last executing test programs: 9.03443862s ago: executing program 3 (id=1082): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x6, 0x2}]}}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0xff, 0xfffe, {0x5, 0x4, 0x2, 0x3, 0x0, 0x65, 0x6, 0x2, 0x2f, 0xff, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x46) (fail_nth: 2) 8.40607777s ago: executing program 3 (id=1085): syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000459bb2405804037000000000000109021b0b09110000000904"], 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000040001042bbd7000fcdbdf2510400d000100819e054727e720b0c30000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20020000}, 0x40880) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, &(0x7f0000000180)) accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03000800010000000000040000000000000000670000000190780a010100e000000186060000000200000305907800ffff44f60e000000650006022f00ffffffffffac1e0101"], 0x46) 7.061430365s ago: executing program 3 (id=1095): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x48, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x70, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) 6.946466875s ago: executing program 3 (id=1096): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000540)=0x1c, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hopopts={{0x20, 0x29, 0x36, {0x5e, 0x1, '\x00', [@pad1, @pad1, @generic={0x8}]}}}], 0x20}}], 0x1, 0x810) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 6.452747004s ago: executing program 1 (id=1098): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x12) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x2180, 0x0) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000000)={0x3, 0x8001, 0x2, 0x7, 0x5, 0x1, 0x40}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'comedi_parport\x00', [0xe99, 0xffffffff, 0x8, 0x5, 0xffffb926, 0x7, 0x8, 0xb, 0x7fff, 0x0, 0x800, 0x8, 0x200, 0x5, 0xfffffff9, 0x2, 0x8001, 0x5e, 0x8, 0x5, 0x2, 0xfffffffe, 0x3, 0x7c, 0x2, 0x200, 0x7, 0x2, 0x100, 0xf, 0x2, 0xe]}) openat$cgroup_int(r3, &(0x7f00000000c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.54145824s ago: executing program 2 (id=1102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x6c, 0x0, &(0x7f0000000300)=[@free_buffer, @increfs, @increfs, @enter_looper, @enter_looper, @exit_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x64, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x7, 0x1, 0xa}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000500)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x1}, @register_looper, @decrefs={0x40046307, 0x3}], 0x57, 0x0, &(0x7f0000000680)="3810bb457dc9cc2af388802fd4725d16e0bc456396c94e4609d385c69301f34818a1f381643509b94c3f54ab72ff5ec791451df5df7a0425e3d3ceebb72a9007ec148bf3a8bacc54b6c5b96f024a4af0805fec8f3c8778"}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffffb, 0xff}) syslog(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATFS(r4, &(0x7f0000000340)={0x60, 0x0, r5, {{0x7fffffff, 0x5, 0x3, 0x9, 0x6, 0x7ff, 0x5, 0x7}}}, 0x60) r8 = userfaultfd(0x80800) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0200000000000000000000f3ffff0014000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) r11 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r11, 0xc014563b, &(0x7f0000000100)={0x7}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r12, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r12, r4) 5.446858728s ago: executing program 1 (id=1103): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="020114008cdc18000e1a80009f0001140000002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d2a894a83e57c67d5b98dcbcacadd248e5dc8f20ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9"], 0xdd12}, {&(0x7f0000000640)={0x10, 0x37, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x4000007}, 0x20004000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r0, &(0x7f0000000080)="1c0000001a007f0214f9f40700090408030000000000000000020000", 0x1c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x440) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) 5.370919023s ago: executing program 1 (id=1104): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) read$FUSE(r1, 0x0, 0x44) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000002f80)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x25, 0xd, 0xff}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0x4, 0x3, 0x10, 0x4}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x3, 0x40, 0x5, 0x2, 0xf8}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) 4.573397522s ago: executing program 2 (id=1107): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) timer_create(0x9, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x1c, r2, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x50) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) newfstatat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x0, 0x800) syz_fuse_handle_req(r7, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0xffffffff, 0x0, {0x5, 0x0, 0x7, 0x80000001, 0x26, 0xffffffffffffff0c, 0x2, 0x35741060, 0x9, 0x8000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000007b40)={0x2020}, 0x2020) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x7}}) r8 = fcntl$dupfd(r0, 0x0, r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r8, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @control={0x2, 0x8, 0x7fff}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x1}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd, 0xb3}, {0x6}, @connect={{0x8}}}], 0xc4) write$sndseq(r8, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r8, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) write$sndseq(r8, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0x0, 0x2}}, {0x0, 0x6, 0xfc, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x2}, {}, @queue}, {0x0, 0x0, 0xa, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x5, 0x80000001, 0x72f769d0]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x2}}], 0xc4) write$sndseq(r8, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) 4.560680392s ago: executing program 0 (id=1108): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x80044df9, 0x0) 4.474039216s ago: executing program 3 (id=1109): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x0, 0xb863f1de44954ad5, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 4.350292014s ago: executing program 0 (id=1110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 4.349816148s ago: executing program 2 (id=1111): r0 = epoll_create1(0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x4, 0x7, 0x6}, 'syz1\x00', 0xe}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$KVM_CREATE_VM(r1, 0x8000552c, 0x0) epoll_wait(r0, 0x0, 0x0, 0x7ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12140, 0x0) 4.323320447s ago: executing program 0 (id=1112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r0 = socket(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20af42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a2d905391a52edffbbbaaaaaaaaaaaa86dd6d002000001011ff00000000000000000000ffffac1e0101ff0200000000000000000000000000011d0000000004"], 0x4a) write(r0, &(0x7f0000000040)="2400000000000100142065440000f7ffffffff1000000000000000000000000000000000e7f4f4aa198f8a289689145568ce94e700b31ca2826b2dabe432579bcf47e397e748028cfabc3ef7734aab4db89907d10f27e9894cbb5eb7dcb8bee7cf475f9b4c33a19ba160b3c1dc5d2b0d7d0a197351ef462be07ea40de58478c679b078fcaf00a9e89276ca4b3b0417629c2316aeae0e0fd234e4401b9c6c38d054c4d9625c13bac6d277f0de59351ada1f7afd391d1701c8291935ff72eaa4ee6b2b309bd60a6a7f19a12408cb3082cdcf7dd33642", 0xd5) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\twr'], 0xa) recvmmsg(r3, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x10000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000023c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000001b40)={0x0, @bt={0x8a8, 0x90, 0x1, 0x1, 0xd59f80, 0x1, 0x5, 0x9, 0x3, 0x5b, 0x7, 0x27fd, 0x2, 0xbb6, 0x0, 0x4, {0x8, 0xffffffff}, 0xcd, 0x7f}}) sendto$inet6(r3, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfcde) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0xc0049364, &(0x7f0000000180)) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002380)={r2, 0x8000000000001ff, 0x1, 0xbbb}) newfstatat(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getgroups(0x5, &(0x7f0000002400)=[0xffffffffffffffff, 0xffffffffffffffff, r9, 0x0, r11, 0xee01]) write$FUSE_STATX(r7, &(0x7f0000002240)={0x130, 0xfffffffffffffffe, r8, {0xb, 0x4, 0x0, '\x00', {0x10000, 0xb, 0x5b, 0x3, r10, r12, 0xa000, '\x00', 0x8, 0x4, 0x4, 0xffffffffffffffff, {0xb72, 0x8}, {0x8, 0xfffffffb}, {0x8, 0x6}, {0x10001, 0xfffffffc}, 0x80000001, 0x7fff, 0x0, 0x4}}}, 0x130) 4.085718983s ago: executing program 2 (id=1113): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="020114008cdc18000e1a80009f0001140000002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d2a894a83e57c67d5b98dcbcacadd248e5dc8f20ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9"], 0xdd12}, {&(0x7f0000000640)={0x10, 0x37, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x4000007}, 0x20004000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r0, &(0x7f0000000080)="1c0000001a007f0214f9f40700090408030000000000000000020000", 0x1c) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x440) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) 3.902813339s ago: executing program 2 (id=1114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) close_range(r0, 0xffffffffffffffff, 0x20) 3.346032728s ago: executing program 0 (id=1115): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) listen(0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) preadv(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) accept4(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x80, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 2.301217404s ago: executing program 3 (id=1116): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000080)='&.{\x00\xa2\xf9\"\xd0xK\xeeun\xc2\xb6\x96v\x9bbyK\x98=\x89\xfe\xb5\xd0LX\x19\xc7\x91\xbbh\x1b)Y\xfad>\xa7o\xb8\x05\xe7\x98<\x8c\x93\x91\x91n\xb0\x84)\xd5\xa3\x80\xdb\x8fm\xd9\x9fv.<\xe2\xce\x0e\xa0\xba\xcf.\x94\xf5\x90c \x9f(\x8f\xc9\x80)b\xc9\x91<\xee8\xd1\xb0\xa1\xfa:Q\x04L\xb7\xe96\x97\a\xdd\xc3\xc0\xf2A\xe8\xcd\x02\xa9\x98\xfe8xe\xcc3\xd2\xb9\xf1\x89\xa7[\xd8;\xe5\rX1vo1\xf5b\xdd\xf6\x84E[m\xc4\x93dSe{\x18\xb5\x11\x1a\xa4I`\x17u\x97\x9f\x97\xc1\xf6\xf3\x8a\xc6\x9e\x0f\xcb\x01\x183\xd0H\xc2\b\xc2\x05\xdc.D/\xc7\xd3\x9d\x8a\xf06\xf2\xee\x12\xe1\x17\x1f\x00\x00\x00\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c17aa31076b876c1d0000297ea6080cc65fd8251e4e9294ff0051f60a84c9f4d4938037e786a6d016109d4650049af3ca5c744b6e7461d73b6700000e4509c5bbcd72c6c9", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8881) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000180)={0x20, 0x23, 0xa0, {0xa0, 0x24, "6e663762aa4df385128187509db835e41e655bfb75afdc94366ec51ccc3ad5f2c7d8c19fc07c0df5725392ded6d0f2e33e4a514196d145b71dbc957541bc795f10c33b49947b5820a53d5cdec910143a24606848e9b337b00b348a6311ac1184f45b64d3c30334e1ccc745515ff017ee6461c9cb5c216fa10fcc034707b3e85419269989794d720654ab670a5b834523f32f706861890d68f51bade9f9ef"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x40, 0x17, 0x73, "239682d044347997365548c4ec9bd323c6a5be148dbbf0784591eb921c1f897eff7d8469cc685ba200f0b7693016f93ac568169b69717db0e43215a8131c35b69fd99d02df63638082e6d4632a1016b43457619ead7200de59d60ee264efb456b347d240fd1760d585bcca70c414710597db08"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0xaa}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd}}) 2.259240845s ago: executing program 1 (id=1117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="6766c7442400005000006766c7442402273400006766c744240600000000670f0114246766c74424000e0000006766c74424020e0000006766c744240600000000670f011c24f7eff30f09b864000f00d06465660f111fdfc3baf80c66b8383cdf8566efbafc0cec3e36262615a3003e0f01c8", 0x73}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 5) 2.149922405s ago: executing program 2 (id=1118): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000540)=0x1c, 0x80000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hopopts={{0x20, 0x29, 0x36, {0x5e, 0x1, '\x00', [@pad1, @pad1, @generic={0x8}]}}}], 0x20}}], 0x1, 0x810) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 1.464236748s ago: executing program 0 (id=1119): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x595441, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000100)={0x5, 0x10, [0x10000, 0x4, 0x6, 0x1219]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x80001) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0xffffffff}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xb}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x1a) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) 491.464539ms ago: executing program 1 (id=1120): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 490.95932ms ago: executing program 1 (id=1121): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hopopts={{0x20, 0x29, 0x36, {0x5e, 0x1, '\x00', [@pad1, @pad1, @generic={0x8}]}}}], 0x20}}], 0x1, 0x810) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 0s ago: executing program 0 (id=1122): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x97, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): keymap rc-empty [ 224.984054][ T10] usb 2-1: config 0 interface 102 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 225.004419][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.017090][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.077945][ T10] usb 2-1: config 0 interface 207 has no altsetting 0 [ 225.077991][ T5901] nintendo 0003:057E:200E.0006: hidraw0: USB HID v80.02 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 225.108381][ T5821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 225.124633][ T5821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input86 [ 225.136889][ T10] usb 2-1: config 0 interface 140 has no altsetting 0 [ 225.148942][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.160828][ T10] usb 2-1: config 0 interface 102 has no altsetting 0 [ 225.168126][ T10] usb 2-1: config 0 interface 2 has no altsetting 0 [ 225.176520][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.185789][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=0161, bcdDevice=8c.63 [ 225.196575][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.202260][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.218957][ T5901] nintendo 0003:057E:200E.0006: Failed charging grip handshake [ 225.231772][ T10] usb 2-1: Product: syz [ 225.237883][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.242215][ T10] usb 2-1: Manufacturer: syz [ 225.250071][ T5901] nintendo 0003:057E:200E.0006: Failed to initialize controller; ret=-110 [ 225.259252][ T5887] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 225.264614][ T10] usb 2-1: SerialNumber: syz [ 225.296247][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.304613][ T5901] nintendo 0003:057E:200E.0006: probe - fail = -110 [ 225.319460][ T5901] nintendo 0003:057E:200E.0006: probe with driver nintendo failed with error -110 [ 225.337296][ T10] usb 2-1: config 0 descriptor?? [ 225.347058][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.354866][ T5901] usb 1-1: USB disconnect, device number 45 [ 225.359428][ T8553] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 225.382889][ T8558] fido_id[8558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 225.397521][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.416251][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.440245][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.452522][ T5887] usb 4-1: USB disconnect, device number 49 [ 225.479539][ T5821] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.514966][ T5821] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 225.524462][ T5821] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 225.542999][ T5821] usb 3-1: USB disconnect, device number 52 [ 225.589818][ T10] option 2-1:0.207: GSM modem (1-port) converter detected [ 225.649555][ T10] usb 2-1: USB disconnect, device number 43 [ 225.664849][ T10] option 2-1:0.207: device disconnected [ 226.093940][ T8568] netlink: 64 bytes leftover after parsing attributes in process `syz.2.959'. [ 226.126235][ T8568] block nbd0: not configured, cannot reconfigure [ 226.145399][ T8572] FAULT_INJECTION: forcing a failure. [ 226.145399][ T8572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.177424][ T8572] CPU: 0 UID: 0 PID: 8572 Comm: syz.0.960 Not tainted syzkaller #0 PREEMPT(full) [ 226.177454][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 226.177467][ T8572] Call Trace: [ 226.177476][ T8572] [ 226.177484][ T8572] dump_stack_lvl+0xe8/0x150 [ 226.177535][ T8572] should_fail_ex+0x412/0x560 [ 226.177570][ T8572] _copy_from_user+0x2d/0xb0 [ 226.177593][ T8572] ___sys_sendmsg+0x1c6/0x360 [ 226.177623][ T8572] ? __lock_acquire+0x6b5/0x2cf0 [ 226.177663][ T8572] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.177725][ T8572] ? __fget_files+0x2a/0x420 [ 226.177749][ T8572] ? __fget_files+0x3a0/0x420 [ 226.177785][ T8572] __x64_sys_sendmsg+0x1bd/0x2a0 [ 226.177815][ T8572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.177854][ T8572] ? __pfx_ksys_write+0x10/0x10 [ 226.177895][ T8572] do_syscall_64+0xe2/0xf80 [ 226.177920][ T8572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.177941][ T8572] ? trace_irq_disable+0x37/0x100 [ 226.177967][ T8572] ? clear_bhb_loop+0x40/0x90 [ 226.177991][ T8572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.178013][ T8572] RIP: 0033:0x7f487959aeb9 [ 226.178032][ T8572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.178050][ T8572] RSP: 002b:00007f487a3ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.178073][ T8572] RAX: ffffffffffffffda RBX: 00007f4879815fa0 RCX: 00007f487959aeb9 [ 226.178089][ T8572] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 226.178103][ T8572] RBP: 00007f487a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 226.178116][ T8572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.178129][ T8572] R13: 00007f4879816038 R14: 00007f4879815fa0 R15: 00007ffd728ce3e8 [ 226.178162][ T8572] [ 226.619329][ T8577] netlink: 64 bytes leftover after parsing attributes in process `syz.1.962'. [ 226.629100][ T8577] block nbd0: not configured, cannot reconfigure [ 226.667325][ T5821] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 226.836278][ T799] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 226.855976][ T5821] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 226.869797][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.879929][ T5821] usb 4-1: Product: syz [ 226.884149][ T5821] usb 4-1: Manufacturer: syz [ 226.888915][ T5821] usb 4-1: SerialNumber: syz [ 226.996174][ T799] usb 3-1: Using ep0 maxpacket: 16 [ 227.006179][ T5887] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 227.018704][ T799] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 227.040675][ T799] usb 3-1: config 1 has no interface number 0 [ 227.056217][ T799] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 227.066550][ T799] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.077203][ T799] usb 3-1: config 1 interface 105 has no altsetting 0 [ 227.088193][ T799] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 227.098746][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.106933][ T799] usb 3-1: Product: syz [ 227.112873][ T799] usb 3-1: Manufacturer: syz [ 227.138476][ T799] usb 3-1: SerialNumber: syz [ 227.150519][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 227.168650][ T8586] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 227.176929][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 227.182843][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 227.215398][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.228872][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 227.243319][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.257139][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.267317][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 227.278296][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.289142][ T5821] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 227.299455][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.315249][ T5821] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 227.330854][ T5887] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 227.342221][ T5821] usb 4-1: USB disconnect, device number 50 [ 227.356209][ T5887] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 227.393757][ T5887] usb 2-1: Manufacturer: syz [ 227.412628][ T8599] FAULT_INJECTION: forcing a failure. [ 227.412628][ T8599] name failslab, interval 1, probability 0, space 0, times 0 [ 227.427648][ T8599] CPU: 0 UID: 0 PID: 8599 Comm: syz.3.971 Not tainted syzkaller #0 PREEMPT(full) [ 227.427676][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 227.427690][ T8599] Call Trace: [ 227.427699][ T8599] [ 227.427707][ T8599] dump_stack_lvl+0xe8/0x150 [ 227.427741][ T8599] should_fail_ex+0x412/0x560 [ 227.427778][ T8599] should_failslab+0xa8/0x100 [ 227.427808][ T8599] __kmalloc_noprof+0xe8/0x760 [ 227.427841][ T8599] ? blk_rq_map_user_iov+0x314/0x1810 [ 227.427880][ T8599] blk_rq_map_user_iov+0x314/0x1810 [ 227.427918][ T8599] ? stack_depot_save_flags+0x33/0x810 [ 227.427960][ T8599] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 227.427992][ T8599] ? ksys_write+0x150/0x270 [ 227.428020][ T8599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.428059][ T8599] ? import_ubuf+0xfb/0x1d0 [ 227.428084][ T8599] blk_rq_map_user_io+0x2ae/0x440 [ 227.428124][ T8599] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 227.428168][ T8599] ? sg_common_write+0xba7/0x13e0 [ 227.428195][ T8599] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 227.428229][ T8599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.428257][ T8599] ? sg_build_indirect+0x5fa/0x850 [ 227.428291][ T8599] sg_common_write+0xcff/0x13e0 [ 227.428333][ T8599] ? __pfx_sg_common_write+0x10/0x10 [ 227.428369][ T8599] sg_write+0xaf2/0xf00 [ 227.428397][ T8599] ? __pfx_sg_write+0x10/0x10 [ 227.428421][ T8599] ? __pfx_aa_file_perm+0x10/0x10 [ 227.428475][ T8599] ? bpf_lsm_file_permission+0x9/0x20 [ 227.428496][ T8599] ? security_file_permission+0x75/0x260 [ 227.428527][ T8599] ? rw_verify_area+0x255/0x4d0 [ 227.428556][ T8599] ? __pfx_sg_write+0x10/0x10 [ 227.428578][ T8599] vfs_write+0x29a/0xb90 [ 227.428616][ T8599] ? __pfx_vfs_write+0x10/0x10 [ 227.428648][ T8599] ? __fget_files+0x2a/0x420 [ 227.428677][ T8599] ? __fget_files+0x2a/0x420 [ 227.428701][ T8599] ? __fget_files+0x3a0/0x420 [ 227.428725][ T8599] ? __fget_files+0x2a/0x420 [ 227.428760][ T8599] ksys_write+0x150/0x270 [ 227.428812][ T8599] ? __pfx_ksys_write+0x10/0x10 [ 227.428853][ T8599] do_syscall_64+0xe2/0xf80 [ 227.428877][ T8599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.428898][ T8599] ? trace_irq_disable+0x37/0x100 [ 227.428925][ T8599] ? clear_bhb_loop+0x40/0x90 [ 227.428950][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.428972][ T8599] RIP: 0033:0x7fee4219aeb9 [ 227.428991][ T8599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.429010][ T8599] RSP: 002b:00007fee43093028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.429033][ T8599] RAX: ffffffffffffffda RBX: 00007fee42415fa0 RCX: 00007fee4219aeb9 [ 227.429048][ T8599] RDX: 00000000000000c4 RSI: 0000200000000300 RDI: 0000000000000004 [ 227.429061][ T8599] RBP: 00007fee43093090 R08: 0000000000000000 R09: 0000000000000000 [ 227.429074][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.429087][ T8599] R13: 00007fee42416038 R14: 00007fee42415fa0 R15: 00007ffee12df638 [ 227.429119][ T8599] [ 227.435060][ T799] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 227.748384][ T5887] usb 2-1: config 0 descriptor?? [ 228.047090][ T5887] rc_core: IR keymap rc-hauppauge not found [ 228.054686][ T5887] Registered IR keymap rc-empty [ 228.063831][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.087510][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.108023][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 228.119864][ T5821] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 228.132858][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input87 [ 228.153646][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.179655][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.207058][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.226290][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.246313][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.266251][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.287485][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.301230][ T5821] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 228.311689][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.319164][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.328180][ T5821] usb 4-1: Product: syz [ 228.332636][ T5821] usb 4-1: Manufacturer: syz [ 228.336575][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 228.339970][ T5821] usb 4-1: SerialNumber: syz [ 228.349906][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.362814][ T5821] usb 4-1: config 0 descriptor?? [ 228.376336][ T5887] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 228.399310][ T5887] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 228.409957][ T5887] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 228.439854][ T5887] usb 2-1: USB disconnect, device number 44 [ 228.516229][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 228.528602][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.547449][ T10] usb 1-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.576166][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 228.581504][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.583342][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.601262][ T5821] usb-storage 4-1:0.0: USB Mass Storage device detected [ 228.628555][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 228.646179][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.654318][ T10] usb 1-1: Product: syz [ 228.666125][ T10] usb 1-1: Manufacturer: syz [ 228.670859][ T10] usb 1-1: SerialNumber: syz [ 228.798422][ T5901] usb 4-1: USB disconnect, device number 51 [ 228.898564][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input88 [ 228.911094][ T5189] bcm5974 1-1:1.0: could not read from device [ 228.930648][ T5189] bcm5974 1-1:1.0: could not read from device [ 228.943361][ T5189] bcm5974 1-1:1.0: could not read from device [ 228.952125][ T10] usb 1-1: USB disconnect, device number 46 [ 229.307810][ T8622] netlink: 'syz.1.977': attribute type 46 has an invalid length. [ 229.315931][ T8622] netlink: 'syz.1.977': attribute type 28 has an invalid length. [ 229.629857][ T5901] usb 3-1: USB disconnect, device number 53 [ 229.926206][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 230.046210][ T5901] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 230.076181][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 230.083149][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.093438][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.104711][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.115554][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 230.125933][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.126393][ T5888] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 230.142462][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.156287][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.164372][ T10] usb 2-1: Manufacturer: syz [ 230.171674][ T10] usb 2-1: config 0 descriptor?? [ 230.196203][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 230.203151][ T5901] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 230.217395][ T5901] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 230.228751][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.241077][ T5901] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 230.252586][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 230.263777][ T5901] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.276931][ T5901] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.286131][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.306186][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 230.317645][ T5888] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 230.328708][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.341067][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.351140][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 230.361585][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.382469][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.392403][ T5888] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.400866][ T5888] usb 4-1: Manufacturer: syz [ 230.418728][ T5888] usb 4-1: config 0 descriptor?? [ 230.488064][ T10] rc_core: IR keymap rc-hauppauge not found [ 230.494090][ T10] Registered IR keymap rc-empty [ 230.499636][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 230.512473][ T5901] usb 3-1: usb_control_msg returned -32 [ 230.520430][ T5901] usbtmc 3-1:16.0: can't read capabilities [ 230.537820][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 230.584513][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 230.599500][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input89 [ 230.619221][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 230.634020][ T8646] FAULT_INJECTION: forcing a failure. [ 230.634020][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 230.647322][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 230.655808][ T8646] CPU: 0 UID: 0 PID: 8646 Comm: syz.0.986 Not tainted syzkaller #0 PREEMPT(full) [ 230.655837][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 230.655851][ T8646] Call Trace: [ 230.655860][ T8646] [ 230.655868][ T8646] dump_stack_lvl+0xe8/0x150 [ 230.655900][ T8646] should_fail_ex+0x412/0x560 [ 230.655935][ T8646] should_failslab+0xa8/0x100 [ 230.655958][ T8646] __kmalloc_noprof+0xe8/0x760 [ 230.655988][ T8646] ? blk_rq_map_user_iov+0x314/0x1810 [ 230.656026][ T8646] blk_rq_map_user_iov+0x314/0x1810 [ 230.656063][ T8646] ? stack_depot_save_flags+0x33/0x810 [ 230.656103][ T8646] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 230.656131][ T8646] ? ksys_write+0x150/0x270 [ 230.656159][ T8646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.656196][ T8646] ? import_ubuf+0xfb/0x1d0 [ 230.656220][ T8646] blk_rq_map_user_io+0x2ae/0x440 [ 230.656258][ T8646] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 230.656299][ T8646] ? sg_common_write+0xba7/0x13e0 [ 230.656326][ T8646] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 230.656357][ T8646] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.656385][ T8646] ? sg_build_indirect+0x5fa/0x850 [ 230.656418][ T8646] sg_common_write+0xcff/0x13e0 [ 230.656457][ T8646] ? __pfx_sg_common_write+0x10/0x10 [ 230.656494][ T8646] sg_write+0xaf2/0xf00 [ 230.656522][ T8646] ? __pfx_sg_write+0x10/0x10 [ 230.656545][ T8646] ? __pfx_aa_file_perm+0x10/0x10 [ 230.656613][ T8646] ? bpf_lsm_file_permission+0x9/0x20 [ 230.656634][ T8646] ? security_file_permission+0x75/0x260 [ 230.656665][ T8646] ? rw_verify_area+0x255/0x4d0 [ 230.656692][ T8646] ? __pfx_sg_write+0x10/0x10 [ 230.656713][ T8646] vfs_write+0x29a/0xb90 [ 230.656750][ T8646] ? __pfx_vfs_write+0x10/0x10 [ 230.656789][ T8646] ? __fget_files+0x2a/0x420 [ 230.656816][ T8646] ? __fget_files+0x2a/0x420 [ 230.656840][ T8646] ? __fget_files+0x3a0/0x420 [ 230.656862][ T8646] ? __fget_files+0x2a/0x420 [ 230.656896][ T8646] ksys_write+0x150/0x270 [ 230.656947][ T8646] ? __pfx_ksys_write+0x10/0x10 [ 230.656989][ T8646] do_syscall_64+0xe2/0xf80 [ 230.657014][ T8646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.657035][ T8646] ? trace_irq_disable+0x37/0x100 [ 230.657063][ T8646] ? clear_bhb_loop+0x40/0x90 [ 230.657090][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.657111][ T8646] RIP: 0033:0x7f487959aeb9 [ 230.657131][ T8646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.657150][ T8646] RSP: 002b:00007f487a3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.657173][ T8646] RAX: ffffffffffffffda RBX: 00007f4879815fa0 RCX: 00007f487959aeb9 [ 230.657189][ T8646] RDX: 0000000000000054 RSI: 0000200000000000 RDI: 0000000000000003 [ 230.657203][ T8646] RBP: 00007f487a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 230.657217][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.657230][ T8646] R13: 00007f4879816038 R14: 00007f4879815fa0 R15: 00007ffd728ce3e8 [ 230.657264][ T8646] [ 230.786326][ T5888] rc_core: IR keymap rc-hauppauge not found [ 230.834505][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 230.856745][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 230.904653][ T5888] Registered IR keymap rc-empty [ 230.926567][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 230.932627][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.970654][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.026966][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.048218][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.057226][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.076631][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.088519][ T5888] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 231.105104][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input90 [ 231.106423][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.137305][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.159202][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 231.168291][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.186527][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.187393][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 231.212012][ T10] usb 2-1: USB disconnect, device number 45 [ 231.216877][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.253520][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.276513][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.306406][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.326355][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.356432][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.386222][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 231.408671][ T5888] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 231.418863][ T5888] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 231.435195][ T5888] usb 4-1: USB disconnect, device number 52 [ 231.726207][ T5887] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 231.887307][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 231.894410][ T5887] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 231.903089][ T5887] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.913081][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.923179][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.933279][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.946578][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.955735][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.178338][ T5887] usb 1-1: usb_control_msg returned -32 [ 232.184167][ T5887] usbtmc 1-1:16.0: can't read capabilities [ 232.386266][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 232.536481][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 232.556977][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.574856][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.586667][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.596876][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 232.607407][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.621874][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 232.631464][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 232.641630][ T10] usb 4-1: Manufacturer: syz [ 232.650505][ T10] usb 4-1: config 0 descriptor?? [ 232.732304][ T5902] usb 3-1: USB disconnect, device number 54 [ 233.056133][ T10] rc_core: IR keymap rc-hauppauge not found [ 233.062244][ T10] Registered IR keymap rc-empty [ 233.067343][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.086616][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.117917][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 233.131539][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input91 [ 233.146646][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.176343][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.197338][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.226244][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.256366][ T5902] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 233.264654][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.286200][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.306228][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.326347][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.346199][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.366262][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 233.388338][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 233.398781][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 233.426158][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 233.438016][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.456397][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.467842][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.481173][ T5902] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 233.490553][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.505082][ T5902] usb 2-1: config 0 descriptor?? [ 233.921619][ T5902] kye 0003:0458:4018.0007: unbalanced delimiter at end of report description [ 233.931155][ T5902] kye 0003:0458:4018.0007: parse failed [ 233.937108][ T5902] kye 0003:0458:4018.0007: probe with driver kye failed with error -22 [ 234.046725][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 234.120541][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.133373][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.144593][ T5902] usb 2-1: USB disconnect, device number 46 [ 234.226279][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 234.233383][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.243787][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.255047][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.265315][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 234.275162][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.289555][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 234.299080][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.307163][ T10] usb 3-1: Manufacturer: syz [ 234.316829][ T10] usb 3-1: config 0 descriptor?? [ 234.394713][ T799] usb 1-1: USB disconnect, device number 47 [ 234.586306][ T10] rc_core: IR keymap rc-hauppauge not found [ 234.592391][ T10] Registered IR keymap rc-empty [ 234.597644][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.626261][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.657665][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 234.673403][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input92 [ 234.689909][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.716317][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.776404][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.806246][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.826745][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.836379][ T799] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 234.856225][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.876332][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.896293][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.916244][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.946299][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 234.969415][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 234.978754][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 234.986464][ T799] usb 1-1: Using ep0 maxpacket: 16 [ 234.992434][ T5888] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 235.004701][ T799] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 235.011527][ T10] usb 3-1: USB disconnect, device number 55 [ 235.020131][ T799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.033562][ T799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.043715][ T799] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 235.055210][ T799] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.075794][ T799] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.096476][ T799] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.104549][ T799] usb 1-1: Manufacturer: syz [ 235.126693][ T8664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.130862][ T799] usb 1-1: config 0 descriptor?? [ 235.151618][ T5888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 235.173324][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.203376][ T5888] usb 2-1: config 0 descriptor?? [ 235.219794][ T5888] cp210x 2-1:0.0: cp210x converter detected [ 235.229306][ T5902] usb 4-1: USB disconnect, device number 53 [ 235.363680][ T8697] FAULT_INJECTION: forcing a failure. [ 235.363680][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 235.378064][ T8697] CPU: 1 UID: 0 PID: 8697 Comm: syz.3.1001 Not tainted syzkaller #0 PREEMPT(full) [ 235.378094][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 235.378107][ T8697] Call Trace: [ 235.378120][ T8697] [ 235.378129][ T8697] dump_stack_lvl+0xe8/0x150 [ 235.378163][ T8697] should_fail_ex+0x412/0x560 [ 235.378197][ T8697] ? __d_alloc+0x37/0x6f0 [ 235.378227][ T8697] should_failslab+0xa8/0x100 [ 235.378244][ T8697] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 235.378265][ T8697] ? look_up_lock_class+0x57/0x110 [ 235.378289][ T8697] __d_alloc+0x37/0x6f0 [ 235.378310][ T8697] ? __lock_acquire+0x6b5/0x2cf0 [ 235.378329][ T8697] d_alloc_parallel+0xe6/0x1610 [ 235.378355][ T8697] ? look_up_lock_class+0x57/0x110 [ 235.378373][ T8697] ? register_lock_class+0x31/0x2e0 [ 235.378389][ T8697] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.378410][ T8697] ? __lock_acquire+0x6b5/0x2cf0 [ 235.378435][ T8697] ? __pfx_d_alloc_parallel+0x10/0x10 [ 235.378456][ T8697] ? do_raw_spin_lock+0x12b/0x2f0 [ 235.378482][ T8697] ? __raw_spin_lock_init+0x45/0x100 [ 235.378506][ T8697] ? __init_waitqueue_head+0xa9/0x150 [ 235.378534][ T8697] __lookup_slow+0x137/0x410 [ 235.378555][ T8697] ? __pfx___lookup_slow+0x10/0x10 [ 235.378583][ T8697] ? down_read+0x272/0x2e0 [ 235.378606][ T8697] lookup_slow+0x53/0x70 [ 235.378626][ T8697] path_lookupat+0x3f5/0x8c0 [ 235.378656][ T8697] filename_lookup+0x256/0x5d0 [ 235.378678][ T8697] ? __pfx_filename_lookup+0x10/0x10 [ 235.378713][ T8697] ? __might_fault+0xaf/0x130 [ 235.378734][ T8697] ? __might_fault+0xaf/0x130 [ 235.378760][ T8697] filename_linkat+0x11a/0x600 [ 235.378783][ T8697] ? __pfx_filename_linkat+0x10/0x10 [ 235.378802][ T8697] ? do_getname+0x151/0x250 [ 235.378821][ T8697] __se_sys_link+0x55/0x2c0 [ 235.378840][ T8697] do_syscall_64+0xe2/0xf80 [ 235.378858][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.378874][ T8697] ? trace_irq_disable+0x37/0x100 [ 235.378894][ T8697] ? clear_bhb_loop+0x40/0x90 [ 235.378920][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.378936][ T8697] RIP: 0033:0x7fee4219aeb9 [ 235.378951][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.378964][ T8697] RSP: 002b:00007fee43072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 235.378981][ T8697] RAX: ffffffffffffffda RBX: 00007fee42416090 RCX: 00007fee4219aeb9 [ 235.378993][ T8697] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 235.379003][ T8697] RBP: 00007fee43072090 R08: 0000000000000000 R09: 0000000000000000 [ 235.379013][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.379023][ T8697] R13: 00007fee42416128 R14: 00007fee42416090 R15: 00007ffee12df638 [ 235.379047][ T8697] [ 235.670630][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.679773][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.703665][ T5888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 235.766231][ T799] rc_core: IR keymap rc-hauppauge not found [ 235.772297][ T799] Registered IR keymap rc-empty [ 235.778161][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.794507][ T8702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1002'. [ 235.812321][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.845706][ T799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 235.864870][ T799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93 [ 235.880089][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.906364][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.926628][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.953144][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 235.980987][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.016254][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.036235][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.056376][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.076996][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.097014][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 236.137253][ T799] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 236.146632][ T799] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 236.175276][ T799] usb 1-1: USB disconnect, device number 48 [ 236.346194][ T5902] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 236.506334][ T799] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 236.511499][ T5902] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 236.523399][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.533954][ T5902] usb 4-1: config 0 descriptor?? [ 236.666198][ T799] usb 3-1: Using ep0 maxpacket: 8 [ 236.675959][ T799] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 236.687396][ T799] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 236.697765][ T799] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 236.707667][ T799] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.720829][ T799] usb 3-1: config 1 interface 0 has no altsetting 0 [ 236.730560][ T799] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.741352][ T799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.750062][ T799] usb 3-1: Product: syz [ 236.754390][ T799] usb 3-1: Manufacturer: syz [ 236.759649][ T799] usb 3-1: SerialNumber: syz [ 236.769227][ T8714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.779015][ T8714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.827903][ T8716] FAULT_INJECTION: forcing a failure. [ 236.827903][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.841242][ T8716] CPU: 0 UID: 0 PID: 8716 Comm: syz.0.1007 Not tainted syzkaller #0 PREEMPT(full) [ 236.841276][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 236.841290][ T8716] Call Trace: [ 236.841299][ T8716] [ 236.841309][ T8716] dump_stack_lvl+0xe8/0x150 [ 236.841340][ T8716] should_fail_ex+0x412/0x560 [ 236.841371][ T8716] _copy_from_user+0x2d/0xb0 [ 236.841391][ T8716] ___sys_recvmsg+0x175/0x590 [ 236.841422][ T8716] ? __pfx____sys_recvmsg+0x10/0x10 [ 236.841456][ T8716] ? __fget_files+0x2a/0x420 [ 236.841503][ T8716] do_recvmmsg+0x334/0x800 [ 236.841535][ T8716] ? __pfx_do_recvmmsg+0x10/0x10 [ 236.841570][ T8716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.841611][ T8716] __x64_sys_recvmmsg+0x198/0x250 [ 236.841640][ T8716] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 236.841675][ T8716] do_syscall_64+0xe2/0xf80 [ 236.841696][ T8716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.841714][ T8716] ? trace_irq_disable+0x37/0x100 [ 236.841742][ T8716] ? clear_bhb_loop+0x40/0x90 [ 236.841765][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.841784][ T8716] RIP: 0033:0x7f487959aeb9 [ 236.841800][ T8716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.841816][ T8716] RSP: 002b:00007f487a3ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 236.841836][ T8716] RAX: ffffffffffffffda RBX: 00007f4879815fa0 RCX: 00007f487959aeb9 [ 236.841850][ T8716] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 236.841864][ T8716] RBP: 00007f487a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 236.841878][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.841889][ T8716] R13: 00007f4879816038 R14: 00007f4879815fa0 R15: 00007ffd728ce3e8 [ 236.841916][ T8716] [ 237.376314][ T5901] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 237.546459][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 237.555403][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.566340][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.577681][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.588095][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 237.599450][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.615649][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.625700][ T5901] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.634531][ T5901] usb 1-1: Manufacturer: syz [ 237.648157][ T5901] usb 1-1: config 0 descriptor?? [ 237.745165][ T8694] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 237.780379][ T5880] usb 2-1: USB disconnect, device number 47 [ 237.802644][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 237.826641][ T5880] cp210x 2-1:0.0: device disconnected [ 237.956495][ T5901] rc_core: IR keymap rc-hauppauge not found [ 237.967027][ T5901] Registered IR keymap rc-empty [ 237.979025][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.007346][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.034425][ T8728] fuse: Bad value for 'user_id' [ 238.041163][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 238.046679][ T8728] fuse: Bad value for 'user_id' [ 238.060652][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input94 [ 238.078725][ T5849] Bluetooth: hci0: Unknown advertising packet type: 0x78 [ 238.078780][ T5849] Bluetooth: hci0: Malformed LE Event: 0x0d [ 238.082803][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.104085][ T8728] binder: 8727:8728 ioctl c0306201 0 returned -14 [ 238.115489][ T8728] binder: 8727:8728 ioctl c0306201 0 returned -14 [ 238.136375][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.189183][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.216295][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.246358][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.277940][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.316313][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.346347][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.366667][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.386419][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.406379][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 238.439849][ T5901] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 238.455575][ T5901] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 238.475069][ T5901] usb 1-1: USB disconnect, device number 49 [ 238.927789][ T5901] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 239.055298][ T8741] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.086171][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 239.093650][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.104519][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.230702][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.240971][ T5901] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 239.255041][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.286702][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.325683][ T5901] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.346002][ T5901] usb 2-1: Manufacturer: syz [ 239.375961][ T5901] usb 2-1: config 0 descriptor?? [ 239.421990][ T5902] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 239.442102][ T5902] [drm:udl_init] *ERROR* Selecting channel failed [ 239.520375][ T5902] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 239.539639][ T5902] [drm] Initialized udl on minor 2 [ 239.574371][ T5902] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.608361][ T5902] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 239.617091][ T799] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 239.641357][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 239.652096][ T5902] usb 4-1: USB disconnect, device number 54 [ 239.668404][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 239.676342][ T799] usb 3-1: USB disconnect, device number 56 [ 239.790512][ T5901] rc_core: IR keymap rc-hauppauge not found [ 239.808399][ T5901] Registered IR keymap rc-empty [ 239.813712][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.826328][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 239.826349][ T30] audit: type=1326 audit(1769498028.104:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4219aeb9 code=0x7ffc0000 [ 239.887957][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.905440][ T30] audit: type=1326 audit(1769498028.144:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4219aeb9 code=0x7ffc0000 [ 239.933848][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 239.951621][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input95 [ 239.965575][ T30] audit: type=1326 audit(1769498028.144:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee4219aeb9 code=0x7ffc0000 [ 239.990747][ T30] audit: type=1326 audit(1769498028.154:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4219aeb9 code=0x7ffc0000 [ 239.991835][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.032883][ T30] audit: type=1326 audit(1769498028.154:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fee4219aeb9 code=0x7ffc0000 [ 240.076994][ T30] audit: type=1326 audit(1769498028.154:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4219aeb9 code=0x7ffc0000 [ 240.103963][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.129901][ T30] audit: type=1326 audit(1769498028.154:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fee4219aeb9 code=0x7ffc0000 [ 240.197622][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.226176][ T30] audit: type=1326 audit(1769498028.154:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee4213c2d9 code=0x7ffc0000 [ 240.252279][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.277713][ T30] audit: type=1326 audit(1769498028.164:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4219aeb9 code=0x7ffc0000 [ 240.301085][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.336206][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.358325][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.377535][ T30] audit: type=1326 audit(1769498028.164:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8752 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee4213c2d9 code=0x7ffc0000 [ 240.426384][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.459495][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.486222][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 240.518399][ T5901] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 240.535688][ T5901] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 240.592204][ T5901] usb 2-1: USB disconnect, device number 48 [ 240.664318][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 240.926575][ T5821] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 241.086319][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 241.093132][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.104200][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.115384][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 241.125194][ T5821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 241.135455][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.151117][ T5821] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 241.160593][ T5821] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 241.169795][ T5821] usb 1-1: Manufacturer: syz [ 241.178293][ T5821] usb 1-1: config 0 descriptor?? [ 241.226158][ T5901] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 241.376264][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 241.384456][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 241.403613][ T5901] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 241.414933][ T5901] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 241.423517][ T5902] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 241.431337][ T5901] usb 2-1: Product: syz [ 241.437136][ T5901] usb 2-1: Manufacturer: syz [ 241.441916][ T5901] usb 2-1: SerialNumber: syz [ 241.458630][ T5901] usb 2-1: config 0 descriptor?? [ 241.482172][ T5901] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 241.496288][ T5821] rc_core: IR keymap rc-hauppauge not found [ 241.511491][ T5821] Registered IR keymap rc-empty [ 241.519309][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.546733][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.567941][ T5821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 241.581806][ T5821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input96 [ 241.596346][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 241.602702][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.609166][ T5902] usb 3-1: device descriptor read/all, error -61 [ 241.626321][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.646461][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.666211][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.677985][ T799] usb 2-1: USB disconnect, device number 49 [ 241.686247][ T2998] usb 2-1: Failed to submit usb control message: -71 [ 241.693307][ T2998] usb 2-1: unable to send the bmi data to the device: -71 [ 241.701080][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.704883][ T2998] usb 2-1: unable to get target info from device [ 241.734746][ T2998] usb 2-1: could not get target info (-71) [ 241.736622][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.746706][ T2998] usb 2-1: could not probe fw (-71) [ 241.761023][ T5902] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 241.766956][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.816351][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.840333][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.867179][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.906982][ T5821] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 241.911585][ T5902] usb 3-1: device descriptor read/64, error -71 [ 241.929304][ T5821] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.940973][ T5821] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.964772][ T5821] usb 1-1: USB disconnect, device number 50 [ 242.027679][ T5902] usb usb3-port1: attempt power cycle [ 242.226228][ T799] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 242.367700][ T5902] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 242.380765][ T799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.392401][ T799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.402320][ T799] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.413905][ T799] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.424382][ T5902] usb 3-1: device descriptor read/8, error -71 [ 242.424511][ T799] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 242.439985][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.472407][ T799] hub 4-1:1.0: bad descriptor, ignoring hub [ 242.493334][ T799] hub 4-1:1.0: probe with driver hub failed with error -5 [ 242.506514][ T799] cdc_wdm 4-1:1.0: skipping garbage [ 242.522636][ T799] cdc_wdm 4-1:1.0: skipping garbage [ 242.538317][ T799] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 242.551918][ T799] cdc_wdm 4-1:1.0: Unknown control protocol [ 242.681111][ T8785] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1029'. [ 242.696238][ T5902] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 242.727778][ T5902] usb 3-1: device descriptor read/8, error -71 [ 242.800353][ T799] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 242.846449][ T5902] usb usb3-port1: unable to enumerate USB device [ 242.956326][ T799] usb 1-1: Using ep0 maxpacket: 16 [ 242.963504][ T799] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 242.974561][ T799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.985976][ T799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.987207][ T5902] usb 4-1: USB disconnect, device number 55 [ 242.997152][ T799] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.011826][ T799] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.027704][ T799] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 243.037012][ T799] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 243.045047][ T799] usb 1-1: Manufacturer: syz [ 243.057638][ T799] usb 1-1: config 0 descriptor?? [ 243.317530][ T799] rc_core: IR keymap rc-hauppauge not found [ 243.324754][ T799] Registered IR keymap rc-empty [ 243.330520][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.366339][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.382935][ T8808] FAULT_INJECTION: forcing a failure. [ 243.382935][ T8808] name failslab, interval 1, probability 0, space 0, times 0 [ 243.397559][ T799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 243.408362][ T8808] CPU: 0 UID: 0 PID: 8808 Comm: syz.1.1035 Not tainted syzkaller #0 PREEMPT(full) [ 243.408481][ T8808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 243.408521][ T8808] Call Trace: [ 243.408543][ T8808] [ 243.408571][ T8808] dump_stack_lvl+0xe8/0x150 [ 243.408660][ T8808] should_fail_ex+0x412/0x560 [ 243.408753][ T8808] should_failslab+0xa8/0x100 [ 243.408815][ T8808] __kmalloc_noprof+0xe8/0x760 [ 243.408899][ T8808] ? blk_rq_map_user_iov+0x314/0x1810 [ 243.409009][ T8808] blk_rq_map_user_iov+0x314/0x1810 [ 243.409103][ T8808] ? stack_depot_save_flags+0x33/0x810 [ 243.409216][ T8808] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 243.409303][ T8808] ? ksys_write+0x150/0x270 [ 243.409347][ T8808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.409383][ T8808] ? import_ubuf+0xfb/0x1d0 [ 243.409408][ T8808] blk_rq_map_user_io+0x2ae/0x440 [ 243.409447][ T8808] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 243.409490][ T8808] ? sg_common_write+0xba7/0x13e0 [ 243.409518][ T8808] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 243.409552][ T8808] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.409579][ T8808] ? sg_build_indirect+0x5fa/0x850 [ 243.409614][ T8808] sg_common_write+0xcff/0x13e0 [ 243.409655][ T8808] ? __pfx_sg_common_write+0x10/0x10 [ 243.409692][ T8808] sg_write+0xaf2/0xf00 [ 243.409721][ T8808] ? __pfx_sg_write+0x10/0x10 [ 243.409744][ T8808] ? __pfx_aa_file_perm+0x10/0x10 [ 243.409798][ T8808] ? bpf_lsm_file_permission+0x9/0x20 [ 243.409819][ T8808] ? security_file_permission+0x75/0x260 [ 243.409849][ T8808] ? rw_verify_area+0x255/0x4d0 [ 243.409879][ T8808] ? __pfx_sg_write+0x10/0x10 [ 243.409899][ T8808] vfs_write+0x29a/0xb90 [ 243.409937][ T8808] ? __pfx_vfs_write+0x10/0x10 [ 243.409981][ T8808] ? __fget_files+0x2a/0x420 [ 243.410010][ T8808] ? __fget_files+0x2a/0x420 [ 243.410032][ T8808] ? __fget_files+0x3a0/0x420 [ 243.410055][ T8808] ? __fget_files+0x2a/0x420 [ 243.410088][ T8808] ksys_write+0x150/0x270 [ 243.410120][ T8808] ? __pfx_ksys_write+0x10/0x10 [ 243.410270][ T8808] do_syscall_64+0xe2/0xf80 [ 243.410355][ T8808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.410409][ T8808] ? trace_irq_disable+0x37/0x100 [ 243.410476][ T8808] ? clear_bhb_loop+0x40/0x90 [ 243.410547][ T8808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.410607][ T8808] RIP: 0033:0x7fae00d9aeb9 [ 243.410661][ T8808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.410712][ T8808] RSP: 002b:00007fae01d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.410773][ T8808] RAX: ffffffffffffffda RBX: 00007fae01015fa0 RCX: 00007fae00d9aeb9 [ 243.410814][ T8808] RDX: 000000000000008c RSI: 0000200000000740 RDI: 0000000000000004 [ 243.410848][ T8808] RBP: 00007fae01d08090 R08: 0000000000000000 R09: 0000000000000000 [ 243.410888][ T8808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.410921][ T8808] R13: 00007fae01016038 R14: 00007fae01015fa0 R15: 00007ffc56c61998 [ 243.411025][ T8808] [ 243.723081][ T799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input97 [ 243.739231][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.758636][ T8811] overlayfs: upper fs does not support tmpfile. [ 243.767925][ T8811] sg_write: process 671 (syz.1.1036) changed security contexts after opening file descriptor, this is not allowed. [ 243.810071][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.846255][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.867284][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.886295][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.916372][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.946738][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.967789][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 243.995474][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.016293][ T799] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 244.039082][ T799] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 244.156159][ T799] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 244.181688][ T799] usb 1-1: USB disconnect, device number 51 [ 244.346196][ T5902] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 244.496218][ T5901] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 244.506322][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 244.512857][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.523237][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.534581][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.544347][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 244.555296][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.556407][ T799] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 244.571391][ T5902] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 244.585835][ T5902] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.594120][ T5902] usb 2-1: Manufacturer: syz [ 244.602648][ T5902] usb 2-1: config 0 descriptor?? [ 244.668424][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.679674][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.689632][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.702636][ T5901] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.711890][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.725061][ T5901] usb 3-1: config 0 descriptor?? [ 244.737928][ T799] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.756677][ T799] usb 4-1: config 0 has no interface number 0 [ 244.778593][ T799] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 244.787941][ T799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.795966][ T799] usb 4-1: Product: syz [ 244.800472][ T799] usb 4-1: Manufacturer: syz [ 244.805194][ T799] usb 4-1: SerialNumber: syz [ 244.813499][ T799] usb 4-1: config 0 descriptor?? [ 244.896276][ T5902] rc_core: IR keymap rc-hauppauge not found [ 244.916166][ T5902] Registered IR keymap rc-empty [ 244.921846][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 244.946474][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 244.968994][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 244.984694][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input98 [ 245.008219][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.026407][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.043813][ T799] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 245.056568][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.063903][ T799] usb 4-1: USB disconnect, device number 56 [ 245.096252][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.126694][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.149204][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.176451][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.206258][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.252199][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.297570][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.319562][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 245.331413][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 245.339708][ T5902] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 245.362781][ T5901] usb 3-1: USB disconnect, device number 61 [ 245.378929][ T5902] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 245.397569][ T5902] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 245.412241][ T5902] usb 2-1: USB disconnect, device number 50 [ 245.451377][ T8846] kAFS: unable to lookup cell '/yz1' [ 245.459794][ T8846] kAFS: unable to lookup cell '/yz1' [ 245.530164][ T8850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.862401][ T8862] FAULT_INJECTION: forcing a failure. [ 245.862401][ T8862] name failslab, interval 1, probability 0, space 0, times 0 [ 245.878904][ T8862] CPU: 0 UID: 0 PID: 8862 Comm: syz.1.1053 Not tainted syzkaller #0 PREEMPT(full) [ 245.878933][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 245.878947][ T8862] Call Trace: [ 245.878955][ T8862] [ 245.878964][ T8862] dump_stack_lvl+0xe8/0x150 [ 245.878999][ T8862] should_fail_ex+0x412/0x560 [ 245.879034][ T8862] should_failslab+0xa8/0x100 [ 245.879055][ T8862] ? skb_clone+0x212/0x3a0 [ 245.879084][ T8862] kmem_cache_alloc_noprof+0x87/0x650 [ 245.879121][ T8862] skb_clone+0x212/0x3a0 [ 245.879153][ T8862] __netlink_deliver_tap+0x424/0x8b0 [ 245.879192][ T8862] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.879217][ T8862] netlink_deliver_tap+0x19c/0x1b0 [ 245.879242][ T8862] netlink_unicast+0x7e3/0x9b0 [ 245.879272][ T8862] ? __pfx_netlink_unicast+0x10/0x10 [ 245.879306][ T8862] ? netlink_sendmsg+0x650/0xb40 [ 245.879330][ T8862] ? skb_put+0x11b/0x210 [ 245.879360][ T8862] netlink_sendmsg+0x813/0xb40 [ 245.879394][ T8862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.879422][ T8862] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 245.879455][ T8862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.879479][ T8862] sock_sendmsg_nosec+0x18f/0x1d0 [ 245.879504][ T8862] ____sys_sendmsg+0x589/0x8c0 [ 245.879533][ T8862] ? __might_fault+0xaf/0x130 [ 245.879567][ T8862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.879606][ T8862] ? import_iovec+0x73/0xa0 [ 245.879634][ T8862] ___sys_sendmsg+0x2a5/0x360 [ 245.879662][ T8862] ? __lock_acquire+0x6b5/0x2cf0 [ 245.879692][ T8862] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.879757][ T8862] ? __fget_files+0x2a/0x420 [ 245.879784][ T8862] ? __fget_files+0x3a0/0x420 [ 245.879821][ T8862] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.879854][ T8862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.879895][ T8862] ? __pfx_ksys_write+0x10/0x10 [ 245.879938][ T8862] do_syscall_64+0xe2/0xf80 [ 245.879964][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.879985][ T8862] ? trace_irq_disable+0x37/0x100 [ 245.880012][ T8862] ? clear_bhb_loop+0x40/0x90 [ 245.880038][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.880060][ T8862] RIP: 0033:0x7fae00d9aeb9 [ 245.880082][ T8862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.880102][ T8862] RSP: 002b:00007fae01d08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.880126][ T8862] RAX: ffffffffffffffda RBX: 00007fae01015fa0 RCX: 00007fae00d9aeb9 [ 245.880143][ T8862] RDX: 000000002000c010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 245.880158][ T8862] RBP: 00007fae01d08090 R08: 0000000000000000 R09: 0000000000000000 [ 245.880173][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.880186][ T8862] R13: 00007fae01016038 R14: 00007fae01015fa0 R15: 00007ffc56c61998 [ 245.880221][ T8862] [ 246.216206][ T799] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 246.366215][ T799] usb 4-1: device descriptor read/64, error -71 [ 246.458641][ T8881] wg1: entered allmulticast mode [ 246.618631][ T799] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 246.642577][ T8889] FAULT_INJECTION: forcing a failure. [ 246.642577][ T8889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.656028][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.0.1064 Not tainted syzkaller #0 PREEMPT(full) [ 246.656059][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 246.656073][ T8889] Call Trace: [ 246.656082][ T8889] [ 246.656091][ T8889] dump_stack_lvl+0xe8/0x150 [ 246.656124][ T8889] should_fail_ex+0x412/0x560 [ 246.656160][ T8889] _copy_from_iter+0x3b0/0x1670 [ 246.656205][ T8889] ? __pfx__copy_from_iter+0x10/0x10 [ 246.656252][ T8889] ? aa_label_sk_perm+0x529/0x6d0 [ 246.656287][ T8889] ping_v4_sendmsg+0x293/0x1810 [ 246.656328][ T8889] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 246.656388][ T8889] ? inet_sendmsg+0x14f/0x370 [ 246.656419][ T8889] ? lockdep_hardirqs_on+0x7a/0x110 [ 246.656444][ T8889] ? inet_sendmsg+0x14f/0x370 [ 246.656473][ T8889] ? inet_sendmsg+0x2f4/0x370 [ 246.656506][ T8889] sock_sendmsg_nosec+0x128/0x1d0 [ 246.656530][ T8889] ____sys_sendmsg+0x589/0x8c0 [ 246.656567][ T8889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.656604][ T8889] ? import_iovec+0x73/0xa0 [ 246.656630][ T8889] ___sys_sendmsg+0x2a5/0x360 [ 246.656658][ T8889] ? __lock_acquire+0x6b5/0x2cf0 [ 246.656687][ T8889] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.656751][ T8889] ? __fget_files+0x2a/0x420 [ 246.656776][ T8889] ? __fget_files+0x3a0/0x420 [ 246.656812][ T8889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 246.656843][ T8889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.656880][ T8889] ? __pfx_ksys_write+0x10/0x10 [ 246.656919][ T8889] do_syscall_64+0xe2/0xf80 [ 246.656943][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.656964][ T8889] ? trace_irq_disable+0x37/0x100 [ 246.656990][ T8889] ? clear_bhb_loop+0x40/0x90 [ 246.657016][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.657037][ T8889] RIP: 0033:0x7f487959aeb9 [ 246.657058][ T8889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.657075][ T8889] RSP: 002b:00007f487a3ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.657098][ T8889] RAX: ffffffffffffffda RBX: 00007f4879815fa0 RCX: 00007f487959aeb9 [ 246.657114][ T8889] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 246.657127][ T8889] RBP: 00007f487a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 246.657140][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.657153][ T8889] R13: 00007f4879816038 R14: 00007f4879815fa0 R15: 00007ffd728ce3e8 [ 246.657185][ T8889] [ 246.897348][ T5888] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 246.917073][ T799] usb 4-1: device descriptor read/64, error -71 [ 247.010562][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.026502][ T799] usb usb4-port1: attempt power cycle [ 247.076148][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 247.087430][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.106294][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.119629][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 247.129995][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 247.140344][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.155441][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 247.165987][ T5888] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 247.174868][ T5888] usb 3-1: Manufacturer: syz [ 247.183897][ T5888] usb 3-1: config 0 descriptor?? [ 247.366183][ T799] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 247.396932][ T799] usb 4-1: device descriptor read/8, error -71 [ 247.506494][ T5888] rc_core: IR keymap rc-hauppauge not found [ 247.512581][ T5888] Registered IR keymap rc-empty [ 247.519929][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.546251][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.567553][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 247.581393][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input99 [ 247.595809][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.624980][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.656221][ T799] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 247.668122][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.697607][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.705035][ T799] usb 4-1: device descriptor read/8, error -71 [ 247.736231][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.762968][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.802831][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.828344][ T799] usb usb4-port1: unable to enumerate USB device [ 247.836674][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.863321][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.886598][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.896604][ T8908] FAULT_INJECTION: forcing a failure. [ 247.896604][ T8908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.911159][ T5888] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 247.918661][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.1.1070 Not tainted syzkaller #0 PREEMPT(full) [ 247.918688][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 247.918701][ T8908] Call Trace: [ 247.918710][ T8908] [ 247.918719][ T8908] dump_stack_lvl+0xe8/0x150 [ 247.918752][ T8908] should_fail_ex+0x412/0x560 [ 247.918788][ T8908] prepare_alloc_pages+0x22a/0x650 [ 247.918829][ T8908] __alloc_frozen_pages_noprof+0x12f/0x380 [ 247.918869][ T8908] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 247.918910][ T8908] ? __pfx_policy_nodemask+0x10/0x10 [ 247.918936][ T8908] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.918972][ T8908] alloc_pages_mpol+0x232/0x4a0 [ 247.919001][ T8908] alloc_pages_noprof+0xa8/0x190 [ 247.919025][ T8908] __pmd_alloc+0x3a/0x860 [ 247.919056][ T8908] handle_mm_fault+0xe96/0x3310 [ 247.919095][ T8908] ? handle_mm_fault+0xee/0x3310 [ 247.919138][ T8908] ? __pfx_handle_mm_fault+0x10/0x10 [ 247.919185][ T8908] ? lock_mm_and_find_vma+0xa7/0x340 [ 247.919220][ T8908] do_user_addr_fault+0x75b/0x1340 [ 247.919264][ T8908] exc_page_fault+0x6a/0xc0 [ 247.919291][ T8908] asm_exc_page_fault+0x26/0x30 [ 247.919313][ T8908] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 247.919345][ T8908] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf 45 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 247.919364][ T8908] RSP: 0018:ffffc90017cafca8 EFLAGS: 00050202 [ 247.919384][ T8908] RAX: ffffffff84aeb601 RBX: 0000000000000048 RCX: 0000000000000048 [ 247.919399][ T8908] RDX: 0000000000000000 RSI: ffffc90017cafdb0 RDI: 0000200000000100 [ 247.919415][ T8908] RBP: ffffc90017cafee0 R08: ffffc90017cafdf7 R09: 1ffff92002f95fbe [ 247.919432][ T8908] R10: dffffc0000000000 R11: fffff52002f95fbf R12: 0000200000000148 [ 247.919449][ T8908] R13: 00007ffffffff000 R14: ffffc90017cafdb0 R15: 0000200000000100 [ 247.919472][ T8908] ? _copy_from_user+0xa1/0xb0 [ 247.919504][ T8908] _copy_to_user+0x8a/0xb0 [ 247.919531][ T8908] __se_sys_shmctl+0x26b/0x4c0 [ 247.919558][ T8908] ? __pfx___se_sys_shmctl+0x10/0x10 [ 247.919590][ T8908] ? __fget_files+0x3a0/0x420 [ 247.919629][ T8908] ? ksys_write+0x242/0x270 [ 247.919661][ T8908] ? __pfx_ksys_write+0x10/0x10 [ 247.919698][ T8908] do_syscall_64+0xe2/0xf80 [ 247.919723][ T8908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.919745][ T8908] ? trace_irq_disable+0x37/0x100 [ 247.919772][ T8908] ? clear_bhb_loop+0x40/0x90 [ 247.919799][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.919820][ T8908] RIP: 0033:0x7fae00d9aeb9 [ 247.919841][ T8908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.919859][ T8908] RSP: 002b:00007fae01d08028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 247.919880][ T8908] RAX: ffffffffffffffda RBX: 00007fae01015fa0 RCX: 00007fae00d9aeb9 [ 247.919896][ T8908] RDX: 0000200000000100 RSI: 0000000000000003 RDI: 0000000000000000 [ 247.919910][ T8908] RBP: 00007fae01d08090 R08: 0000000000000000 R09: 0000000000000000 [ 247.919924][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.919937][ T8908] R13: 00007fae01016038 R14: 00007fae01015fa0 R15: 00007ffc56c61998 [ 247.919971][ T8908] [ 248.268274][ T5888] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 248.277745][ T5888] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 248.340116][ T5888] usb 3-1: USB disconnect, device number 62 [ 248.567155][ T8916] FAULT_INJECTION: forcing a failure. [ 248.567155][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 248.592390][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.0.1073 Not tainted syzkaller #0 PREEMPT(full) [ 248.592427][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 248.592442][ T8916] Call Trace: [ 248.592451][ T8916] [ 248.592461][ T8916] dump_stack_lvl+0xe8/0x150 [ 248.592496][ T8916] should_fail_ex+0x412/0x560 [ 248.592535][ T8916] should_failslab+0xa8/0x100 [ 248.592559][ T8916] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 248.592593][ T8916] ? dup_task_struct+0x57/0x9a0 [ 248.592626][ T8916] dup_task_struct+0x57/0x9a0 [ 248.592656][ T8916] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.592684][ T8916] copy_process+0x508/0x3cf0 [ 248.592744][ T8916] ? __pfx_copy_process+0x10/0x10 [ 248.592780][ T8916] ? mutex_init_lockep+0xf9/0x130 [ 248.592814][ T8916] vhost_task_create+0x1f9/0x380 [ 248.592848][ T8916] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 248.592881][ T8916] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 248.592917][ T8916] ? __pfx_vhost_task_create+0x10/0x10 [ 248.592960][ T8916] ? __pfx_vhost_task_fn+0x10/0x10 [ 248.593000][ T8916] ? __lock_acquire+0x6b5/0x2cf0 [ 248.593028][ T8916] ? kasan_save_track+0x4f/0x80 [ 248.593057][ T8916] ? kasan_save_track+0x3e/0x80 [ 248.593092][ T8916] ? kasan_save_free_info+0x46/0x50 [ 248.593116][ T8916] ? __kasan_slab_free+0x5c/0x80 [ 248.593146][ T8916] ? kfree+0x1c1/0x610 [ 248.593176][ T8916] kvm_mmu_post_init_vm+0x14c/0x300 [ 248.593203][ T8916] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 248.593235][ T8916] ? __mutex_trylock_common+0x158/0x260 [ 248.593267][ T8916] ? look_up_lock_class+0x57/0x110 [ 248.593294][ T8916] ? register_lock_class+0x31/0x2e0 [ 248.593319][ T8916] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 248.593346][ T8916] ? __lock_acquire+0x6b5/0x2cf0 [ 248.593375][ T8916] ? __mutex_lock+0x319/0x1300 [ 248.593409][ T8916] ? kasan_quarantine_put+0xbb/0x1f0 [ 248.593454][ T8916] ? do_raw_write_lock+0x11d/0x260 [ 248.593506][ T8916] kvm_vcpu_ioctl+0xa62/0xfd0 [ 248.593547][ T8916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.593578][ T8916] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 248.593629][ T8916] ? __fget_files+0x2a/0x420 [ 248.593659][ T8916] ? __fget_files+0x2a/0x420 [ 248.593683][ T8916] ? __fget_files+0x3a0/0x420 [ 248.593709][ T8916] ? __fget_files+0x2a/0x420 [ 248.593740][ T8916] ? bpf_lsm_file_ioctl+0x9/0x20 [ 248.593763][ T8916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.593795][ T8916] __se_sys_ioctl+0xfc/0x170 [ 248.593833][ T8916] do_syscall_64+0xe2/0xf80 [ 248.593859][ T8916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.593882][ T8916] ? trace_irq_disable+0x37/0x100 [ 248.593909][ T8916] ? clear_bhb_loop+0x40/0x90 [ 248.593937][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.593960][ T8916] RIP: 0033:0x7f487959aeb9 [ 248.593981][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.593999][ T8916] RSP: 002b:00007f487a3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.594023][ T8916] RAX: ffffffffffffffda RBX: 00007f4879815fa0 RCX: 00007f487959aeb9 [ 248.594039][ T8916] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 248.594053][ T8916] RBP: 00007f487a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 248.594073][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.594087][ T8916] R13: 00007f4879816038 R14: 00007f4879815fa0 R15: 00007ffd728ce3e8 [ 248.594124][ T8916] [ 248.951602][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 248.971304][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 249.104944][ T5849] Bluetooth: hci3: unexpected cc 0x0c46 length: 1 < 2 [ 249.226178][ T5902] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 249.356340][ T5901] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 249.386164][ T5902] usb 2-1: Invalid ep0 maxpacket: 64 [ 249.506140][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 249.513581][ T5901] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 249.524076][ T5902] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 249.531934][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.544530][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 249.554556][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 249.564590][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.580144][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 249.589483][ T5901] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 249.597663][ T5901] usb 1-1: Manufacturer: syz [ 249.604773][ T5901] usb 1-1: config 0 descriptor?? [ 249.696179][ T5902] usb 2-1: Invalid ep0 maxpacket: 64 [ 249.702122][ T5902] usb usb2-port1: attempt power cycle [ 249.884617][ T8940] syzkaller1: entered promiscuous mode [ 249.891421][ T5901] rc_core: IR keymap rc-hauppauge not found [ 249.891445][ T5901] Registered IR keymap rc-empty [ 249.891596][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.911875][ T8940] syzkaller1: entered allmulticast mode [ 249.916864][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 249.939910][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 249.962470][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input100 [ 249.983691][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.007628][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.026330][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.047381][ T5902] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 250.058771][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.091730][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.099276][ T5902] usb 2-1: Invalid ep0 maxpacket: 64 [ 250.126419][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.137392][ T8943] syzkaller1: entered promiscuous mode [ 250.142982][ T8943] syzkaller1: entered allmulticast mode [ 250.153329][ T8943] FAULT_INJECTION: forcing a failure. [ 250.153329][ T8943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.167476][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.175987][ T8943] CPU: 0 UID: 0 PID: 8943 Comm: syz.3.1082 Not tainted syzkaller #0 PREEMPT(full) [ 250.176016][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 250.176034][ T8943] Call Trace: [ 250.176043][ T8943] [ 250.176052][ T8943] dump_stack_lvl+0xe8/0x150 [ 250.176086][ T8943] should_fail_ex+0x412/0x560 [ 250.176122][ T8943] _copy_from_iter+0x1d3/0x1670 [ 250.176168][ T8943] ? __pfx__copy_from_iter+0x10/0x10 [ 250.176200][ T8943] ? __lock_acquire+0x6b5/0x2cf0 [ 250.176239][ T8943] tun_get_user+0x516/0x3dd0 [ 250.176294][ T8943] ? __pfx_tun_get_user+0x10/0x10 [ 250.176318][ T8943] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.176338][ T8943] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.176358][ T8943] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.176376][ T8943] ? save_netdev_trace_buffer+0x4e2/0x610 [ 250.176394][ T8943] ? kstrtoull+0x12f/0x1d0 [ 250.176424][ T8943] ? ref_tracker_alloc+0x363/0x4d0 [ 250.176451][ T8943] ? tun_chr_write_iter+0x60/0x210 [ 250.176471][ T8943] ? vfs_write+0x61d/0xb90 [ 250.176494][ T8943] ? ksys_write+0x150/0x270 [ 250.176518][ T8943] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 250.176549][ T8943] ? tun_get+0x1c/0x2f0 [ 250.176574][ T8943] ? tun_get+0x1c/0x2f0 [ 250.176594][ T8943] ? tun_get+0x1c/0x2f0 [ 250.176619][ T8943] tun_chr_write_iter+0x113/0x210 [ 250.176643][ T8943] vfs_write+0x61d/0xb90 [ 250.176674][ T8943] ? __pfx_vfs_write+0x10/0x10 [ 250.176708][ T8943] ? __fget_files+0x2a/0x420 [ 250.176736][ T8943] ksys_write+0x150/0x270 [ 250.176768][ T8943] ? __pfx_ksys_write+0x10/0x10 [ 250.176802][ T8943] do_syscall_64+0xe2/0xf80 [ 250.176823][ T8943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.176840][ T8943] ? trace_irq_disable+0x37/0x100 [ 250.176863][ T8943] ? clear_bhb_loop+0x40/0x90 [ 250.176885][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.176903][ T8943] RIP: 0033:0x7fee4219aeb9 [ 250.176921][ T8943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.176936][ T8943] RSP: 002b:00007fee43093028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.176960][ T8943] RAX: ffffffffffffffda RBX: 00007fee42415fa0 RCX: 00007fee4219aeb9 [ 250.176973][ T8943] RDX: 0000000000000046 RSI: 0000200000000240 RDI: 0000000000000004 [ 250.176985][ T8943] RBP: 00007fee43093090 R08: 0000000000000000 R09: 0000000000000000 [ 250.176996][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.177008][ T8943] R13: 00007fee42416038 R14: 00007fee42415fa0 R15: 00007ffee12df638 [ 250.177034][ T8943] [ 250.437802][ T5902] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 250.448525][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.466375][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.486225][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 250.507676][ T5902] usb 2-1: Invalid ep0 maxpacket: 64 [ 250.513329][ T5902] usb usb2-port1: unable to enumerate USB device [ 250.523009][ T5901] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 250.532343][ T5901] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 250.545210][ T5901] usb 1-1: USB disconnect, device number 52 [ 250.926430][ T5888] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 250.946175][ T5901] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 251.079913][ T5888] usb 4-1: config index 0 descriptor too short (expected 2843, got 27) [ 251.092318][ T5888] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 251.103715][ T5888] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 9 [ 251.114141][ T5888] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice= 0.00 [ 251.114378][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 251.124933][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.157450][ T5901] usb 3-1: config 0 interface 0 altsetting 145 endpoint 0x81 has invalid maxpacket 1027, setting to 1024 [ 251.170295][ T5888] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 251.176486][ T5901] usb 3-1: config 0 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.227403][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 251.234100][ T5901] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 251.258565][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.269810][ T5901] usb 3-1: config 0 descriptor?? [ 251.275714][ T8951] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 251.382688][ T8949] syzkaller1: entered promiscuous mode [ 251.390060][ T8949] syzkaller1: entered allmulticast mode [ 251.469093][ T5888] gspca_sn9c2028: read1 error -71 [ 251.476439][ T5888] gspca_sn9c2028: read1 error -71 [ 251.482899][ T5888] gspca_sn9c2028: read1 error -71 [ 251.497761][ T5888] sn9c2028 4-1:17.0: probe with driver sn9c2028 failed with error -71 [ 251.510876][ T5888] usb 4-1: USB disconnect, device number 61 [ 251.705512][ T5901] elo 0003:04E7:0030.0008: item fetching failed at offset 0/2 [ 251.727228][ T5901] elo 0003:04E7:0030.0008: parse failed [ 251.732947][ T5901] elo 0003:04E7:0030.0008: probe with driver elo failed with error -22 [ 251.945973][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.959777][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.022076][ T5888] usb 3-1: USB disconnect, device number 63 [ 252.306204][ T5901] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 252.386169][ T5888] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 252.458240][ T5901] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 252.466636][ T5901] usb 1-1: config 1 has no interface number 0 [ 252.473117][ T5901] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 252.484777][ T5901] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 252.497936][ T5901] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 252.511679][ T5901] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 252.521173][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.529543][ T5901] usb 1-1: Product: syz [ 252.547378][ T5901] usb 1-1: Manufacturer: syz [ 252.551458][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 252.552047][ T5901] usb 1-1: SerialNumber: syz [ 252.565865][ T8981] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 252.575422][ T5888] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 252.591554][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.613157][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.638626][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 252.667059][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.683140][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 252.692826][ T5888] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 252.701969][ T5888] usb 4-1: Manufacturer: syz [ 252.714005][ T5888] usb 4-1: config 0 descriptor?? [ 252.729019][ T8988] FAULT_INJECTION: forcing a failure. [ 252.729019][ T8988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.742355][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.2.1097 Not tainted syzkaller #0 PREEMPT(full) [ 252.742383][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 252.742398][ T8988] Call Trace: [ 252.742407][ T8988] [ 252.742417][ T8988] dump_stack_lvl+0xe8/0x150 [ 252.742454][ T8988] should_fail_ex+0x412/0x560 [ 252.742496][ T8988] _copy_from_user+0x2d/0xb0 [ 252.742531][ T8988] comedi_unlocked_ioctl+0x1d8/0x1af0 [ 252.742581][ T8988] ? kasan_quarantine_put+0xbb/0x1f0 [ 252.742614][ T8988] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 252.742652][ T8988] ? tomoyo_path_number_perm+0x219/0x630 [ 252.742686][ T8988] ? tomoyo_path_number_perm+0x219/0x630 [ 252.742722][ T8988] ? do_vfs_ioctl+0x1166/0x1530 [ 252.742776][ T8988] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 252.742825][ T8988] ? __fget_files+0x2a/0x420 [ 252.742856][ T8988] ? __fget_files+0x2a/0x420 [ 252.742882][ T8988] ? __fget_files+0x3a0/0x420 [ 252.742908][ T8988] ? __fget_files+0x2a/0x420 [ 252.742939][ T8988] ? bpf_lsm_file_ioctl+0x9/0x20 [ 252.742961][ T8988] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 252.742992][ T8988] __se_sys_ioctl+0xfc/0x170 [ 252.743028][ T8988] do_syscall_64+0xe2/0xf80 [ 252.743055][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.743077][ T8988] ? trace_irq_disable+0x37/0x100 [ 252.743106][ T8988] ? clear_bhb_loop+0x40/0x90 [ 252.743134][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.743157][ T8988] RIP: 0033:0x7f470539aeb9 [ 252.743179][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.743199][ T8988] RSP: 002b:00007f4706294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.743223][ T8988] RAX: ffffffffffffffda RBX: 00007f4705615fa0 RCX: 00007f470539aeb9 [ 252.743240][ T8988] RDX: 0000200000000000 RSI: 00000000c02c640e RDI: 0000000000000003 [ 252.743254][ T8988] RBP: 00007f4706294090 R08: 0000000000000000 R09: 0000000000000000 [ 252.743268][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.743281][ T8988] R13: 00007f4705616038 R14: 00007f4705615fa0 R15: 00007ffff9296dd8 [ 252.743316][ T8988] [ 252.968022][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.977076][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.992522][ T8981] netlink: 'syz.0.1094': attribute type 21 has an invalid length. [ 253.002313][ T8981] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.014716][ T5901] usb 1-1: No status endpoint found [ 253.036305][ T5888] rc_core: IR keymap rc-hauppauge not found [ 253.042289][ T5888] Registered IR keymap rc-empty [ 253.063423][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.099257][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.128073][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 253.143367][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input101 [ 253.160912][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.181348][ T8999] FAULT_INJECTION: forcing a failure. [ 253.181348][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 253.194158][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.2.1100 Not tainted syzkaller #0 PREEMPT(full) [ 253.194189][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 253.194204][ T8999] Call Trace: [ 253.194214][ T8999] [ 253.194224][ T8999] dump_stack_lvl+0xe8/0x150 [ 253.194257][ T8999] should_fail_ex+0x412/0x560 [ 253.194297][ T8999] should_failslab+0xa8/0x100 [ 253.194315][ T8999] __kmalloc_noprof+0xe8/0x760 [ 253.194362][ T8999] ? blk_rq_map_user_iov+0x314/0x1810 [ 253.194402][ T8999] blk_rq_map_user_iov+0x314/0x1810 [ 253.194448][ T8999] ? stack_depot_save_flags+0x33/0x810 [ 253.194490][ T8999] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 253.194520][ T8999] ? ksys_write+0x150/0x270 [ 253.194542][ T8999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.194597][ T8999] ? import_ubuf+0xfb/0x1d0 [ 253.194623][ T8999] blk_rq_map_user_io+0x2ae/0x440 [ 253.194662][ T8999] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 253.194707][ T8999] ? sg_common_write+0xba7/0x13e0 [ 253.194728][ T8999] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 253.194770][ T8999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 253.194799][ T8999] ? sg_build_indirect+0x5fa/0x850 [ 253.194838][ T8999] sg_common_write+0xcff/0x13e0 [ 253.194878][ T8999] ? __pfx_sg_common_write+0x10/0x10 [ 253.194919][ T8999] sg_write+0xaf2/0xf00 [ 253.194940][ T8999] ? __pfx_sg_write+0x10/0x10 [ 253.194976][ T8999] ? __pfx_aa_file_perm+0x10/0x10 [ 253.195030][ T8999] ? bpf_lsm_file_permission+0x9/0x20 [ 253.195051][ T8999] ? security_file_permission+0x75/0x260 [ 253.195081][ T8999] ? rw_verify_area+0x255/0x4d0 [ 253.195109][ T8999] ? __pfx_sg_write+0x10/0x10 [ 253.195142][ T8999] vfs_write+0x29a/0xb90 [ 253.195182][ T8999] ? __pfx_vfs_write+0x10/0x10 [ 253.195215][ T8999] ? __fget_files+0x2a/0x420 [ 253.195243][ T8999] ? __fget_files+0x2a/0x420 [ 253.195268][ T8999] ? __fget_files+0x3a0/0x420 [ 253.195291][ T8999] ? __fget_files+0x2a/0x420 [ 253.195327][ T8999] ksys_write+0x150/0x270 [ 253.195374][ T8999] ? __pfx_ksys_write+0x10/0x10 [ 253.195416][ T8999] do_syscall_64+0xe2/0xf80 [ 253.195448][ T8999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.195469][ T8999] ? trace_irq_disable+0x37/0x100 [ 253.195498][ T8999] ? clear_bhb_loop+0x40/0x90 [ 253.195517][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.195548][ T8999] RIP: 0033:0x7f470539aeb9 [ 253.195570][ T8999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.195589][ T8999] RSP: 002b:00007f4706294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.195612][ T8999] RAX: ffffffffffffffda RBX: 00007f4705615fa0 RCX: 00007f470539aeb9 [ 253.195629][ T8999] RDX: 000000000000008c RSI: 0000200000000a40 RDI: 0000000000000004 [ 253.195642][ T8999] RBP: 00007f4706294090 R08: 0000000000000000 R09: 0000000000000000 [ 253.195656][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.195668][ T8999] R13: 00007f4705616038 R14: 00007f4705615fa0 R15: 00007ffff9296dd8 [ 253.195702][ T8999] [ 253.199888][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.514936][ T5901] usb 1-1: USB disconnect, device number 53 [ 253.536232][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.556299][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.596671][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.616904][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.636341][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.666554][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.696264][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.716230][ T5888] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 253.761253][ T5888] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 253.771352][ T5888] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 253.789725][ T5888] usb 4-1: USB disconnect, device number 62 [ 254.036146][ T5901] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 254.085013][ T9011] FAULT_INJECTION: forcing a failure. [ 254.085013][ T9011] name failslab, interval 1, probability 0, space 0, times 0 [ 254.099123][ T9011] CPU: 0 UID: 0 PID: 9011 Comm: syz.0.1105 Not tainted syzkaller #0 PREEMPT(full) [ 254.099146][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 254.099157][ T9011] Call Trace: [ 254.099163][ T9011] [ 254.099171][ T9011] dump_stack_lvl+0xe8/0x150 [ 254.099196][ T9011] should_fail_ex+0x412/0x560 [ 254.099223][ T9011] should_failslab+0xa8/0x100 [ 254.099241][ T9011] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 254.099266][ T9011] ? __alloc_skb+0x1d0/0x7d0 [ 254.099284][ T9011] ? __local_bh_enable_ip+0xd0/0x130 [ 254.099307][ T9011] __alloc_skb+0x1d0/0x7d0 [ 254.099329][ T9011] netlink_dump+0x1ef/0xe80 [ 254.099357][ T9011] ? __netlink_lookup+0xc6/0x8b0 [ 254.099385][ T9011] ? __pfx_netlink_dump+0x10/0x10 [ 254.099401][ T9011] ? __netlink_lookup+0x7e4/0x8b0 [ 254.099432][ T9011] ? netlink_lookup+0x30/0x200 [ 254.099448][ T9011] ? netlink_lookup+0x30/0x200 [ 254.099463][ T9011] ? netlink_lookup+0x30/0x200 [ 254.099484][ T9011] __netlink_dump_start+0x5cb/0x7e0 [ 254.099508][ T9011] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 254.099528][ T9011] ? __pfx_neigh_dump_info+0x10/0x10 [ 254.099551][ T9011] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 254.099569][ T9011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.099587][ T9011] ? netlink_sendmsg+0x813/0xb40 [ 254.099604][ T9011] ? __pfx_neigh_dump_info+0x10/0x10 [ 254.099637][ T9011] netlink_rcv_skb+0x232/0x4b0 [ 254.099656][ T9011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.099676][ T9011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.099702][ T9011] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.099730][ T9011] netlink_unicast+0x80f/0x9b0 [ 254.099753][ T9011] ? __pfx_netlink_unicast+0x10/0x10 [ 254.099770][ T9011] ? netlink_sendmsg+0x650/0xb40 [ 254.099787][ T9011] ? skb_put+0x11b/0x210 [ 254.099808][ T9011] netlink_sendmsg+0x813/0xb40 [ 254.099834][ T9011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.099853][ T9011] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 254.099874][ T9011] ? __pfx_aa_file_perm+0x10/0x10 [ 254.099894][ T9011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.099911][ T9011] sock_sendmsg_nosec+0x18f/0x1d0 [ 254.099929][ T9011] sock_write_iter+0x302/0x410 [ 254.099956][ T9011] ? __pfx_sock_write_iter+0x10/0x10 [ 254.099988][ T9011] ? bpf_lsm_file_permission+0x9/0x20 [ 254.100003][ T9011] ? security_file_permission+0x75/0x260 [ 254.100031][ T9011] vfs_write+0x61d/0xb90 [ 254.100060][ T9011] ? __pfx_vfs_write+0x10/0x10 [ 254.100090][ T9011] ? __fget_files+0x2a/0x420 [ 254.100116][ T9011] ksys_write+0x150/0x270 [ 254.100139][ T9011] ? __pfx_ksys_write+0x10/0x10 [ 254.100169][ T9011] do_syscall_64+0xe2/0xf80 [ 254.100188][ T9011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.100204][ T9011] ? trace_irq_disable+0x37/0x100 [ 254.100224][ T9011] ? clear_bhb_loop+0x40/0x90 [ 254.100243][ T9011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.100259][ T9011] RIP: 0033:0x7f487959aeb9 [ 254.100275][ T9011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.100289][ T9011] RSP: 002b:00007f487a3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.100306][ T9011] RAX: ffffffffffffffda RBX: 00007f4879815fa0 RCX: 00007f487959aeb9 [ 254.100318][ T9011] RDX: 0000000000000024 RSI: 0000200000000800 RDI: 0000000000000003 [ 254.100328][ T9011] RBP: 00007f487a3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 254.100338][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.100347][ T9011] R13: 00007f4879816038 R14: 00007f4879815fa0 R15: 00007ffd728ce3e8 [ 254.100378][ T9011] [ 254.568949][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.579307][ T5901] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.589627][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.600876][ T5901] usb 2-1: config 0 descriptor?? [ 254.610634][ T5901] pwc: Askey VC010 type 2 USB webcam detected. [ 254.816854][ T9023] input: syz1 as /devices/virtual/input/input102 [ 254.906193][ T5887] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 255.056256][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 255.068360][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 255.080893][ T5901] pwc: recv_control_msg error -32 req 02 val 2b00 [ 255.094562][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.108714][ T5901] pwc: recv_control_msg error -32 req 02 val 2700 [ 255.123060][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.136924][ T5901] pwc: recv_control_msg error -32 req 02 val 2c00 [ 255.142704][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.151947][ T5901] pwc: recv_control_msg error -32 req 04 val 1000 [ 255.163643][ T5887] usb 4-1: Product: syz [ 255.173756][ T5887] usb 4-1: Manufacturer: syz [ 255.183151][ T5887] usb 4-1: SerialNumber: syz [ 255.187904][ T5901] pwc: recv_control_msg error -32 req 04 val 1300 [ 255.194709][ T5901] pwc: recv_control_msg error -32 req 04 val 1400 [ 255.206225][ T5901] pwc: recv_control_msg error -32 req 02 val 2000 [ 255.219301][ T5887] usb 4-1: config 0 descriptor?? [ 255.226195][ T5901] pwc: recv_control_msg error -32 req 02 val 2100 [ 255.244332][ T5901] pwc: recv_control_msg error -32 req 04 val 1500 [ 255.264661][ T5887] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.275193][ T5901] pwc: recv_control_msg error -32 req 02 val 2500 [ 255.282142][ T5887] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 255.321551][ T5901] pwc: recv_control_msg error -32 req 02 val 2400 [ 255.330630][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.339656][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.348063][ T5901] pwc: recv_control_msg error -32 req 02 val 2600 [ 255.857932][ T5887] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 255.865180][ T5887] em28xx 4-1:0.0: Config register raw data: 0x9e [ 255.986209][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 256.146284][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 256.169959][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 256.179185][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.187636][ T9] usb 1-1: Product: syz [ 256.191879][ T9] usb 1-1: Manufacturer: syz [ 256.197062][ T9] usb 1-1: SerialNumber: syz [ 256.205587][ T9] usb 1-1: config 0 descriptor?? [ 256.268287][ T5887] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 256.286181][ T5887] em28xx 4-1:0.0: No AC97 audio processor [ 256.307694][ T5887] usb 4-1: USB disconnect, device number 63 [ 256.333353][ T5887] em28xx 4-1:0.0: Disconnecting em28xx [ 256.358421][ T5887] em28xx 4-1:0.0: Freeing device [ 256.428151][ T9] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 256.848500][ T5901] pwc: recv_control_msg error -71 req 02 val 2800 [ 256.860870][ T9] usb write operation failed. (-71) [ 256.867415][ T5901] pwc: recv_control_msg error -71 req 04 val 1100 [ 256.887266][ T5901] pwc: recv_control_msg error -71 req 04 val 1200 [ 256.895253][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 256.916160][ T5901] pwc: Registered as video103. [ 256.923386][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 256.931163][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input103 [ 256.944282][ T9] usb 1-1: media controller created [ 256.951493][ T9] usb read operation failed. (-71) [ 256.961683][ T9] usb write operation failed. (-71) [ 256.976170][ T5901] usb 2-1: USB disconnect, device number 55 [ 257.019345][ T9] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 257.072223][ T9] usb 1-1: USB disconnect, device number 54 [ 257.080214][ T9045] FAULT_INJECTION: forcing a failure. [ 257.080214][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 257.096424][ T5888] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 257.130397][ T9045] CPU: 0 UID: 0 PID: 9045 Comm: syz.1.1117 Not tainted syzkaller #0 PREEMPT(full) [ 257.130428][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 257.130442][ T9045] Call Trace: [ 257.130452][ T9045] [ 257.130462][ T9045] dump_stack_lvl+0xe8/0x150 [ 257.130498][ T9045] should_fail_ex+0x412/0x560 [ 257.130537][ T9045] should_failslab+0xa8/0x100 [ 257.130562][ T9045] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 257.130597][ T9045] ? __get_vm_area_node+0x13f/0x300 [ 257.130633][ T9045] __get_vm_area_node+0x13f/0x300 [ 257.130668][ T9045] __vmalloc_node_range_noprof+0x372/0x1730 [ 257.130701][ T9045] ? copy_process+0x508/0x3cf0 [ 257.130733][ T9045] ? percpu_ref_get_many+0x19/0x140 [ 257.130777][ T9045] ? percpu_ref_get_many+0x19/0x140 [ 257.130818][ T9045] ? __memcg_slab_post_alloc_hook+0x3df/0xa80 [ 257.130852][ T9045] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.130892][ T9045] ? memcpy_and_pad+0x48/0x80 [ 257.130925][ T9045] __vmalloc_node_noprof+0xc2/0x100 [ 257.130955][ T9045] ? copy_process+0x508/0x3cf0 [ 257.130979][ T9045] ? copy_process+0x508/0x3cf0 [ 257.131008][ T9045] dup_task_struct+0x228/0x9a0 [ 257.131038][ T9045] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.131066][ T9045] copy_process+0x508/0x3cf0 [ 257.131126][ T9045] ? __pfx_copy_process+0x10/0x10 [ 257.131161][ T9045] ? mutex_init_lockep+0xf9/0x130 [ 257.131195][ T9045] vhost_task_create+0x1f9/0x380 [ 257.131228][ T9045] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 257.131261][ T9045] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 257.131296][ T9045] ? __pfx_vhost_task_create+0x10/0x10 [ 257.131345][ T9045] ? __pfx_vhost_task_fn+0x10/0x10 [ 257.131383][ T9045] ? __lock_acquire+0x6b5/0x2cf0 [ 257.131412][ T9045] ? kasan_save_track+0x4f/0x80 [ 257.131446][ T9045] ? kasan_save_track+0x3e/0x80 [ 257.131474][ T9045] ? kasan_save_free_info+0x46/0x50 [ 257.131498][ T9045] ? __kasan_slab_free+0x5c/0x80 [ 257.131528][ T9045] ? kfree+0x1c1/0x610 [ 257.131558][ T9045] kvm_mmu_post_init_vm+0x14c/0x300 [ 257.131585][ T9045] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 257.131619][ T9045] ? __mutex_trylock_common+0x158/0x260 [ 257.131650][ T9045] ? look_up_lock_class+0x57/0x110 [ 257.131677][ T9045] ? register_lock_class+0x31/0x2e0 [ 257.131701][ T9045] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 257.131728][ T9045] ? __lock_acquire+0x6b5/0x2cf0 [ 257.131756][ T9045] ? __mutex_lock+0x319/0x1300 [ 257.131791][ T9045] ? kasan_quarantine_put+0xbb/0x1f0 [ 257.131836][ T9045] ? do_raw_write_lock+0x11d/0x260 [ 257.131887][ T9045] kvm_vcpu_ioctl+0xa62/0xfd0 [ 257.131929][ T9045] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.131959][ T9045] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 257.132010][ T9045] ? __fget_files+0x2a/0x420 [ 257.132039][ T9045] ? __fget_files+0x2a/0x420 [ 257.132063][ T9045] ? __fget_files+0x3a0/0x420 [ 257.132088][ T9045] ? __fget_files+0x2a/0x420 [ 257.132118][ T9045] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.132141][ T9045] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.132181][ T9045] __se_sys_ioctl+0xfc/0x170 [ 257.132218][ T9045] do_syscall_64+0xe2/0xf80 [ 257.132243][ T9045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.132270][ T9045] ? trace_irq_disable+0x37/0x100 [ 257.132298][ T9045] ? clear_bhb_loop+0x40/0x90 [ 257.132332][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.132358][ T9045] RIP: 0033:0x7fae00d9aeb9 [ 257.132380][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.132400][ T9045] RSP: 002b:00007fae01ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.132424][ T9045] RAX: ffffffffffffffda RBX: 00007fae01016090 RCX: 00007fae00d9aeb9 [ 257.132441][ T9045] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 257.132455][ T9045] RBP: 00007fae01ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 257.132470][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.132483][ T9045] R13: 00007fae01016128 R14: 00007fae01016090 R15: 00007ffc56c61998 [ 257.132520][ T9045] [ 257.217508][ T9045] syz.1.1117: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.566516][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 257.578211][ T5888] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 257.594327][ T5888] usb 4-1: config 0 has no interface number 0 [ 257.601073][ T9045] CPU: 1 UID: 0 PID: 9045 Comm: syz.1.1117 Not tainted syzkaller #0 PREEMPT(full) [ 257.601103][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 257.601118][ T9045] Call Trace: [ 257.601127][ T9045] [ 257.601137][ T9045] dump_stack_lvl+0xe8/0x150 [ 257.601173][ T9045] warn_alloc+0x249/0x340 [ 257.601213][ T9045] ? __pfx_warn_alloc+0x10/0x10 [ 257.601244][ T9045] ? __get_vm_area_node+0x13f/0x300 [ 257.601277][ T9045] ? __get_vm_area_node+0x2b5/0x300 [ 257.601314][ T9045] __vmalloc_node_range_noprof+0x397/0x1730 [ 257.601362][ T9045] ? percpu_ref_get_many+0x19/0x140 [ 257.601407][ T9045] ? percpu_ref_get_many+0x19/0x140 [ 257.601447][ T9045] ? __memcg_slab_post_alloc_hook+0x3df/0xa80 [ 257.601482][ T9045] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.601522][ T9045] ? memcpy_and_pad+0x48/0x80 [ 257.601556][ T9045] __vmalloc_node_noprof+0xc2/0x100 [ 257.601588][ T9045] ? copy_process+0x508/0x3cf0 [ 257.601613][ T9045] ? copy_process+0x508/0x3cf0 [ 257.601643][ T9045] dup_task_struct+0x228/0x9a0 [ 257.601673][ T9045] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.601699][ T9045] copy_process+0x508/0x3cf0 [ 257.601756][ T9045] ? __pfx_copy_process+0x10/0x10 [ 257.601793][ T9045] ? mutex_init_lockep+0xf9/0x130 [ 257.601827][ T9045] vhost_task_create+0x1f9/0x380 [ 257.601861][ T9045] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 257.601894][ T9045] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 257.601929][ T9045] ? __pfx_vhost_task_create+0x10/0x10 [ 257.601970][ T9045] ? __pfx_vhost_task_fn+0x10/0x10 [ 257.602009][ T9045] ? __lock_acquire+0x6b5/0x2cf0 [ 257.602037][ T9045] ? kasan_save_track+0x4f/0x80 [ 257.602066][ T9045] ? kasan_save_track+0x3e/0x80 [ 257.602095][ T9045] ? kasan_save_free_info+0x46/0x50 [ 257.602119][ T9045] ? __kasan_slab_free+0x5c/0x80 [ 257.602149][ T9045] ? kfree+0x1c1/0x610 [ 257.602178][ T9045] kvm_mmu_post_init_vm+0x14c/0x300 [ 257.602205][ T9045] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 257.602238][ T9045] ? __mutex_trylock_common+0x158/0x260 [ 257.602270][ T9045] ? look_up_lock_class+0x57/0x110 [ 257.602296][ T9045] ? register_lock_class+0x31/0x2e0 [ 257.602327][ T9045] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 257.602354][ T9045] ? __lock_acquire+0x6b5/0x2cf0 [ 257.602383][ T9045] ? __mutex_lock+0x319/0x1300 [ 257.602416][ T9045] ? kasan_quarantine_put+0xbb/0x1f0 [ 257.602460][ T9045] ? do_raw_write_lock+0x11d/0x260 [ 257.602507][ T9045] kvm_vcpu_ioctl+0xa62/0xfd0 [ 257.602548][ T9045] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.602578][ T9045] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 257.602629][ T9045] ? __fget_files+0x2a/0x420 [ 257.602659][ T9045] ? __fget_files+0x2a/0x420 [ 257.602684][ T9045] ? __fget_files+0x3a0/0x420 [ 257.602708][ T9045] ? __fget_files+0x2a/0x420 [ 257.602739][ T9045] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.602762][ T9045] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.602795][ T9045] __se_sys_ioctl+0xfc/0x170 [ 257.602831][ T9045] do_syscall_64+0xe2/0xf80 [ 257.602857][ T9045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.602880][ T9045] ? trace_irq_disable+0x37/0x100 [ 257.602909][ T9045] ? clear_bhb_loop+0x40/0x90 [ 257.602937][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.602961][ T9045] RIP: 0033:0x7fae00d9aeb9 [ 257.602983][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.603003][ T9045] RSP: 002b:00007fae01ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.603027][ T9045] RAX: ffffffffffffffda RBX: 00007fae01016090 RCX: 00007fae00d9aeb9 [ 257.603044][ T9045] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 257.603058][ T9045] RBP: 00007fae01ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 257.603072][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.603086][ T9045] R13: 00007fae01016128 R14: 00007fae01016090 R15: 00007ffc56c61998 [ 257.603121][ T9045] [ 257.603139][ T9045] Mem-Info: [ 257.860831][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1119'. [ 257.888020][ T5888] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 257.890258][ T9045] active_anon:21720 inactive_anon:0 isolated_anon:0 [ 257.890258][ T9045] active_file:14006 inactive_file:40574 isolated_file:0 [ 257.890258][ T9045] unevictable:768 dirty:102 writeback:0 [ 257.890258][ T9045] slab_reclaimable:11454 slab_unreclaimable:90134 [ 257.890258][ T9045] mapped:25646 shmem:16826 pagetables:1264 [ 257.890258][ T9045] sec_pagetables:0 bounce:0 [ 257.890258][ T9045] kernel_misc_reclaimable:0 [ 257.890258][ T9045] free:1312557 free_pcp:10533 free_cma:0 [ 257.893912][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.906704][ T9045] Node 0 active_anon:86880kB inactive_anon:0kB active_file:56024kB inactive_file:162084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102584kB dirty:408kB writeback:0kB shmem:65768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11616kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.909923][ T5888] usb 4-1: Product: syz [ 257.919386][ T9045] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.920469][ T5888] usb 4-1: Manufacturer: syz [ 257.924629][ T9045] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.944323][ T5888] usb 4-1: SerialNumber: syz [ 257.985593][ T5888] usb 4-1: config 0 descriptor?? [ 258.014660][ T5901] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 258.020975][ T9045] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 258.193578][ T9045] Node 0 DMA32 free:1290112kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:86996kB inactive_anon:0kB active_file:56024kB inactive_file:162024kB unevictable:1536kB writepending:420kB zspages:0kB present:3129332kB managed:2541324kB mlocked:0kB bounce:0kB free_pcp:38856kB local_pcp:17820kB free_cma:0kB [ 258.193723][ T9045] lowmem_reserve[]: 0 0 1 1 1 [ 258.193778][ T9045] Node 0 Normal free:4kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 258.193882][ T9045] lowmem_reserve[]: 0 0 0 0 0 [ 258.193932][ T9045] Node 1 Normal free:3945344kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2804kB local_pcp:756kB free_cma:0kB [ 258.194032][ T9045] lowmem_reserve[]: 0 0 0 0 0 [ 258.194084][ T9045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.194336][ T9045] Node 0 DMA32: 2718*4kB (UM) 2037*8kB (UME) 554*16kB (UME) 358*32kB (UME) 81*64kB (UM) 126*128kB (UME) 91*256kB (UME) 52*512kB (UME) 34*1024kB (UM) 13*2048kB (UME) 271*4096kB (M) = 1290176kB [ 258.194575][ T9045] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 258.194764][ T9045] Node 1 Normal: 0*4kB 2*8kB (UM) 7*16kB (UME) 6*32kB (UME) 3*64kB (UME) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 961*4096kB (UM) = 3945344kB [ 258.196511][ T9045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.196532][ T9045] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.196549][ T9045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.196567][ T9045] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.196585][ T9045] 71385 total pagecache pages [ 258.196600][ T9045] 0 pages in swap cache [ 258.196610][ T9045] Free swap = 124996kB [ 258.196619][ T9045] Total swap = 124996kB [ 258.196629][ T9045] 2097051 pages RAM [ 258.196638][ T9045] 0 pages HighMem/MovableOnly [ 258.196647][ T9045] 429694 pages reserved [ 258.196656][ T9045] 0 pages cma reserved [ 258.201376][ T5888] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 258.245555][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 258.292426][ T5901] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 258.292489][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.292523][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 258.292548][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 258.292574][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.294419][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 258.294448][ T5901] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 258.294472][ T5901] usb 3-1: Manufacturer: syz [ 258.298761][ T5901] usb 3-1: config 0 descriptor?? [ 259.038533][ T5880] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 259.216450][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 259.232549][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.263173][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.333266][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 259.374567][ T5880] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 259.376514][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 259.395271][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.396197][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 259.396236][ C1] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 259.426929][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 259.437085][ C1] Workqueue: usb_hub_wq hub_event [ 259.442209][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 259.447502][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 259.467160][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 259.473315][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 259.481363][ C1] RDX: ffffc900023c2000 RSI: 0000000000000201 RDI: 0000000000000202 [ 259.489386][ C1] RBP: 0000000000000000 R08: ffff888059c1801f R09: 1ffff1100b383003 [ 259.497409][ C1] R10: dffffc0000000000 R11: ffffed100b383004 R12: dffffc0000000000 [ 259.505431][ C1] R13: ffff888059c18018 R14: 00000000000001c0 R15: 0000000000000000 [ 259.513452][ C1] FS: 0000000000000000(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 259.522439][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.529082][ C1] CR2: 00007fae00d840c0 CR3: 000000005c0de000 CR4: 00000000003526f0 [ 259.537119][ C1] Call Trace: [ 259.540422][ C1] [ 259.543300][ C1] ? __asan_memcpy+0x40/0x70 [ 259.547981][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 259.554279][ C1] queue_work_on+0x106/0x1d0 [ 259.558935][ C1] qt2_read_bulk_callback+0xe96/0x1030 [ 259.564449][ C1] ? __pfx_qt2_read_bulk_callback+0x10/0x10 [ 259.570396][ C1] ? kcov_remote_start+0x88/0x7a0 [ 259.575484][ C1] ? kcov_remote_start+0x88/0x7a0 [ 259.580590][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 259.586024][ C1] dummy_timer+0xbbd/0x45d0 [ 259.590636][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 259.595613][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 259.601450][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 259.606419][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 259.611388][ C1] __hrtimer_run_queues+0x529/0xc30 [ 259.616643][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 259.622422][ C1] ? read_tsc+0x9/0x20 [ 259.626521][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 259.631669][ C1] handle_softirqs+0x22a/0x7c0 [ 259.636474][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 259.641264][ C1] __irq_exit_rcu+0x5f/0x150 [ 259.645879][ C1] irq_exit_rcu+0x9/0x30 [ 259.650161][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 259.655820][ C1] [ 259.658764][ C1] [ 259.661713][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.667712][ C1] RIP: 0010:delete_node+0x3e/0xa50 [ 259.672853][ C1] Code: 48 bb 00 00 00 00 00 fc ff df e8 5d a4 20 f6 4d 8d 77 02 4c 89 f0 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 4b 09 00 00 41 0f b6 2e <31> ff 89 ee e8 39 a7 20 f6 85 ed 4c 89 64 24 10 74 0d e8 2b a4 20 [ 259.692503][ C1] RSP: 0018:ffffc900048d6af0 EFLAGS: 00000246 [ 259.698690][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 259.706676][ C1] RDX: ffffc90019419000 RSI: 00000000000354ec RDI: 00000000000354ed [ 259.714667][ C1] RBP: 0000000000000001 R08: ffff8881488170ef R09: 1ffff11029102e1d [ 259.722671][ C1] R10: dffffc0000000000 R11: ffffed1029102e1e R12: ffffffff8f72bba0 [ 259.730668][ C1] R13: ffff888148816ee8 R14: ffff888148816ec2 R15: ffff888148816ec0 [ 259.738695][ C1] ? __radix_tree_replace+0x1f0/0x2f0 [ 259.744100][ C1] idr_alloc_u32+0x1f4/0x320 [ 259.748712][ C1] ? __pfx_idr_alloc_u32+0x10/0x10 [ 259.753845][ C1] idr_alloc+0x6e/0xd0 [ 259.757941][ C1] allocate_minors+0x98/0x2b0 [ 259.762647][ C1] usb_serial_probe+0x25e7/0x2e50 [ 259.767695][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 259.774917][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 259.782139][ C1] usb_probe_interface+0x668/0xc90 [ 259.787284][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 259.792933][ C1] really_probe+0x267/0xaf0 [ 259.797466][ C1] __driver_probe_device+0x18c/0x320 [ 259.802780][ C1] driver_probe_device+0x4f/0x240 [ 259.807844][ C1] __device_attach_driver+0x2d4/0x4c0 [ 259.813243][ C1] bus_for_each_drv+0x258/0x2f0 [ 259.818124][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 259.824046][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 259.829459][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.834710][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 259.840566][ C1] __device_attach+0x2c5/0x450 [ 259.845374][ C1] ? __pfx___device_attach+0x10/0x10 [ 259.850679][ C1] ? _raw_spin_unlock+0x28/0x50 [ 259.855549][ C1] device_initial_probe+0xa1/0xd0 [ 259.860599][ C1] bus_probe_device+0x12a/0x220 [ 259.865472][ C1] ? device_add+0x726/0xb70 [ 259.869999][ C1] device_add+0x7b6/0xb70 [ 259.874356][ C1] usb_set_configuration+0x1a87/0x2110 [ 259.879871][ C1] usb_generic_driver_probe+0x8d/0x150 [ 259.885360][ C1] usb_probe_device+0x1c4/0x3b0 [ 259.890226][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 259.895613][ C1] really_probe+0x267/0xaf0 [ 259.900144][ C1] __driver_probe_device+0x18c/0x320 [ 259.905451][ C1] driver_probe_device+0x4f/0x240 [ 259.910496][ C1] __device_attach_driver+0x2d4/0x4c0 [ 259.915903][ C1] bus_for_each_drv+0x258/0x2f0 [ 259.920798][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 259.926731][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 259.932140][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.937363][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 259.943195][ C1] __device_attach+0x2c5/0x450 [ 259.948005][ C1] ? __pfx___device_attach+0x10/0x10 [ 259.953315][ C1] ? _raw_spin_unlock+0x28/0x50 [ 259.958187][ C1] device_initial_probe+0xa1/0xd0 [ 259.963320][ C1] bus_probe_device+0x12a/0x220 [ 259.968188][ C1] ? device_add+0x726/0xb70 [ 259.972708][ C1] device_add+0x7b6/0xb70 [ 259.977063][ C1] usb_new_device+0xa08/0x16f0 [ 259.981891][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 259.987144][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.992363][ C1] hub_event+0x2a1c/0x4f30 [ 259.996819][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 260.001818][ C1] ? __pfx_hub_event+0x10/0x10 [ 260.006625][ C1] ? process_one_work+0x87c/0x15a0 [ 260.011769][ C1] ? process_one_work+0x87c/0x15a0 [ 260.016909][ C1] process_one_work+0x949/0x15a0 [ 260.021883][ C1] ? __pfx_process_one_work+0x10/0x10 [ 260.027309][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.032380][ C1] worker_thread+0xb46/0x1140 [ 260.037087][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.042940][ C1] kthread+0x388/0x470 [ 260.047034][ C1] ? __pfx_worker_thread+0x10/0x10 [ 260.052170][ C1] ? __pfx_kthread+0x10/0x10 [ 260.056788][ C1] ret_from_fork+0x51b/0xa40 [ 260.061394][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 260.066525][ C1] ? __switch_to+0xc7d/0x1400 [ 260.071224][ C1] ? __pfx_kthread+0x10/0x10 [ 260.075841][ C1] ret_from_fork_asm+0x1a/0x30 [ 260.080641][ C1] [ 260.083671][ C1] Modules linked in: [ 260.087611][ C1] ---[ end trace 0000000000000000 ]--- [ 260.093082][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 260.098316][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 260.118010][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 260.124141][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 260.132143][ C1] RDX: ffffc900023c2000 RSI: 0000000000000201 RDI: 0000000000000202 [ 260.140145][ C1] RBP: 0000000000000000 R08: ffff888059c1801f R09: 1ffff1100b383003 [ 260.148146][ C1] R10: dffffc0000000000 R11: ffffed100b383004 R12: dffffc0000000000 [ 260.156134][ C1] R13: ffff888059c18018 R14: 00000000000001c0 R15: 0000000000000000 [ 260.164129][ C1] FS: 0000000000000000(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 260.173076][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.179702][ C1] CR2: 00007fae00d840c0 CR3: 000000005c0de000 CR4: 00000000003526f0 [ 260.187713][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 260.195677][ C1] Kernel Offset: disabled [ 260.200017][ C1] Rebooting in 86400 seconds..