last executing test programs: 6.387684209s ago: executing program 3 (id=421): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.998385735s ago: executing program 0 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (fail_nth: 4) 5.563086446s ago: executing program 0 (id=423): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001640)={0x0, &(0x7f0000001140)=[@wr_drn={0x68, 0x20, {0x4, 0x5}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18}, @out_dx={0x6a, 0x28, {0x4f3, 0x1, 0x5}}, @rdmsr={0x66, 0x18, {0x19d}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4800, 0x48, 0x3, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x55f, 0x7, 0x3, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x4, 0xc000}}, @nested_create_vm={0x12d, 0x18}, @code={0xa, 0x4a, {"460ffb420a66470f388158010f01c2410f3566b8c5000f00d866b843008ec0660f3822200f01dfc3b9130a0000b800000000ba008000000f30"}}, @in_dx={0x69, 0x20, {0x698, 0xa}}, @out_dx={0x6a, 0x28, {0xbaed, 0x1, 0x3ff}}, @nested_load_code={0x12e, 0x6b, {0x2, "66b888008ec0c74424009f000000c744240200000000ff1c2466baf80cb8b3e3688bef66bafc0cb000ee67430f00dfc4017e6f200f01f8c42101e3b9de14000045efb8010000000f01d9c442792dbe0f000000"}}, @wr_drn={0x68, 0x20, {0x3, 0x101}}, @code={0xa, 0x5f, {"f30fc7b431455f4ef240d9a703000000f3410f0965400f01d1c4420d2f16c401f82b5bc3c744240000000080c744240200080000c7442406000000000f011c240fc76a00c4e179292ff2420fd02a"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x482e, 0x6, 0x4, 0x5}}, @cpuid={0x64, 0x18, {0x9, 0x10}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xa4, 0xfffffffffffffffc, 0x7, 0x1}}, @wrmsr={0x65, 0x20, {0x3fe, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x2, 0x7ff, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x8, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_code={0x12e, 0x65, {0x2, "b9c30d0000b800000100ba000000000f3066410f38f8587766b853008ec0c4221d2872af1d0100000066b83c010f00d80f1a4f4966b89d000f00d866baf80cb82a280089ef66bafc0c66eddce6"}}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @wr_drn={0x68, 0x20, {0x6, 0x3}}, @rdmsr={0x66, 0x18, {0xa2a}}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x4e9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.559588801s ago: executing program 1 (id=424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000200)={0x14, &(0x7f0000000440)={0x0, 0x30, 0x56, {0x56, 0x11, "04de3059f9ca0ef26481c5246dbb144d62a119ddf31271232af1f66d55b3e122af214932d4908521a489c39a8a4b21935b444b374ba676b52dc151e602ab4a62d11723094b20ed85818cfe1a1daac3028d134cc6"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x7, 0x7, "e5f78ec8c5ce75"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x55, {0x53, "131e8a76d51c075df01555e0dd81ef0d4b7013c073920df1124d946238f1faa00eeb739c0135384a7b6ce115f2bf4ae143c835bacdf2f14b24c97d05fd99c7563b2d08ebf2505699a356a5c2cb6013cd148125"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 5.117959228s ago: executing program 3 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x134}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r4, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$read(0x3f, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f00000000c0)=0x17}) 4.611303263s ago: executing program 3 (id=426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="401505"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_control_io(r0, 0x0, 0x0) (async) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) (async, rerun: 32) close_range(r2, 0xffffffffffffffff, 0x0) (rerun: 32) write$hidraw(r1, &(0x7f0000000f00)="49a72b", 0x4000) 4.448960876s ago: executing program 0 (id=427): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 4.267895239s ago: executing program 0 (id=428): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="40310100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.827835333s ago: executing program 3 (id=429): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x0, 0x0, 0x32314147}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x2, 0x4, 0x8}}}}, 0xd) 3.429166059s ago: executing program 3 (id=430): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 3.176720077s ago: executing program 2 (id=431): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 2.835550486s ago: executing program 2 (id=432): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x16, 0x0, 0x0, 0x0}], 0x1}) 2.25094252s ago: executing program 1 (id=433): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0", 0x8}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="2017060000003eff01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* rm'], 0x9) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f0000000300)="c74424001aeff23bc7442402c4c57882c7442406000000000f011c24b8080000000f23c80f21f835080030000f23f8b9800000c00f3235010000000f300f0fa500000000ae66ba2000b830000000ef2f66ba2000b06bee3e0f30160f781d00000000", 0x62}], 0x1, 0x40, &(0x7f0000000680)=[@dstype0={0x6, 0xf}], 0x1) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000700)=0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000900)={0x0, @nfc={0x27, r6, 0x3, 0x5}, @generic={0x1f, "7285a2c424121024d859be9ff4a8"}, @can, 0x81, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)='macsec0\x00', 0x0, 0x7}) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r7, &(0x7f0000002940)=[{&(0x7f0000002680)=""/236, 0xec}], 0x1, 0x2, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$sock(r8, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000ac0)="7952938a84bbd36576cc14a01743ec91fce6b75a378958ccd2d9344e263f043493e709a2c36132fe30d8b9ddfb831a0795e3dcf2fbb9b0d81c31059e93ea4d9fe08f8d042914e395f01a76c36409837de13eb36b319c356259c0819f35789014834e0ef44aeb0298d6a39143423a5fe42c9ee37c5fdb4e2ff2b774f00e97448da8fba94c763e0a77649f92bc3a182bb63a9f1da2831167051b0ee1d0f52b7744355083e300157c406b05ebf4af2aab2c4a5eb18a80a119d1dc80d7234546b6dfb550ab928a3979b3d4fd7c1f43ab275587021229fc1ed50a229351", 0xdb}, {&(0x7f0000000c40)="126978742ce12fd9d2088763ee35341995c8d572917f3e4ab1262be7981f6010b4d5f27af4b3e4f7025f96bfeeacb4b12bec9ce381cbaaecd007b3ce962df3a61364fd6981ba413d7115", 0x4a}, {&(0x7f0000000d40)="4adf8ac71a448517bd3dd0f168785798b4bcb5effc0b5182c0863ea94aafc393eacf19ea66537921377c19f9f6091522d520a02bdb20683cda686edb7d18dc147c3b5b63c004de0c366de4a4a53ebe0fcf5bb165647df3e1df074c9ff1c8cf2b42a5f3a1c33fbb3a5b66d671c5eb7a103a4141b6bc5faa26d58e35c063967aad55a11652410e1013f6dcd96c679b7adc8b55d8cfe86c5760d156036237873695ac8bf607ea98e6f0694de514", 0xac}, {&(0x7f0000001400)="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", 0x1000}], 0x4, &(0x7f0000002440)=[@txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0xb8}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xec000}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x101}}], 0xc0}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="d567b1c134b931a0bebb5adac3ca3ea8640db203f0", @ANYRES32=r0, @ANYRESOCT=r10], 0x6f4}}, 0x0) 1.671891741s ago: executing program 1 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000"], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x20000) 1.499197317s ago: executing program 2 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x100, 0x93, &(0x7f00000000c0)="97b21d917b9e17b658d807e7d6d6228f2831cb55a89105dd6f4afb422e1553f66ba3382564021009077ffd263b0cc98d397418849846f96959616cbea6351dc465bbd6df174aca9456fce2eaf1f9221be6301b6a8b7d203d66dfed141da46dcf5d91e33f187497f75e778f31cc76d76ad42d1b0cc4cd55942eede5c826a465a633c2ad2622cebd1db380214d32dd3379e644b2", 0xa1, 0x10, 0x9, 0x8, 0x8, 0x0, 0x7, 'syz0\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe64, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x50) 1.443844427s ago: executing program 1 (id=436): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 1.431918372s ago: executing program 2 (id=437): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) (fail_nth: 4) 1.05549095s ago: executing program 2 (id=438): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x0, 0x0, 0x32314147}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x2, 0x4, 0x8}}}}, 0xd) 1.043192014s ago: executing program 0 (id=439): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = socket(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0xf0ff, @local, 0x8a}, 0x1c) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, 0x0, 0xfdef) 944.576812ms ago: executing program 0 (id=440): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x24, 0x5b, {0x5b, 0x23, "78342bc4fda81193213cc21abb84fecb751ea617a533ccd6629c17e5b8dbf8aa8bd40b6a5b52a7c5e31f1c604334a9fb53da857bb1d5395cf7411dd2c4a181cc3e52fe629f90de921f9e0983e6141fdd4467f74b28a9076155"}}, &(0x7f0000000080)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "f4c5bc57b116dad5d9f1466c47fa6bcd09413a4f30693c020ec324b5c8c93f38985d351bb0b012ac1da9dcd5934bbaadc1ced9549c62336c7e599a7a9e7cdef2a4c00bd8830b6e90631bdc2557378a239ea76fec29519426732a448a89fff7841307094f2ec0223ee9120e37c0f54af4810a819a3f634a8fc4"}}}, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x20, 0x14, 0x17, "d21fe4b3448b1f984c6f2d4aa1e557d068c655b3fe95b4"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000240)={0x20, 0x81, 0x2, "53ee"}, &(0x7f0000000280)={0x20, 0x82, 0x3, "911c4c"}, &(0x7f00000002c0)={0x20, 0x83, 0x2, '[g'}, &(0x7f0000000300)={0x20, 0x84, 0x4, "c7ceb14f"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "5a37a5"}}) syz_usb_control_io$uac3(r0, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x20, 0xe17378de912e9e7f, 0xdb, {0xdb, 0x9, "22b31c46dfb590102fb8ccbbdd3b7b97b13d853d7faad543912756f5ca4aed79b40ef5c6d6102c830cc7d4863d9fb3e526e50c5f96968bc79a9b5e324134498489d4c7252384dea84664224bfb75720e6dc8a4cffedd957bb3564ed3c5928ad5e68d156eb2c858627d3bdad4546fb88b8798ff938b0a71e7467db6c1ff64aedfd238453750225e3a8cbee71f93669932cfc92b5d1b56aec5762069765f58c669a2e999231a652948ef0fcc8e029e471280b32a7ae3ffad4217833fb1052966786d0a18f17e07d58f7b3d1284c7ce4a1742932f2770eb6eb98e"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x40, 0x3, 0xd4, "7c0a6b81b83afbc017c258e61cd94f528bf04be27e51da8009df75bd23a1ad62f05bfb863411674095594e195ebb6ceffe1525226ae9f0051ee8dacb297327123be8bf7e1212ab1e41788cd243b5b3eb0bce4459861cbac5365e0d241d65a1b06de7e5ee8a4d74d4adfda636ef9ce61961c8752c172d8ad5fd909477c44bc24422c830a091ac21cf665c72f1d9f7516c521486f7fb4e95181bd546085b06eb287ac5564454af1749447ce7d53af0eaf97f24e23750b3f5299d0e68f3bd9504a526e1b38d9ada215281101745560957e5cd3a22e7"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x10}, &(0x7f00000007c0)={0x20, 0x81, 0x3, "3a807d"}, &(0x7f0000000800)={0x20, 0x82, 0x3, "630483"}, &(0x7f0000000840)={0x20, 0x83, 0x1, "da"}, &(0x7f0000000880)={0x20, 0x84, 0x3, "997983"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "0c71c7"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 887.306823ms ago: executing program 1 (id=441): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 835.1634ms ago: executing program 2 (id=442): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300090c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b632009090400"], 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv(r1, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/202, 0xca}], 0x1, 0x70, 0x9) (async, rerun: 64) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000017c0)={&(0x7f0000001740)=[{0x8, 0x1000, 0x1000, &(0x7f0000000380)="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"}, {0xd9a0, 0x400, 0x5d, &(0x7f0000001380)="fabb1fd4582024633c7f5842525a1dd92fc739d34ca439ccae72d2d09c6ff1b1a05087bbff42db90dddbec3dc74a6cfbbe9f60f2ca41e161825fa17ff01782c392377533645545624da41fdf3f26742288911a3b646fbfdfae54111ae9"}, {0x7, 0x2600, 0x2d, &(0x7f0000001400)="b24bf47967b90ebdff0a13c1854d56fe15fe4a6a78017b88d2a2dc5c7542846cb1e8421a78ecefa1f0bc06914a"}, {0x29, 0xa000, 0x4, &(0x7f0000001440)="85ea2269"}, {0x20ab, 0x8000, 0x9d, &(0x7f0000001480)="8d5bb9867600e7e24560a2d58518c591978cb778f029b82cd55e6ead94d8354b3eda5494019247cb51159504420758873a41e6a231eebebd5703a49aff2d43e121fd77bd8d157b392523e29004d80afa5b9f34bebbb7ce2c1ce4514b6a10bbf4fad3e2eefa251ff5b18d6e06a830feccc39fc74a4c54fabc96061eee21e11ef28d26455faa2debe63d2080deb15f8f5db3b9ca92d8c5c11c1e8d239938"}, {0x7ec, 0x5c01, 0xe3, &(0x7f0000001540)="85cb2afc1b99f3a1cc9d73980f86e3cf13c9a1a8f56e5ae0c756572b354a1c868fc50cb63ce548aa6088ec801fcf8f1287beedf9a6e2f506703b88fd57766bf50fd04eb7cb333b535e5310d427b70ec950feec7ddf3e4617904038e86cbc077e77b0ffb5720632c9ec223d77af48643c8a5297e1aea26aab3edf60f9c73b87357060f06d01c4b47eb61e0f3682bfb5bdfe4109fd950779d9c0bad9c121d3c87635144afc669276bab9becf82370cec8d5af1cfecaa302108832126c0edfea5e4d40512aeabb25dfa106e9822537aa35a654cbf3f5d44e31b31b7d2b00ed6a3c1a0ff94"}, {0xd, 0x2408, 0x59, &(0x7f0000001640)="cb381c6e72cb979f08af1bfaff8f5260fb4045eb7cb3be83a96b602e040617b44e0835d97041bf7d44246b44af18c5d04efe5f7200c974b12f603f390ae2720d9c03c470459bbedcc4c1f325cf98224334b7db30f6ec319dfa"}, {0x0, 0x5800, 0x70, &(0x7f00000016c0)="165b360b725de90bb286198093468ab2c79ae6338c8d149b502759d346a9c31b53c82830b3323e53ab6bef0936b6a5e0866aa06a8d929f515266799ac4f12f62eaa86b13274ff005fca9d7cc0e7fd52642e482af7328600a5c68a68f2f94a2925d165345b28b3ef28f96991008b9d69e"}], 0x8}) (rerun: 64) 704.172954ms ago: executing program 1 (id=443): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x16, 0x0, 0x0, 0x0}], 0x1}) 0s ago: executing program 3 (id=444): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='\x03') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): LL_64_after_hwframe+0x77/0x7f [ 190.378900][ T6695] RIP: 0033:0x7ff32d0ac819 [ 190.378921][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.378940][ T6695] RSP: 002b:00007ff32b2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.378962][ T6695] RAX: ffffffffffffffda RBX: 00007ff32d325fa0 RCX: 00007ff32d0ac819 [ 190.378978][ T6695] RDX: 0000200000000040 RSI: 00000000c0145b0d RDI: 0000000000000004 [ 190.378991][ T6695] RBP: 00007ff32b2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 190.379002][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.379012][ T6695] R13: 00007ff32d326038 R14: 00007ff32d325fa0 R15: 00007fff21ed0d18 [ 190.379040][ T6695] [ 190.412125][ T5983] usb 4-1: USB disconnect, device number 22 [ 190.860190][ T5983] usb 3-1: USB disconnect, device number 34 [ 191.287177][ T5983] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 191.318091][ T6708] hugetlbfs: Bad value 'm' for mount option 'nr_inodes' [ 191.318091][ T6708] [ 191.442977][ T5983] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 191.443009][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.443040][ T5983] usb 3-1: Product: syz [ 191.443054][ T5983] usb 3-1: Manufacturer: syz [ 191.443069][ T5983] usb 3-1: SerialNumber: syz [ 191.500121][ T5983] usb 3-1: config 0 descriptor?? [ 191.521702][ T5983] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 191.661410][ T6716] FAULT_INJECTION: forcing a failure. [ 191.661410][ T6716] name failslab, interval 1, probability 0, space 0, times 0 [ 191.661445][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.3.273 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.661469][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.661482][ T6716] Call Trace: [ 191.661490][ T6716] [ 191.661500][ T6716] dump_stack_lvl+0xe8/0x150 [ 191.661529][ T6716] should_fail_ex+0x46b/0x600 [ 191.661568][ T6716] should_failslab+0xa8/0x100 [ 191.661602][ T6716] kmem_cache_alloc_noprof+0x87/0x680 [ 191.661633][ T6716] ? sctp_chunkify+0x5a/0x260 [ 191.661663][ T6716] sctp_chunkify+0x5a/0x260 [ 191.661690][ T6716] _sctp_make_chunk+0x122/0x290 [ 191.661720][ T6716] sctp_make_heartbeat+0xc5/0x4c0 [ 191.661752][ T6716] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 191.661779][ T6716] ? is_bpf_text_address+0x26/0x2b0 [ 191.661812][ T6716] ? is_bpf_text_address+0x292/0x2b0 [ 191.661841][ T6716] ? is_bpf_text_address+0x26/0x2b0 [ 191.661874][ T6716] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 191.661914][ T6716] sctp_do_sm+0x238/0x5cf0 [ 191.661946][ T6716] ? __pfx_sctp_pname+0x10/0x10 [ 191.661981][ T6716] ? try_to_take_rt_mutex+0x840/0xb00 [ 191.662022][ T6716] ? __pfx_sctp_do_sm+0x10/0x10 [ 191.662058][ T6716] ? __lock_acquire+0x6b5/0x2cf0 [ 191.662133][ T6716] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.662165][ T6716] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 191.662202][ T6716] sctp_apply_peer_addr_params+0xdf/0x1880 [ 191.662251][ T6716] sctp_setsockopt_peer_addr_params+0x46f/0x6b0 [ 191.662292][ T6716] sctp_setsockopt+0x752/0x12c0 [ 191.662329][ T6716] ? sock_common_setsockopt+0x36/0xc0 [ 191.662356][ T6716] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.662385][ T6716] do_sock_setsockopt+0x17c/0x1b0 [ 191.662417][ T6716] __x64_sys_setsockopt+0x143/0x1b0 [ 191.662448][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.662472][ T6716] do_syscall_64+0x15f/0xf80 [ 191.662498][ T6716] ? trace_irq_disable+0x3b/0x140 [ 191.662526][ T6716] ? clear_bhb_loop+0x40/0x90 [ 191.662554][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.662576][ T6716] RIP: 0033:0x7ff32d0ac819 [ 191.662595][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.662613][ T6716] RSP: 002b:00007ff32b2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.662636][ T6716] RAX: ffffffffffffffda RBX: 00007ff32d325fa0 RCX: 00007ff32d0ac819 [ 191.662651][ T6716] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 191.662664][ T6716] RBP: 00007ff32b2fe090 R08: 000000000000009c R09: 0000000000000000 [ 191.662678][ T6716] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 191.662692][ T6716] R13: 00007ff32d326038 R14: 00007ff32d325fa0 R15: 00007fff21ed0d18 [ 191.662726][ T6716] [ 191.796446][ T823] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 191.924152][ T5840] Bluetooth: hci3: command 0x2016 tx timeout [ 192.040030][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 192.063424][ T823] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 192.063447][ T823] usb 2-1: config 0 has no interface number 0 [ 192.063505][ T823] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.063536][ T823] usb 2-1: config 0 interface 85 has no altsetting 0 [ 192.121654][ T823] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 192.121686][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.121707][ T823] usb 2-1: Product: syz [ 192.121727][ T823] usb 2-1: Manufacturer: syz [ 192.121742][ T823] usb 2-1: SerialNumber: syz [ 192.147045][ T823] usb 2-1: config 0 descriptor?? [ 192.426951][ T823] appletouch 2-1:0.85: Failed to read mode from device. [ 192.427760][ T823] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 192.447508][ T5886] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 192.476040][ T823] usb 2-1: USB disconnect, device number 27 [ 192.596571][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 192.604856][ T5886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.604884][ T5886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.604922][ T5886] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 192.604945][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.616002][ T5886] usb 1-1: config 0 descriptor?? [ 192.617375][ T6472] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 192.806751][ T6472] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 192.806786][ T6472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.806808][ T6472] usb 4-1: Product: syz [ 192.806823][ T6472] usb 4-1: Manufacturer: syz [ 192.806839][ T6472] usb 4-1: SerialNumber: syz [ 193.040652][ T6724] cgroup: Name too long [ 193.152242][ T6726] FAULT_INJECTION: forcing a failure. [ 193.152242][ T6726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.152332][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.1.277 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.152372][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.152385][ T6726] Call Trace: [ 193.152394][ T6726] [ 193.152404][ T6726] dump_stack_lvl+0xe8/0x150 [ 193.152432][ T6726] should_fail_ex+0x46b/0x600 [ 193.152473][ T6726] _copy_to_iter+0x404/0x17d0 [ 193.152509][ T6726] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 193.152543][ T6726] ? __pfx__copy_to_iter+0x10/0x10 [ 193.152570][ T6726] ? rt_spin_lock+0x1e0/0x400 [ 193.152606][ T6726] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 193.152656][ T6726] __skb_datagram_iter+0xf8/0x980 [ 193.152683][ T6726] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 193.152741][ T6726] skb_copy_datagram_iter+0xb5/0x240 [ 193.152781][ T6726] netlink_recvmsg+0x2c3/0xa50 [ 193.152819][ T6726] ? __pfx_netlink_recvmsg+0x10/0x10 [ 193.152852][ T6726] ? __pfx_aa_sk_perm+0x10/0x10 [ 193.152892][ T6726] ? aa_sock_msg_perm+0x122/0x200 [ 193.152922][ T6726] ? __pfx_netlink_recvmsg+0x10/0x10 [ 193.152953][ T6726] sock_recvmsg_nosec+0x10c/0x140 [ 193.152979][ T6726] ____sys_recvmsg+0x23d/0x4f0 [ 193.153022][ T6726] ? __pfx_____sys_recvmsg+0x10/0x10 [ 193.153072][ T6726] ? import_iovec+0x73/0xa0 [ 193.153109][ T6726] ___sys_recvmsg+0x215/0x590 [ 193.153147][ T6726] ? __pfx____sys_recvmsg+0x10/0x10 [ 193.153189][ T6726] ? __fget_files+0x2a/0x420 [ 193.153221][ T6726] ? __fget_files+0x3a6/0x420 [ 193.153269][ T6726] do_recvmmsg+0x33a/0x800 [ 193.153312][ T6726] ? __pfx_do_recvmmsg+0x10/0x10 [ 193.153355][ T6726] ? _copy_from_user+0x94/0xb0 [ 193.153399][ T6726] __x64_sys_recvmmsg+0x1b7/0x250 [ 193.153448][ T6726] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 193.153491][ T6726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.153513][ T6726] do_syscall_64+0x15f/0xf80 [ 193.153545][ T6726] ? clear_bhb_loop+0x40/0x90 [ 193.153565][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.153580][ T6726] RIP: 0033:0x7f0b90f5c819 [ 193.153613][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.153632][ T6726] RSP: 002b:00007f0b8f1ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 193.153655][ T6726] RAX: ffffffffffffffda RBX: 00007f0b911d5fa0 RCX: 00007f0b90f5c819 [ 193.153671][ T6726] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 193.153684][ T6726] RBP: 00007f0b8f1ae090 R08: 0000200000003700 R09: 0000000000000000 [ 193.153698][ T6726] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 193.153710][ T6726] R13: 00007f0b911d6038 R14: 00007f0b911d5fa0 R15: 00007ffeb8041e78 [ 193.153743][ T6726] [ 193.307717][ T6472] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 193.307853][ T6472] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 193.745904][ T6472] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 193.745963][ T6472] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 193.753341][ T6472] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 193.794048][ T6472] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 194.302149][ T5983] gspca_stk1135: reg_w 0x300 err -71 [ 194.303283][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 194.303297][ T5983] gspca_stk1135: Sensor write failed [ 194.303326][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 194.303334][ T5983] gspca_stk1135: Sensor write failed [ 194.303364][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 194.303374][ T5983] gspca_stk1135: Sensor read failed [ 194.303403][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 194.303411][ T5983] gspca_stk1135: Sensor read failed [ 194.303418][ T5983] gspca_stk1135: Detected sensor type unknown (0x0) [ 194.303451][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 194.303461][ T5983] gspca_stk1135: Sensor read failed [ 194.303490][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 194.303499][ T5983] gspca_stk1135: Sensor read failed [ 194.303529][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 194.303539][ T5983] gspca_stk1135: Sensor write failed [ 194.303571][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 194.303581][ T5983] gspca_stk1135: Sensor write failed [ 194.303667][ T5983] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 194.427020][ T5983] usb 3-1: USB disconnect, device number 35 [ 194.506787][ T5840] Bluetooth: hci2: command 0x2016 tx timeout [ 194.543512][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543592][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.017528][ T5834] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 195.156441][ T5834] usb 2-1: device descriptor read/64, error -71 [ 195.211675][ T6472] usb 1-1: USB disconnect, device number 31 [ 195.247563][ T5983] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 195.357483][ T5815] usb 4-1: USB disconnect, device number 23 [ 195.397059][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 195.403135][ T5983] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 195.403164][ T5983] usb 3-1: config 0 has no interface number 0 [ 195.403211][ T5983] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.403240][ T5983] usb 3-1: config 0 interface 85 has no altsetting 0 [ 195.423179][ T5983] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 195.423203][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.423218][ T5983] usb 3-1: Product: syz [ 195.423228][ T5983] usb 3-1: Manufacturer: syz [ 195.423239][ T5983] usb 3-1: SerialNumber: syz [ 195.451582][ T5834] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 195.503925][ T5983] usb 3-1: config 0 descriptor?? [ 195.531401][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 195.606488][ T6472] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 195.616687][ T5834] usb 2-1: device descriptor read/64, error -71 [ 195.737043][ T5834] usb usb2-port1: attempt power cycle [ 195.757916][ T5983] appletouch 3-1:0.85: Failed to read mode from device. [ 195.758122][ T5983] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 195.762090][ T6472] usb 1-1: Using ep0 maxpacket: 32 [ 195.766435][ T6472] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.766462][ T6472] usb 1-1: config 0 has no interface number 0 [ 195.766507][ T6472] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.766535][ T6472] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.766615][ T6472] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 195.766707][ T6472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.853547][ T5983] usb 3-1: USB disconnect, device number 36 [ 195.894585][ T6472] usb 1-1: config 0 descriptor?? [ 196.116480][ T5834] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 196.138036][ T5834] usb 2-1: device descriptor read/8, error -71 [ 196.234862][ T6755] Zero length message leads to an empty skb [ 196.239603][ T6755] FAULT_INJECTION: forcing a failure. [ 196.239603][ T6755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.239694][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.3.289 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.239740][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.239755][ T6755] Call Trace: [ 196.239763][ T6755] [ 196.239772][ T6755] dump_stack_lvl+0xe8/0x150 [ 196.239838][ T6755] should_fail_ex+0x46b/0x600 [ 196.239917][ T6755] _copy_from_iter+0x1d3/0x1670 [ 196.239974][ T6755] ? trace_kmem_cache_alloc+0x29/0xe0 [ 196.240062][ T6755] ? __alloc_skb+0x27d/0x7d0 [ 196.240091][ T6755] ? __pfx__copy_from_iter+0x10/0x10 [ 196.240130][ T6755] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 196.240211][ T6755] ? __alloc_skb+0x27d/0x7d0 [ 196.240259][ T6755] ? netlink_sendmsg+0x650/0xb40 [ 196.240297][ T6755] ? skb_put+0x11b/0x210 [ 196.240400][ T6755] netlink_sendmsg+0x6c0/0xb40 [ 196.240442][ T6755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.240531][ T6755] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 196.240592][ T6755] ? aa_sock_msg_perm+0x122/0x200 [ 196.240647][ T6755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.240726][ T6755] sock_sendmsg_nosec+0x112/0x150 [ 196.240754][ T6755] ____sys_sendmsg+0x55c/0x870 [ 196.240793][ T6755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.240902][ T6755] ? import_iovec+0x73/0xa0 [ 196.240949][ T6755] ___sys_sendmsg+0x2a5/0x360 [ 196.241003][ T6755] ? __lock_acquire+0x6b5/0x2cf0 [ 196.241086][ T6755] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.241124][ T6755] ? kstrtouint+0x6e/0xe0 [ 196.241249][ T6755] ? __fget_files+0x2a/0x420 [ 196.241276][ T6755] ? __fget_files+0x3a6/0x420 [ 196.241342][ T6755] __sys_sendmmsg+0x282/0x4e0 [ 196.241424][ T6755] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.241474][ T6755] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 196.241587][ T6755] ? ksys_write+0x248/0x270 [ 196.241623][ T6755] ? __pfx_ksys_write+0x10/0x10 [ 196.241739][ T6755] __x64_sys_sendmmsg+0xa0/0xc0 [ 196.241772][ T6755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.241818][ T6755] do_syscall_64+0x15f/0xf80 [ 196.241894][ T6755] ? trace_irq_disable+0x3b/0x140 [ 196.241920][ T6755] ? clear_bhb_loop+0x40/0x90 [ 196.241947][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.242006][ T6755] RIP: 0033:0x7ff32d0ac819 [ 196.242064][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.242083][ T6755] RSP: 002b:00007ff32b2fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.242107][ T6755] RAX: ffffffffffffffda RBX: 00007ff32d325fa0 RCX: 00007ff32d0ac819 [ 196.242137][ T6755] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 196.242181][ T6755] RBP: 00007ff32b2fe090 R08: 0000000000000000 R09: 0000000000000000 [ 196.242216][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.242237][ T6755] R13: 00007ff32d326038 R14: 00007ff32d325fa0 R15: 00007fff21ed0d18 [ 196.242271][ T6755] [ 196.376668][ T5834] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 196.424823][ T5834] usb 2-1: device descriptor read/8, error -71 [ 196.527591][ T5834] usb usb2-port1: unable to enumerate USB device [ 196.587287][ T5835] Bluetooth: hci2: command 0x2016 tx timeout [ 196.599775][ T6757] FAULT_INJECTION: forcing a failure. [ 196.599775][ T6757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.599809][ T6757] CPU: 0 UID: 0 PID: 6757 Comm: syz.2.290 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.599832][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.599844][ T6757] Call Trace: [ 196.599857][ T6757] [ 196.599864][ T6757] dump_stack_lvl+0xe8/0x150 [ 196.599903][ T6757] should_fail_ex+0x46b/0x600 [ 196.599936][ T6757] _copy_to_iter+0x404/0x17d0 [ 196.599973][ T6757] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 196.599993][ T6757] ? __pfx__copy_to_iter+0x10/0x10 [ 196.600015][ T6757] ? rt_spin_lock+0x1e0/0x400 [ 196.600044][ T6757] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 196.600080][ T6757] __skb_datagram_iter+0xf8/0x980 [ 196.600108][ T6757] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 196.600142][ T6757] skb_copy_datagram_iter+0xb5/0x240 [ 196.600171][ T6757] netlink_recvmsg+0x2c3/0xa50 [ 196.600206][ T6757] ? __pfx_netlink_recvmsg+0x10/0x10 [ 196.600234][ T6757] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.600260][ T6757] ? aa_sock_msg_perm+0x122/0x200 [ 196.600284][ T6757] ? __pfx_netlink_recvmsg+0x10/0x10 [ 196.600309][ T6757] sock_recvmsg_nosec+0x10c/0x140 [ 196.600332][ T6757] ____sys_recvmsg+0x23d/0x4f0 [ 196.600368][ T6757] ? __pfx_____sys_recvmsg+0x10/0x10 [ 196.600409][ T6757] ? import_iovec+0x73/0xa0 [ 196.600442][ T6757] ___sys_recvmsg+0x215/0x590 [ 196.600475][ T6757] ? __pfx____sys_recvmsg+0x10/0x10 [ 196.600508][ T6757] ? __fget_files+0x2a/0x420 [ 196.600547][ T6757] ? __fget_files+0x3a6/0x420 [ 196.600580][ T6757] do_recvmmsg+0x33a/0x800 [ 196.600616][ T6757] ? __pfx_do_recvmmsg+0x10/0x10 [ 196.600658][ T6757] ? _copy_from_user+0x94/0xb0 [ 196.600699][ T6757] __x64_sys_recvmmsg+0x1b7/0x250 [ 196.600727][ T6757] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 196.600759][ T6757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.600777][ T6757] do_syscall_64+0x15f/0xf80 [ 196.600798][ T6757] ? trace_irq_disable+0x3b/0x140 [ 196.600818][ T6757] ? clear_bhb_loop+0x40/0x90 [ 196.600839][ T6757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.600858][ T6757] RIP: 0033:0x7f31cec2c819 [ 196.600875][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.600900][ T6757] RSP: 002b:00007f31cce86028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.600920][ T6757] RAX: ffffffffffffffda RBX: 00007f31ceea5fa0 RCX: 00007f31cec2c819 [ 196.600933][ T6757] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 196.600946][ T6757] RBP: 00007f31cce86090 R08: 0000200000003700 R09: 0000000000000000 [ 196.600958][ T6757] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 196.600969][ T6757] R13: 00007f31ceea6038 R14: 00007f31ceea5fa0 R15: 00007ffec6800408 [ 196.600996][ T6757] [ 196.928052][ T6472] uclogic 0003:28BD:0094.0003: failed retrieving string descriptor #100: -71 [ 196.928121][ T6472] uclogic 0003:28BD:0094.0003: failed retrieving pen parameters: -71 [ 196.928152][ T6472] uclogic 0003:28BD:0094.0003: pen probing failed: -71 [ 196.928175][ T6472] uclogic 0003:28BD:0094.0003: failed probing parameters: -71 [ 196.928295][ T6472] uclogic 0003:28BD:0094.0003: probe with driver uclogic failed with error -71 [ 196.982546][ T6472] usb 1-1: USB disconnect, device number 32 [ 197.078334][ T6762] dummy0: entered promiscuous mode [ 197.152659][ T6764] 9pnet_virtio: no channels available for device syz [ 197.306669][ T5983] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 197.481257][ T5983] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 197.481293][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.481309][ T5983] usb 4-1: Product: syz [ 197.481321][ T5983] usb 4-1: Manufacturer: syz [ 197.481332][ T5983] usb 4-1: SerialNumber: syz [ 197.488351][ T5983] usb 4-1: config 0 descriptor?? [ 197.525521][ T6472] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 197.535536][ T5983] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 197.656423][ T5834] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 197.676553][ T6472] usb 1-1: Using ep0 maxpacket: 32 [ 197.679173][ T6472] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.679209][ T6472] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.679247][ T6472] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 197.679272][ T6472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.684760][ T6472] usb 1-1: config 0 descriptor?? [ 197.786557][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 197.850917][ T5834] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 197.851012][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.851035][ T5834] usb 3-1: Product: syz [ 197.851050][ T5834] usb 3-1: Manufacturer: syz [ 197.851065][ T5834] usb 3-1: SerialNumber: syz [ 197.976851][ T6772] FAULT_INJECTION: forcing a failure. [ 197.976851][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 197.976888][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.1.295 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 197.976911][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.976924][ T6772] Call Trace: [ 197.976932][ T6772] [ 197.976940][ T6772] dump_stack_lvl+0xe8/0x150 [ 197.976969][ T6772] should_fail_ex+0x46b/0x600 [ 197.977016][ T6772] should_failslab+0xa8/0x100 [ 197.977051][ T6772] kmem_cache_alloc_noprof+0x87/0x680 [ 197.977082][ T6772] ? skb_clone+0x212/0x3a0 [ 197.977118][ T6772] skb_clone+0x212/0x3a0 [ 197.977152][ T6772] __netlink_deliver_tap+0x424/0x8b0 [ 197.977206][ T6772] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.977239][ T6772] netlink_deliver_tap+0x19c/0x1b0 [ 197.977270][ T6772] netlink_unicast+0x754/0x920 [ 197.977311][ T6772] netlink_sendmsg+0x813/0xb40 [ 197.977339][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.977385][ T6772] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 197.977425][ T6772] ? aa_sock_msg_perm+0x122/0x200 [ 197.977455][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.977489][ T6772] sock_sendmsg_nosec+0x112/0x150 [ 197.977507][ T6772] ____sys_sendmsg+0x55c/0x870 [ 197.977565][ T6772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.977609][ T6772] ? import_iovec+0x73/0xa0 [ 197.977646][ T6772] ___sys_sendmsg+0x2a5/0x360 [ 197.977679][ T6772] ? __lock_acquire+0x6b5/0x2cf0 [ 197.977721][ T6772] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.977790][ T6772] ? __fget_files+0x2a/0x420 [ 197.977816][ T6772] ? __fget_files+0x3a6/0x420 [ 197.977860][ T6772] __x64_sys_sendmsg+0x1c3/0x2a0 [ 197.977904][ T6772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.977948][ T6772] ? __pfx_ksys_write+0x10/0x10 [ 197.977988][ T6772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.978017][ T6772] do_syscall_64+0x15f/0xf80 [ 197.978037][ T6772] ? trace_irq_disable+0x3b/0x140 [ 197.978072][ T6772] ? clear_bhb_loop+0x40/0x90 [ 197.978100][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.978124][ T6772] RIP: 0033:0x7f0b90f5c819 [ 197.978143][ T6772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.978161][ T6772] RSP: 002b:00007f0b8f1ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.978183][ T6772] RAX: ffffffffffffffda RBX: 00007f0b911d5fa0 RCX: 00007f0b90f5c819 [ 197.978202][ T6772] RDX: 0000000000048000 RSI: 0000200000001640 RDI: 0000000000000004 [ 197.978212][ T6772] RBP: 00007f0b8f1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 197.978222][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.978247][ T6772] R13: 00007f0b911d6038 R14: 00007f0b911d5fa0 R15: 00007ffeb8041e78 [ 197.978283][ T6772] [ 198.492184][ T5834] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 198.492307][ T5834] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 198.896302][ T5834] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 198.896450][ T5834] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 198.897371][ T5834] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 198.957942][ T5834] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 198.996477][ T823] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 199.146618][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 199.149335][ T823] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 199.149364][ T823] usb 2-1: config 0 has no interface number 0 [ 199.149411][ T823] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.149440][ T823] usb 2-1: config 0 interface 85 has no altsetting 0 [ 199.191445][ T823] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 199.191478][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.191500][ T823] usb 2-1: Product: syz [ 199.191514][ T823] usb 2-1: Manufacturer: syz [ 199.191528][ T823] usb 2-1: SerialNumber: syz [ 199.231187][ T823] usb 2-1: config 0 descriptor?? [ 199.487430][ T823] appletouch 2-1:0.85: Failed to read mode from device. [ 199.487626][ T823] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 199.521973][ T823] usb 2-1: USB disconnect, device number 32 [ 199.542281][ T5998] udevd[5998]: setting mode of /dev/bus/usb/002/032 to 020664 failed: No such file or directory [ 199.542524][ T5998] udevd[5998]: setting owner of /dev/bus/usb/002/032 to uid=0, gid=0 failed: No such file or directory [ 199.868459][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 200.002699][ T5983] gspca_stk1135: reg_w 0x300 err -71 [ 200.003745][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 200.003756][ T5983] gspca_stk1135: Sensor write failed [ 200.003784][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 200.003791][ T5983] gspca_stk1135: Sensor write failed [ 200.003817][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 200.003824][ T5983] gspca_stk1135: Sensor read failed [ 200.003849][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 200.003856][ T5983] gspca_stk1135: Sensor read failed [ 200.003861][ T5983] gspca_stk1135: Detected sensor type unknown (0x0) [ 200.003890][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 200.003897][ T5983] gspca_stk1135: Sensor read failed [ 200.003922][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 200.003929][ T5983] gspca_stk1135: Sensor read failed [ 200.003954][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 200.003961][ T5983] gspca_stk1135: Sensor write failed [ 200.003986][ T5983] gspca_stk1135: serial bus timeout: status=0x00 [ 200.003993][ T5983] gspca_stk1135: Sensor write failed [ 200.004058][ T5983] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 200.090484][ T5983] usb 4-1: USB disconnect, device number 24 [ 200.239997][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 200.320736][ T823] usb 1-1: USB disconnect, device number 33 [ 200.427242][ T5815] usb 3-1: USB disconnect, device number 37 [ 200.523438][ T6793] FAULT_INJECTION: forcing a failure. [ 200.523438][ T6793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.523482][ T6793] CPU: 1 UID: 0 PID: 6793 Comm: syz.1.301 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.523507][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.523521][ T6793] Call Trace: [ 200.523529][ T6793] [ 200.523539][ T6793] dump_stack_lvl+0xe8/0x150 [ 200.523568][ T6793] should_fail_ex+0x46b/0x600 [ 200.523605][ T6793] _copy_from_iter+0x1d3/0x1670 [ 200.523644][ T6793] ? trace_kmem_cache_alloc+0x29/0xe0 [ 200.523674][ T6793] ? __alloc_skb+0x27d/0x7d0 [ 200.523700][ T6793] ? __pfx__copy_from_iter+0x10/0x10 [ 200.523730][ T6793] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 200.523761][ T6793] ? __alloc_skb+0x27d/0x7d0 [ 200.523793][ T6793] ? netlink_sendmsg+0x650/0xb40 [ 200.523821][ T6793] ? skb_put+0x11b/0x210 [ 200.523853][ T6793] netlink_sendmsg+0x6c0/0xb40 [ 200.523891][ T6793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.523930][ T6793] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 200.523971][ T6793] ? aa_sock_msg_perm+0x122/0x200 [ 200.524003][ T6793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.524032][ T6793] sock_sendmsg_nosec+0x112/0x150 [ 200.524058][ T6793] ____sys_sendmsg+0x55c/0x870 [ 200.524095][ T6793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.524140][ T6793] ? import_iovec+0x73/0xa0 [ 200.524180][ T6793] ___sys_sendmsg+0x2a5/0x360 [ 200.524208][ T6793] ? __lock_acquire+0x6b5/0x2cf0 [ 200.524240][ T6793] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.524308][ T6793] ? __fget_files+0x2a/0x420 [ 200.524333][ T6793] ? __fget_files+0x3a6/0x420 [ 200.524368][ T6793] __x64_sys_sendmsg+0x1c3/0x2a0 [ 200.524402][ T6793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.524442][ T6793] ? __pfx_ksys_write+0x10/0x10 [ 200.524491][ T6793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.524514][ T6793] do_syscall_64+0x15f/0xf80 [ 200.524541][ T6793] ? trace_irq_disable+0x3b/0x140 [ 200.524565][ T6793] ? clear_bhb_loop+0x40/0x90 [ 200.524593][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.524614][ T6793] RIP: 0033:0x7f0b90f5c819 [ 200.524634][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.524652][ T6793] RSP: 002b:00007f0b8f1ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.524673][ T6793] RAX: ffffffffffffffda RBX: 00007f0b911d5fa0 RCX: 00007f0b90f5c819 [ 200.524689][ T6793] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 200.524702][ T6793] RBP: 00007f0b8f1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 200.524715][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.524728][ T6793] R13: 00007f0b911d6038 R14: 00007f0b911d5fa0 R15: 00007ffeb8041e78 [ 200.524762][ T6793] [ 201.063110][ T6797] fuse: Bad value for 'fd' [ 201.226947][ T5815] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 201.367531][ T5815] usb 4-1: device descriptor read/64, error -71 [ 201.548228][ T5146] Bluetooth: hci2: command 0x2016 tx timeout [ 201.606625][ T5815] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 201.758166][ T5815] usb 4-1: device descriptor read/64, error -71 [ 201.869342][ T5815] usb usb4-port1: attempt power cycle [ 202.226414][ T5815] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 202.247176][ T5815] usb 4-1: device descriptor read/8, error -71 [ 202.272011][ T6812] FAULT_INJECTION: forcing a failure. [ 202.272011][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.272041][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.1.307 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 202.272061][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 202.272076][ T6812] Call Trace: [ 202.272083][ T6812] [ 202.272090][ T6812] dump_stack_lvl+0xe8/0x150 [ 202.272114][ T6812] should_fail_ex+0x46b/0x600 [ 202.272142][ T6812] _copy_from_iter+0x1d3/0x1670 [ 202.272173][ T6812] ? trace_kmem_cache_alloc+0x29/0xe0 [ 202.272196][ T6812] ? __alloc_skb+0x27d/0x7d0 [ 202.272217][ T6812] ? __pfx__copy_from_iter+0x10/0x10 [ 202.272240][ T6812] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 202.272264][ T6812] ? __alloc_skb+0x27d/0x7d0 [ 202.272289][ T6812] ? netlink_sendmsg+0x650/0xb40 [ 202.272311][ T6812] ? skb_put+0x11b/0x210 [ 202.272335][ T6812] netlink_sendmsg+0x6c0/0xb40 [ 202.272365][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.272391][ T6812] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 202.272424][ T6812] ? aa_sock_msg_perm+0x122/0x200 [ 202.272450][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.272474][ T6812] sock_sendmsg_nosec+0x112/0x150 [ 202.272496][ T6812] ____sys_sendmsg+0x55c/0x870 [ 202.272525][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.272558][ T6812] ? import_iovec+0x73/0xa0 [ 202.272589][ T6812] ___sys_sendmsg+0x2a5/0x360 [ 202.272613][ T6812] ? __lock_acquire+0x6b5/0x2cf0 [ 202.272641][ T6812] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.272696][ T6812] ? __fget_files+0x2a/0x420 [ 202.272717][ T6812] ? __fget_files+0x3a6/0x420 [ 202.272759][ T6812] __x64_sys_sendmsg+0x1c3/0x2a0 [ 202.272787][ T6812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.272822][ T6812] ? __pfx_ksys_write+0x10/0x10 [ 202.272856][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.272877][ T6812] do_syscall_64+0x15f/0xf80 [ 202.272899][ T6812] ? trace_irq_disable+0x3b/0x140 [ 202.272921][ T6812] ? clear_bhb_loop+0x40/0x90 [ 202.272943][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.272961][ T6812] RIP: 0033:0x7f0b90f5c819 [ 202.272976][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.272991][ T6812] RSP: 002b:00007f0b8f1ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.273010][ T6812] RAX: ffffffffffffffda RBX: 00007f0b911d5fa0 RCX: 00007f0b90f5c819 [ 202.273023][ T6812] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 202.273033][ T6812] RBP: 00007f0b8f1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 202.273043][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.273053][ T6812] R13: 00007f0b911d6038 R14: 00007f0b911d5fa0 R15: 00007ffeb8041e78 [ 202.273078][ T6812] [ 202.666604][ T5815] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 202.689309][ T5815] usb 4-1: device descriptor read/8, error -71 [ 202.706513][ T823] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 202.726461][ T1114] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 202.797478][ T5815] usb usb4-port1: unable to enumerate USB device [ 202.856496][ T6472] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 202.862774][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 202.865470][ T823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.865545][ T823] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.865584][ T823] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 202.865601][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.884451][ T823] usb 1-1: config 0 descriptor?? [ 202.890269][ T1114] usb 3-1: Using ep0 maxpacket: 32 [ 202.935360][ T1114] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 202.935391][ T1114] usb 3-1: config 0 has no interface number 0 [ 202.952817][ T1114] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.952853][ T1114] usb 3-1: config 0 interface 85 has no altsetting 0 [ 202.975121][ T1114] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 202.975151][ T1114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.975171][ T1114] usb 3-1: Product: syz [ 202.975186][ T1114] usb 3-1: Manufacturer: syz [ 202.975201][ T1114] usb 3-1: SerialNumber: syz [ 202.981767][ T823] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 203.022877][ T6472] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 203.022908][ T6472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.022929][ T6472] usb 2-1: Product: syz [ 203.022944][ T6472] usb 2-1: Manufacturer: syz [ 203.022959][ T6472] usb 2-1: SerialNumber: syz [ 203.026645][ T1114] usb 3-1: config 0 descriptor?? [ 203.257971][ T1114] appletouch 3-1:0.85: Failed to read mode from device. [ 203.258251][ T1114] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 203.300029][ T1114] usb 3-1: USB disconnect, device number 38 [ 203.327160][ T5998] udevd[5998]: setting mode of /dev/bus/usb/003/038 to 020664 failed: No such file or directory [ 203.334230][ T5998] udevd[5998]: setting owner of /dev/bus/usb/003/038 to uid=0, gid=0 failed: No such file or directory [ 203.495463][ T6472] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 203.495508][ T6472] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 203.626679][ T5835] Bluetooth: hci2: command 0x2016 tx timeout [ 203.898064][ T6472] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 203.898125][ T6472] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 203.898826][ T6472] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 203.922211][ T6472] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 204.076478][ T1114] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 204.241033][ T1114] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 204.241065][ T1114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.241086][ T1114] usb 3-1: Product: syz [ 204.241102][ T1114] usb 3-1: Manufacturer: syz [ 204.241117][ T1114] usb 3-1: SerialNumber: syz [ 204.245510][ T1114] usb 3-1: config 0 descriptor?? [ 204.397238][ T6472] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 204.552368][ T6472] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 204.552410][ T6472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.552432][ T6472] usb 4-1: Product: syz [ 204.552446][ T6472] usb 4-1: Manufacturer: syz [ 204.552460][ T6472] usb 4-1: SerialNumber: syz [ 204.562685][ T6472] usb 4-1: config 0 descriptor?? [ 204.602307][ T6472] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 205.270508][ T5983] usb 1-1: USB disconnect, device number 34 [ 205.451055][ T6827] tmpfs: Bad value for 'mpol' [ 205.456013][ T1114] usb 3-1: f81604_read: reg: 100f failed: -EPROTO [ 205.478173][ T6827] netlink: 9 bytes leftover after parsing attributes in process `syz.0.313'. [ 205.506028][ T6827] 0·: renamed from hsr_slave_1 (while UP) [ 205.541020][ T6827] 0·: entered allmulticast mode [ 205.541673][ T6827] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 205.594106][ T1114] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 205.608560][ T1114] usb 3-1: USB disconnect, device number 39 [ 205.671065][ T1114] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 205.757794][ T5886] usb 2-1: USB disconnect, device number 33 [ 206.010929][ T1114] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 206.576505][ T5983] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 206.696477][ T5886] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 206.736427][ T5983] usb 1-1: Using ep0 maxpacket: 32 [ 206.739075][ T5983] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 206.739103][ T5983] usb 1-1: config 0 has no interface number 0 [ 206.739150][ T5983] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.739179][ T5983] usb 1-1: config 0 interface 85 has no altsetting 0 [ 206.743184][ T5983] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.743214][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.743235][ T5983] usb 1-1: Product: syz [ 206.743250][ T5983] usb 1-1: Manufacturer: syz [ 206.743266][ T5983] usb 1-1: SerialNumber: syz [ 206.833338][ T5983] usb 1-1: config 0 descriptor?? [ 206.908444][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 206.910406][ T5886] usb 2-1: no configurations [ 206.910419][ T5886] usb 2-1: can't read configurations, error -22 [ 207.028046][ T6472] gspca_stk1135: reg_w 0x300 err -71 [ 207.029102][ T6472] gspca_stk1135: serial bus timeout: status=0x00 [ 207.029115][ T6472] gspca_stk1135: Sensor write failed [ 207.029151][ T6472] gspca_stk1135: serial bus timeout: status=0x00 [ 207.029162][ T6472] gspca_stk1135: Sensor write failed [ 207.029200][ T6472] gspca_stk1135: serial bus timeout: status=0x00 [ 207.029207][ T6472] gspca_stk1135: Sensor read failed [ 207.029234][ T6472] gspca_stk1135: serial bus timeout: status=0x00 [ 207.029257][ T6472] gspca_stk1135: Sensor read failed [ 207.029265][ T6472] gspca_stk1135: Detected sensor type unknown (0x0) [ 207.029308][ T6472] gspca_stk1135: serial bus timeout: status=0x00 [ 207.029318][ T6472] gspca_stk1135: Sensor read failed [ 207.029351][ T6472] gspca_stk1135: serial bus timeout: status=0x00 [ 207.029360][ T6472] gspca_stk1135: Sensor read failed [ 207.029393][ T6472] gspca_stk1135: serial bus timeout: status=0x00 [ 207.029400][ T6472] gspca_stk1135: Sensor write failed [ 207.029445][ T6472] gspca_stk1135: serial bus timeout: status=0x00 [ 207.029456][ T6472] gspca_stk1135: Sensor write failed [ 207.029543][ T6472] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 207.047513][ T5886] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 207.073123][ T6472] usb 4-1: USB disconnect, device number 29 [ 207.177361][ T5983] appletouch 1-1:0.85: Failed to read mode from device. [ 207.177587][ T5983] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 207.220319][ T5983] usb 1-1: USB disconnect, device number 35 [ 207.256724][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 207.257401][ T5886] usb 2-1: no configurations [ 207.257414][ T5886] usb 2-1: can't read configurations, error -22 [ 207.257846][ T5886] usb usb2-port1: attempt power cycle [ 207.596855][ T5886] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 207.617915][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 207.618635][ T5886] usb 2-1: no configurations [ 207.618647][ T5886] usb 2-1: can't read configurations, error -22 [ 207.756600][ T5886] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 207.769036][ T6472] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 207.785032][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 207.790394][ T5886] usb 2-1: no configurations [ 207.790447][ T5886] usb 2-1: can't read configurations, error -22 [ 207.793105][ T5886] usb usb2-port1: unable to enumerate USB device [ 207.926435][ T6472] usb 3-1: Using ep0 maxpacket: 8 [ 207.932097][ T6472] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 207.932131][ T6472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.932146][ T6472] usb 3-1: Product: syz [ 207.932156][ T6472] usb 3-1: Manufacturer: syz [ 207.932167][ T6472] usb 3-1: SerialNumber: syz [ 207.938777][ T6472] usb 3-1: config 0 descriptor?? [ 207.980800][ T6472] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 207.992780][ T1114] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 207.996459][ T5815] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 208.146438][ T1114] usb 4-1: Using ep0 maxpacket: 32 [ 208.157789][ T1114] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.157851][ T1114] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.157902][ T1114] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 208.157928][ T1114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.165159][ T5815] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 208.165433][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.165459][ T5815] usb 1-1: Product: syz [ 208.165475][ T5815] usb 1-1: Manufacturer: syz [ 208.165491][ T5815] usb 1-1: SerialNumber: syz [ 208.177067][ T1114] usb 4-1: config 0 descriptor?? [ 208.255043][ T1114] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 208.685486][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 208.685694][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 209.090876][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 209.090929][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 209.091616][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 209.112684][ T5815] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 210.206508][ T6472] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 210.356582][ T6472] usb 2-1: Using ep0 maxpacket: 8 [ 210.358857][ T6472] usb 2-1: config 0 has no interfaces? [ 210.361742][ T6472] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 210.361772][ T6472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.361792][ T6472] usb 2-1: Product: syz [ 210.361805][ T6472] usb 2-1: Manufacturer: syz [ 210.361825][ T6472] usb 2-1: SerialNumber: syz [ 210.369032][ T6472] usb 2-1: config 0 descriptor?? [ 210.627679][ T5834] usb 2-1: USB disconnect, device number 38 [ 210.709468][ T5815] usb 3-1: USB disconnect, device number 40 [ 210.772942][ T1114] usb 4-1: USB disconnect, device number 30 [ 210.869528][ T5834] usb 1-1: USB disconnect, device number 36 [ 211.005930][ T6875] netlink: 9 bytes leftover after parsing attributes in process `syz.0.330'. [ 211.046863][ T6875] netlink: 9 bytes leftover after parsing attributes in process `syz.0.330'. [ 211.149590][ T5815] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 211.300195][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 211.301484][ T5815] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 211.313227][ T5815] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 211.313314][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.313373][ T5815] usb 3-1: Product: syz [ 211.313416][ T5815] usb 3-1: Manufacturer: syz [ 211.313453][ T5815] usb 3-1: SerialNumber: syz [ 211.426404][ T5883] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 211.446490][ T6472] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 211.496462][ T1114] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 211.564587][ T5815] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 211.582709][ T5883] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 211.582732][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.582824][ T5883] usb 4-1: Product: syz [ 211.582841][ T5883] usb 4-1: Manufacturer: syz [ 211.582856][ T5883] usb 4-1: SerialNumber: syz [ 211.599761][ T6472] usb 1-1: Using ep0 maxpacket: 32 [ 211.605588][ T6472] usb 1-1: no configurations [ 211.605643][ T6472] usb 1-1: can't read configurations, error -22 [ 211.651913][ T5883] usb 4-1: config 0 descriptor?? [ 211.661399][ T1114] usb 2-1: Using ep0 maxpacket: 32 [ 211.668227][ T1114] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 211.668257][ T1114] usb 2-1: config 0 has no interface number 0 [ 211.668306][ T1114] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.668335][ T1114] usb 2-1: config 0 interface 85 has no altsetting 0 [ 211.674149][ T1114] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 211.674181][ T1114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.674203][ T1114] usb 2-1: Product: syz [ 211.674218][ T1114] usb 2-1: Manufacturer: syz [ 211.674233][ T1114] usb 2-1: SerialNumber: syz [ 211.741582][ T5883] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 211.745951][ T1114] usb 2-1: config 0 descriptor?? [ 211.774059][ T5815] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 211.774092][ T5815] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 211.774109][ T5815] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 211.775809][ T5815] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 211.775835][ T5815] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 211.776099][ T5815] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 211.827520][ T6472] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 211.978518][ T6472] usb 1-1: Using ep0 maxpacket: 32 [ 211.979598][ T6472] usb 1-1: no configurations [ 211.979614][ T6472] usb 1-1: can't read configurations, error -22 [ 211.984120][ T6472] usb usb1-port1: attempt power cycle [ 212.017903][ T1114] appletouch 2-1:0.85: Failed to read mode from device. [ 212.018132][ T1114] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 212.043314][ T1114] usb 2-1: USB disconnect, device number 39 [ 212.346571][ T6472] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 212.379365][ T6472] usb 1-1: Using ep0 maxpacket: 32 [ 212.380708][ T6472] usb 1-1: no configurations [ 212.380721][ T6472] usb 1-1: can't read configurations, error -22 [ 212.508458][ T6472] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 212.528272][ T6472] usb 1-1: Using ep0 maxpacket: 32 [ 212.533669][ T6472] usb 1-1: no configurations [ 212.533683][ T6472] usb 1-1: can't read configurations, error -22 [ 212.534092][ T6472] usb usb1-port1: unable to enumerate USB device [ 212.852994][ T5815] usb 3-1: USB disconnect, device number 41 [ 213.164504][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.566463][ T5815] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 213.716497][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 213.719078][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.719129][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.719218][ T5815] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 213.719236][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.775781][ T5815] usb 3-1: config 0 descriptor?? [ 213.819436][ T5815] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 214.099770][ T5883] gspca_stk1135: reg_w 0x300 err -71 [ 214.100808][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 214.100819][ T5883] gspca_stk1135: Sensor write failed [ 214.100845][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 214.100852][ T5883] gspca_stk1135: Sensor write failed [ 214.100878][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 214.100885][ T5883] gspca_stk1135: Sensor read failed [ 214.100910][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 214.100916][ T5883] gspca_stk1135: Sensor read failed [ 214.100921][ T5883] gspca_stk1135: Detected sensor type unknown (0x0) [ 214.100950][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 214.100956][ T5883] gspca_stk1135: Sensor read failed [ 214.100981][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 214.100988][ T5883] gspca_stk1135: Sensor read failed [ 214.101013][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 214.101020][ T5883] gspca_stk1135: Sensor write failed [ 214.101045][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 214.101052][ T5883] gspca_stk1135: Sensor write failed [ 214.101113][ T5883] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 214.164006][ T5883] usb 4-1: USB disconnect, device number 31 [ 214.667399][ T5815] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 214.834785][ T5815] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 214.834816][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.834830][ T5815] usb 1-1: Product: syz [ 214.834840][ T5815] usb 1-1: Manufacturer: syz [ 214.834851][ T5815] usb 1-1: SerialNumber: syz [ 215.278607][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 215.278671][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 215.688878][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 215.688940][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 215.689921][ T5815] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 215.723664][ T5815] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 216.319463][ T1114] usb 3-1: USB disconnect, device number 42 [ 217.036491][ T5815] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 217.146507][ T37] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 217.187477][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 217.190855][ T5815] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 217.190883][ T5815] usb 4-1: config 0 has no interface number 0 [ 217.190929][ T5815] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.190959][ T5815] usb 4-1: config 0 interface 85 has no altsetting 0 [ 217.240667][ T5815] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 217.240698][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.240719][ T5815] usb 4-1: Product: syz [ 217.240735][ T5815] usb 4-1: Manufacturer: syz [ 217.240749][ T5815] usb 4-1: SerialNumber: syz [ 217.283924][ T5815] usb 4-1: config 0 descriptor?? [ 217.316516][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 217.317889][ T37] usb 3-1: no configurations [ 217.317909][ T37] usb 3-1: can't read configurations, error -22 [ 217.395211][ T5834] usb 1-1: USB disconnect, device number 41 [ 217.457154][ T37] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 217.566584][ T1114] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 217.586002][ T5815] appletouch 4-1:0.85: Failed to read mode from device. [ 217.586229][ T5815] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 217.613639][ T5815] usb 4-1: USB disconnect, device number 32 [ 217.626541][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 217.634184][ T37] usb 3-1: no configurations [ 217.634202][ T37] usb 3-1: can't read configurations, error -22 [ 217.634974][ T37] usb usb3-port1: attempt power cycle [ 217.730372][ T1114] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.731846][ T1114] usb 2-1: config index 0 descriptor too short (expected 259, got 125) [ 217.731877][ T1114] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 217.731907][ T1114] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 5 [ 217.734762][ T1114] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 217.734803][ T1114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.734820][ T1114] usb 2-1: Product: syz [ 217.734831][ T1114] usb 2-1: Manufacturer: syz [ 217.734843][ T1114] usb 2-1: SerialNumber: syz [ 217.888631][ T5834] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 217.996409][ T37] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 218.017227][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 218.018231][ T37] usb 3-1: no configurations [ 218.018248][ T37] usb 3-1: can't read configurations, error -22 [ 218.022990][ T1114] usb 2-1: USB disconnect, device number 40 [ 218.069179][ T5834] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 218.069209][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.069231][ T5834] usb 1-1: Product: syz [ 218.069247][ T5834] usb 1-1: Manufacturer: syz [ 218.069261][ T5834] usb 1-1: SerialNumber: syz [ 218.130105][ T5834] usb 1-1: config 0 descriptor?? [ 218.149563][ T5834] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 218.166447][ T37] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 218.187303][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 218.188146][ T37] usb 3-1: no configurations [ 218.188164][ T37] usb 3-1: can't read configurations, error -22 [ 218.189143][ T37] usb usb3-port1: unable to enumerate USB device [ 218.997610][ T1114] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 219.010193][ T6933] FAULT_INJECTION: forcing a failure. [ 219.010193][ T6933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.010445][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz.1.351 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.010523][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.010558][ T6933] Call Trace: [ 219.010588][ T6933] [ 219.010611][ T6933] dump_stack_lvl+0xe8/0x150 [ 219.010738][ T6933] should_fail_ex+0x46b/0x600 [ 219.010776][ T6933] _copy_from_iter+0x1d3/0x1670 [ 219.010891][ T6933] ? trace_kmem_cache_alloc+0x29/0xe0 [ 219.011016][ T6933] ? __alloc_skb+0x27d/0x7d0 [ 219.011086][ T6933] ? __pfx__copy_from_iter+0x10/0x10 [ 219.011170][ T6933] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 219.011255][ T6933] ? __alloc_skb+0x27d/0x7d0 [ 219.011344][ T6933] ? netlink_sendmsg+0x650/0xb40 [ 219.011422][ T6933] ? skb_put+0x11b/0x210 [ 219.011511][ T6933] netlink_sendmsg+0x6c0/0xb40 [ 219.011614][ T6933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.011702][ T6933] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 219.011807][ T6933] ? aa_sock_msg_perm+0x122/0x200 [ 219.011896][ T6933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.011975][ T6933] sock_sendmsg_nosec+0x112/0x150 [ 219.012052][ T6933] ____sys_sendmsg+0x55c/0x870 [ 219.012152][ T6933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.012214][ T6933] ? import_iovec+0x73/0xa0 [ 219.012313][ T6933] ___sys_sendmsg+0x2a5/0x360 [ 219.012421][ T6933] ? __lock_acquire+0x6b5/0x2cf0 [ 219.012520][ T6933] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.012690][ T6933] ? __fget_files+0x2a/0x420 [ 219.012767][ T6933] ? __fget_files+0x3a6/0x420 [ 219.012862][ T6933] __x64_sys_sendmsg+0x1c3/0x2a0 [ 219.012953][ T6933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.013076][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 219.013187][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.013247][ T6933] do_syscall_64+0x15f/0xf80 [ 219.013305][ T6933] ? trace_irq_disable+0x3b/0x140 [ 219.013374][ T6933] ? clear_bhb_loop+0x40/0x90 [ 219.013451][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.013509][ T6933] RIP: 0033:0x7f0b90f5c819 [ 219.013566][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.013612][ T6933] RSP: 002b:00007f0b8f1ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.013665][ T6933] RAX: ffffffffffffffda RBX: 00007f0b911d5fa0 RCX: 00007f0b90f5c819 [ 219.013690][ T6933] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 219.013747][ T6933] RBP: 00007f0b8f1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 219.013790][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.013840][ T6933] R13: 00007f0b911d6038 R14: 00007f0b911d5fa0 R15: 00007ffeb8041e78 [ 219.013923][ T6933] [ 219.250552][ T1114] usb 4-1: Using ep0 maxpacket: 32 [ 219.355923][ T1114] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.355978][ T1114] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.356077][ T1114] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 219.356103][ T1114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.439442][ T1114] usb 4-1: config 0 descriptor?? [ 219.485986][ T1114] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 219.627112][ T5146] Bluetooth: hci1: command 0x0401 tx timeout [ 220.368791][ T37] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 220.523732][ T37] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 220.523766][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.523788][ T37] usb 2-1: Product: syz [ 220.523804][ T37] usb 2-1: Manufacturer: syz [ 220.523818][ T37] usb 2-1: SerialNumber: syz [ 220.558380][ T1114] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 220.570675][ T37] usb 2-1: config 0 descriptor?? [ 220.621230][ T5834] gspca_stk1135: reg_w 0x300 err -71 [ 220.622286][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 220.622302][ T5834] gspca_stk1135: Sensor write failed [ 220.622341][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 220.622351][ T5834] gspca_stk1135: Sensor write failed [ 220.622404][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 220.622415][ T5834] gspca_stk1135: Sensor read failed [ 220.622452][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 220.622463][ T5834] gspca_stk1135: Sensor read failed [ 220.622471][ T5834] gspca_stk1135: Detected sensor type unknown (0x0) [ 220.622513][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 220.622523][ T5834] gspca_stk1135: Sensor read failed [ 220.622559][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 220.622570][ T5834] gspca_stk1135: Sensor read failed [ 220.622606][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 220.622618][ T5834] gspca_stk1135: Sensor write failed [ 220.622655][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 220.622665][ T5834] gspca_stk1135: Sensor write failed [ 220.622757][ T5834] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 220.697106][ T5834] usb 1-1: USB disconnect, device number 42 [ 220.780342][ T37] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.796484][ T1114] usb 3-1: device descriptor read/64, error -71 [ 221.046505][ T1114] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 221.176458][ T1114] usb 3-1: device descriptor read/64, error -71 [ 221.296850][ T1114] usb usb3-port1: attempt power cycle [ 221.516432][ T5983] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 221.636436][ T1114] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 221.659677][ T1114] usb 3-1: device descriptor read/8, error -71 [ 221.693106][ T5983] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 221.693140][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.693161][ T5983] usb 1-1: Product: syz [ 221.693175][ T5983] usb 1-1: Manufacturer: syz [ 221.693189][ T5983] usb 1-1: SerialNumber: syz [ 221.718211][ T60] Bluetooth: hci1: command 0x0401 tx timeout [ 221.811419][ T5834] usb 4-1: USB disconnect, device number 33 [ 221.910223][ T1114] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 221.927138][ T1114] usb 3-1: device descriptor read/8, error -71 [ 222.037605][ T1114] usb usb3-port1: unable to enumerate USB device [ 222.170882][ T5983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 222.170948][ T5983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 222.193866][ T60] Bluetooth: hci0: command 0x2016 tx timeout [ 222.194038][ T60] Bluetooth: hci3: command 0x2016 tx timeout [ 222.222199][ T37] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 222.281176][ T37] usb 2-1: USB disconnect, device number 41 [ 222.446931][ T5834] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 222.596540][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 222.599970][ T5834] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 222.600000][ T5834] usb 4-1: config 0 has no interface number 0 [ 222.600116][ T5834] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.600146][ T5834] usb 4-1: config 0 interface 85 has no altsetting 0 [ 222.605866][ T5834] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 222.606003][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.606026][ T5834] usb 4-1: Product: syz [ 222.606040][ T5834] usb 4-1: Manufacturer: syz [ 222.606055][ T5834] usb 4-1: SerialNumber: syz [ 222.702034][ T5834] usb 4-1: config 0 descriptor?? [ 222.779359][ T5983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 222.779425][ T5983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 222.781557][ T5983] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 222.837766][ T5983] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 223.116500][ T5834] appletouch 4-1:0.85: Failed to read mode from device. [ 223.116678][ T5834] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 223.170043][ T5834] usb 4-1: USB disconnect, device number 34 [ 223.786820][ T5840] Bluetooth: hci1: command 0x0401 tx timeout [ 223.896403][ T5834] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 223.906469][ T5915] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 224.046518][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 224.049410][ T5834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.049439][ T5834] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.052246][ T5834] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 224.052274][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.052296][ T5834] usb 3-1: Product: syz [ 224.052312][ T5834] usb 3-1: Manufacturer: syz [ 224.052322][ T5834] usb 3-1: SerialNumber: syz [ 224.119682][ T5834] usb 3-1: config 0 descriptor?? [ 224.124681][ T5915] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 224.124712][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.124733][ T5915] usb 2-1: Product: syz [ 224.124744][ T5915] usb 2-1: Manufacturer: syz [ 224.124755][ T5915] usb 2-1: SerialNumber: syz [ 224.296460][ T5834] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 224.328429][ T5883] usb 1-1: USB disconnect, device number 43 [ 224.352012][ T37] usb 3-1: USB disconnect, device number 51 [ 224.482025][ T5834] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 224.482060][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.482119][ T5834] usb 4-1: Product: syz [ 224.482130][ T5834] usb 4-1: Manufacturer: syz [ 224.482140][ T5834] usb 4-1: SerialNumber: syz [ 224.526192][ T5834] usb 4-1: config 0 descriptor?? [ 224.542270][ T5834] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 224.603254][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 224.603311][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 224.776526][ T5883] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 224.927462][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 224.938472][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.938547][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.938720][ T5883] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 224.938744][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.944411][ T6969] netlink: 372 bytes leftover after parsing attributes in process `syz.2.365'. [ 224.960613][ T5883] usb 1-1: config 0 descriptor?? [ 225.024117][ T5883] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 225.406534][ T37] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 225.546570][ T37] usb 3-1: device descriptor read/64, error -71 [ 225.620082][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.624940][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.786533][ T37] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 225.847058][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 225.926426][ T37] usb 3-1: device descriptor read/64, error -71 [ 225.946487][ T5840] Bluetooth: hci1: command 0x0401 tx timeout [ 226.036846][ T37] usb usb3-port1: attempt power cycle [ 226.250408][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 226.275740][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 226.275821][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 226.305431][ T5915] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 226.319066][ T5915] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 226.362506][ T5915] usb 2-1: USB disconnect, device number 42 [ 226.376461][ T37] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 226.399730][ T37] usb 3-1: device descriptor read/8, error -71 [ 226.656437][ T37] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 226.677472][ T37] usb 3-1: device descriptor read/8, error -71 [ 226.786776][ T37] usb usb3-port1: unable to enumerate USB device [ 226.963443][ T5834] gspca_stk1135: reg_w 0x300 err -71 [ 226.964497][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 226.964515][ T5834] gspca_stk1135: Sensor write failed [ 226.964554][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 226.964565][ T5834] gspca_stk1135: Sensor write failed [ 226.964603][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 226.964613][ T5834] gspca_stk1135: Sensor read failed [ 226.964651][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 226.964661][ T5834] gspca_stk1135: Sensor read failed [ 226.964668][ T5834] gspca_stk1135: Detected sensor type unknown (0x0) [ 226.964708][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 226.964718][ T5834] gspca_stk1135: Sensor read failed [ 226.964754][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 226.964765][ T5834] gspca_stk1135: Sensor read failed [ 226.964822][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 226.964832][ T5834] gspca_stk1135: Sensor write failed [ 226.964870][ T5834] gspca_stk1135: serial bus timeout: status=0x00 [ 226.964880][ T5834] gspca_stk1135: Sensor write failed [ 226.964970][ T5834] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 227.094083][ T5834] usb 4-1: USB disconnect, device number 35 [ 227.447637][ T6980] netlink: 372 bytes leftover after parsing attributes in process `syz.1.369'. [ 227.453428][ T6980] FAULT_INJECTION: forcing a failure. [ 227.453428][ T6980] name failslab, interval 1, probability 0, space 0, times 0 [ 227.453464][ T6980] CPU: 1 UID: 0 PID: 6980 Comm: syz.1.369 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 227.453488][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 227.453501][ T6980] Call Trace: [ 227.453509][ T6980] [ 227.453518][ T6980] dump_stack_lvl+0xe8/0x150 [ 227.453546][ T6980] should_fail_ex+0x46b/0x600 [ 227.453583][ T6980] should_failslab+0xa8/0x100 [ 227.453616][ T6980] kmem_cache_alloc_noprof+0x87/0x680 [ 227.453646][ T6980] ? skb_clone+0x212/0x3a0 [ 227.453684][ T6980] skb_clone+0x212/0x3a0 [ 227.453720][ T6980] __netlink_deliver_tap+0x424/0x8b0 [ 227.453769][ T6980] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.453807][ T6980] netlink_deliver_tap+0x19c/0x1b0 [ 227.453840][ T6980] __netlink_sendskb+0x47/0x90 [ 227.453866][ T6980] netlink_dump+0xa0f/0xe10 [ 227.453907][ T6980] ? __pfx_netlink_dump+0x10/0x10 [ 227.453949][ T6980] ? netlink_recvmsg+0x5d6/0xa50 [ 227.453976][ T6980] ? kmem_cache_free+0x187/0x6c0 [ 227.454007][ T6980] ? netlink_recvmsg+0x5d6/0xa50 [ 227.454041][ T6980] netlink_recvmsg+0x690/0xa50 [ 227.454081][ T6980] ? __pfx_netlink_recvmsg+0x10/0x10 [ 227.454115][ T6980] ? __pfx_aa_sk_perm+0x10/0x10 [ 227.454140][ T6980] ? __lock_acquire+0x6b5/0x2cf0 [ 227.454173][ T6980] ? aa_sock_msg_perm+0x122/0x200 [ 227.454204][ T6980] ? __pfx_netlink_recvmsg+0x10/0x10 [ 227.454235][ T6980] sock_recvmsg_nosec+0x10c/0x140 [ 227.454262][ T6980] ____sys_recvmsg+0x23d/0x4f0 [ 227.454305][ T6980] ? __pfx_____sys_recvmsg+0x10/0x10 [ 227.454354][ T6980] ? import_iovec+0x73/0xa0 [ 227.454392][ T6980] ___sys_recvmsg+0x215/0x590 [ 227.454437][ T6980] ? __pfx____sys_recvmsg+0x10/0x10 [ 227.454475][ T6980] ? __fget_files+0x2a/0x420 [ 227.454521][ T6980] ? __fget_files+0x3a6/0x420 [ 227.454559][ T6980] do_recvmmsg+0x33a/0x800 [ 227.454600][ T6980] ? __pfx_do_recvmmsg+0x10/0x10 [ 227.454646][ T6980] ? rt_mutex_slowunlock+0x1cb/0x300 [ 227.454701][ T6980] __x64_sys_recvmmsg+0x198/0x250 [ 227.454737][ T6980] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 227.454781][ T6980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.454812][ T6980] do_syscall_64+0x15f/0xf80 [ 227.454838][ T6980] ? trace_irq_disable+0x3b/0x140 [ 227.454863][ T6980] ? clear_bhb_loop+0x40/0x90 [ 227.454890][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.454912][ T6980] RIP: 0033:0x7f0b90f5c819 [ 227.454932][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.454951][ T6980] RSP: 002b:00007f0b8f1ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 227.454973][ T6980] RAX: ffffffffffffffda RBX: 00007f0b911d5fa0 RCX: 00007f0b90f5c819 [ 227.454989][ T6980] RDX: 0000000000000001 RSI: 0000200000002bc0 RDI: 0000000000000004 [ 227.455003][ T6980] RBP: 00007f0b8f1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 227.455015][ T6980] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 227.455028][ T6980] R13: 00007f0b911d6038 R14: 00007f0b911d5fa0 R15: 00007ffeb8041e78 [ 227.455063][ T6980] [ 227.662623][ T5883] usb 1-1: USB disconnect, device number 44 [ 228.026472][ T5146] Bluetooth: hci1: command 0x0401 tx timeout [ 228.156448][ T5834] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 228.266764][ T5883] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 228.296454][ T37] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 228.321346][ T5834] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 228.321377][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.321398][ T5834] usb 2-1: Product: syz [ 228.321412][ T5834] usb 2-1: Manufacturer: syz [ 228.321426][ T5834] usb 2-1: SerialNumber: syz [ 228.440709][ T5883] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 228.440737][ T5883] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 228.440758][ T5883] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.440779][ T5883] usb 1-1: config 1 has no interface number 1 [ 228.440845][ T5883] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 228.444617][ T5883] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.444650][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.444671][ T5883] usb 1-1: Product: syz [ 228.444687][ T5883] usb 1-1: Manufacturer: syz [ 228.444702][ T5883] usb 1-1: SerialNumber: syz [ 228.449437][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 228.459459][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.459502][ T37] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.505687][ T37] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 228.505748][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.505770][ T37] usb 4-1: Product: syz [ 228.505785][ T37] usb 4-1: Manufacturer: syz [ 228.505832][ T37] usb 4-1: SerialNumber: syz [ 228.549283][ T37] usb 4-1: config 0 descriptor?? [ 228.686478][ T5983] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 228.749930][ T5883] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.750003][ T5883] usb 1-1: MIDIStreaming interface descriptor not found [ 228.797242][ T37] usb 4-1: USB disconnect, device number 36 [ 228.804963][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 228.805026][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 228.857284][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 228.865142][ T5983] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 228.865170][ T5983] usb 3-1: config 0 has no interface number 0 [ 228.865437][ T5983] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.865467][ T5983] usb 3-1: config 0 interface 85 has no altsetting 0 [ 228.909406][ T5983] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 228.909436][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.909516][ T5983] usb 3-1: Product: syz [ 228.909531][ T5983] usb 3-1: Manufacturer: syz [ 228.909546][ T5983] usb 3-1: SerialNumber: syz [ 228.958746][ T5983] usb 3-1: config 0 descriptor?? [ 229.056069][ T5883] usb 1-1: USB disconnect, device number 45 [ 229.202043][ T5983] appletouch 3-1:0.85: Failed to read mode from device. [ 229.202489][ T5983] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 229.260574][ T5983] usb 3-1: USB disconnect, device number 56 [ 229.431302][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 229.431388][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 229.432440][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 229.516530][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.568884][ T5834] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 229.788038][ T37] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 229.937957][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 229.941443][ T37] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 229.941473][ T37] usb 4-1: config 0 has no interface number 0 [ 229.944453][ T37] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 229.944483][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.944506][ T37] usb 4-1: Product: syz [ 229.944516][ T37] usb 4-1: Manufacturer: syz [ 229.944527][ T37] usb 4-1: SerialNumber: syz [ 230.019943][ T37] usb 4-1: config 0 descriptor?? [ 230.129097][ T5915] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 230.238585][ T6993] netlink: 'syz.3.375': attribute type 2 has an invalid length. [ 230.286851][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 230.290319][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.290374][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.290422][ T5915] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 230.290446][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.358071][ T5915] usb 3-1: config 0 descriptor?? [ 230.402850][ T5915] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 230.454216][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 230.454249][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 230.935638][ T5915] usb 2-1: USB disconnect, device number 43 [ 230.990682][ T5883] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 231.154957][ T5883] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 231.154981][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.154995][ T5883] usb 1-1: Product: syz [ 231.155005][ T5883] usb 1-1: Manufacturer: syz [ 231.155016][ T5883] usb 1-1: SerialNumber: syz [ 231.226476][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 231.230573][ T5883] usb 1-1: config 0 descriptor?? [ 231.264315][ T5883] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 231.342029][ T7017] FAULT_INJECTION: forcing a failure. [ 231.342029][ T7017] name failslab, interval 1, probability 0, space 0, times 0 [ 231.342056][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.1.382 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 231.342074][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 231.342084][ T7017] Call Trace: [ 231.342090][ T7017] [ 231.342097][ T7017] dump_stack_lvl+0xe8/0x150 [ 231.342117][ T7017] should_fail_ex+0x46b/0x600 [ 231.342149][ T7017] should_failslab+0xa8/0x100 [ 231.342174][ T7017] kmem_cache_alloc_noprof+0x87/0x680 [ 231.342196][ T7017] ? dst_alloc+0x105/0x170 [ 231.342224][ T7017] dst_alloc+0x105/0x170 [ 231.342247][ T7017] ? ip_check_mc_rcu+0x4d8/0x690 [ 231.342268][ T7017] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 231.342300][ T7017] ? ip_route_output_key_hash+0xd8/0x2a0 [ 231.342324][ T7017] ip_route_output_key_hash+0x18d/0x2a0 [ 231.342347][ T7017] ? irqentry_exit+0x218/0x730 [ 231.342368][ T7017] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 231.342404][ T7017] ip_route_output_flow+0x2a/0x150 [ 231.342423][ T7017] ? security_sk_classify_flow+0x6d/0x150 [ 231.342443][ T7017] raw_sendmsg+0x1199/0x1a50 [ 231.342476][ T7017] ? __pfx_raw_sendmsg+0x10/0x10 [ 231.342521][ T7017] ? __lock_acquire+0x6b5/0x2cf0 [ 231.342587][ T7017] ? __pfx_aa_sk_perm+0x10/0x10 [ 231.342615][ T7017] ? sock_rps_record_flow+0x19/0x350 [ 231.342649][ T7017] ? inet_sendmsg+0x2f4/0x370 [ 231.342678][ T7017] ? aa_sock_msg_perm+0x122/0x200 [ 231.342701][ T7017] ? __pfx_inet_sendmsg+0x10/0x10 [ 231.342724][ T7017] sock_sendmsg_nosec+0xf9/0x150 [ 231.342742][ T7017] ____sys_sendmsg+0x55c/0x870 [ 231.342770][ T7017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.342799][ T7017] ? import_iovec+0x73/0xa0 [ 231.342826][ T7017] ___sys_sendmsg+0x2a5/0x360 [ 231.342848][ T7017] ? __lock_acquire+0x6b5/0x2cf0 [ 231.342871][ T7017] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.342919][ T7017] ? __fget_files+0x2a/0x420 [ 231.342940][ T7017] ? __fget_files+0x3a6/0x420 [ 231.342966][ T7017] __x64_sys_sendmsg+0x1c3/0x2a0 [ 231.342991][ T7017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.343021][ T7017] ? __pfx_ksys_write+0x10/0x10 [ 231.343050][ T7017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.343067][ T7017] do_syscall_64+0x15f/0xf80 [ 231.343086][ T7017] ? trace_irq_disable+0x3b/0x140 [ 231.343111][ T7017] ? clear_bhb_loop+0x40/0x90 [ 231.343131][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.343147][ T7017] RIP: 0033:0x7f0b90f5c819 [ 231.343161][ T7017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.343175][ T7017] RSP: 002b:00007f0b8f1ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.343192][ T7017] RAX: ffffffffffffffda RBX: 00007f0b911d5fa0 RCX: 00007f0b90f5c819 [ 231.343203][ T7017] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000004 [ 231.343213][ T7017] RBP: 00007f0b8f1ae090 R08: 0000000000000000 R09: 0000000000000000 [ 231.343222][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.343232][ T7017] R13: 00007f0b911d6038 R14: 00007f0b911d5fa0 R15: 00007ffeb8041e78 [ 231.343256][ T7017] [ 232.036432][ T6606] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 232.186422][ T6606] usb 2-1: Using ep0 maxpacket: 32 [ 232.188626][ T6606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.188651][ T6606] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 232.191460][ T6606] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 232.191482][ T6606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.191579][ T6606] usb 2-1: Product: syz [ 232.191595][ T6606] usb 2-1: Manufacturer: syz [ 232.191610][ T6606] usb 2-1: SerialNumber: syz [ 232.234806][ T6606] usb 2-1: config 0 descriptor?? [ 232.281205][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.295844][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.490994][ T1114] usb 2-1: USB disconnect, device number 44 [ 232.909701][ T823] usb 3-1: USB disconnect, device number 57 [ 233.254208][ T37] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -32 [ 233.268168][ T37] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 233.319353][ T5840] Bluetooth: hci0: command 0x2016 tx timeout [ 233.447578][ T7023] FAULT_INJECTION: forcing a failure. [ 233.447578][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 233.447654][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.2.384 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.447679][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.447693][ T7023] Call Trace: [ 233.447703][ T7023] [ 233.447713][ T7023] dump_stack_lvl+0xe8/0x150 [ 233.447744][ T7023] should_fail_ex+0x46b/0x600 [ 233.447780][ T7023] should_failslab+0xa8/0x100 [ 233.447815][ T7023] __kmalloc_cache_noprof+0x84/0x690 [ 233.447848][ T7023] ? __do_once_done+0x7c/0x1f0 [ 233.447886][ T7023] __do_once_done+0x7c/0x1f0 [ 233.447922][ T7023] nf_conntrack_in+0xf18/0x15c0 [ 233.447971][ T7023] ? __pfx_nf_conntrack_in+0x10/0x10 [ 233.447993][ T7023] ? rcu_is_watching+0x15/0xb0 [ 233.448041][ T7023] ? ipv4_conntrack_defrag+0x2aa/0x5c0 [ 233.448076][ T7023] ? ipv4_conntrack_defrag+0x434/0x5c0 [ 233.448109][ T7023] ? ipv4_conntrack_defrag+0x2aa/0x5c0 [ 233.448140][ T7023] ? ipv4_conntrack_local+0x126/0x210 [ 233.448173][ T7023] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 233.448212][ T7023] nf_hook_slow+0xc5/0x220 [ 233.448246][ T7023] ? __pfx_dst_output+0x10/0x10 [ 233.448277][ T7023] nf_hook+0x22a/0x3a0 [ 233.448305][ T7023] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 233.448336][ T7023] ? nf_hook+0xa1/0x3a0 [ 233.448364][ T7023] ? __pfx_nf_hook+0x10/0x10 [ 233.448396][ T7023] ? __pfx_dst_output+0x10/0x10 [ 233.448441][ T7023] __ip_local_out+0x558/0x6a0 [ 233.448470][ T7023] ? __pfx_dst_output+0x10/0x10 [ 233.448505][ T7023] ip_local_out+0x2a/0x190 [ 233.448538][ T7023] ip_send_skb+0x45/0xc0 [ 233.448572][ T7023] udp_send_skb+0x7e4/0xf70 [ 233.448630][ T7023] udp_sendmsg+0x1937/0x21a0 [ 233.448672][ T7023] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 233.448704][ T7023] ? finish_task_switch+0x41f/0xbe0 [ 233.448743][ T7023] ? __pfx_udp_sendmsg+0x10/0x10 [ 233.448784][ T7023] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.448822][ T7023] ? __schedule+0x16b4/0x54f0 [ 233.448861][ T7023] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.448889][ T7023] ? sock_rps_record_flow+0x19/0x350 [ 233.448924][ T7023] ? inet_sendmsg+0x29c/0x370 [ 233.448954][ T7023] ? aa_sock_msg_perm+0x122/0x200 [ 233.448985][ T7023] ? __pfx_inet_sendmsg+0x10/0x10 [ 233.449015][ T7023] sock_sendmsg_nosec+0xf9/0x150 [ 233.449043][ T7023] ____sys_sendmsg+0x55c/0x870 [ 233.449081][ T7023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.449123][ T7023] ? import_iovec+0x73/0xa0 [ 233.449162][ T7023] ___sys_sendmsg+0x2a5/0x360 [ 233.449193][ T7023] ? __lock_acquire+0x6b5/0x2cf0 [ 233.449226][ T7023] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.449298][ T7023] ? __fget_files+0x2a/0x420 [ 233.449323][ T7023] ? __fget_files+0x3a6/0x420 [ 233.449361][ T7023] __sys_sendmmsg+0x282/0x4e0 [ 233.449398][ T7023] ? __pfx___sys_sendmmsg+0x10/0x10 [ 233.449465][ T7023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.449496][ T7023] __x64_sys_sendmmsg+0xa0/0xc0 [ 233.449527][ T7023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.449551][ T7023] do_syscall_64+0x15f/0xf80 [ 233.449579][ T7023] ? clear_bhb_loop+0x40/0x90 [ 233.449614][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.449637][ T7023] RIP: 0033:0x7f31cec2c819 [ 233.449658][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.449677][ T7023] RSP: 002b:00007f31cce44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.449700][ T7023] RAX: ffffffffffffffda RBX: 00007f31ceea6180 RCX: 00007f31cec2c819 [ 233.449716][ T7023] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000006 [ 233.449730][ T7023] RBP: 00007f31cce44090 R08: 0000000000000000 R09: 0000000000000000 [ 233.449743][ T7023] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 233.449756][ T7023] R13: 00007f31ceea6218 R14: 00007f31ceea6180 R15: 00007ffec6800408 [ 233.449791][ T7023] [ 234.789045][ T5883] gspca_stk1135: reg_w 0x203 err -110 [ 234.790848][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 234.790864][ T5883] gspca_stk1135: Sensor write failed [ 234.790902][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 234.790913][ T5883] gspca_stk1135: Sensor write failed [ 234.790950][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 234.790959][ T5883] gspca_stk1135: Sensor read failed [ 234.790997][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 234.791007][ T5883] gspca_stk1135: Sensor read failed [ 234.791015][ T5883] gspca_stk1135: Detected sensor type unknown (0x0) [ 234.792888][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 234.792904][ T5883] gspca_stk1135: Sensor read failed [ 234.792941][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 234.792952][ T5883] gspca_stk1135: Sensor read failed [ 234.792992][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 234.793002][ T5883] gspca_stk1135: Sensor write failed [ 234.793040][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 234.793050][ T5883] gspca_stk1135: Sensor write failed [ 234.793176][ T5883] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 235.277762][ T5834] usb 1-1: USB disconnect, device number 46 [ 235.294681][ T1114] usb 4-1: USB disconnect, device number 37 [ 235.661694][ T7031] overlayfs: invalid origin (0000) [ 235.886377][ T5834] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 235.908892][ T7036] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 236.036998][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 236.039103][ T5834] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 236.039123][ T5834] usb 1-1: config 0 has no interface number 0 [ 236.039154][ T5834] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.039174][ T5834] usb 1-1: config 0 interface 85 has no altsetting 0 [ 236.041222][ T5834] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 236.041242][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.041257][ T5834] usb 1-1: Product: syz [ 236.041267][ T5834] usb 1-1: Manufacturer: syz [ 236.041277][ T5834] usb 1-1: SerialNumber: syz [ 236.090477][ T5834] usb 1-1: config 0 descriptor?? [ 236.219408][ T37] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 236.239745][ T7045] fuse: blksize only supported for fuseblk [ 236.349901][ T5834] appletouch 1-1:0.85: Failed to read mode from device. [ 236.350194][ T5834] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 236.382797][ T5834] usb 1-1: USB disconnect, device number 47 [ 236.424377][ T37] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 236.424412][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.424431][ T37] usb 3-1: Product: syz [ 236.424441][ T37] usb 3-1: Manufacturer: syz [ 236.424452][ T37] usb 3-1: SerialNumber: syz [ 236.746620][ T1114] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 236.896413][ T1114] usb 2-1: Using ep0 maxpacket: 16 [ 236.899136][ T1114] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.899306][ T1114] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.899353][ T1114] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 236.899376][ T1114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.905921][ T1114] usb 2-1: config 0 descriptor?? [ 236.951147][ T5883] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 236.972040][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 236.972104][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 237.116449][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 237.119781][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.119908][ T5883] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 237.119935][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.165942][ T5883] usb 4-1: config 0 descriptor?? [ 237.255466][ T5883] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 237.549993][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550033][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550064][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550091][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550117][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550144][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550171][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550198][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550224][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.550249][ T1114] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 237.585037][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 237.585205][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 237.596407][ T5834] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 237.610314][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 237.643566][ T37] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 237.718778][ T1114] samsung 0003:0419:0600.0004: hidraw0: USB HID v0.0b Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 237.762917][ T1114] usb 2-1: USB disconnect, device number 45 [ 237.766425][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 237.780608][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.780635][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.786218][ T5834] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 237.815652][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.815680][ T5834] usb 1-1: Product: syz [ 237.815695][ T5834] usb 1-1: Manufacturer: syz [ 237.815710][ T5834] usb 1-1: SerialNumber: syz [ 237.857836][ T5834] usb 1-1: config 0 descriptor?? [ 237.915960][ T7053] fido_id[7053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 238.068550][ T37] usb 1-1: USB disconnect, device number 48 [ 238.346656][ T5840] Bluetooth: hci3: command 0x2016 tx timeout [ 238.556445][ T1114] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 238.623428][ T7059] FAULT_INJECTION: forcing a failure. [ 238.623428][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 238.623456][ T7059] CPU: 1 UID: 0 PID: 7059 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 238.623474][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 238.623484][ T7059] Call Trace: [ 238.623491][ T7059] [ 238.623498][ T7059] dump_stack_lvl+0xe8/0x150 [ 238.623520][ T7059] should_fail_ex+0x46b/0x600 [ 238.623550][ T7059] should_failslab+0xa8/0x100 [ 238.623576][ T7059] kmem_cache_alloc_noprof+0x87/0x680 [ 238.623598][ T7059] ? do_getname_kernel+0x54/0x230 [ 238.623620][ T7059] do_getname_kernel+0x54/0x230 [ 238.623636][ T7059] ? kern_path+0x1b/0x150 [ 238.623657][ T7059] kern_path+0x25/0x150 [ 238.623677][ T7059] lookup_bdev+0xc8/0x290 [ 238.623700][ T7059] ? __pfx_lookup_bdev+0x10/0x10 [ 238.623718][ T7059] ? kstrndup+0xbf/0x160 [ 238.623743][ T7059] resume_store+0x16f/0x4f0 [ 238.623758][ T7059] ? sysfs_file_kobj+0x1a/0x230 [ 238.623784][ T7059] ? __pfx_resume_store+0x10/0x10 [ 238.623802][ T7059] ? sysfs_file_kobj+0x1a/0x230 [ 238.623817][ T7059] ? sysfs_file_kobj+0x1a/0x230 [ 238.623831][ T7059] ? sysfs_file_kobj+0x1a/0x230 [ 238.623848][ T7059] ? sysfs_file_kobj+0x1e4/0x230 [ 238.623865][ T7059] ? sysfs_kf_write+0x166/0x260 [ 238.623885][ T7059] ? __pfx_sysfs_kf_write+0x10/0x10 [ 238.623901][ T7059] kernfs_fop_write_iter+0x3b0/0x540 [ 238.623932][ T7059] vfs_write+0x629/0xba0 [ 238.623961][ T7059] ? __pfx_vfs_write+0x10/0x10 [ 238.623986][ T7059] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 238.624006][ T7059] ? lockdep_hardirqs_on+0x7a/0x110 [ 238.624027][ T7059] ? mutex_lock_nested+0x152/0x1d0 [ 238.624050][ T7059] ? fdget_pos+0x252/0x320 [ 238.624076][ T7059] ksys_write+0x156/0x270 [ 238.624101][ T7059] ? __pfx_ksys_write+0x10/0x10 [ 238.624130][ T7059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.624148][ T7059] do_syscall_64+0x15f/0xf80 [ 238.624166][ T7059] ? trace_irq_disable+0x3b/0x140 [ 238.624214][ T7059] ? clear_bhb_loop+0x40/0x90 [ 238.624240][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.624263][ T7059] RIP: 0033:0x7fd77bc9c819 [ 238.624283][ T7059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.624302][ T7059] RSP: 002b:00007fd779ef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.624325][ T7059] RAX: ffffffffffffffda RBX: 00007fd77bf15fa0 RCX: 00007fd77bc9c819 [ 238.624341][ T7059] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 238.624361][ T7059] RBP: 00007fd779ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 238.624371][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.624380][ T7059] R13: 00007fd77bf16038 R14: 00007fd77bf15fa0 R15: 00007ffff6d24ff8 [ 238.624405][ T7059] [ 238.893014][ T1114] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 238.893113][ T1114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.893197][ T1114] usb 2-1: Product: syz [ 238.893240][ T1114] usb 2-1: Manufacturer: syz [ 238.893284][ T1114] usb 2-1: SerialNumber: syz [ 238.959657][ T1114] usb 2-1: config 0 descriptor?? [ 238.998556][ T1114] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 239.030381][ T5834] usb 3-1: USB disconnect, device number 58 [ 239.326480][ T7059] block device autoloading is deprecated and will be removed. [ 239.784462][ T37] usb 4-1: USB disconnect, device number 38 [ 240.088032][ T7076] fuse: Unknown parameter '_id' [ 240.426979][ T5146] Bluetooth: hci3: command 0x2016 tx timeout [ 240.484858][ T5883] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 240.636766][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 240.663720][ T5883] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 240.663745][ T5883] usb 3-1: config 0 has no interface number 0 [ 240.663785][ T5883] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.663812][ T5883] usb 3-1: config 0 interface 85 has no altsetting 0 [ 240.705868][ T5883] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 240.705897][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.705916][ T5883] usb 3-1: Product: syz [ 240.705930][ T5883] usb 3-1: Manufacturer: syz [ 240.705944][ T5883] usb 3-1: SerialNumber: syz [ 240.754369][ T5883] usb 3-1: config 0 descriptor?? [ 240.830960][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 240.982042][ T5883] appletouch 3-1:0.85: Failed to read mode from device. [ 240.982269][ T5883] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 241.026329][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 241.039396][ T5883] usb 3-1: USB disconnect, device number 59 [ 241.039602][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.039625][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.049286][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 241.049511][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.049576][ T10] usb 1-1: Product: syz [ 241.049778][ T10] usb 1-1: Manufacturer: syz [ 241.049954][ T10] usb 1-1: SerialNumber: syz [ 241.161405][ T10] usb 1-1: config 0 descriptor?? [ 241.371070][ T5983] usb 1-1: USB disconnect, device number 49 [ 241.442074][ T1114] gspca_stk1135: reg_w 0x300 err -71 [ 241.443125][ T1114] gspca_stk1135: serial bus timeout: status=0x00 [ 241.444249][ T1114] gspca_stk1135: Sensor write failed [ 241.444363][ T1114] gspca_stk1135: serial bus timeout: status=0x00 [ 241.444376][ T1114] gspca_stk1135: Sensor write failed [ 241.444430][ T1114] gspca_stk1135: serial bus timeout: status=0x00 [ 241.444442][ T1114] gspca_stk1135: Sensor read failed [ 241.444477][ T1114] gspca_stk1135: serial bus timeout: status=0x00 [ 241.444488][ T1114] gspca_stk1135: Sensor read failed [ 241.444496][ T1114] gspca_stk1135: Detected sensor type unknown (0x0) [ 241.444534][ T1114] gspca_stk1135: serial bus timeout: status=0x00 [ 241.444544][ T1114] gspca_stk1135: Sensor read failed [ 241.444579][ T1114] gspca_stk1135: serial bus timeout: status=0x00 [ 241.444588][ T1114] gspca_stk1135: Sensor read failed [ 241.447268][ T1114] gspca_stk1135: serial bus timeout: status=0x00 [ 241.447324][ T1114] gspca_stk1135: Sensor write failed [ 241.447661][ T1114] gspca_stk1135: serial bus timeout: status=0x00 [ 241.449687][ T1114] gspca_stk1135: Sensor write failed [ 241.449941][ T1114] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 241.564583][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 241.580644][ T1114] usb 2-1: USB disconnect, device number 46 [ 241.652361][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 241.731377][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 241.731409][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.731424][ T10] usb 4-1: Product: syz [ 241.731434][ T10] usb 4-1: Manufacturer: syz [ 241.731445][ T10] usb 4-1: SerialNumber: syz [ 242.180226][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 242.180272][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 242.208008][ T5886] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 242.367067][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 242.369719][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.369770][ T5886] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 242.369795][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.421607][ T5886] usb 1-1: config 0 descriptor?? [ 242.441393][ T5886] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 242.792378][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 242.792439][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 242.793408][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 242.832165][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 243.066635][ T5146] Bluetooth: hci0: command 0x2016 tx timeout [ 243.146724][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 243.296475][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 243.298514][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 243.298544][ T10] usb 3-1: config 0 has no interface number 0 [ 243.298595][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.298636][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 243.301588][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 243.301627][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.301642][ T10] usb 3-1: Product: syz [ 243.301654][ T10] usb 3-1: Manufacturer: syz [ 243.301665][ T10] usb 3-1: SerialNumber: syz [ 243.305981][ T10] usb 3-1: config 0 descriptor?? [ 243.575261][ T5146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 243.575289][ T5146] CPU: 1 UID: 0 PID: 5146 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 243.575317][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.575333][ T5146] Workqueue: hci0 hci_rx_work [ 243.575379][ T5146] Call Trace: [ 243.575388][ T5146] [ 243.575398][ T5146] dump_stack_lvl+0xe8/0x150 [ 243.575428][ T5146] sysfs_create_dir_ns+0x271/0x2a0 [ 243.575456][ T5146] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 243.575496][ T5146] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 243.575529][ T5146] ? rt_spin_unlock+0x160/0x200 [ 243.575569][ T5146] kobject_add_internal+0x631/0xd10 [ 243.575616][ T5146] kobject_add+0x163/0x240 [ 243.575653][ T5146] ? __pfx_kobject_add+0x10/0x10 [ 243.575697][ T5146] ? get_device_parent+0x370/0x3a0 [ 243.575737][ T5146] device_add+0x408/0xbb0 [ 243.575775][ T5146] hci_conn_add_sysfs+0xd5/0x210 [ 243.575807][ T5146] le_conn_complete_evt+0x10e6/0x16b0 [ 243.575815][ T10] appletouch 3-1:0.85: Failed to read mode from device. [ 243.575840][ T5146] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 243.575877][ T5146] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 243.575905][ T5146] ? lockdep_hardirqs_on+0x7a/0x110 [ 243.575933][ T5146] ? skb_pull_data+0xfb/0x200 [ 243.575971][ T5146] hci_le_enh_conn_complete_evt+0x189/0x490 [ 243.576011][ T5146] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 243.576038][ T10] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 243.576052][ T5146] hci_event_packet+0x659/0xef0 [ 243.576089][ T5146] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 243.576124][ T5146] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 243.576157][ T5146] ? __pfx_hci_event_packet+0x10/0x10 [ 243.576186][ T5146] ? rt_spin_unlock+0x14f/0x200 [ 243.576232][ T5146] ? hci_send_to_monitor+0xe2/0x590 [ 243.576261][ T5146] hci_rx_work+0x3ee/0x1040 [ 243.576302][ T5146] ? process_one_work+0x8b7/0x1710 [ 243.576324][ T5146] process_one_work+0x9a3/0x1710 [ 243.576369][ T5146] ? __pfx_process_one_work+0x10/0x10 [ 243.576390][ T5146] ? do_raw_spin_lock+0x12b/0x2f0 [ 243.576432][ T5146] worker_thread+0xba8/0x11e0 [ 243.576484][ T5146] kthread+0x388/0x470 [ 243.576514][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 243.576535][ T5146] ? __pfx_kthread+0x10/0x10 [ 243.576566][ T5146] ret_from_fork+0x514/0xb70 [ 243.576592][ T5146] ? __pfx_ret_from_fork+0x10/0x10 [ 243.576626][ T5146] ? __switch_to+0xc79/0x1410 [ 243.576661][ T5146] ? __pfx_kthread+0x10/0x10 [ 243.576692][ T5146] ret_from_fork_asm+0x1a/0x30 [ 243.576739][ T5146] [ 243.578532][ T5146] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 243.578578][ T5146] Bluetooth: hci0: failed to register connection device [ 243.881352][ T10] usb 3-1: USB disconnect, device number 60 [ 244.206480][ T5983] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 244.305742][ T1114] usb 4-1: USB disconnect, device number 39 [ 244.366462][ T5983] usb 2-1: Using ep0 maxpacket: 32 [ 244.368945][ T5983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.368973][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 244.374153][ T5983] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 244.374185][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.374207][ T5983] usb 2-1: Product: syz [ 244.374222][ T5983] usb 2-1: Manufacturer: syz [ 244.374236][ T5983] usb 2-1: SerialNumber: syz [ 244.449120][ T5983] usb 2-1: config 0 descriptor?? [ 244.498620][ T10] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 244.663059][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 244.663092][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.663114][ T10] usb 3-1: Product: syz [ 244.663129][ T10] usb 3-1: Manufacturer: syz [ 244.663145][ T10] usb 3-1: SerialNumber: syz [ 244.704815][ T10] usb 3-1: config 0 descriptor?? [ 244.725558][ T1114] usb 2-1: USB disconnect, device number 47 [ 244.762466][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 245.011257][ T5886] usb 1-1: USB disconnect, device number 50 [ 245.082538][ T7129] FAULT_INJECTION: forcing a failure. [ 245.082538][ T7129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.082566][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.0.422 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.082584][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.082595][ T7129] Call Trace: [ 245.082601][ T7129] [ 245.082607][ T7129] dump_stack_lvl+0xe8/0x150 [ 245.082629][ T7129] should_fail_ex+0x46b/0x600 [ 245.082678][ T7129] _copy_from_iter+0x1d3/0x1670 [ 245.082707][ T7129] ? trace_kmem_cache_alloc+0x29/0xe0 [ 245.082729][ T7129] ? __alloc_skb+0x27d/0x7d0 [ 245.082750][ T7129] ? __pfx__copy_from_iter+0x10/0x10 [ 245.082771][ T7129] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 245.082793][ T7129] ? __alloc_skb+0x27d/0x7d0 [ 245.082816][ T7129] ? netlink_sendmsg+0x650/0xb40 [ 245.082837][ T7129] ? skb_put+0x11b/0x210 [ 245.082860][ T7129] netlink_sendmsg+0x6c0/0xb40 [ 245.082887][ T7129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.082910][ T7129] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 245.082940][ T7129] ? aa_sock_msg_perm+0x122/0x200 [ 245.082963][ T7129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.082984][ T7129] sock_sendmsg_nosec+0x112/0x150 [ 245.083002][ T7129] ____sys_sendmsg+0x55c/0x870 [ 245.083029][ T7129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.083058][ T7129] ? import_iovec+0x73/0xa0 [ 245.083085][ T7129] ___sys_sendmsg+0x2a5/0x360 [ 245.083107][ T7129] ? __lock_acquire+0x6b5/0x2cf0 [ 245.083130][ T7129] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.083217][ T7129] ? __fget_files+0x2a/0x420 [ 245.083244][ T7129] ? __fget_files+0x3a6/0x420 [ 245.083280][ T7129] __x64_sys_sendmsg+0x1c3/0x2a0 [ 245.083315][ T7129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.083345][ T7129] ? __pfx_ksys_write+0x10/0x10 [ 245.083374][ T7129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.083393][ T7129] do_syscall_64+0x15f/0xf80 [ 245.083413][ T7129] ? trace_irq_disable+0x3b/0x140 [ 245.083431][ T7129] ? clear_bhb_loop+0x40/0x90 [ 245.083451][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.083467][ T7129] RIP: 0033:0x7fd77bc9c819 [ 245.083482][ T7129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.083495][ T7129] RSP: 002b:00007fd779ef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.083512][ T7129] RAX: ffffffffffffffda RBX: 00007fd77bf15fa0 RCX: 00007fd77bc9c819 [ 245.083524][ T7129] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 245.083534][ T7129] RBP: 00007fd779ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.083543][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.083553][ T7129] R13: 00007fd77bf16038 R14: 00007fd77bf15fa0 R15: 00007ffff6d24ff8 [ 245.083577][ T7129] [ 245.157328][ T5146] Bluetooth: hci0: command 0x2016 tx timeout [ 245.816434][ T1114] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 245.973499][ T7139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.425'. [ 245.973516][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 245.973528][ T7139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.425'. [ 245.978403][ T1114] usb 2-1: Using ep0 maxpacket: 32 [ 246.011237][ T1114] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.011262][ T1114] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.048903][ T1114] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 246.048936][ T1114] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 246.048952][ T1114] usb 2-1: Product: syz [ 246.048962][ T1114] usb 2-1: Manufacturer: syz [ 246.100406][ T1114] hub 2-1:4.0: USB hub found [ 246.310205][ T1114] hub 2-1:4.0: 2 ports detected [ 246.648721][ T5815] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 246.799254][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.799290][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.799339][ T5815] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 246.799364][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.845013][ T5815] usb 4-1: config 0 descriptor?? [ 247.036449][ T5886] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 247.092313][ T5815] hid_parser_main: 27 callbacks suppressed [ 247.092339][ T5815] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 247.092373][ T5815] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 247.092400][ T5815] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 247.092428][ T5815] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 247.092453][ T5815] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 247.212746][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 247.212778][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.212799][ T5886] usb 1-1: Product: syz [ 247.212814][ T5886] usb 1-1: Manufacturer: syz [ 247.212829][ T5886] usb 1-1: SerialNumber: syz [ 247.268298][ T10] gspca_stk1135: reg_w 0x300 err -71 [ 247.269349][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 247.269363][ T10] gspca_stk1135: Sensor write failed [ 247.269399][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 247.269409][ T10] gspca_stk1135: Sensor write failed [ 247.269445][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 247.269456][ T10] gspca_stk1135: Sensor read failed [ 247.269491][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 247.269500][ T10] gspca_stk1135: Sensor read failed [ 247.269509][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 247.269550][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 247.269561][ T10] gspca_stk1135: Sensor read failed [ 247.269596][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 247.269607][ T10] gspca_stk1135: Sensor read failed [ 247.269644][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 247.269654][ T10] gspca_stk1135: Sensor write failed [ 247.269691][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 247.269701][ T10] gspca_stk1135: Sensor write failed [ 247.269789][ T10] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 247.404830][ T10] usb 3-1: USB disconnect, device number 61 [ 247.476594][ T5146] Bluetooth: hci0: command 0x2016 tx timeout [ 247.735759][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 247.735826][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 247.772193][ T5815] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 247.923640][ T5815] usb 4-1: USB disconnect, device number 40 [ 247.951274][ T1114] hub 2-1:4.0: activate --> -90 [ 248.038680][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.039325][ T7154] fido_id[7154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 248.054417][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.127790][ T1114] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 248.164124][ T1512] usb 2-1: Failed to suspend device, error -71 [ 248.182879][ T37] usb 2-1: USB disconnect, device number 48 [ 248.354963][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 248.355022][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 248.374719][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 248.399143][ T5886] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 248.526511][ T1114] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 248.677461][ T1114] usb 3-1: Using ep0 maxpacket: 32 [ 248.681856][ T1114] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 248.681890][ T1114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.681905][ T1114] usb 3-1: Product: syz [ 248.681915][ T1114] usb 3-1: Manufacturer: syz [ 248.681925][ T1114] usb 3-1: SerialNumber: syz [ 248.706924][ T5815] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 248.732136][ T1114] usb 3-1: config 0 descriptor?? [ 248.822704][ T7163] openvswitch: netlink: Flow key attribute not present in set flow. [ 248.886456][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 248.888537][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.888585][ T5815] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 248.888612][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.898090][ T5815] usb 4-1: config 0 descriptor?? [ 248.954030][ T5815] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 248.986946][ T5886] usb 3-1: USB disconnect, device number 62 [ 249.550229][ T5146] Bluetooth: hci0: command 0x2016 tx timeout [ 249.650969][ T7171] FAULT_INJECTION: forcing a failure. [ 249.650969][ T7171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.650996][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.2.437 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 249.651015][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 249.651025][ T7171] Call Trace: [ 249.651031][ T7171] [ 249.651038][ T7171] dump_stack_lvl+0xe8/0x150 [ 249.651061][ T7171] should_fail_ex+0x46b/0x600 [ 249.651088][ T7171] _copy_to_user+0x31/0xb0 [ 249.651105][ T7171] simple_read_from_buffer+0xe1/0x170 [ 249.651128][ T7171] proc_fail_nth_read+0x1be/0x230 [ 249.651151][ T7171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.651173][ T7171] ? rw_verify_area+0x2ac/0x4e0 [ 249.651196][ T7171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.651216][ T7171] vfs_read+0x212/0xa80 [ 249.651247][ T7171] ? __pfx_vfs_read+0x10/0x10 [ 249.651271][ T7171] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.651291][ T7171] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.651310][ T7171] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 249.651329][ T7171] ? mutex_lock_nested+0x152/0x1d0 [ 249.651353][ T7171] ? fdget_pos+0x252/0x320 [ 249.651378][ T7171] ksys_read+0x156/0x270 [ 249.651402][ T7171] ? __pfx_ksys_read+0x10/0x10 [ 249.651431][ T7171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.651448][ T7171] do_syscall_64+0x15f/0xf80 [ 249.651467][ T7171] ? trace_irq_disable+0x3b/0x140 [ 249.651491][ T7171] ? clear_bhb_loop+0x40/0x90 [ 249.651511][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.651527][ T7171] RIP: 0033:0x7f31cebed04e [ 249.651541][ T7171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.651555][ T7171] RSP: 002b:00007f31cce85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.651571][ T7171] RAX: ffffffffffffffda RBX: 00007f31cce866c0 RCX: 00007f31cebed04e [ 249.651582][ T7171] RDX: 000000000000000f RSI: 00007f31cce860a0 RDI: 0000000000000004 [ 249.651592][ T7171] RBP: 00007f31cce86090 R08: 0000000000000000 R09: 0000000000000000 [ 249.651602][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.651611][ T7171] R13: 00007f31ceea6038 R14: 00007f31ceea5fa0 R15: 00007ffec6800408 [ 249.651635][ T7171] [ 249.990672][ T5886] usb 1-1: USB disconnect, device number 51 [ 250.416538][ T5886] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 250.466421][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 250.571615][ T5886] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 250.571649][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.571673][ T5886] usb 1-1: Product: syz [ 250.571684][ T5886] usb 1-1: Manufacturer: syz [ 250.571694][ T5886] usb 1-1: SerialNumber: syz [ 250.582780][ T5886] usb 1-1: config 0 descriptor?? [ 250.615696][ T5886] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 250.623410][ T1114] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 250.629350][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 250.655266][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 250.655300][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.655322][ T10] usb 3-1: Product: syz [ 250.655336][ T10] usb 3-1: Manufacturer: syz [ 250.655352][ T10] usb 3-1: SerialNumber: syz [ 250.776512][ T1114] usb 2-1: Using ep0 maxpacket: 32 [ 250.798556][ T1114] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 250.798823][ T1114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.798846][ T1114] usb 2-1: Product: syz [ 250.798865][ T1114] usb 2-1: Manufacturer: syz [ 250.798893][ T1114] usb 2-1: SerialNumber: syz [ 250.881199][ T1114] usb 2-1: config 0 descriptor?? [ 250.919633][ T10] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 251.004104][ T5983] usb 4-1: USB disconnect, device number 41 [ 251.084862][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.085385][ T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 251.085439][ T10] usb 3-1: media controller created [ 251.162458][ T7187] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 251.162492][ [ 251.162492][ T7187] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 251.162514][ T7187] CPU: 1 UID: 0 PID: 7187 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.162541][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.162555][ T7187] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 251.162600][ T7187] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 251.162621][ T7187] RSP: 0018:ffffc900101d74d8 EFLAGS: 00010206 [ 251.162643][ T7187] RAX: dffffc0000000000 RBX: ffffffff8b447f5a RCX: 0000000080000001 [ 251.162662][ T7187] RDX: 0000000000000000 RSI: ffffffff8b447f5a RDI: 0000000000000018 [ 251.162677][ T7187] RBP: ffffffff878be8b6 R08: 0000000000000001 R09: 0000000000000000 [ 251.162692][ T7187] R10: dffffc0000000000 R11: ffffed100653972a R12: 0000000000000000 [ 251.162709][ T7187] R13: 00000000000000c0 R14: 00000000000000c0 R15: 0000000000000001 [ 251.162724][ T7187] FS: 00007f0b8f1ae6c0(0000) GS:ffff888125b5e000(0000) knlGS:0000000000000000 [ 251.162744][ T7187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.162761][ T7187] CR2: 000000110c3e279f CR3: 000000003a3fe000 CR4: 00000000003526f0 [ 251.162782][ T7187] Call Trace: [ 251.162791][ T7187] [ 251.162800][ T7187] __kasan_check_byte+0x12/0x40 [ 251.162839][ T7187] lock_acquire+0x84/0x350 [ 251.162872][ T7187] ? dvb_usbv2_generic_write+0x26/0x60 [ 251.162913][ T7187] ? dvb_usbv2_generic_write+0x26/0x60 [ 251.162951][ T7187] mutex_lock_nested+0x5a/0x1d0 [ 251.162987][ T7187] ? dvb_usbv2_generic_write+0x26/0x60 [ 251.163024][ T7187] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 251.163052][ T7187] dvb_usbv2_generic_write+0x26/0x60 [ 251.163090][ T7187] mxl111sf_ctrl_msg+0x160/0x2f0 [ 251.163121][ T7187] mxl111sf_write_reg+0xa9/0x1b0 [ 251.163148][ T7187] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 251.163174][ T7187] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 251.163203][ T7187] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 251.163242][ T7187] ? mxl111sf_i2c_xfer+0x173/0x5100 [ 251.163277][ T7187] mxl111sf_i2c_xfer+0x496/0x5100 [ 251.163328][ T7187] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 251.163360][ T7187] ? hrtimer_reprogram+0x2e8/0x470 [ 251.163408][ T7187] ? finish_task_switch+0x41f/0xbe0 [ 251.163457][ T7187] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.163486][ T7187] ? finish_task_switch+0x41f/0xbe0 [ 251.163524][ T7187] ? rcu_is_watching+0x15/0xb0 [ 251.163560][ T7187] ? trace_sched_exit_tp+0x3a/0x130 [ 251.163597][ T7187] ? __schedule+0x16b4/0x54f0 [ 251.163623][ T7187] ? ktime_get+0x45/0x220 [ 251.163653][ T7187] ? lapic_next_event+0x11/0x20 [ 251.163681][ T7187] ? clockevents_program_event+0x491/0x630 [ 251.163721][ T7187] ? __pfx_clockevents_program_event+0x10/0x10 [ 251.163763][ T7187] ? __pfx___schedule+0x10/0x10 [ 251.163786][ T7187] ? lockdep_hardirqs_on+0x7a/0x110 [ 251.163813][ T7187] ? irqentry_exit+0x218/0x730 [ 251.163844][ T7187] ? preempt_schedule_thunk+0x16/0x30 [ 251.163881][ T7187] __i2c_transfer+0x79a/0x1f70 [ 251.163917][ T7187] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 251.163949][ T7187] ? i2c_transfer+0xc8/0x2d0 [ 251.163980][ T7187] i2c_transfer+0x1cc/0x2d0 [ 251.164013][ T7187] i2cdev_ioctl_rdwr+0x460/0x740 [ 251.164049][ T7187] i2cdev_ioctl+0x6a8/0x890 [ 251.164078][ T7187] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 251.164110][ T7187] ? __fget_files+0x3a6/0x420 [ 251.164154][ T7187] ? __fget_files+0x2a/0x420 [ 251.164186][ T7187] ? bpf_lsm_file_ioctl+0x9/0x20 [ 251.164214][ T7187] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 251.164244][ T7187] __se_sys_ioctl+0xff/0x170 [ 251.164293][ T7187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.164320][ T7187] do_syscall_64+0x15f/0xf80 [ 251.164348][ T7187] ? trace_irq_disable+0x3b/0x140 [ 251.164373][ T7187] ? clear_bhb_loop+0x40/0x90 [ 251.164399][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.164433][ T7187] RIP: 0033:0x7f0b90f5c819 [ 251.164461][ T7187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.164482][ T7187] RSP: 002b:00007f0b8f1ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.164508][ T7187] RAX: ffffffffffffffda RBX: 00007f0b911d5fa0 RCX: 00007f0b90f5c819 [ 251.164527][ T7187] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 251.164543][ T7187] RBP: 00007f0b90ff2c91 R08: 0000000000000000 R09: 0000000000000000 [ 251.164557][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.164571][ T7187] R13: 00007f0b911d6038 R14: 00007f0b911d5fa0 R15: 00007ffeb8041e78 [ 251.164598][ T7187] [ 251.164606][ T7187] Modules linked in: [ 251.164667][ T7187] ---[ end trace 0000000000000000 ]--- [ 251.178955][ T7187] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 251.179050][ T7187] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 251.179096][ T7187] RSP: 0018:ffffc900101d74d8 EFLAGS: 00010206 [ 251.179160][ T7187] RAX: dffffc0000000000 RBX: ffffffff8b447f5a RCX: 0000000080000001 [ 251.179197][ T7187] RDX: 0000000000000000 RSI: ffffffff8b447f5a RDI: 0000000000000018 [ 251.179215][ T7187] RBP: ffffffff878be8b6 R08: 0000000000000001 R09: 0000000000000000 [ 251.179264][ T7187] R10: dffffc0000000000 R11: ffffed100653972a R12: 0000000000000000 [ 251.179314][ T7187] R13: 00000000000000c0 R14: 00000000000000c0 R15: 0000000000000001 [ 251.179338][ T7187] FS: 00007f0b8f1ae6c0(0000) GS:ffff888125a5e000(0000) knlGS:0000000000000000 [ 251.179360][ T7187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.179404][ T7187] CR2: 000000110c30643a CR3: 000000003a3fe000 CR4: 00000000003526f0 [ 251.179437][ T7187] Kernel panic - not syncing: Fatal exception [ 251.180196][ T7187] Kernel Offset: disabled