last executing test programs: 26.159702708s ago: executing program 1 (id=465): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 26.001554654s ago: executing program 1 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000240)={0x10000000000000e0, 0x0, [{0x22c, 0x0, 0x8001}, {0xaa8, 0x0, 0x5}, {0x8e2, 0x0, 0x1200}, {0x97c, 0x0, 0x3}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x334) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r3 = socket$kcm(0x10, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) capset(&(0x7f0000004240)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x7fff}) prctl$PR_CAPBSET_DROP(0x18, 0x1) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) mkdir(0x0, 0x24) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x40, 0x11, 0xe5, {0xe5, 0x23, "0bb09a597c3d90c8974132926418a56a227269328e05b71a533b2208beb8e7b94bbce83052ef40d72304ef20432ea7818ed34b82fb3b4dfde07a6fcd59e6356f3819948266f1a8504fd746876cb9fc896ba04fa395698727aec40384fef0a5d10bc2241e76a811316906e17472498df5fd7d3062ddb68b758bf9e8e3dc51af3fc67db0bd7228a79716b5f2b4d616a2de46e2b9632b749026b4c8d4359b15bb68881247e2825919f1518d307c0e312be289becbd93a2d21d21103de9ab67972411e3e5f7467386d5246ac9d129fcbb7e4d0367159e55692044d6ee6dd092d2b87cce729"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f0000000280)=ANY=[@ANYBLOB="002219000000000000000000024a7288d51b55501a344883bad55d4f77844e"], &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x9, 0x1, {0x22, 0xe7f}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x0, 0x16, 0x8f, "afd9d5aa4fb64289e5a4fe186dcc9bf8551c166e98cd0499f097205d78a90a532c3c573078e1fe74a0b408921c5e8608723be06fa96b2e849bfea43f55e92046febfb6bbb9c56e940c2bf9ff3c0deb75fe4ea55073e375be58b199a5b8563dc173e7f2c1beabb43edb61da718a6c374c987f9254ba462112fed21a3e06d62591df3168db3402ef084697a6ad9ec1b1"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xa1}, &(0x7f00000004c0)={0x20, 0x1, 0xfd, "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"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xf9}}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 23.807547953s ago: executing program 1 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000200)={0xb, 0x0, [{0xfb, 0x0, 0x8}, {0xeb, 0x0, 0x8}, {0x1000, 0x0, 0xfffffffffffffffe}, {0x1, 0x0, 0x40}, {0x74, 0x0, 0x8}, {0xa39d, 0x0, 0x200}, {0x840, 0x0, 0x7fffffff}, {0x6, 0x0, 0x8000000000000001}, {0x8, 0x0, 0x3}, {0x9, 0x0, 0x1000000000003}, {0xffffffff, 0x0, 0x18}, {0x80000001, 0x0, 0x1}, {}, {0xfff, 0x0, 0x2}, {0x2ac46eb, 0x0, 0x800}, {0x5689, 0x0, 0x401}]}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 22.91143098s ago: executing program 1 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x2d4, 0x0, [{0x400000ff, 0x0, 0x67c7}]}) 22.689544827s ago: executing program 1 (id=487): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010041", 0x178) 22.356032803s ago: executing program 1 (id=488): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 21.885366611s ago: executing program 32 (id=488): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 13.209426914s ago: executing program 3 (id=522): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 13.141170547s ago: executing program 3 (id=523): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000039c0)={0x2c, &(0x7f00000015c0)={0x0, 0x22, 0x26, {0x26, 0x24, "21214616e21bad41878c6a31fb0bfdeee8c4dafd8c6d78958373ab8b97fe0a1115782b0e"}}, &(0x7f0000003900)={0x0, 0x3, 0x50, @string={0x50, 0x3, "9f597e0f36af5e20adc389fb1d9d1b82ae65f1151e8f101593ad70e19283aadcb6b1f8cb1c592e8874d4cb8697393f2165ba3543914df2760fb21ee4ca2d23f8779546220e9f3660cec996be4553"}}, 0xfffffffffffffffc, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x9, 0x8, "09066547", "c6a2d6f7"}}, &(0x7f0000003980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x94, 0x80, 0x8, 0x9, 0x80, 0x7, 0x40}}}, &(0x7f0000003fc0)={0x84, &(0x7f0000003a00)={0x40, 0x1, 0xf6, "8de36159d32f5473fcdfb8a1e8edc68aa4e649f7f457eb69521d3fbbd6eb570a74726f0979291726354317ef8786ef5dbc73bf16c184126bc87b54c32dace9559a9e69fb259e142047c449c157caebd843f81718d5158d2029e5d746ecc6524b16988b251d289b036ead8d2f4a1e4ab399dcbdbc3bc9e3295da3f792a718678e8b7758b4ece880a6a839769a2d72dfa19e3edd371a716e7c598373eb3bbb9507af3510d75fdfef9bc9ca5e5489aa74f33e947e8db8ef2ec5bdc5f5e3db091de481a717f7e7ff9e9937032449097f7921e5a8878b83badb74461c5ad0062667a48947c7242b3f1938e558fb40dc7d59eed797fd24cb53"}, &(0x7f0000003b40)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000003b80)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000003bc0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000003c00)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000003c40)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000003c80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000003cc0)={0x40, 0xb, 0x2, 'W\x00'}, &(0x7f0000003d00)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000003d40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000003d80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000003dc0)={0x40, 0x19, 0x2, "70d6"}, &(0x7f0000003e00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000003e40)={0x40, 0x1c, 0x1, 0xf4}, &(0x7f0000003e80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000003ec0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.126488531s ago: executing program 3 (id=534): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x0, 0x5, 0xffff, 0x6d, 0x3, "dde83bd6a9fafc2ef64b6ae0cd07d4c94c6227", 0x7, 0x4a64}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = msgget(0x1, 0x2b0) msgrcv(r2, 0x0, 0x0, 0x1, 0x2000) (async) msgsnd(r2, &(0x7f00000001c0)={0x1}, 0x8, 0x800) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000010101017c000000000000000a000000100001800c000280050001003a0000000c00198008000100cc000000e23c572f34dadcf63cd848ab600e9909fcd57827cd575c6e96f39d31b08005ef0816e4e99e3a98029c391d3b02c8"], 0x30}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="380000002d000100000000000000000003"], 0x38}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fc5c7208030478fa1b710000000109023c00010000900009048200004a44e200ecfd1914b56dd75d2a7118a897754648c9d5961b76ff57fe1fc3bc7e542fcac719003076a8a0f15ee98640a4926415633ccf08565ee09f6921d26dc1a0cf9c3b577c220c36e01cb2cf01945363524fde126a1d06f0c177fb9be7a7d0ddbefe14f3dd6a924a9ad3df6f89d50acaf509a20181d80bb3f3402d755c380c215ed5d7d296da"], 0x0) 7.977399854s ago: executing program 4 (id=546): r0 = socket(0x11, 0xa, 0x5) munmap(&(0x7f000000d000/0x3000)=nil, 0x3000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000002100)="cf", 0x1, 0x8800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 7.620327816s ago: executing program 4 (id=547): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x2}, 0x5}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x20}) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r5, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) read$nci(r3, &(0x7f0000000080)=""/78, 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x0) syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010104138d8b200819201300000102030109027e0001000200000904ae0e051966858f0b240600013a6af75c82820524000964000d240f01100000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100094f0e09050b100002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000140)={0x0, r7}) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, &(0x7f0000000480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '\xaaw\xc9\xae\xaa\xaa\xaa\xaa\xcbJ\xd4\xfdJTD\'\x19\xa4\xcc\xfdq\x14c\x85\xd3y\x90:\xee\xe7PNO\xae\x13\xf7\xd9\x168GV9\xc4\xb5\xd1\xb2\xf0\x8c\xd6\xda8\xaf\xee\xfa\xc8j\"\xba\xb6\xcc\xfd\xde+8;\xa1\xccug\xeb\x8c\a\xe7|\xa4\xacG\xe3\xecS\xf0\xe5(T\x03*\xe6\x88U\xfd\x82\xb3\x00#\xa4=\xdd0Z\xfd\xf3&\xbb\x967UbLgT\x01b\xf9\xcb\xd6\xed\xe1\xf5\x1f\xb8\xb6\x1eM\xab\x9b5kB\x8f#\xc8y\xe4\x9c\x98Y\x8e\xbf,\xc4\xca@\x85\xcc\xc1\xb1~\xca\xa9\xd7\x7f\xe6!\xdc\x19\xa9e\x8bbW\"u\xc95\xe7\xf6\xeb\xed'}]}, 0x1a8) close(r8) rmdir(&(0x7f0000000100)='./file0\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.986032297s ago: executing program 3 (id=548): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7}}]}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0xc0600, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x54}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x120d9000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000000)=0x7, 0x4) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000040)={0x20, 0x16, 0x3, "f965fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.20514775s ago: executing program 0 (id=556): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000308000/0x3000)=nil, 0x3000, 0x3dac95c5bbb57bf5) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 4.470942781s ago: executing program 4 (id=557): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000039c0)={0x2c, &(0x7f00000015c0)={0x0, 0x22, 0x26, {0x26, 0x24, "21214616e21bad41878c6a31fb0bfdeee8c4dafd8c6d78958373ab8b97fe0a1115782b0e"}}, &(0x7f0000003900)={0x0, 0x3, 0x50, @string={0x50, 0x3, "9f597e0f36af5e20adc389fb1d9d1b82ae65f1151e8f101593ad70e19283aadcb6b1f8cb1c592e8874d4cb8697393f2165ba3543914df2760fb21ee4ca2d23f8779546220e9f3660cec996be4553"}}, 0xfffffffffffffffc, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x9, 0x8, "09066547", "c6a2d6f7"}}, &(0x7f0000003980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x94, 0x80, 0x8, 0x9, 0x80, 0x7, 0x40}}}, &(0x7f0000003fc0)={0x84, &(0x7f0000003a00)={0x40, 0x1, 0xf6, "8de36159d32f5473fcdfb8a1e8edc68aa4e649f7f457eb69521d3fbbd6eb570a74726f0979291726354317ef8786ef5dbc73bf16c184126bc87b54c32dace9559a9e69fb259e142047c449c157caebd843f81718d5158d2029e5d746ecc6524b16988b251d289b036ead8d2f4a1e4ab399dcbdbc3bc9e3295da3f792a718678e8b7758b4ece880a6a839769a2d72dfa19e3edd371a716e7c598373eb3bbb9507af3510d75fdfef9bc9ca5e5489aa74f33e947e8db8ef2ec5bdc5f5e3db091de481a717f7e7ff9e9937032449097f7921e5a8878b83badb74461c5ad0062667a48947c7242b3f1938e558fb40dc7d59eed797fd24cb53"}, &(0x7f0000003b40)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000003b80)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000003bc0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000003c00)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000003c40)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000003c80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000003cc0)={0x40, 0xb, 0x2, 'W\x00'}, &(0x7f0000003d00)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000003d40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000003d80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000003dc0)={0x40, 0x19, 0x2, "70d6"}, &(0x7f0000003e00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000003e40)={0x40, 0x1c, 0x1, 0xf4}, &(0x7f0000003e80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000003ec0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2}], 0x1, 0x40800) 4.408850508s ago: executing program 0 (id=558): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f00000001c0), 0x95) (async) write$binfmt_misc(r4, &(0x7f00000001c0), 0x95) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc0000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48880}, 0x4040000) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc0000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48880}, 0x4040000) 4.202286625s ago: executing program 0 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81001) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81001) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 4.104222736s ago: executing program 3 (id=561): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000039c0)={0x2c, &(0x7f00000015c0)={0x0, 0x22, 0x26, {0x26, 0x24, "21214616e21bad41878c6a31fb0bfdeee8c4dafd8c6d78958373ab8b97fe0a1115782b0e"}}, &(0x7f0000003900)={0x0, 0x3, 0x50, @string={0x50, 0x3, "9f597e0f36af5e20adc389fb1d9d1b82ae65f1151e8f101593ad70e19283aadcb6b1f8cb1c592e8874d4cb8697393f2165ba3543914df2760fb21ee4ca2d23f8779546220e9f3660cec996be4553"}}, 0xfffffffffffffffc, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x9, 0x8, "09066547", "c6a2d6f7"}}, &(0x7f0000003980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x94, 0x80, 0x8, 0x9, 0x80, 0x7, 0x40}}}, &(0x7f0000003fc0)={0x84, &(0x7f0000003a00)={0x40, 0x1, 0xf6, "8de36159d32f5473fcdfb8a1e8edc68aa4e649f7f457eb69521d3fbbd6eb570a74726f0979291726354317ef8786ef5dbc73bf16c184126bc87b54c32dace9559a9e69fb259e142047c449c157caebd843f81718d5158d2029e5d746ecc6524b16988b251d289b036ead8d2f4a1e4ab399dcbdbc3bc9e3295da3f792a718678e8b7758b4ece880a6a839769a2d72dfa19e3edd371a716e7c598373eb3bbb9507af3510d75fdfef9bc9ca5e5489aa74f33e947e8db8ef2ec5bdc5f5e3db091de481a717f7e7ff9e9937032449097f7921e5a8878b83badb74461c5ad0062667a48947c7242b3f1938e558fb40dc7d59eed797fd24cb53"}, &(0x7f0000003b40)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000003b80)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000003bc0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000003c00)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000003c40)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000003c80)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000003cc0)={0x40, 0xb, 0x2, 'W\x00'}, &(0x7f0000003d00)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000003d40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000003d80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000003dc0)={0x40, 0x19, 0x2, "70d6"}, &(0x7f0000003e00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000003e40)={0x40, 0x1c, 0x1, 0xf4}, &(0x7f0000003e80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000003ec0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.990016257s ago: executing program 0 (id=563): syz_usb_connect$uac1(0x0, 0xf4, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xdf, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x7, 0x170, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x7e}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x2, 0x3, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x3, 0x5, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x6, 0x4c, 0x9, 0x2a, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x2, 0x8, "8086c4ff"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x2692cfcbb74973e0, 0x6, 0x0, 0x8, 0x6, 0xf4}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x7, "dff6055c89"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xb, 0x4, 0xff, 0x3, "d4cacd49744aa317b7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x7, 0xc2, {0x7, 0x25, 0x1, 0x1, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x28, 0x4, 0x7f, 0xf7, "1232b93a9c20b3b6"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xa, 0x4}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0xc, 0x7f, "2c426a0dcc"}, @as_header={0x7, 0x24, 0x1, 0xc6, 0x3, 0x1}, @as_header={0x7, 0x24, 0x1, 0x8, 0xa, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xe2, 0x15, 0x2, {0x7, 0x25, 0x1, 0x3, 0x5, 0x6}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9c, 0x3, 0xf, 0xdf, 0x6}, 0xc4, &(0x7f00000001c0)={0x5, 0xf, 0xc4, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x7ffff29, 0x0, 0x11b, [0xc03f, 0xc000, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x68, 0x7, 0x2, 0x4, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x3, 0x7800, 0x101, [0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa9, 0x6, 0x80, 0x0, 0x2e}, @generic={0x81, 0x10, 0xb, "99bb7adac87b6b2f15e51ee6e08ca55073633d6c586fe6bb506b1143c5463c317c35719205eedc4c00e7246012379e990015248d3e013b24ce156af0d590412f7c7d0afb5385c9a00e05fa2f558f51ada5542c3d3015d6a3e91adc25c97c209a9308216571cb081e0c3e609dfd8e23d24a0991e0b253d52cec3e100182c2"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x31, &(0x7f00000002c0)=@string={0x31, 0x3, "d57795b0e4fb0a77ca93d901f0d5b2ce234a855f7fb94d9f3220c1ce705c619388e14f02d67de0d02a780d361cbd01"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x81, &(0x7f0000000340)=@string={0x81, 0x3, "dcdb019dafe3b79809fc5c36910c3d73e3e1cc5068103f268afcdfcd1b76f23dde053a4efd9503549ab0a99f8cd049be64d4c181214ff2a2f013b4408689066db637b492e6dd2bdde7057f4ab7bedefbc0f8a629ed1ad03f5c69e926bf2521527e10f924e893d51e0f51fdbb3842675dce6e6ca0e86f88cf029b00b4372a60"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x429}}, {0x4d, &(0x7f0000000440)=@string={0x4d, 0x3, "8e39b2226a9ad6e06cc157cd91a74c80093cbddc29a762daf2156d52266f32e041ed0c50b8d29723051cb134cf0454bdfa653a7ff572388820187c3b1c25711f2103fb2d0e5e09e0920756"}}]}) 2.232343646s ago: executing program 2 (id=570): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2, 0x0}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/6, 0x101000, 0x800, 0x3, 0x2}, 0x20) r6 = getpgid(0x0) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000280)={0x1000, 0x3, 0x1, 0x81, 0xfffffffb, 0xfffffff9}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peek(0x2, r8, &(0x7f0000000180)) ptrace$poke(0x5, r8, &(0x7f0000000080), 0x0) capget(&(0x7f0000000140)={0x19980330, r8}, &(0x7f00000002c0)={0x8, 0x7, 0x7, 0xff, 0x4, 0xd5}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000080)={r4}) 2.080363141s ago: executing program 2 (id=571): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r2 = eventfd2(0x1, 0x80800) io_submit(r1, 0x11, &(0x7f00000005c0)=[&(0x7f0000000540)={0x5000000, 0x0, 0x22, 0x1, 0xffff, r0, &(0x7f0000000a00)="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", 0x200, 0x200, 0x0, 0x1, r2}]) 1.968001297s ago: executing program 2 (id=572): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x4, 0x2a40}) mmap(&(0x7f0000499000/0x7000)=nil, 0x7000, 0x1000006, 0x28011, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) preadv(r1, &(0x7f0000001900)=[{&(0x7f0000000600)=""/83, 0x53}, {0x0}], 0x2, 0xfffffffa, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2, 0x0) iopl(0x7) 1.836948296s ago: executing program 2 (id=573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x9, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x803) 1.512239915s ago: executing program 2 (id=574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000100)=""/41, 0x29}], 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r3, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000009a00)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000480)={0x48, 0xa, r7, 0x0, r8}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000005c0)=0x3) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000180)=0x7d) mmap(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r1, 0xbc613000) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x7e) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r10 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) pwritev2(r10, &(0x7f0000000840)=[{&(0x7f0000000200)='*', 0x202f}], 0x1, 0x3, 0x4, 0x10) 1.403850996s ago: executing program 2 (id=575): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="200b1b00000005ebb76a6d485a3dfcd35f87aa4f2d63fc7840266ffca952c3c6adf557ef5b11372a85b9187d1f4487e4e3dfd135da93ed150da15a50dd10e93b0b8736daec9c271ec44cb5ba7b2d7c67cae152b8aba4a1e24ab9562d"], &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xa5}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0xb0b6, 0x4, 0x200007, 0x1, 0x5, 0x9, 0x8, 0x9, 0x20, 0x8, 0x8}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000280)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) 1.316416502s ago: executing program 4 (id=576): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 1.212137068s ago: executing program 3 (id=577): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB='@\f\f\x00\x00\x00\f!'], 0x0}, 0x0) 840.347768ms ago: executing program 0 (id=578): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x800, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20001001}, 0x24000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x800, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20001001}, 0x24000000) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) 344.382336ms ago: executing program 4 (id=579): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x4000, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000580)="1c", 0x1, 0xf95b}]) 77.256601ms ago: executing program 4 (id=580): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = mq_open(&(0x7f0000000000)=']$\\ ', 0x40, 0x6, 0x0) mq_notify(r2, &(0x7f0000000040)={0x0, 0xd}) mq_notify(r2, &(0x7f0000000100)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000680)={0x38, &(0x7f0000000440)="99b5170efadf35eaf44695b69fd30042e260a13bfc13834e51e2461e8b03c9b5e4ade0a00935b9c3ded0563f2d31f5ced74968ce2cfc5ea3"}) r3 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xb0000005}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x8000200c}) sendmmsg$inet6(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="68d9ea94ccf25b0a623693", 0xb}], 0x1}}], 0x1, 0x4001c00) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@local, @local, 0x1e}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) connect(r8, &(0x7f00000004c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x80) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r6], 0xffe) r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r9, 0x0, 0x2) read$FUSE(r9, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000400)={0xa4, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xa, 0x1, 0x36}, @fd={0x66642a85, 0x0, r10}, @fda={0x66646185, 0x4, 0x2, 0x2}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}, @acquire={0x40046305, 0x3}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/150, 0x96, 0x1, 0x33}, @fda={0x66646185, 0x8, 0x0, 0x2c}, @fd}, &(0x7f00000003c0)={0x0, 0x28, 0x48}}}, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x2}], 0xe7, 0x0, &(0x7f0000000580)="569fb90c6662519f66e8ddc4ba2571e68000407389bb66d0d92c7dc8b87864c57a320e7c5b2c4c3f0f6488ff972d1fe0640d86629a458bd55a2fc5773e80cf2cc9355dd1321a6c68367ba5395ca50d77c016a43b9204a249392aa02021dd3cb13f264ee88b6439daec63f2dee9e8ae0431715236175490ff383ed6e41c8f17f45cb4c6682b40315628f759464dcdab7d247294598645de8670317ec29fc7035cde8c69d2b92865d208c5523dc252fd40e7ced28edf76484538b8fc69c55ff1052f5817d2749b980bfb0f8657db714051b1f46e583969c9ad309ff94d5a85e17951505d7c0f2dea"}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) 0s ago: executing program 0 (id=581): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="2011040600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000500)={0x60, 0x17}, 0x0, 0x0}) kernel console output (not intermixed with test programs): lable UDC or it's busy [ 156.343886][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.592410][ T40] pwc: recv_control_msg error -32 req 02 val 2b00 [ 156.607719][ T40] pwc: recv_control_msg error -32 req 02 val 2700 [ 156.624890][ T40] pwc: recv_control_msg error -32 req 02 val 2c00 [ 156.642408][ T40] pwc: recv_control_msg error -32 req 04 val 1000 [ 156.661752][ T40] pwc: recv_control_msg error -32 req 04 val 1300 [ 156.669402][ T40] pwc: recv_control_msg error -32 req 04 val 1400 [ 156.677657][ T40] pwc: recv_control_msg error -32 req 02 val 2000 [ 156.900145][ T40] pwc: recv_control_msg error -71 req 04 val 1500 [ 156.912590][ T40] pwc: recv_control_msg error -71 req 02 val 2500 [ 156.941613][ T40] pwc: recv_control_msg error -71 req 02 val 2400 [ 156.954588][ T40] pwc: recv_control_msg error -71 req 02 val 2600 [ 156.965243][ T40] pwc: recv_control_msg error -71 req 02 val 2900 [ 156.974336][ T40] pwc: recv_control_msg error -71 req 02 val 2800 [ 156.981881][ T40] pwc: recv_control_msg error -71 req 04 val 1100 [ 156.989360][ T40] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.005209][ T40] pwc: Registered as video103. [ 157.022780][ T40] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 157.041738][ T6879] 9pnet_fd: p9_fd_create_tcp (6879): problem connecting socket to 127.0.0.1 [ 157.058039][ T40] usb 1-1: USB disconnect, device number 30 [ 157.349074][ T6888] FAULT_INJECTION: forcing a failure. [ 157.349074][ T6888] name failslab, interval 1, probability 0, space 0, times 0 [ 157.361972][ T6888] CPU: 0 UID: 0 PID: 6888 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(full) [ 157.361997][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.362007][ T6888] Call Trace: [ 157.362021][ T6888] [ 157.362028][ T6888] dump_stack_lvl+0x189/0x250 [ 157.362055][ T6888] ? __pfx____ratelimit+0x10/0x10 [ 157.362080][ T6888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.362100][ T6888] ? __pfx__printk+0x10/0x10 [ 157.362123][ T6888] ? __pfx___might_resched+0x10/0x10 [ 157.362140][ T6888] ? fs_reclaim_acquire+0x7d/0x100 [ 157.362162][ T6888] should_fail_ex+0x414/0x560 [ 157.362188][ T6888] should_failslab+0xa8/0x100 [ 157.362210][ T6888] __kmalloc_noprof+0xdf/0x800 [ 157.362226][ T6888] ? tomoyo_encode+0x28b/0x550 [ 157.362245][ T6888] tomoyo_encode+0x28b/0x550 [ 157.362264][ T6888] tomoyo_realpath_from_path+0x58d/0x5d0 [ 157.362290][ T6888] tomoyo_check_open_permission+0x1c1/0x3b0 [ 157.362314][ T6888] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 157.362335][ T6888] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 157.362367][ T6888] ? step_into+0x3ee/0xe80 [ 157.362410][ T6888] security_file_open+0xb1/0x270 [ 157.362431][ T6888] do_dentry_open+0x34e/0x1420 [ 157.362463][ T6888] vfs_open+0x3b/0x340 [ 157.362481][ T6888] ? path_openat+0x33b3/0x3d90 [ 157.362498][ T6888] path_openat+0x33ce/0x3d90 [ 157.362526][ T6888] ? stack_depot_save_flags+0x40/0x850 [ 157.362555][ T6888] ? __kasan_slab_alloc+0x6c/0x80 [ 157.362576][ T6888] ? __pfx_path_openat+0x10/0x10 [ 157.362592][ T6888] ? __lock_acquire+0x6b6/0x2cf0 [ 157.362620][ T6888] do_filp_open+0x1fa/0x410 [ 157.362637][ T6888] ? __pfx_do_filp_open+0x10/0x10 [ 157.362668][ T6888] ? _raw_spin_unlock+0x28/0x50 [ 157.362690][ T6888] ? alloc_fd+0x64c/0x6c0 [ 157.362718][ T6888] do_sys_openat2+0x121/0x200 [ 157.362742][ T6888] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.362768][ T6888] ? ksys_write+0x22a/0x250 [ 157.362786][ T6888] ? __pfx_ksys_write+0x10/0x10 [ 157.362803][ T6888] __x64_sys_openat+0x138/0x170 [ 157.362829][ T6888] do_syscall_64+0xfa/0xf80 [ 157.362846][ T6888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.362861][ T6888] ? clear_bhb_loop+0x60/0xb0 [ 157.362880][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.362895][ T6888] RIP: 0033:0x7fa503f8f749 [ 157.362914][ T6888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.362928][ T6888] RSP: 002b:00007fa504d79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.362944][ T6888] RAX: ffffffffffffffda RBX: 00007fa5041e5fa0 RCX: 00007fa503f8f749 [ 157.362956][ T6888] RDX: 00000000000c0301 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 157.362967][ T6888] RBP: 00007fa504d79090 R08: 0000000000000000 R09: 0000000000000000 [ 157.362977][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.362986][ T6888] R13: 00007fa5041e6038 R14: 00007fa5041e5fa0 R15: 00007ffd7a904e18 [ 157.363010][ T6888] [ 157.363065][ T6888] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.674714][ T6888] random: crng reseeded on system resumption [ 157.726095][ T5894] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 157.829203][ T40] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 157.846028][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 157.856830][ T5894] usb 4-1: device descriptor read/64, error -71 [ 157.945372][ T5910] usb 3-1: USB disconnect, device number 20 [ 157.962264][ T5910] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 157.989741][ T40] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 158.000100][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.012868][ T40] usb 1-1: config 0 descriptor?? [ 158.017347][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 158.027048][ T40] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 158.037019][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.058972][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 158.071542][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 158.080742][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.095866][ T10] usb 2-1: config 0 descriptor?? [ 158.101305][ T5894] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 158.237951][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.251559][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.268364][ T5894] usb 4-1: device descriptor read/64, error -71 [ 158.278608][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.291524][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.395982][ T5894] usb usb4-port1: attempt power cycle [ 158.507168][ T40] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.521825][ T40] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 158.531273][ T40] usb 1-1: media controller created [ 158.538475][ T10] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 158.556929][ T40] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.596088][ T40] gp8psk_fe: Frontend attached [ 158.609577][ T40] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 158.621240][ T40] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 158.708249][ T40] gp8psk: usb in 138 operation failed. [ 158.713762][ T40] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 158.724460][ T40] gp8psk: found Genpix USB device pID = 203 (hex) [ 158.733747][ T40] usb 1-1: USB disconnect, device number 31 [ 158.735568][ T5894] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 158.776529][ T5894] usb 4-1: device descriptor read/8, error -71 [ 158.813617][ T40] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 159.025642][ T5894] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 159.046926][ T5894] usb 4-1: device descriptor read/8, error -71 [ 159.156354][ T5894] usb usb4-port1: unable to enumerate USB device [ 159.162991][ T6904] comedi comedi0: Minor -1 is invalid! [ 159.438266][ T6910] syzkaller1: entered promiscuous mode [ 159.443912][ T6910] syzkaller1: entered allmulticast mode [ 159.565063][ T5894] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 159.715041][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 159.721939][ T5894] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 159.730269][ T5894] usb 3-1: config 0 has no interface number 0 [ 159.738641][ T5894] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 159.750503][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.758608][ T5894] usb 3-1: Product: syz [ 159.763594][ T5894] usb 3-1: Manufacturer: syz [ 159.768320][ T5894] usb 3-1: SerialNumber: syz [ 159.776089][ T5894] usb 3-1: config 0 descriptor?? [ 159.784301][ T5894] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 159.846357][ T6915] netlink: 164 bytes leftover after parsing attributes in process `syz.0.305'. [ 159.857061][ T6915] capability: warning: `syz.0.305' uses 32-bit capabilities (legacy support in use) [ 159.982812][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 159.998541][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 160.008639][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 160.019820][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 160.030425][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 160.040539][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 160.050521][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 160.061612][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 160.073024][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 160.083100][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 160.093055][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 160.103024][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 160.104838][ T6418] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 160.113395][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 160.130315][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 160.140314][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 160.150759][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 160.160741][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 160.172589][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 160.183177][ T5894] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 160.196729][ T5894] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 160.237970][ T5894] usb 3-1: USB disconnect, device number 21 [ 160.264693][ T6418] usb 1-1: Using ep0 maxpacket: 16 [ 160.288804][ T6418] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 160.312050][ T6418] usb 1-1: config 0 has no interface number 0 [ 160.326427][ T6418] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 160.338294][ T6418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.384397][ T5910] usb 2-1: USB disconnect, device number 23 [ 160.402689][ T6418] usb 1-1: Product: syz [ 160.408192][ T6418] usb 1-1: Manufacturer: syz [ 160.452856][ T6418] usb 1-1: SerialNumber: syz [ 160.484096][ T6418] usb 1-1: config 0 descriptor?? [ 160.499087][ T6418] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 160.664164][ T5840] Bluetooth: hci1: ACL packet for unknown connection handle 401 [ 160.683910][ T6928] netlink: 'syz.3.307': attribute type 2 has an invalid length. [ 160.697685][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 160.714101][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 160.725634][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 160.735752][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 160.745806][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 160.757114][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 160.767179][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 160.777404][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 160.789611][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 160.799752][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 160.810280][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 160.820832][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 160.830985][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 160.841087][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 160.851465][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 160.861472][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 160.879019][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 160.890562][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 160.900568][ T6418] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 160.912280][ T6418] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 160.938883][ T6418] usb 1-1: USB disconnect, device number 32 [ 161.373276][ T6944] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 161.395733][ T6944] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.844047][ T6418] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 161.930058][ T6963] netlink: 88 bytes leftover after parsing attributes in process `syz.0.318'. [ 162.015372][ T6418] usb 2-1: Using ep0 maxpacket: 32 [ 162.023102][ T6418] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 162.038879][ T6418] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 162.051360][ T6418] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.066938][ T6418] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 162.105490][ T6418] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 162.116429][ T6418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.125345][ T6418] usb 2-1: Product: syz [ 162.130145][ T6418] usb 2-1: Manufacturer: syz [ 162.134966][ T6418] usb 2-1: SerialNumber: syz [ 162.159141][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 162.178857][ T6418] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input18 [ 162.333707][ T5894] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 162.374319][ T6418] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 162.382619][ T6418] (id 0x00) [ 162.495818][ T5894] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 162.506265][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.513571][ T6418] rc_core: IR keymap rc-imon-pad not found [ 162.527250][ T6418] Registered IR keymap rc-empty [ 162.531252][ T5894] usb 3-1: config 0 descriptor?? [ 162.540628][ T6418] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 162.544699][ T6979] netlink: 'syz.0.323': attribute type 3 has an invalid length. [ 162.561068][ T5894] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 162.567205][ T6418] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 162.569542][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 162.599580][ T6418] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 162.620965][ T6418] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input19 [ 162.648607][ T6418] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:24> initialized [ 162.746552][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.757415][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.769890][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.793698][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.021796][ T5894] gp8psk: usb in 128 operation failed. [ 163.033584][ T5894] gp8psk: usb in 137 operation failed. [ 163.040246][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.050556][ T5894] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 163.059382][ T5894] usb 3-1: media controller created [ 163.075284][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.102164][ T5894] gp8psk_fe: Frontend attached [ 163.107554][ T5894] usb 3-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 163.115799][ T5894] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 163.145425][ T6989] netlink: 44 bytes leftover after parsing attributes in process `syz.1.314'. [ 163.157107][ T6989] netlink: 'syz.1.314': attribute type 6 has an invalid length. [ 163.167434][ T6989] netlink: 'syz.1.314': attribute type 5 has an invalid length. [ 163.174919][ T5894] gp8psk: usb in 138 operation failed. [ 163.175967][ T6989] netlink: 'syz.1.314': attribute type 4 has an invalid length. [ 163.180577][ T5894] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 163.180595][ T5894] gp8psk: found Genpix USB device pID = 203 (hex) [ 163.201619][ T5894] usb 3-1: USB disconnect, device number 22 [ 163.271494][ T5894] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 163.887727][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.917162][ T933] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 163.926218][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.963737][ T6989] imon:display_open: display port is already open [ 164.084890][ T933] usb 4-1: Using ep0 maxpacket: 16 [ 164.094141][ T933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.112399][ T933] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 164.121092][ T933] usb 4-1: can't read configurations, error -71 [ 165.173241][ T933] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 165.262561][ T5916] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 165.352168][ T933] usb 4-1: Using ep0 maxpacket: 16 [ 165.359241][ T933] usb 4-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 165.369747][ T933] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.382699][ T933] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 165.393445][ T933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.401480][ T933] usb 4-1: Product: syz [ 165.405965][ T933] usb 4-1: Manufacturer: syz [ 165.410857][ T933] usb 4-1: SerialNumber: syz [ 165.419826][ T933] usb 4-1: config 0 descriptor?? [ 165.424934][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 165.432105][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.445203][ T5916] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 165.454560][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.465354][ T5916] usb 1-1: config 0 descriptor?? [ 165.476873][ T5916] dvb-usb: found a 'TeVii S662' in warm state. [ 165.483372][ T5916] dw2102: su3000_power_ctrl: 1, initialized 0 [ 165.489818][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 165.500558][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.514459][ T5916] dvbdev: DVB: registering new adapter (TeVii S662) [ 165.521169][ T5916] usb 1-1: media controller created [ 165.526561][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 165.533392][ T5916] dw2102: i2c transfer failed. [ 165.539429][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 165.546084][ T5916] dw2102: i2c transfer failed. [ 165.550910][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 165.556986][ T5916] dw2102: i2c transfer failed. [ 165.562109][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 165.567910][ T5916] dw2102: i2c transfer failed. [ 165.572848][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 165.578690][ T5916] dw2102: i2c transfer failed. [ 165.583575][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 165.589369][ T5916] dw2102: i2c transfer failed. [ 165.596125][ T5916] dvb-usb: MAC address: 02:02:02:02:02:02 [ 165.602033][ T5866] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 165.617231][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.637375][ T933] usb 4-1: USB disconnect, device number 27 [ 165.653699][ T6989] imon:send_packet: task interrupted [ 165.659287][ T6989] imon:send_packet: packet tx failed (-512) [ 165.671658][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 165.678252][ T6989] imon:vfd_write: send packet #2 failed [ 165.684026][ T5916] dw2102: command 0x0e transfer failed. [ 165.689840][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 165.706430][ T5916] dw2102: command 0x0e transfer failed. [ 165.762030][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 165.768871][ T5866] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 165.779447][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.781167][ T40] usb 2-1: USB disconnect, device number 24 [ 165.789639][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.815752][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.826601][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.840007][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.875071][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.021999][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 166.028135][ T5916] dw2102: command 0x0e transfer failed. [ 166.033815][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 166.039739][ T5916] dw2102: command 0x0e transfer failed. [ 166.045472][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 166.051388][ T5916] dw2102: command 0x51 transfer failed. [ 166.057073][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 166.069331][ T5916] dw2102: i2c probe for address 0x68 failed. [ 166.075460][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 166.081208][ T5916] dw2102: i2c probe for address 0x69 failed. [ 166.087325][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 166.093152][ T5916] dw2102: i2c probe for address 0x6a failed. [ 166.099158][ T5916] dw2102: probing for demodulator failed. Is the external power switched on? [ 166.109991][ T5916] dvb-usb: no frontend was attached by 'TeVii S662' [ 166.190695][ T5866] usb 3-1: GET_CAPABILITIES returned 0 [ 166.200061][ T5866] usbtmc 3-1:16.0: can't read capabilities [ 166.218351][ T5916] rc_core: IR keymap rc-tt-1500 not found [ 166.241134][ T5916] Registered IR keymap rc-empty [ 166.267317][ T5916] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 166.287128][ T40] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 166.324981][ T5916] input: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input20 [ 166.363423][ T5916] dvb-usb: schedule remote query interval to 250 msecs. [ 166.370461][ T5916] dw2102: su3000_power_ctrl: 0, initialized 1 [ 166.377724][ T5916] dvb-usb: TeVii S662 successfully initialized and connected. [ 166.397193][ T5916] usb 1-1: USB disconnect, device number 33 [ 166.441595][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 166.459449][ T40] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.484354][ T40] usb 2-1: config 4 has an invalid interface number: 101 but max is 0 [ 166.498782][ T40] usb 2-1: config 4 has no interface number 0 [ 166.507945][ T40] usb 2-1: config 4 interface 101 has no altsetting 0 [ 166.518610][ T5916] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 166.546255][ T40] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=a5.52 [ 166.555692][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.565366][ T40] usb 2-1: Product: syz [ 166.569758][ T40] usb 2-1: Manufacturer: syz [ 166.575344][ T40] usb 2-1: SerialNumber: syz [ 166.633280][ T7056] sd 0:0:1:0: PR command failed: 1026 [ 166.638753][ T7056] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 166.646683][ T7056] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 166.733354][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 166.750259][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.759746][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.816768][ T40] ttusbir 2-1:4.101: cannot find expected altsetting [ 166.875928][ T40] usb 2-1: USB disconnect, device number 25 [ 166.898361][ T7067] usb 3-1: usbtmc_ioctl_clear_out_halt returned -32 [ 166.941635][ T5916] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 167.021933][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.092324][ T5916] usb 1-1: device descriptor read/64, error -71 [ 167.371471][ T5916] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 167.493891][ T7076] FAULT_INJECTION: forcing a failure. [ 167.493891][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 167.516099][ T7076] CPU: 0 UID: 0 PID: 7076 Comm: syz.1.353 Not tainted syzkaller #0 PREEMPT(full) [ 167.516130][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.516144][ T7076] Call Trace: [ 167.516152][ T7076] [ 167.516162][ T7076] dump_stack_lvl+0x189/0x250 [ 167.516194][ T7076] ? __pfx____ratelimit+0x10/0x10 [ 167.516227][ T7076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.516256][ T7076] ? __pfx__printk+0x10/0x10 [ 167.516289][ T7076] ? __pfx___might_resched+0x10/0x10 [ 167.516315][ T7076] ? fs_reclaim_acquire+0x7d/0x100 [ 167.516346][ T7076] should_fail_ex+0x414/0x560 [ 167.516383][ T7076] should_failslab+0xa8/0x100 [ 167.516413][ T7076] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 167.516436][ T7076] ? dup_task_struct+0x57/0x9a0 [ 167.516468][ T7076] dup_task_struct+0x57/0x9a0 [ 167.516494][ T7076] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.516526][ T7076] ? lockdep_hardirqs_on+0x98/0x140 [ 167.516551][ T7076] copy_process+0x4ea/0x3950 [ 167.516606][ T7076] ? __pfx_copy_process+0x10/0x10 [ 167.516691][ T7076] vhost_task_create+0x1ce/0x320 [ 167.516741][ T7076] ? unwind_get_return_address+0x4d/0x90 [ 167.516769][ T7076] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 167.516800][ T7076] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 167.516832][ T7076] ? __pfx_vhost_task_create+0x10/0x10 [ 167.516873][ T7076] ? __pfx_vhost_task_fn+0x10/0x10 [ 167.516910][ T7076] ? __lock_acquire+0x6b6/0x2cf0 [ 167.516947][ T7076] kvm_mmu_post_init_vm+0x14c/0x300 [ 167.516985][ T7076] kvm_arch_vcpu_ioctl_run+0xdc/0x1c90 [ 167.517026][ T7076] ? register_lock_class+0x51/0x320 [ 167.517052][ T7076] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 167.517076][ T7076] ? __lock_acquire+0x6b6/0x2cf0 [ 167.517103][ T7076] ? __mutex_lock+0x335/0x1350 [ 167.517135][ T7076] ? kasan_quarantine_put+0xdd/0x220 [ 167.517158][ T7076] ? lockdep_hardirqs_on+0x98/0x140 [ 167.517209][ T7076] kvm_vcpu_ioctl+0x99a/0xed0 [ 167.517248][ T7076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 167.517280][ T7076] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 167.517326][ T7076] ? __fget_files+0x2a/0x420 [ 167.517360][ T7076] ? __fget_files+0x3a0/0x420 [ 167.517388][ T7076] ? __fget_files+0x2a/0x420 [ 167.517421][ T7076] ? bpf_lsm_file_ioctl+0x9/0x20 [ 167.517448][ T7076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 167.517480][ T7076] __se_sys_ioctl+0xfc/0x170 [ 167.517505][ T7076] do_syscall_64+0xfa/0xf80 [ 167.517539][ T7076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.517562][ T7076] ? clear_bhb_loop+0x60/0xb0 [ 167.517590][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.517611][ T7076] RIP: 0033:0x7fa503f8f749 [ 167.517632][ T7076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.517652][ T7076] RSP: 002b:00007fa504d79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.517675][ T7076] RAX: ffffffffffffffda RBX: 00007fa5041e5fa0 RCX: 00007fa503f8f749 [ 167.517692][ T7076] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 167.517713][ T7076] RBP: 00007fa504d79090 R08: 0000000000000000 R09: 0000000000000000 [ 167.517727][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.517740][ T7076] R13: 00007fa5041e6038 R14: 00007fa5041e5fa0 R15: 00007ffd7a904e18 [ 167.517778][ T7076] [ 167.541119][ T5916] usb 1-1: device descriptor read/64, error -71 [ 167.962872][ T5916] usb usb1-port1: attempt power cycle [ 168.071365][ T7094] netlink: 'syz.3.359': attribute type 4 has an invalid length. [ 168.079154][ T7094] netlink: 'syz.3.359': attribute type 2 has an invalid length. [ 168.290911][ T933] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 168.310755][ T5916] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 168.331160][ T5916] usb 1-1: device descriptor read/8, error -71 [ 168.442582][ T933] usb 2-1: No LPM exit latency info found, disabling LPM. [ 168.454102][ T933] usb 2-1: string descriptor 0 read error: -22 [ 168.461937][ T933] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 168.471338][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.482498][ T933] usb 2-1: config 0 descriptor?? [ 168.570766][ T5916] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 168.592555][ T5916] usb 1-1: device descriptor read/8, error -71 [ 168.698891][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.711327][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.713474][ T5916] usb usb1-port1: unable to enumerate USB device [ 168.745811][ T933] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 168.852311][ T933] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 168.860715][ T933] dib0700: firmware download failed at 7 with -22 [ 168.873115][ T933] usb 2-1: USB disconnect, device number 26 [ 169.199337][ T6744] usb 3-1: USB disconnect, device number 23 [ 169.240438][ T933] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 169.271705][ T7109] fuse: Bad value for 'fd' [ 169.394377][ T7112] sctp: [Deprecated]: syz.2.365 (pid 7112) Use of int in maxseg socket option. [ 169.394377][ T7112] Use struct sctp_assoc_value instead [ 169.413420][ T933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.424662][ T933] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 169.458883][ T933] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 169.478487][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.493900][ T933] usb 2-1: config 0 descriptor?? [ 169.505143][ T933] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 169.513223][ T933] dvb-usb: bulk message failed: -22 (3/0) [ 169.524316][ T933] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 169.543626][ T933] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 169.544903][ T7115] tc_dump_action: action bad kind [ 169.558270][ T933] usb 2-1: media controller created [ 169.566225][ T933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.573410][ T7115] openvswitch: netlink: Message has -2 unknown bytes. [ 169.600541][ T7115] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 169.602019][ T933] dvb-usb: bulk message failed: -22 (6/0) [ 169.651361][ T933] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 169.702944][ T933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 169.725206][ T7121] netlink: 'syz.3.368': attribute type 4 has an invalid length. [ 169.737524][ T7121] netlink: 'syz.3.368': attribute type 2 has an invalid length. [ 169.765674][ T933] dvb-usb: schedule remote query interval to 150 msecs. [ 169.786744][ T933] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 169.810330][ T933] usb 2-1: USB disconnect, device number 27 [ 169.836340][ T5832] udevd[5832]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 169.892175][ T933] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 170.070496][ T5894] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 170.222104][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.231164][ T5894] usb 1-1: config 3 has an invalid interface number: 8 but max is 3 [ 170.239470][ T5894] usb 1-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 170.249957][ T5866] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 170.258737][ T5894] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 170.268235][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 170.289671][ T5894] usb 1-1: config 3 has no interface number 0 [ 170.295831][ T5894] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 170.313573][ T5894] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 170.327842][ T5894] usb 1-1: config 3 interface 8 has no altsetting 0 [ 170.337357][ T7134] syzkaller1: entered promiscuous mode [ 170.338113][ T5894] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 170.343596][ T7134] syzkaller1: entered allmulticast mode [ 170.353098][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.366697][ T5894] usb 1-1: Product: syz [ 170.371793][ T5894] usb 1-1: Manufacturer: syz [ 170.376513][ T5894] usb 1-1: SerialNumber: syz [ 170.409732][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 170.419345][ T5866] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 170.428869][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.437067][ T5866] usb 4-1: Product: syz [ 170.441878][ T5866] usb 4-1: Manufacturer: syz [ 170.446640][ T5866] usb 4-1: SerialNumber: syz [ 170.455483][ T5866] usb 4-1: config 0 descriptor?? [ 170.463656][ T10] usb 3-1: config 4 has an invalid interface number: 88 but max is 1 [ 170.472025][ T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 170.485836][ T10] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 170.497652][ T5866] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 170.505508][ T10] usb 3-1: config 4 has no interface number 0 [ 170.513005][ T5866] dvb-usb: bulk message failed: -22 (2/0) [ 170.522318][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 170.533799][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.543497][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.553703][ T10] usb 3-1: Product: syz [ 170.557928][ T10] usb 3-1: Manufacturer: syz [ 170.562943][ T10] usb 3-1: SerialNumber: syz [ 170.568043][ T5866] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 170.576166][ T5866] usb 4-1: media controller created [ 170.623565][ T5894] appledisplay 1-1:3.8: Error while getting initial brightness: -71 [ 170.642134][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.653111][ T5894] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -71 [ 170.670885][ T5894] usbhid 1-1:3.8: can't add hid device: -22 [ 170.683552][ T5894] usbhid 1-1:3.8: probe with driver usbhid failed with error -22 [ 170.692055][ T5866] usb 4-1: selecting invalid altsetting 7 [ 170.697816][ T5866] cxusb: set interface failed [ 170.704431][ T5866] dvb-usb: bulk message failed: -22 (1/0) [ 170.718016][ T5894] usb 1-1: USB disconnect, device number 38 [ 170.759895][ T5866] DVB: Unable to find symbol lgdt330x_attach() [ 170.766102][ T5866] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 170.839394][ T5866] rc_core: IR keymap rc-dvico-portable not found [ 170.845798][ T5866] Registered IR keymap rc-empty [ 170.857119][ T5866] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 170.869056][ T5866] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input23 [ 170.881435][ T5866] dvb-usb: schedule remote query interval to 100 msecs. [ 170.888428][ T5866] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 170.902830][ T5866] usb 4-1: USB disconnect, device number 28 [ 170.967613][ T5866] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 171.371792][ T7137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.378050][ T7137] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.384365][ T7137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.390560][ T7137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.417102][ T6744] usb 3-1: USB disconnect, device number 24 [ 171.640882][ T5916] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 171.810748][ T5916] usb 1-1: config 0 has an invalid interface number: 71 but max is 0 [ 171.819832][ T5916] usb 1-1: config 0 has no interface number 0 [ 171.825994][ T5916] usb 1-1: config 0 interface 71 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 171.840715][ T5916] usb 1-1: config 0 interface 71 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 171.852404][ T5916] usb 1-1: config 0 interface 71 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.864774][ T5916] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0 [ 171.874248][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.882361][ T5916] usb 1-1: Product: syz [ 171.886701][ T5916] usb 1-1: Manufacturer: syz [ 171.891402][ T5916] usb 1-1: SerialNumber: syz [ 171.898341][ T5916] usb 1-1: config 0 descriptor?? [ 171.904794][ T7142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.916071][ T5916] kvaser_usb 1-1:0.71: error -ENODEV: Cannot get usb endpoint(s) [ 172.018032][ T7149] netlink: 'syz.2.378': attribute type 4 has an invalid length. [ 172.031077][ T7149] netlink: 'syz.2.378': attribute type 2 has an invalid length. [ 172.618545][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.690812][ T5894] usb 1-1: USB disconnect, device number 39 [ 172.741372][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 172.826713][ T5840] Bluetooth: hci2: ACL packet for unknown connection handle 401 [ 172.918414][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 172.929098][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.944470][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 172.956648][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.970567][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.979787][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.992361][ T10] usb 4-1: config 0 descriptor?? [ 172.998822][ T7158] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 173.023965][ T10] hub 4-1:0.0: USB hub found [ 173.053872][ T7180] netlink: 104 bytes leftover after parsing attributes in process `syz.2.387'. [ 173.236183][ T10] hub 4-1:0.0: 1 port detected [ 173.278285][ T5891] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 173.418340][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.418539][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.424442][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.438303][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 173.453002][ T5891] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 173.462208][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.473694][ T5891] usb 2-1: Product: syz [ 173.480403][ T5891] usb 2-1: Manufacturer: syz [ 173.485087][ T5891] usb 2-1: SerialNumber: syz [ 173.495297][ T7192] netlink: 14 bytes leftover after parsing attributes in process `syz.0.392'. [ 173.498973][ T5891] usb 2-1: config 0 descriptor?? [ 173.516547][ T5891] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 173.836305][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 401 [ 174.325092][ T5891] gspca_ov534_9: reg_w failed -71 [ 174.422231][ T933] usb 4-1: USB disconnect, device number 29 [ 174.422647][ T5894] usb 4-1-port1: cannot reset (err = -71) [ 174.438369][ T5894] usb 4-1-port1: attempt power cycle [ 174.468058][ T6744] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 174.627551][ T6744] usb 3-1: Invalid ep0 maxpacket: 32 [ 174.633025][ T5891] gspca_ov534_9: Unknown sensor 0000 [ 174.633104][ T5891] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 174.658426][ T5891] usb 2-1: USB disconnect, device number 28 [ 174.707891][ T5866] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 174.767433][ T6744] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 174.870203][ T5866] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 174.879547][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.890079][ T5866] usb 1-1: config 0 descriptor?? [ 174.898802][ T5866] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 174.927827][ T6744] usb 3-1: Invalid ep0 maxpacket: 32 [ 174.935170][ T6744] usb usb3-port1: attempt power cycle [ 174.957412][ T5891] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 175.102593][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.121048][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.127263][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 175.132180][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.144580][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.147943][ T5891] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 175.171194][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.179603][ T5891] usb 2-1: Manufacturer: Ñ— [ 175.184178][ T5891] usb 2-1: SerialNumber: ᤣ퓞㩰繮耉壂䉱嬇뾆⢤⿅Ⱨ岔鳟貑絸溲ⳅéšæ£¸ëáºæ–šëµŸë±–é™â²µïŠ½ì™¾ç²³æ€žè¨’쫋ֆ魧Ꙉૼ듒ê†î¹®ë¯ë„«êŽÍ‘繩ި枽挑ᴊ纚퇾ꨑ酇ë–å”ï¢ì…„㫦炜欖冱회ᤈ픨笔 [ 175.214478][ T5891] usb 2-1: config 0 descriptor?? [ 175.228347][ T5891] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 175.277315][ T6744] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 175.298106][ T6744] usb 3-1: Invalid ep0 maxpacket: 32 [ 175.361941][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.372701][ T5866] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 175.381641][ T5866] usb 1-1: media controller created [ 175.400021][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.424399][ T5866] gp8psk_fe: Frontend attached [ 175.429405][ T5894] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 175.431150][ T6744] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 175.441956][ T5866] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 175.455498][ T5866] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 175.478090][ T6744] usb 3-1: Invalid ep0 maxpacket: 32 [ 175.484257][ T6744] usb usb3-port1: unable to enumerate USB device [ 175.572406][ T5866] gp8psk: usb in 138 operation failed. [ 175.578888][ T5866] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 175.590269][ T5866] gp8psk: found Genpix USB device pID = 203 (hex) [ 175.599957][ T5866] usb 1-1: USB disconnect, device number 40 [ 175.621573][ T5894] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 175.637870][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 175.645930][ T5894] usb 4-1: Product: syz [ 175.654646][ T5891] gspca_ov534_9: reg_w failed -71 [ 175.666935][ T5894] usb 4-1: SerialNumber: syz [ 175.680658][ T5894] usb 4-1: config 0 descriptor?? [ 175.710918][ T5866] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 176.057082][ T5891] gspca_ov534_9: Unknown sensor 0000 [ 176.057184][ T5891] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 176.075810][ T5891] usb 2-1: USB disconnect, device number 29 [ 176.099327][ T7217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.118641][ T7217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.132716][ T5866] usb 4-1: USB disconnect, device number 34 [ 176.396630][ T5894] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 176.538539][ T5891] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 176.551386][ T5894] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 176.560616][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.568881][ T5894] usb 1-1: Product: syz [ 176.573364][ T5894] usb 1-1: Manufacturer: syz [ 176.578217][ T5894] usb 1-1: SerialNumber: syz [ 176.696469][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 176.708060][ T5891] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 176.718560][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.726938][ T5891] usb 2-1: Product: syz [ 176.731706][ T5891] usb 2-1: Manufacturer: syz [ 176.736793][ T5891] usb 2-1: SerialNumber: syz [ 176.744921][ T5891] usb 2-1: config 0 descriptor?? [ 176.792642][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 176.804887][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 176.815997][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 176.827062][ T5894] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 177.165871][ T5891] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 177.177036][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.187080][ T5891] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 177.195027][ T5891] usb 2-1: media controller created [ 177.209958][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.370172][ T7229] [U] ©„ [ 177.375010][ T7228] [U] © [ 177.551283][ T5891] zl10353_read_register: readreg error (reg=127, ret==0) [ 177.560546][ T5891] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 177.568827][ T5891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 177.598904][ T5891] usb 2-1: USB disconnect, device number 30 [ 177.655331][ T5891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 177.765951][ T5894] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 177.915925][ T5894] usb 3-1: device descriptor read/64, error -71 [ 178.165850][ T5894] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 178.305668][ T5894] usb 3-1: device descriptor read/64, error -71 [ 178.416009][ T5894] usb usb3-port1: attempt power cycle [ 178.765453][ T5894] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 178.786234][ T5894] usb 3-1: device descriptor read/8, error -71 [ 179.036557][ T5894] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 179.086252][ T5894] usb 3-1: device descriptor read/8, error -71 [ 179.197865][ T5894] usb usb3-port1: unable to enumerate USB device [ 179.217349][ T5894] usb 1-1: USB disconnect, device number 41 [ 179.675015][ T5894] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 179.833236][ T5894] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.845458][ T7265] FAULT_INJECTION: forcing a failure. [ 179.845458][ T7265] name failslab, interval 1, probability 0, space 0, times 0 [ 179.858425][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.3.416 Not tainted syzkaller #0 PREEMPT(full) [ 179.858451][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.858469][ T7265] Call Trace: [ 179.858478][ T7265] [ 179.858486][ T7265] dump_stack_lvl+0x189/0x250 [ 179.858517][ T7265] ? __pfx____ratelimit+0x10/0x10 [ 179.858550][ T7265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.858578][ T7265] ? __pfx__printk+0x10/0x10 [ 179.858606][ T7265] ? __pfx_skb_network_protocol+0x10/0x10 [ 179.858642][ T7265] should_fail_ex+0x414/0x560 [ 179.858708][ T7265] should_failslab+0xa8/0x100 [ 179.858739][ T7265] kmem_cache_alloc_noprof+0x88/0x710 [ 179.858776][ T7265] ? skb_clone+0x212/0x3a0 [ 179.858800][ T7265] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 179.858831][ T7265] skb_clone+0x212/0x3a0 [ 179.858854][ T7265] ? dev_queue_xmit_nit+0x268/0xad0 [ 179.858881][ T7265] dev_queue_xmit_nit+0x29a/0xad0 [ 179.858905][ T7265] ? dev_queue_xmit_nit+0x2d/0xad0 [ 179.858940][ T7265] dev_hard_start_xmit+0x1c1/0x800 [ 179.858987][ T7265] __dev_queue_xmit+0x144e/0x3090 [ 179.859013][ T7265] ? netlink_unicast+0x82f/0x9e0 [ 179.859037][ T7265] ? ___sys_sendmsg+0x21f/0x2a0 [ 179.859060][ T7265] ? do_syscall_64+0xfa/0xf80 [ 179.859090][ T7265] ? __dev_queue_xmit+0x280/0x3090 [ 179.859128][ T7265] ? __pfx___dev_queue_xmit+0x10/0x10 [ 179.859164][ T7265] ? __copy_skb_header+0xa7/0x550 [ 179.859190][ T7265] ? __asan_memcpy+0x40/0x70 [ 179.859210][ T7265] ? __skb_clone+0x63/0x7a0 [ 179.859240][ T7265] ? __skb_clone+0x483/0x7a0 [ 179.859273][ T7265] ? skb_clone+0x246/0x3a0 [ 179.859303][ T7265] __netlink_deliver_tap+0x5d9/0x8b0 [ 179.859345][ T7265] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.859374][ T7265] netlink_deliver_tap+0x19c/0x1b0 [ 179.859402][ T7265] netlink_sendskb+0x68/0x140 [ 179.859429][ T7265] netlink_unicast+0x397/0x9e0 [ 179.859450][ T7265] ? __asan_memcpy+0x40/0x70 [ 179.859480][ T7265] ? __pfx_netlink_unicast+0x10/0x10 [ 179.859516][ T7265] netlink_rcv_skb+0x28c/0x470 [ 179.859544][ T7265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.859579][ T7265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.859627][ T7265] ? down_read+0x274/0x2e0 [ 179.859648][ T7265] ? genl_rcv+0xd/0x40 [ 179.859688][ T7265] genl_rcv+0x28/0x40 [ 179.859718][ T7265] netlink_unicast+0x82f/0x9e0 [ 179.859752][ T7265] ? __pfx_netlink_unicast+0x10/0x10 [ 179.859778][ T7265] ? netlink_sendmsg+0x642/0xb30 [ 179.859803][ T7265] ? skb_put+0x11b/0x210 [ 179.859829][ T7265] netlink_sendmsg+0x805/0xb30 [ 179.859854][ T7265] ? aa_sk_perm+0x15f/0x920 [ 179.859901][ T7265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.859931][ T7265] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 179.859963][ T7265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.859988][ T7265] sock_sendmsg_nosec+0x18f/0x1d0 [ 179.860021][ T7265] ____sys_sendmsg+0x577/0x880 [ 179.860054][ T7265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.860085][ T7265] ? import_iovec+0x74/0xa0 [ 179.860111][ T7265] ___sys_sendmsg+0x21f/0x2a0 [ 179.860138][ T7265] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.860172][ T7265] ? rcu_read_lock_any_held+0xb3/0x120 [ 179.860232][ T7265] ? __fget_files+0x2a/0x420 [ 179.860259][ T7265] ? __fget_files+0x3a0/0x420 [ 179.860300][ T7265] __x64_sys_sendmsg+0x19b/0x260 [ 179.860328][ T7265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.860364][ T7265] ? __pfx_ksys_write+0x10/0x10 [ 179.860389][ T7265] ? do_syscall_64+0xbe/0xf80 [ 179.860424][ T7265] do_syscall_64+0xfa/0xf80 [ 179.860447][ T7265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.860469][ T7265] ? clear_bhb_loop+0x60/0xb0 [ 179.860496][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.860518][ T7265] RIP: 0033:0x7fa6f1d8f749 [ 179.860547][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.860566][ T7265] RSP: 002b:00007fa6f2c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.860597][ T7265] RAX: ffffffffffffffda RBX: 00007fa6f1fe5fa0 RCX: 00007fa6f1d8f749 [ 179.860613][ T7265] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 179.860627][ T7265] RBP: 00007fa6f2c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.860641][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.860654][ T7265] R13: 00007fa6f1fe6038 R14: 00007fa6f1fe5fa0 R15: 00007ffd21816d98 [ 179.860699][ T7265] [ 179.863538][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.248436][ T7275] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.254981][ T5894] usb 1-1: Product: syz [ 180.307865][ T7275] block device autoloading is deprecated and will be removed. [ 180.314832][ T5894] usb 1-1: Manufacturer: syz [ 180.314855][ T5894] usb 1-1: SerialNumber: syz [ 180.347839][ T5894] usb 1-1: config 0 descriptor?? [ 180.566635][ T5894] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 180.714471][ T5866] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 180.870140][ T5866] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 180.879384][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.887674][ T5866] usb 2-1: Product: syz [ 180.891920][ T5866] usb 2-1: Manufacturer: syz [ 180.897651][ T5866] usb 2-1: SerialNumber: syz [ 180.934525][ T933] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 181.087592][ T933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.097583][ T933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 181.110956][ T933] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 181.115539][ T5866] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 181.120394][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.132880][ T5866] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 181.150942][ T5866] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.156790][ T933] usb 3-1: config 0 descriptor?? [ 181.173414][ T5866] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 181.564056][ T5866] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 181.572604][ T7282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.587275][ T933] kovaplus 0003:1E7D:2D50.0007: item fetching failed at offset 2/5 [ 181.596098][ T933] kovaplus 0003:1E7D:2D50.0007: parse failed [ 181.602197][ T933] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -22 [ 181.713962][ T5866] usb 4-1: Invalid ep0 maxpacket: 64 [ 181.844006][ T5866] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 182.013848][ T5866] usb 4-1: Invalid ep0 maxpacket: 64 [ 182.019558][ T5866] usb usb4-port1: attempt power cycle [ 182.338760][ T5894] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 182.363921][ T5894] usb 1-1: USB disconnect, device number 42 [ 182.373632][ T5866] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 182.405526][ T5866] usb 4-1: Invalid ep0 maxpacket: 64 [ 182.534006][ T5866] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 182.554253][ T5866] usb 4-1: Invalid ep0 maxpacket: 64 [ 182.560060][ T5866] usb usb4-port1: unable to enumerate USB device [ 182.940738][ T7293] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 183.039733][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 183.293248][ T5866] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 183.465300][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.485018][ T5866] usb 1-1: not running at top speed; connect to a high speed hub [ 183.501026][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.516917][ T5894] usb 2-1: USB disconnect, device number 31 [ 183.530444][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.558025][ T5866] usb 1-1: string descriptor 0 read error: -22 [ 183.566632][ T5866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.575901][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.610693][ T5866] usb 1-1: 0:2 : does not exist [ 183.625274][ T5891] usb 3-1: USB disconnect, device number 33 [ 183.743582][ T7302] FAULT_INJECTION: forcing a failure. [ 183.743582][ T7302] name failslab, interval 1, probability 0, space 0, times 0 [ 183.760401][ T7302] CPU: 1 UID: 0 PID: 7302 Comm: syz.2.426 Not tainted syzkaller #0 PREEMPT(full) [ 183.760432][ T7302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.760446][ T7302] Call Trace: [ 183.760455][ T7302] [ 183.760464][ T7302] dump_stack_lvl+0x189/0x250 [ 183.760498][ T7302] ? __pfx____ratelimit+0x10/0x10 [ 183.760532][ T7302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.760561][ T7302] ? __pfx__printk+0x10/0x10 [ 183.760590][ T7302] ? __pfx___might_resched+0x10/0x10 [ 183.760616][ T7302] ? fs_reclaim_acquire+0x7d/0x100 [ 183.760647][ T7302] should_fail_ex+0x414/0x560 [ 183.760682][ T7302] should_failslab+0xa8/0x100 [ 183.760714][ T7302] __kmalloc_cache_noprof+0x84/0x700 [ 183.760739][ T7302] ? fuse_alloc_inode+0xec/0x1a0 [ 183.760774][ T7302] fuse_alloc_inode+0xec/0x1a0 [ 183.760806][ T7302] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 183.760834][ T7302] alloc_inode+0x6a/0x1b0 [ 183.760859][ T7302] ? __pfx_fuse_inode_eq+0x10/0x10 [ 183.760884][ T7302] ? __pfx_fuse_inode_set+0x10/0x10 [ 183.760908][ T7302] iget5_locked+0x4a/0xa0 [ 183.760942][ T7302] fuse_iget+0x381/0x9b0 [ 183.760987][ T7302] ? __pfx_fuse_iget+0x10/0x10 [ 183.761012][ T7302] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 183.761033][ T7302] ? __pfx___mutex_trylock_common+0x10/0x10 [ 183.761071][ T7302] fuse_lookup_name+0x713/0x860 [ 183.761115][ T7302] ? __pfx_fuse_lookup_name+0x10/0x10 [ 183.761144][ T7302] ? fuse_lock_inode+0xd3/0x120 [ 183.761168][ T7302] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 183.761215][ T7302] ? d_alloc_parallel+0x366/0x1610 [ 183.761263][ T7302] fuse_lookup+0x1f0/0x480 [ 183.761300][ T7302] ? __pfx_fuse_lookup+0x10/0x10 [ 183.761346][ T7302] ? __raw_spin_lock_init+0x45/0x100 [ 183.761381][ T7302] ? __init_waitqueue_head+0xa9/0x150 [ 183.761423][ T7302] __lookup_slow+0x297/0x3d0 [ 183.761459][ T7302] ? __pfx___lookup_slow+0x10/0x10 [ 183.761508][ T7302] ? down_read+0x274/0x2e0 [ 183.761537][ T7302] lookup_slow+0x53/0x70 [ 183.761570][ T7302] walk_component+0x2d2/0x400 [ 183.761598][ T7302] ? path_lookupat+0x156/0x430 [ 183.761631][ T7302] path_lookupat+0x163/0x430 [ 183.761670][ T7302] filename_lookup+0x212/0x570 [ 183.761708][ T7302] ? __pfx_filename_lookup+0x10/0x10 [ 183.761767][ T7302] ? __might_fault+0xb0/0x130 [ 183.761813][ T7302] vfs_statx+0xf8/0x550 [ 183.761848][ T7302] ? __pfx_vfs_statx+0x10/0x10 [ 183.761888][ T7302] __se_sys_statx+0x1a8/0x240 [ 183.761933][ T7302] ? __pfx___se_sys_statx+0x10/0x10 [ 183.761992][ T7302] ? __pfx_ksys_write+0x10/0x10 [ 183.762019][ T7302] ? do_syscall_64+0xbe/0xf80 [ 183.762038][ T7302] ? __x64_sys_statx+0x20/0xc0 [ 183.762071][ T7302] do_syscall_64+0xfa/0xf80 [ 183.762094][ T7302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.762117][ T7302] ? clear_bhb_loop+0x60/0xb0 [ 183.762143][ T7302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.762165][ T7302] RIP: 0033:0x7f22e238f749 [ 183.762184][ T7302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.762204][ T7302] RSP: 002b:00007f22e05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 183.762228][ T7302] RAX: ffffffffffffffda RBX: 00007f22e25e5fa0 RCX: 00007f22e238f749 [ 183.762245][ T7302] RDX: 0000000000004800 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 183.762260][ T7302] RBP: 00007f22e05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.762274][ T7302] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 183.762288][ T7302] R13: 00007f22e25e6038 R14: 00007f22e25e5fa0 R15: 00007fffc9c6ddd8 [ 183.762325][ T7302] [ 184.308065][ T5894] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 184.333727][ T5894] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.572703][ T5894] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 184.732518][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 184.741672][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 184.751043][ T5894] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 184.760184][ T5894] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 184.770729][ T5894] usb 2-1: config 127 has no interface number 1 [ 184.777463][ T5894] usb 2-1: config 127 interface 171 has no altsetting 0 [ 184.789704][ T5894] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 184.801754][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.810712][ T5894] usb 2-1: Product: syz [ 184.815737][ T5894] usb 2-1: Manufacturer: syz [ 184.820539][ T5894] usb 2-1: SerialNumber: syz [ 184.898443][ T10] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 184.920381][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.935958][ T10] usb 4-1: config 0 descriptor?? [ 184.950919][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 185.038998][ T5894] xr_serial 2-1:127.171: xr_serial converter detected [ 185.065601][ T5894] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 185.072085][ T5894] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 185.116580][ T5894] usb 2-1: USB disconnect, device number 32 [ 185.138456][ T5894] xr_serial 2-1:127.171: device disconnected [ 185.169732][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.196573][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.216357][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.251647][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.463707][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.474533][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 185.483344][ T10] usb 4-1: media controller created [ 185.500067][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.523631][ T10] gp8psk_fe: Frontend attached [ 185.528537][ T10] usb 4-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 185.536970][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 185.658872][ T5866] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 185.672589][ T10] gp8psk: usb in 138 operation failed. [ 185.682371][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 185.697729][ T5866] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 185.719904][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 185.762122][ T10] usb 4-1: USB disconnect, device number 39 [ 185.781779][ T5866] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 185.834547][ T5866] usb 1-1: USB disconnect, device number 43 [ 185.996684][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 186.055188][ T7328] picdev_read: 77 callbacks suppressed [ 186.055211][ T7328] kvm: pic: non byte read [ 186.115844][ T7328] kvm: pic: non byte read [ 186.120335][ T7328] kvm: pic: non byte read [ 186.132386][ T7328] kvm: pic: non byte read [ 186.136875][ T7328] kvm: pic: non byte read [ 186.141328][ T7328] kvm: pic: non byte read [ 186.175851][ T7328] kvm: pic: non byte read [ 186.204401][ T7328] kvm: pic: non byte read [ 186.214566][ T7328] kvm: pic: non byte read [ 186.222686][ T7328] kvm: pic: non byte read [ 186.411606][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 186.514930][ T7344] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 186.525196][ T7342] syzkaller0: entered promiscuous mode [ 186.531020][ T7342] syzkaller0: entered allmulticast mode [ 186.554227][ T7342] syzkaller0: tun_net_xmit 14 [ 186.581490][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 186.588432][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.599808][ T77] syzkaller0: tun_net_xmit 70 [ 186.613004][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.631550][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 186.649742][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 186.671168][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.686466][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.718780][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 186.737693][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 186.748898][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 186.768327][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 186.791839][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 186.815213][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 187.464356][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.446'. [ 187.642844][ T7336] usb 1-1: reset high-speed USB device number 44 using dummy_hcd [ 187.801805][ T7336] usb 1-1: device descriptor read/64, error -71 [ 187.865977][ T7368] netlink: 44 bytes leftover after parsing attributes in process `syz.3.450'. [ 187.988738][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 401 [ 188.053185][ T7336] usb 1-1: reset high-speed USB device number 44 using dummy_hcd [ 188.160792][ T5910] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 188.200730][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 188.208616][ T7336] usb 1-1: device descriptor read/64, error -71 [ 188.313399][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 188.325659][ T5910] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 188.335588][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.348175][ T5910] usb 4-1: config 0 descriptor?? [ 188.354657][ T7368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 188.373588][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.384110][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 188.394747][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.406574][ T9] usb 2-1: config 0 descriptor?? [ 188.450919][ T7336] usb 1-1: reset high-speed USB device number 44 using dummy_hcd [ 188.481622][ T7336] usb 1-1: device descriptor read/8, error -71 [ 188.540599][ T6050] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 188.585569][ T5910] usbhid 4-1:0.0: can't add hid device: -71 [ 188.594202][ T5910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 188.605193][ T5910] usb 4-1: USB disconnect, device number 40 [ 188.702784][ T6050] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 188.711259][ T6050] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.720753][ T7336] usb 1-1: reset high-speed USB device number 44 using dummy_hcd [ 188.722132][ T6050] usb 3-1: config 0 has no interface number 0 [ 188.737316][ T6050] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 188.747793][ T6050] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.751490][ T7336] usb 1-1: device descriptor read/8, error -71 [ 188.772267][ T6050] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 188.782342][ T6050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.790811][ T6050] usb 3-1: Product: syz [ 188.795045][ T6050] usb 3-1: Manufacturer: syz [ 188.799685][ T6050] usb 3-1: SerialNumber: syz [ 188.807183][ T6050] usb 3-1: config 0 descriptor?? [ 188.839720][ T9] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 188.872810][ T7336] cdc_wdm 1-1:1.0: Error autopm - -16 [ 188.873056][ T10] usb 1-1: USB disconnect, device number 44 [ 189.035233][ T7370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.045714][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 189.046450][ T7370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.190353][ T10] usb 1-1: device descriptor read/64, error -71 [ 189.229173][ T5894] usb 3-1: USB disconnect, device number 34 [ 189.466455][ T9] lenovo 0003:17EF:6047.0009: Fn-lock setting failed: -71 [ 189.476002][ T9] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71 [ 189.492171][ T9] usb 2-1: USB disconnect, device number 33 [ 189.497793][ T6050] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 189.671789][ T6050] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 189.681054][ T6050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.692518][ T6050] usb 4-1: config 0 descriptor?? [ 189.709107][ T6050] pwc: Philips SPC 900NC USB webcam detected. [ 189.904244][ T7386] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.923239][ T6050] pwc: Failed to set LED on/off time (-71) [ 189.931974][ T6050] pwc: send_video_command error -71 [ 189.937533][ T6050] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 189.945496][ T6050] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 189.974374][ T6050] usb 4-1: USB disconnect, device number 41 [ 190.299089][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 401 [ 190.316390][ T7407] netlink: 'syz.1.462': attribute type 9 has an invalid length. [ 190.326097][ T7407] ufs: You didn't specify the type of your ufs filesystem [ 190.326097][ T7407] [ 190.326097][ T7407] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 190.326097][ T7407] [ 190.326097][ T7407] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 190.357865][ T7407] ufs: ufstype=old is supported read-only [ 190.877541][ T7396] syz.2.459 (7396): drop_caches: 2 [ 190.915316][ T7420] syz.1.466 (7420): attempted to duplicate a private mapping with mremap. This is not supported. [ 190.959378][ T10] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 191.100095][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 191.131625][ T10] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 191.149290][ T10] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 191.157458][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 191.190281][ T5910] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 191.191246][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 191.239180][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 191.249773][ T9] usb 1-1: device descriptor read/64, error -71 [ 191.257806][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 191.269382][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 191.302666][ T10] usb 4-1: string descriptor 0 read error: -22 [ 191.309012][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 191.318271][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.344809][ T10] usb 4-1: config 0 descriptor?? [ 191.364723][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.366182][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 191.389544][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 191.402009][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 191.442980][ T5910] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 191.474107][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.499350][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 191.500036][ T7430] NFSD: Failed to start, no listeners configured. [ 191.518633][ T5910] usb 2-1: config 0 descriptor?? [ 191.536149][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 191.629002][ T9] usb 1-1: device descriptor read/64, error -71 [ 191.661291][ T5916] usb 4-1: USB disconnect, device number 42 [ 191.749659][ T9] usb usb1-port1: attempt power cycle [ 191.876840][ T7436] comedi comedi2: ni_at_a2150: I/O port conflict (0x8,28) [ 191.939533][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 191.957070][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 191.965171][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 191.972759][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 191.980669][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 191.989976][ T5910] pwc: recv_control_msg error -32 req 04 val 1400 [ 192.119928][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 192.140043][ T9] usb 1-1: device descriptor read/8, error -71 [ 192.198034][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 192.206115][ T5910] pwc: recv_control_msg error -32 req 04 val 1500 [ 192.279753][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 192.286569][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 192.322849][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 192.340438][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 192.349804][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 192.356937][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 192.365351][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 192.387089][ T5910] pwc: Registered as video103. [ 192.398667][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 192.413555][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 192.442762][ T9] usb 1-1: device descriptor read/8, error -71 [ 192.454660][ T5910] usb 2-1: USB disconnect, device number 34 [ 192.578888][ T9] usb usb1-port1: unable to enumerate USB device [ 193.224491][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.234138][ T7458] netlink: 'syz.3.481': attribute type 28 has an invalid length. [ 193.248167][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.255712][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.278196][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.285729][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.308294][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.315759][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.318227][ T5916] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 193.348110][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.355607][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.365174][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.392414][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.03 Device [syz1] on syz1 [ 193.515528][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.537267][ T7460] fido_id[7460]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.553255][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.570848][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.595952][ T5916] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.607024][ T52] Bluetooth: hci3: ACL packet for unknown connection handle 401 [ 193.621987][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.642736][ T5916] usb 3-1: config 0 descriptor?? [ 193.736126][ T7465] fuse: Unknown parameter '' [ 194.088662][ T5916] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 194.106984][ T5910] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 194.262657][ T5910] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 194.275753][ T7455] input: syz0 as /devices/virtual/input/input28 [ 194.288715][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.316124][ T5910] usb 4-1: config 0 descriptor?? [ 194.337909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.361019][ T5910] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 194.508234][ T5866] usb 3-1: USB disconnect, device number 35 [ 194.524809][ T3530] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.657070][ T3530] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.807781][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.810459][ T3530] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.838534][ T5910] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 194.847226][ T5910] usb 4-1: media controller created [ 194.902307][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.969580][ T5910] gp8psk_fe: Frontend attached [ 194.984702][ T3530] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.984775][ T5910] usb 4-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 195.047471][ T5910] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 195.126485][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.138762][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.146767][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.150478][ T5910] gp8psk: usb in 138 operation failed. [ 195.165052][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.173804][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.180754][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.185991][ T5910] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 195.188191][ T5866] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 195.224819][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 401 [ 195.251945][ T5910] gp8psk: found Genpix USB device pID = 203 (hex) [ 195.274148][ T5910] usb 4-1: USB disconnect, device number 43 [ 195.386861][ T3530] bridge_slave_1: left allmulticast mode [ 195.395108][ T5866] usb 1-1: device descriptor read/64, error -71 [ 195.408871][ T3530] bridge_slave_1: left promiscuous mode [ 195.415290][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.435880][ T3530] bridge_slave_0: left allmulticast mode [ 195.442264][ T3530] bridge_slave_0: left promiscuous mode [ 195.449579][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.450214][ T5910] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 195.497237][ T7482] FAULT_INJECTION: forcing a failure. [ 195.497237][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 195.510735][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.2.492 Not tainted syzkaller #0 PREEMPT(full) [ 195.510764][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.510778][ T7482] Call Trace: [ 195.510787][ T7482] [ 195.510796][ T7482] dump_stack_lvl+0x189/0x250 [ 195.510828][ T7482] ? __pfx____ratelimit+0x10/0x10 [ 195.510861][ T7482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.510889][ T7482] ? __pfx__printk+0x10/0x10 [ 195.510921][ T7482] ? __pfx___might_resched+0x10/0x10 [ 195.510952][ T7482] should_fail_ex+0x414/0x560 [ 195.510989][ T7482] should_failslab+0xa8/0x100 [ 195.511025][ T7482] __kmalloc_noprof+0xdf/0x800 [ 195.511047][ T7482] ? kfree+0x4d/0x660 [ 195.511076][ T7482] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 195.511105][ T7482] tomoyo_realpath_from_path+0xe3/0x5d0 [ 195.511130][ T7482] ? tomoyo_domain+0xd8/0x130 [ 195.511158][ T7482] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 195.511194][ T7482] tomoyo_path_number_perm+0x1e8/0x5a0 [ 195.511227][ T7482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.511266][ T7482] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 195.511298][ T7482] ? __fget_files+0x2a/0x420 [ 195.511321][ T7482] ? __fget_files+0x3a0/0x420 [ 195.511341][ T7482] ? __fget_files+0x2a/0x420 [ 195.511364][ T7482] security_file_ioctl+0xcb/0x2d0 [ 195.511387][ T7482] __se_sys_ioctl+0x47/0x170 [ 195.511404][ T7482] do_syscall_64+0xfa/0xf80 [ 195.511420][ T7482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.511435][ T7482] ? clear_bhb_loop+0x60/0xb0 [ 195.511453][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.511468][ T7482] RIP: 0033:0x7f22e238f749 [ 195.511483][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.511496][ T7482] RSP: 002b:00007f22e05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.511513][ T7482] RAX: ffffffffffffffda RBX: 00007f22e25e5fa0 RCX: 00007f22e238f749 [ 195.511525][ T7482] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 195.511534][ T7482] RBP: 00007f22e05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.511543][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.511553][ T7482] R13: 00007f22e25e6038 R14: 00007f22e25e5fa0 R15: 00007fffc9c6ddd8 [ 195.511577][ T7482] [ 195.517171][ T7482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.677071][ T5866] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 195.752017][ T7486] vxcan0: tx address claim with dest, not broadcast [ 195.906942][ T5866] usb 1-1: device descriptor read/64, error -71 [ 196.012459][ T7489] NFSD: Failed to start, no listeners configured. [ 196.031638][ T5866] usb usb1-port1: attempt power cycle [ 196.099691][ T3530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.112366][ T3530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.122824][ T3530] bond0 (unregistering): Released all slaves [ 196.129199][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 196.300869][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 196.322151][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.361453][ T9] usb 4-1: config 0 descriptor?? [ 196.379866][ T9] pwc: Philips SPC 900NC USB webcam detected. [ 196.386740][ T5866] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 196.427722][ T5866] usb 1-1: device descriptor read/8, error -71 [ 196.598072][ T9] pwc: Failed to set LED on/off time (-71) [ 196.625410][ T9] pwc: send_video_command error -71 [ 196.659196][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 196.662691][ T7506] trusted_key: syz.2.496 sent an empty control message without MSG_MORE. [ 196.692898][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 196.702635][ T5866] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 196.737005][ T9] usb 4-1: USB disconnect, device number 44 [ 196.759542][ T5866] usb 1-1: device descriptor read/8, error -71 [ 196.816216][ T7477] chnl_net:caif_netlink_parms(): no params data found [ 196.891469][ T5866] usb usb1-port1: unable to enumerate USB device [ 197.022005][ T3530] hsr_slave_0: left promiscuous mode [ 197.031324][ T3530] hsr_slave_1: left promiscuous mode [ 197.038749][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.046651][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.055973][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.056384][ T6050] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 197.066504][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.102180][ T3530] veth1_macvtap: left promiscuous mode [ 197.108199][ T3530] veth0_macvtap: left promiscuous mode [ 197.114121][ T3530] veth1_vlan: left promiscuous mode [ 197.121234][ T3530] veth0_vlan: left promiscuous mode [ 197.226311][ T6050] usb 3-1: Using ep0 maxpacket: 32 [ 197.233214][ T6050] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 197.246946][ T52] Bluetooth: hci2: command tx timeout [ 197.260714][ T6050] usb 3-1: config 0 has no interface number 0 [ 197.270968][ T6050] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 197.283836][ T6050] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 197.294078][ T6050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.302562][ T6050] usb 3-1: Product: syz [ 197.307008][ T5910] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 197.316177][ T6050] usb 3-1: Manufacturer: syz [ 197.322208][ T6050] usb 3-1: SerialNumber: syz [ 197.338158][ T6050] usb 3-1: config 0 descriptor?? [ 197.344144][ T7511] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 197.446194][ T5910] usb 1-1: device descriptor read/64, error -71 [ 197.561879][ T7511] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 197.694456][ T3530] team0 (unregistering): Port device team_slave_1 removed [ 197.706313][ T5910] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 197.746194][ T3530] team0 (unregistering): Port device team_slave_0 removed [ 197.855999][ T5910] usb 1-1: device descriptor read/64, error -71 [ 197.976448][ T5910] usb usb1-port1: attempt power cycle [ 198.109756][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 401 [ 198.312346][ T7477] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.320484][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.329265][ T7477] bridge_slave_0: entered allmulticast mode [ 198.338433][ T7477] bridge_slave_0: entered promiscuous mode [ 198.352725][ T7477] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.366514][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.383031][ T7477] bridge_slave_1: entered allmulticast mode [ 198.392451][ T7477] bridge_slave_1: entered promiscuous mode [ 198.398328][ T6050] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 198.398362][ T6050] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 198.398854][ T6050] asix 3-1:0.188: probe with driver asix failed with error -61 [ 198.502917][ T7477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.517507][ T7477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.608745][ T7477] team0: Port device team_slave_0 added [ 198.618340][ T7477] team0: Port device team_slave_1 added [ 198.690853][ T7477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.699093][ T7477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.725243][ T7477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.742785][ T7477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.750063][ T7477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.777465][ T7477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.846102][ T5910] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 198.856006][ T7477] hsr_slave_0: entered promiscuous mode [ 198.864374][ T7477] hsr_slave_1: entered promiscuous mode [ 198.874469][ T5910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.884931][ T5910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.895011][ T7477] debugfs: 'hsr0' already exists in 'hsr' [ 198.901201][ T7477] Cannot create hsr debugfs directory [ 198.907683][ T5910] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.925322][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.942876][ T5910] usb 1-1: SerialNumber: syz [ 199.171777][ T7529] comedi comedi0: dt2815: a I/O base address must be specified [ 199.187853][ T5910] usb 1-1: 0:2 : does not exist [ 199.224225][ T5910] usb 1-1: USB disconnect, device number 57 [ 199.264654][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.297701][ T7477] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.327763][ T7477] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.337092][ T52] Bluetooth: hci2: command tx timeout [ 199.357764][ T7477] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.378045][ T7477] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.413403][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.563748][ T7477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.594332][ T7477] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.611441][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.618752][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.645045][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.652305][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.715630][ T5910] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 199.834675][ T6744] usb 3-1: USB disconnect, device number 36 [ 199.864896][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 199.888214][ T5910] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 199.909427][ T5910] usb 4-1: config 0 has no interface number 0 [ 199.917225][ T5910] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.929377][ T5910] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 199.942470][ T5910] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.976129][ T5910] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.005069][ T5910] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 200.014168][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.049943][ T5910] usb 4-1: config 0 descriptor?? [ 200.095157][ T5910] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 200.233655][ T7477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.243648][ T7574] NFSD: Failed to start, no listeners configured. [ 200.321402][ T7556] netlink: 68 bytes leftover after parsing attributes in process `syz.3.501'. [ 200.574673][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 200.574759][ T30] audit: type=1800 audit(1764172808.143:71): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.505" name="memory.events" dev="tmpfs" ino=624 res=0 errno=0 [ 200.688406][ T30] audit: type=1804 audit(1764172808.163:72): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.505" name="/newroot/115/memory.events" dev="tmpfs" ino=624 res=1 errno=0 [ 200.697013][ T7592] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.758885][ T7586] kvm: pic: non byte write [ 200.973596][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 401 [ 201.156316][ T7477] veth0_vlan: entered promiscuous mode [ 201.207668][ T7477] veth1_vlan: entered promiscuous mode [ 201.315879][ T7477] veth0_macvtap: entered promiscuous mode [ 201.333128][ T7477] veth1_macvtap: entered promiscuous mode [ 201.364620][ T7477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.387104][ T7477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.414304][ T52] Bluetooth: hci2: command tx timeout [ 201.436072][ T3493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.462373][ T3493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.472699][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 201.499730][ T3493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.539912][ T3493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.636126][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 201.656215][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.681392][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.697526][ T9] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=34.5b [ 201.715150][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.728201][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.759099][ T9] usb 3-1: Product: syz [ 201.763331][ T9] usb 3-1: Manufacturer: syz [ 201.779346][ T9] usb 3-1: SerialNumber: syz [ 201.799697][ T9] usb 3-1: config 0 descriptor?? [ 201.817465][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.829784][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.839241][ T9] usbserial_generic 3-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 201.871680][ T9] usbserial_generic 3-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 201.902704][ T9] usbserial_generic 3-1:0.0: device has no bulk endpoints [ 202.079871][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'. [ 202.117733][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.142058][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.156116][ T9] usb 3-1: USB disconnect, device number 37 [ 202.240169][ T7627] syzkaller0: entered promiscuous mode [ 202.247831][ T7627] syzkaller0: entered allmulticast mode [ 202.390436][ T6744] usb 4-1: USB disconnect, device number 45 [ 202.415148][ T6744] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 202.673928][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 202.737652][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.515'. [ 202.749221][ T7643] FAULT_INJECTION: forcing a failure. [ 202.749221][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 202.768025][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.0.515 Not tainted syzkaller #0 PREEMPT(full) [ 202.768055][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.768069][ T7643] Call Trace: [ 202.768077][ T7643] [ 202.768093][ T7643] dump_stack_lvl+0x189/0x250 [ 202.768126][ T7643] ? __pfx____ratelimit+0x10/0x10 [ 202.768160][ T7643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.768195][ T7643] ? __pfx__printk+0x10/0x10 [ 202.768218][ T7643] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 202.768264][ T7643] should_fail_ex+0x414/0x560 [ 202.768300][ T7643] should_failslab+0xa8/0x100 [ 202.768330][ T7643] kmem_cache_alloc_noprof+0x88/0x710 [ 202.768367][ T7643] ? skb_clone+0x212/0x3a0 [ 202.768397][ T7643] skb_clone+0x212/0x3a0 [ 202.768427][ T7643] __netlink_deliver_tap+0x424/0x8b0 [ 202.768468][ T7643] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.768496][ T7643] netlink_deliver_tap+0x19c/0x1b0 [ 202.768525][ T7643] netlink_sendskb+0x68/0x140 [ 202.768549][ T7643] netlink_unicast+0x397/0x9e0 [ 202.768570][ T7643] ? __asan_memcpy+0x40/0x70 [ 202.768600][ T7643] ? __pfx_netlink_unicast+0x10/0x10 [ 202.768635][ T7643] netlink_rcv_skb+0x28c/0x470 [ 202.768663][ T7643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.768698][ T7643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.768745][ T7643] ? down_read+0x274/0x2e0 [ 202.768767][ T7643] ? genl_rcv+0xd/0x40 [ 202.768800][ T7643] genl_rcv+0x28/0x40 [ 202.768830][ T7643] netlink_unicast+0x82f/0x9e0 [ 202.768863][ T7643] ? __pfx_netlink_unicast+0x10/0x10 [ 202.768888][ T7643] ? netlink_sendmsg+0x642/0xb30 [ 202.768912][ T7643] ? skb_put+0x11b/0x210 [ 202.768939][ T7643] netlink_sendmsg+0x805/0xb30 [ 202.768965][ T7643] ? aa_sk_perm+0x15f/0x920 [ 202.769006][ T7643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.769036][ T7643] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 202.769074][ T7643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.769099][ T7643] sock_sendmsg_nosec+0x18f/0x1d0 [ 202.769138][ T7643] ____sys_sendmsg+0x577/0x880 [ 202.769180][ T7643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.769215][ T7643] ? import_iovec+0x74/0xa0 [ 202.769242][ T7643] ___sys_sendmsg+0x21f/0x2a0 [ 202.769269][ T7643] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.769302][ T7643] ? rcu_read_lock_any_held+0xb3/0x120 [ 202.769362][ T7643] ? __fget_files+0x2a/0x420 [ 202.769396][ T7643] ? __fget_files+0x3a0/0x420 [ 202.769438][ T7643] __x64_sys_sendmsg+0x19b/0x260 [ 202.769466][ T7643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.769503][ T7643] ? __pfx_ksys_write+0x10/0x10 [ 202.769530][ T7643] ? do_syscall_64+0xbe/0xf80 [ 202.769556][ T7643] do_syscall_64+0xfa/0xf80 [ 202.769578][ T7643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.769600][ T7643] ? clear_bhb_loop+0x60/0xb0 [ 202.769627][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.769649][ T7643] RIP: 0033:0x7ff2cf78f749 [ 202.769668][ T7643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.769687][ T7643] RSP: 002b:00007ff2d0673038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.769710][ T7643] RAX: ffffffffffffffda RBX: 00007ff2cf9e5fa0 RCX: 00007ff2cf78f749 [ 202.769726][ T7643] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 202.769739][ T7643] RBP: 00007ff2d0673090 R08: 0000000000000000 R09: 0000000000000000 [ 202.769753][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.769765][ T7643] R13: 00007ff2cf9e6038 R14: 00007ff2cf9e5fa0 R15: 00007fff96a7ed08 [ 202.769800][ T7643] [ 202.846551][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.993673][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 401 [ 203.141409][ T5916] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 203.162349][ T9] usb 5-1: config 0 has no interface number 0 [ 203.203986][ T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 203.239544][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.279384][ T9] usb 5-1: Product: syz [ 203.286554][ T9] usb 5-1: Manufacturer: syz [ 203.291593][ T9] usb 5-1: SerialNumber: syz [ 203.304551][ T9] usb 5-1: config 0 descriptor?? [ 203.308132][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 203.320360][ T5916] usb 3-1: too many configurations: 229, using maximum allowed: 8 [ 203.337005][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 203.359416][ T5916] usb 3-1: can't read configurations, error -61 [ 203.483284][ T52] Bluetooth: hci2: command tx timeout [ 203.503137][ T5916] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 203.524497][ T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 203.536366][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.548341][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 203.560767][ T9] usb 5-1: media controller created [ 203.572442][ T5866] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 203.598128][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.663385][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 203.671058][ T5916] usb 3-1: too many configurations: 229, using maximum allowed: 8 [ 203.681434][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 203.689155][ T5916] usb 3-1: can't read configurations, error -61 [ 203.696351][ T5916] usb usb3-port1: attempt power cycle [ 203.740157][ T5866] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 203.740589][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.751578][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.758456][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.776607][ T5866] usb 1-1: Product: syz [ 203.780923][ T5866] usb 1-1: Manufacturer: syz [ 203.797406][ T5866] usb 1-1: SerialNumber: syz [ 203.802430][ T9] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 203.865078][ T9] usb 5-1: USB disconnect, device number 2 [ 203.874232][ T5923] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 204.021511][ T5866] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 204.034547][ T5866] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 204.046611][ T5866] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 204.053023][ T5916] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 204.065447][ T5866] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 204.076549][ T5923] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.089638][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.093537][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 204.099451][ T5923] usb 4-1: Product: syz [ 204.107349][ T5923] usb 4-1: Manufacturer: syz [ 204.111976][ T5923] usb 4-1: SerialNumber: syz [ 204.113592][ T5916] usb 3-1: too many configurations: 229, using maximum allowed: 8 [ 204.133846][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 204.141539][ T5916] usb 3-1: can't read configurations, error -61 [ 204.283092][ T5916] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 204.303599][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 204.309566][ T5916] usb 3-1: too many configurations: 229, using maximum allowed: 8 [ 204.332670][ T5916] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 204.340346][ T5916] usb 3-1: can't read configurations, error -61 [ 204.348603][ T5916] usb usb3-port1: unable to enumerate USB device [ 204.469548][ T7667] veth1_macvtap: entered allmulticast mode [ 204.533083][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 204.545266][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 204.868809][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 401 [ 205.222247][ T6744] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 205.373983][ T6744] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.384300][ T6744] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 205.393443][ T6744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.405282][ T6744] usb 5-1: config 0 descriptor?? [ 205.422319][ T6744] pwc: Askey VC010 type 2 USB webcam detected. [ 205.828609][ T6744] pwc: recv_control_msg error -32 req 02 val 2b00 [ 205.839001][ T6744] pwc: recv_control_msg error -32 req 02 val 2700 [ 205.846378][ T6744] pwc: recv_control_msg error -32 req 02 val 2c00 [ 205.853950][ T6744] pwc: recv_control_msg error -32 req 04 val 1000 [ 205.880397][ T7680] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 205.891945][ T6744] pwc: recv_control_msg error -32 req 04 val 1300 [ 205.904890][ T6744] pwc: recv_control_msg error -32 req 04 val 1400 [ 205.912446][ T6744] pwc: recv_control_msg error -32 req 02 val 2000 [ 205.922007][ T6744] pwc: recv_control_msg error -32 req 02 val 2100 [ 205.929263][ T6744] pwc: recv_control_msg error -32 req 04 val 1500 [ 205.939075][ T6744] pwc: recv_control_msg error -32 req 02 val 2500 [ 205.946586][ T6744] pwc: recv_control_msg error -32 req 02 val 2400 [ 205.966072][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 206.002819][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 206.045140][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 206.086036][ T7687] NFSD: Failed to start, no listeners configured. [ 206.093086][ T5923] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 206.127093][ T5923] usb 4-1: USB disconnect, device number 46 [ 206.333387][ T5910] usb 1-1: USB disconnect, device number 58 [ 206.386227][ T6744] pwc: recv_control_msg error -71 req 02 val 2600 [ 206.397948][ T6744] pwc: recv_control_msg error -71 req 02 val 2900 [ 206.410747][ T6744] pwc: recv_control_msg error -71 req 02 val 2800 [ 206.424612][ T6744] pwc: recv_control_msg error -71 req 04 val 1100 [ 206.434137][ T6744] pwc: recv_control_msg error -71 req 04 val 1200 [ 206.464126][ T6744] pwc: Registered as video103. [ 206.496305][ T6744] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 206.581876][ T6744] usb 5-1: USB disconnect, device number 3 [ 206.824132][ T7701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.534'. [ 206.864630][ T52] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 206.865024][ T52] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 207.085103][ T7715] netlink: 'syz.4.536': attribute type 4 has an invalid length. [ 207.101273][ T7715] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 207.109062][ T7715] netlink: 228 bytes leftover after parsing attributes in process `syz.4.536'. [ 207.531421][ T7702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 207.539312][ T7702] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.545720][ T7702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.552187][ T7702] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.559700][ T7702] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 207.568042][ T7702] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 207.803838][ T7731] NFSD: Failed to start, no listeners configured. [ 207.823182][ T6744] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 207.900888][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 207.980788][ T6744] usb 4-1: Using ep0 maxpacket: 8 [ 207.987340][ T6744] usb 4-1: config index 0 descriptor too short (expected 60, got 18) [ 207.995746][ T6744] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 208.004121][ T6744] usb 4-1: config 0 has no interface number 0 [ 208.010252][ T6744] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 208.019453][ T6744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.030642][ T6744] usb 4-1: config 0 descriptor?? [ 208.045214][ T6744] ftdi_sio 4-1:0.130: FTDI USB Serial Device converter detected [ 208.055642][ T6744] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 208.079355][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 208.090167][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.104401][ T9] usb 3-1: Product: syz [ 208.109255][ T9] usb 3-1: Manufacturer: syz [ 208.117319][ T9] usb 3-1: SerialNumber: syz [ 208.339676][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 208.351929][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 208.364813][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 208.378084][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 208.420611][ T6744] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 208.595696][ T6744] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 208.615732][ T6744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.633510][ T6744] usb 1-1: Product: syz [ 208.640615][ T6744] usb 1-1: Manufacturer: syz [ 208.645267][ T6744] usb 1-1: SerialNumber: syz [ 208.710482][ T7746] FAULT_INJECTION: forcing a failure. [ 208.710482][ T7746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.723792][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.4.545 Not tainted syzkaller #0 PREEMPT(full) [ 208.723813][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.723823][ T7746] Call Trace: [ 208.723830][ T7746] [ 208.723837][ T7746] dump_stack_lvl+0x189/0x250 [ 208.723865][ T7746] ? __pfx____ratelimit+0x10/0x10 [ 208.723895][ T7746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.723914][ T7746] ? __pfx__printk+0x10/0x10 [ 208.723933][ T7746] ? __might_fault+0xb0/0x130 [ 208.723966][ T7746] should_fail_ex+0x414/0x560 [ 208.723992][ T7746] _copy_from_iter+0x1cd/0x1630 [ 208.724021][ T7746] ? __build_skb_around+0x22d/0x3c0 [ 208.724040][ T7746] ? __pfx__copy_from_iter+0x10/0x10 [ 208.724062][ T7746] ? __alloc_skb+0x2f1/0x430 [ 208.724078][ T7746] ? __pfx___alloc_skb+0x10/0x10 [ 208.724094][ T7746] ? netlink_sendmsg+0x642/0xb30 [ 208.724112][ T7746] ? skb_put+0x11b/0x210 [ 208.724129][ T7746] netlink_sendmsg+0x6b2/0xb30 [ 208.724148][ T7746] ? aa_sk_perm+0x15f/0x920 [ 208.724176][ T7746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.724197][ T7746] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 208.724220][ T7746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.724237][ T7746] sock_sendmsg_nosec+0x18f/0x1d0 [ 208.724261][ T7746] ____sys_sendmsg+0x577/0x880 [ 208.724285][ T7746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.724308][ T7746] ? import_iovec+0x74/0xa0 [ 208.724356][ T7746] ___sys_sendmsg+0x21f/0x2a0 [ 208.724376][ T7746] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.724397][ T7746] ? rcu_read_lock_any_held+0xb3/0x120 [ 208.724439][ T7746] ? __fget_files+0x2a/0x420 [ 208.724459][ T7746] ? __fget_files+0x3a0/0x420 [ 208.724498][ T7746] __x64_sys_sendmsg+0x19b/0x260 [ 208.724525][ T7746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.724562][ T7746] ? __pfx_ksys_write+0x10/0x10 [ 208.724582][ T7746] ? do_syscall_64+0xbe/0xf80 [ 208.724601][ T7746] do_syscall_64+0xfa/0xf80 [ 208.724616][ T7746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.724632][ T7746] ? clear_bhb_loop+0x60/0xb0 [ 208.724651][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.724669][ T7746] RIP: 0033:0x7f9c7bb8f749 [ 208.724684][ T7746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.724698][ T7746] RSP: 002b:00007f9c7c9dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.724714][ T7746] RAX: ffffffffffffffda RBX: 00007f9c7bde5fa0 RCX: 00007f9c7bb8f749 [ 208.724726][ T7746] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 208.724735][ T7746] RBP: 00007f9c7c9dc090 R08: 0000000000000000 R09: 0000000000000000 [ 208.724745][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.724754][ T7746] R13: 00007f9c7bde6038 R14: 00007f9c7bde5fa0 R15: 00007ffd451756f8 [ 208.724778][ T7746] [ 209.006696][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.246010][ T6744] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 209.257929][ T6744] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 209.430097][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 209.560134][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.560157][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.561343][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.584587][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.593508][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.606178][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 209.615258][ T10] usb 5-1: config 1 has no interface number 1 [ 209.621512][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 209.634905][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.653053][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.664408][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.681727][ T10] usb 5-1: Product: syz [ 209.695042][ T10] usb 5-1: Manufacturer: syz [ 209.720348][ T5923] usb 4-1: USB disconnect, device number 47 [ 209.731677][ T5923] ftdi_sio 4-1:0.130: device disconnected [ 209.765115][ T10] usb 5-1: SerialNumber: syz [ 210.109837][ T5923] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 210.273711][ T5923] usb 4-1: config index 0 descriptor too short (expected 215, got 45) [ 210.285712][ T5923] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 210.295223][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.304210][ T5923] usb 4-1: Product: syz [ 210.308456][ T5923] usb 4-1: Manufacturer: syz [ 210.313165][ T5923] usb 4-1: SerialNumber: syz [ 210.534322][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 210.684478][ T6744] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 210.702667][ T6744] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 210.713072][ T6744] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 210.722933][ T5866] usb 3-1: USB disconnect, device number 42 [ 210.725535][ T6744] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 210.748576][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 210.761751][ T6744] usb 1-1: USB disconnect, device number 59 [ 210.770567][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 210.805102][ T6030] udevd[6030]: setting mode of /dev/bus/usb/001/059 to 020664 failed: No such file or directory [ 210.824393][ T6030] udevd[6030]: setting owner of /dev/bus/usb/001/059 to uid=0, gid=0 failed: No such file or directory [ 211.476784][ T7783] netlink: 'syz.0.555': attribute type 1 has an invalid length. [ 211.484823][ T7783] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.555'. [ 211.638989][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.004897][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 212.031530][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 212.048505][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 212.064883][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 212.077063][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 212.090281][ T5923] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 212.123929][ T5923] usb 4-1: USB disconnect, device number 48 [ 212.199342][ T10] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 212.230557][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 212.373651][ T10] usb 5-1: USB disconnect, device number 4 [ 212.442485][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.701425][ T7806] overlay: Unknown parameter '/' [ 212.844248][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 212.868363][ T933] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 213.013950][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 213.026146][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.034821][ T10] usb 5-1: Product: syz [ 213.040111][ T10] usb 5-1: Manufacturer: syz [ 213.044841][ T10] usb 5-1: SerialNumber: syz [ 213.052290][ T6744] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 213.068837][ T933] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 213.079752][ T933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.091140][ T933] usb 4-1: Product: syz [ 213.095371][ T933] usb 4-1: Manufacturer: syz [ 213.100730][ T933] usb 4-1: SerialNumber: syz [ 213.218228][ T6744] usb 1-1: device descriptor read/64, error -71 [ 213.270464][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 213.298146][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 213.329813][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 213.344716][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 213.458151][ T6744] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 213.532544][ T933] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 213.546281][ T933] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 213.598375][ T6744] usb 1-1: device descriptor read/64, error -71 [ 213.708598][ T6744] usb usb1-port1: attempt power cycle [ 213.718220][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 214.051198][ T6744] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 214.088766][ T6744] usb 1-1: device descriptor read/8, error -71 [ 214.099385][ T7853] mmap: syz.2.567 (7853) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 214.329392][ T6744] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 214.368936][ T6744] usb 1-1: device descriptor read/8, error -71 [ 214.478265][ T6744] usb usb1-port1: unable to enumerate USB device [ 214.832641][ T7884] ªªªªªª: renamed from vlan0 (while UP) [ 214.848058][ T7884] kAFS: Can only specify source 'none' with -o dyn [ 214.970323][ T933] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 214.991382][ T933] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 215.002282][ T933] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 215.023469][ T933] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 215.045342][ T933] usb 4-1: USB disconnect, device number 49 [ 215.290893][ T7899] orangefs_devreq_write_iter: total:8239: must be at least:8240: [ 215.388517][ T10] usb 5-1: USB disconnect, device number 5 [ 215.588567][ T5923] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 215.763008][ T5923] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 215.775317][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.789519][ T5923] usb 3-1: config 0 descriptor?? [ 215.798468][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.808719][ T5923] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 215.820352][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 215.908844][ T7910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.071605][ T7910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.117856][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 216.128005][ T10] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 216.140489][ T10] usb 4-1: config 0 has no interface number 0 [ 216.159305][ T10] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 216.185005][ T10] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 216.198143][ T7910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.209155][ T10] usb 4-1: config 0 interface 126 has no altsetting 0 [ 216.219316][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.235760][ T5923] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 216.245089][ T5923] usb 3-1: media controller created [ 216.251561][ T10] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 216.267669][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.285950][ T10] usb 4-1: Product: syz [ 216.312119][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.321267][ T10] usb 4-1: Manufacturer: syz [ 216.325921][ T10] usb 4-1: SerialNumber: syz [ 216.337454][ T7910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.359124][ T10] usb 4-1: config 0 descriptor?? [ 216.387998][ T7908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.399829][ T5923] gp8psk_fe: Frontend attached [ 216.409896][ T7908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.428681][ T5923] usb 3-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 216.446803][ T5923] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 216.504209][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.533409][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.557794][ T5923] gp8psk: usb in 138 operation failed. [ 216.563684][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.572068][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 216.572091][ T5923] gp8psk: found Genpix USB device pID = 203 (hex) [ 216.579362][ T5923] usb 3-1: USB disconnect, device number 43 [ 216.608207][ T4268] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.760647][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 216.808487][ T7918] [ 216.810850][ T7918] ================================================ [ 216.817353][ T7918] WARNING: lock held when returning to user space! [ 216.823879][ T7918] syzkaller #0 Not tainted [ 216.828299][ T7918] ------------------------------------------------ [ 216.834796][ T7918] syz.4.580/7918 is leaving the kernel with locks still held! [ 216.842250][ T7918] 1 lock held by syz.4.580/7918: [ 216.847186][ T7918] #0: ffff88805bc08420 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 217.046319][ T5866] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 217.067940][ T10] ir_usb 4-1:0.126: IR Dongle converter detected [ 217.074835][ T10] usb 4-1: IRDA class descriptor not found, device not bound [ 217.090592][ T10] usb 4-1: USB disconnect, device number 50 [ 217.197870][ T5866] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.207209][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.216768][ T5866] usb 1-1: config 0 descriptor?? [ 217.228700][ T5866] cp210x 1-1:0.0: cp210x converter detected [ 217.625820][ T5866] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 217.636598][ T5866] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 217.644765][ T5866] usb 1-1: cp210x converter now attached to ttyUSB0 [ 217.846532][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.855225][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.907087][ T5891] usb 1-1: USB disconnect, device number 64 [ 217.914901][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.926234][ T5891] cp210x 1-1:0.0: device disconnected