-1: device descriptor read/8, error -71 [ 406.244932][ T24] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 406.265894][ T5898] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.295580][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 406.304741][ T5898] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 406.317946][ T5898] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 406.352412][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.364695][ T796] usb usb3-port1: unable to enumerate USB device [ 406.375194][ T5898] usb 2-1: config 0 descriptor?? [ 406.406611][ T5898] ldusb 2-1:0.55: Interrupt in endpoint not found [ 406.452843][ T24] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 406.613958][ T5960] usb 2-1: USB disconnect, device number 55 [ 406.722593][ T24] usb 5-1: USB disconnect, device number 41 [ 406.730219][ T24] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 407.559435][T10855] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 407.591118][T10855] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 407.609071][T10855] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 407.951896][T10862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1527'. [ 409.071176][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 410.285820][T10888] No such timeout policy "syz0" [ 410.309973][T10888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1536'. [ 410.352700][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 410.529863][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 410.529883][ T29] audit: type=1326 audit(1775258135.110:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10893 comm="syz.1.1541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f54b9c819 code=0x0 [ 410.561517][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 410.572877][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.585501][ T796] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 410.604991][T10896] xt_hashlimit: size too large, truncated to 1048576 [ 410.615746][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 410.633009][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.641376][ T24] usb 5-1: Product: syz [ 410.645765][ T24] usb 5-1: Manufacturer: syz [ 410.652180][ T24] usb 5-1: SerialNumber: syz [ 410.667762][ T24] usb 5-1: config 0 descriptor?? [ 410.675144][T10886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.701782][ T24] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 410.764664][ T796] usb 1-1: device descriptor read/64, error -71 [ 411.004779][ T796] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 411.142473][ T796] usb 1-1: device descriptor read/64, error -71 [ 411.182382][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 411.193496][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1545'. [ 411.267859][ T796] usb usb1-port1: attempt power cycle [ 411.358547][ T24] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 411.377717][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.402024][ T24] usb 4-1: config 0 has no interface number 0 [ 411.412076][ T24] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 411.430514][ T24] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.468892][ T24] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 411.479723][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.488177][ T24] usb 4-1: Product: syz [ 411.498816][ T24] usb 4-1: Manufacturer: syz [ 411.507477][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 411.516757][ T24] usb 4-1: SerialNumber: syz [ 411.535313][ T24] usb 4-1: config 0 descriptor?? [ 411.612472][ T796] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 411.643248][ T796] usb 1-1: device descriptor read/8, error -71 [ 411.902873][ T796] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 411.923923][ T796] usb 1-1: device descriptor read/8, error -71 [ 412.033864][ T796] usb usb1-port1: unable to enumerate USB device [ 412.160045][T10901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.168903][T10901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.178883][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input45 [ 413.033616][ T5960] usb 4-1: USB disconnect, device number 43 [ 413.443227][ T24] usb 5-1: USB disconnect, device number 42 [ 413.453020][T10940] FAULT_INJECTION: forcing a failure. [ 413.453020][T10940] name failslab, interval 1, probability 0, space 0, times 0 [ 413.560423][T10940] CPU: 1 UID: 0 PID: 10940 Comm: syz.3.1556 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.560446][T10940] Tainted: [L]=SOFTLOCKUP [ 413.560450][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 413.560466][T10940] Call Trace: [ 413.560471][T10940] [ 413.560476][T10940] dump_stack_lvl+0xe8/0x150 [ 413.560498][T10940] should_fail_ex+0x412/0x560 [ 413.560521][T10940] should_failslab+0xa8/0x100 [ 413.560536][T10940] ? skb_clone+0x212/0x3a0 [ 413.560551][T10940] kmem_cache_alloc_noprof+0x87/0x650 [ 413.560563][T10940] ? __netlink_lookup+0xc6/0x8b0 [ 413.560580][T10940] skb_clone+0x212/0x3a0 [ 413.560596][T10940] __netlink_deliver_tap+0x404/0x850 [ 413.560615][T10940] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.560628][T10940] netlink_deliver_tap+0x19c/0x1b0 [ 413.560640][T10940] netlink_unicast+0x7e3/0x9b0 [ 413.560662][T10940] ? __pfx_netlink_unicast+0x10/0x10 [ 413.560692][T10940] ? netlink_sendmsg+0x650/0xb40 [ 413.560703][T10940] ? skb_put+0x11b/0x210 [ 413.560727][T10940] netlink_sendmsg+0x813/0xb40 [ 413.560744][T10940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.560760][T10940] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.560779][T10940] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.560795][T10940] ____sys_sendmsg+0x972/0x9f0 [ 413.560814][T10940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.560834][T10940] ? import_iovec+0x73/0xa0 [ 413.560849][T10940] ___sys_sendmsg+0x2a5/0x360 [ 413.560866][T10940] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.560900][T10940] ? __fget_files+0x2a/0x420 [ 413.560910][T10940] ? __fget_files+0x3a0/0x420 [ 413.560926][T10940] __x64_sys_sendmsg+0x1bd/0x2a0 [ 413.560942][T10940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.560961][T10940] ? __pfx_ksys_write+0x10/0x10 [ 413.560981][T10940] do_syscall_64+0x14d/0xf80 [ 413.560995][T10940] ? trace_irq_disable+0x3b/0x150 [ 413.561006][T10940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.561017][T10940] ? clear_bhb_loop+0x40/0x90 [ 413.561031][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.561042][T10940] RIP: 0033:0x7fe64c19c819 [ 413.561054][T10940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.561063][T10940] RSP: 002b:00007fe64d114028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.561077][T10940] RAX: ffffffffffffffda RBX: 00007fe64c415fa0 RCX: 00007fe64c19c819 [ 413.561086][T10940] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 413.561093][T10940] RBP: 00007fe64d114090 R08: 0000000000000000 R09: 0000000000000000 [ 413.561100][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.561106][T10940] R13: 00007fe64c416038 R14: 00007fe64c415fa0 R15: 00007fe64c53fa48 [ 413.561124][T10940] [ 414.186268][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1561'. [ 414.196030][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1561'. [ 415.453534][T10969] trusted_key: syz.0.1566 sent an empty control message without MSG_MORE. [ 415.549015][T10970] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 415.560986][T10970] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 415.569398][T10970] CPU: 1 UID: 0 PID: 10970 Comm: syz.0.1566 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.580421][T10970] Tainted: [L]=SOFTLOCKUP [ 415.584737][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.594791][T10970] RIP: 0010:memcpy_sglist+0x420/0x730 [ 415.600180][T10970] Code: e8 b5 b9 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 c7 b4 52 fd 4c 89 f3 eb 07 e8 bd b4 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 415.619901][T10970] RSP: 0018:ffffc9000fde7698 EFLAGS: 00010202 [ 415.626059][T10970] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888028bf5b80 [ 415.634049][T10970] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 415.642028][T10970] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.650007][T10970] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 415.657992][T10970] R13: ffff88802c0becc0 R14: ffff888054c1f060 R15: 0000000000000008 [ 415.665972][T10970] FS: 00007fdf61e626c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 415.674906][T10970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.681583][T10970] CR2: 0000001b30b09ff8 CR3: 000000007e81c000 CR4: 00000000003526f0 [ 415.689823][T10970] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e [ 415.697887][T10970] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 415.706035][T10970] Call Trace: [ 415.709317][T10970] [ 415.712248][T10970] aead_recvmsg+0x719/0x1030 [ 415.716953][T10970] ? __pfx_aead_recvmsg+0x10/0x10 [ 415.721985][T10970] ? __pfx_aead_recvmsg+0x10/0x10 [ 415.727016][T10970] sock_recvmsg_nosec+0x10c/0x140 [ 415.732032][T10970] ____sys_recvmsg+0x3e3/0x4a0 [ 415.736796][T10970] ? __pfx_____sys_recvmsg+0x10/0x10 [ 415.742092][T10970] ? import_iovec+0x73/0xa0 [ 415.746609][T10970] ___sys_recvmsg+0x215/0x590 [ 415.751279][T10970] ? __lock_acquire+0x6b5/0x2cf0 [ 415.756212][T10970] ? __pfx____sys_recvmsg+0x10/0x10 [ 415.761413][T10970] do_recvmmsg+0x334/0x800 [ 415.766012][T10970] ? do_raw_spin_lock+0x12b/0x2f0 [ 415.771047][T10970] ? __pfx_do_recvmmsg+0x10/0x10 [ 415.776108][T10970] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 415.781746][T10970] ? lockdep_hardirqs_on+0x7a/0x110 [ 415.786972][T10970] __x64_sys_recvmmsg+0x198/0x250 [ 415.792344][T10970] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 415.797993][T10970] do_syscall_64+0x14d/0xf80 [ 415.802653][T10970] ? trace_irq_disable+0x3b/0x150 [ 415.807773][T10970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.813859][T10970] ? clear_bhb_loop+0x40/0x90 [ 415.818548][T10970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.824694][T10970] RIP: 0033:0x7fdf60f9c819 [ 415.829269][T10970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.848891][T10970] RSP: 002b:00007fdf61e62028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 415.857314][T10970] RAX: ffffffffffffffda RBX: 00007fdf61216090 RCX: 00007fdf60f9c819 [ 415.865481][T10970] RDX: 0000000000000002 RSI: 0000200000004580 RDI: 0000000000000005 [ 415.873666][T10970] RBP: 00007fdf61032c91 R08: 0000000000000000 R09: 0000000000000000 [ 415.881928][T10970] R10: 0000000000002041 R11: 0000000000000246 R12: 0000000000000000 [ 415.890097][T10970] R13: 00007fdf61216128 R14: 00007fdf61216090 R15: 00007fdf6133fa48 [ 415.898202][T10970] [ 415.901253][T10970] Modules linked in: [ 415.905672][T10970] ---[ end trace 0000000000000000 ]--- [ 416.003352][T10970] RIP: 0010:memcpy_sglist+0x420/0x730 [ 416.008800][T10970] Code: e8 b5 b9 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 c7 b4 52 fd 4c 89 f3 eb 07 e8 bd b4 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 416.034658][T10970] RSP: 0018:ffffc9000fde7698 EFLAGS: 00010202 [ 416.074772][T10970] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888028bf5b80 [ 416.101155][T10970] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 416.139137][T10970] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.183739][T10970] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 416.191917][T10970] R13: ffff88802c0becc0 R14: ffff888054c1f060 R15: 0000000000000008 [ 416.272340][T10970] FS: 00007fdf61e626c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 416.281538][T10970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.340924][T10970] CR2: 0000000000000000 CR3: 000000007e81c000 CR4: 00000000003526f0 [ 416.386613][T10970] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e [ 416.412368][T10970] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 416.420489][T10970] Kernel panic - not syncing: Fatal exception [ 416.426851][T10970] Kernel Offset: disabled [ 416.431208][T10970] Rebooting in 86400 seconds..