last executing test programs: 10.79741293s ago: executing program 1 (id=1656): setsockopt(0xffffffffffffffff, 0x8001, 0x8, &(0x7f00000001c0)="8f49041fbba9e7bace36eeda8d4a6554035e0d949bdf04b3810ea697ddcd837427209ff34e5982446e61d67b38f0b1b870bf67fd9763e39dfc62681ae58440d489a297a01245f703abad2766770fe351bb6ee260854e928896f5c60de3573f9d8c528f566dde0cbff9", 0x69) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000056ab00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 10.461562251s ago: executing program 1 (id=1659): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x100, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x400000000000, 0x111000) syz_usb_control_io$hid(r0, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x0, '\a'}]}}, 0x0}, 0x0) r5 = syz_usb_connect$cdc_ncm(0x3, 0x78, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x2, 0x90, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "895155a46f5a"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xe, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x2b4a, 0x24}, [@acm={0x4, 0x24, 0x2, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x0, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x4, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6, 0x4, 0xe6, 0xff, 0x4e}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "e9e693d5f25ea1877ea5baa71fd84b1e"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x5, 0x6}]}, 0x1, [{0x68, &(0x7f00000001c0)=@string={0x68, 0x3, "e46d7a1bb6386fc1890a2901e396c3f83451e08348ae4c9ec31c8ae0c414857025deda9b0d2400908ba0f471318c532fcfcf9d082772c9bdd97de3fab052b08fe91362ee06a9754b5527313fa7bc2182400743816d5464198e9ff8a4da5d256e15cfe48d5499"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0xb, 0x45, {0x45, 0x30, "7ba395d89828c4779ba78c7242a34ed59a4cd4bc93c3b6d052053626ae703a1210219833dbc58fc482db0d01a34c0d803669ec67626486c0e7f282980f8a0df1d2c581"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000380)={0x40, 0x0, 0x45, "8264ad641155987a7ff49fc735b731be822f622840545930d16b3ea60701745e8f4cee80b54cd9a484f45cdf99abc9b53f16118d7dce29a669535b2f5bdd1e1dcc40d08422"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x1, 0xff, 0x2, 0x10, 0x9, 0x101, 0x8000, 0xffff, 0x8001, 0x1, 0xb9f, 0x1}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) 8.398100018s ago: executing program 1 (id=1666): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) syz_usb_control_io(r0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="190005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000040)={0x14, &(0x7f00000000c0)={0x40, 0x24, 0x43, {0x43, 0x31, "2526446b5d47c80f96a17e701a957726500e5a77fbb5bbf2f89d87a4b80f6628349c4e8db669362c95b68f94d7a2c6b1bc7c414a38fa70a53556bdcf6af4167b8e"}}, &(0x7f0000000340)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "01661f96c762fd41c9c5d6d0f15525cba5fc88f87487805e0665e094c45af1f58828bcd93a61cf67707d11c15f3b3114439f42df95c4499365ac667db4cf760b7c92b3485dac7b668ae6e7ef69fc2365e63065f582fea25bd071f0f7b29ce79f46f3f66850a3cbc058bf315f549a5c31be97dc04229495d999a3fd83d0c13a3437380d9f15aec249c0a72966c90f83ba701f873dd102feef2243a81d84cd39c433e2378f091b2911e8357f8afa9252d6a4331783ee0ab8390dc8f04c4aa77c9b77344ffd9c"}}}, &(0x7f0000000180)={0x1c, &(0x7f0000000440)={0x20, 0x1, 0xbd, "22f6ba7d24a8c4d4ddb84c9ecf0836412ffb739674d80ba06a51e1c6adc60f2b883c26570d701e54dc3c7d412d1d1faaa7ef813efb5402b026607822d1beddcc4321e727bafd9f28f24015bde3e7a6c9a53e4d9e4596e0a6d90c88c13bb64a804f9472133fca37690346241b6f72f7b5f8bbe224996b9d0f16d8c9347b4e65da5bb1f810e43d0bd9f22dc4cbf8d1ec125756a907b8bc0f43a8e4d76ccaa508391b6a93ddb3c4ed76d4ec00f48845ba6004d55034b77a16ada1a1329e53"}, &(0x7f0000000980)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000140)={0x21, 0x0, 0x4, "051a8c8f"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.616949257s ago: executing program 0 (id=1673): unshare(0x26020480) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x10, 0x3, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0xff00000000000000, 0x460c6}, 0x20, 0x700, 0x3, 0x69d}}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) connect$pppl2tp(r0, 0x0, 0x0) 6.445472927s ago: executing program 0 (id=1674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) (async) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = dup(r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, 0x0) (async) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) semget$private(0x0, 0x1, 0x5db) listen(0xffffffffffffffff, 0x2) 5.950932269s ago: executing program 1 (id=1677): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x2, 0x21a800) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000075c000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000148000/0x3000)=nil, 0x3000, 0x64) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x841, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x1, 0x6}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.038668283s ago: executing program 0 (id=1682): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 4.74550122s ago: executing program 3 (id=1684): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r1, 0x2def, 0xb80c, 0x4e, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) madvise(&(0x7f000050b000/0x1000)=nil, 0x1000, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 4.580070417s ago: executing program 0 (id=1685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe9c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe70, 0x2, [@TCA_FW_ACT={0xe6c, 0x4, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc, 0xe4ff}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.573344773s ago: executing program 4 (id=1686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) 4.053434639s ago: executing program 0 (id=1687): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "adebe72f8b9a4131", "d68083270c00e3debb630be3080bec00000000c826b376e98d998c3f00b9e900", "0c142178", "61639493285f7dd8"}, 0x38) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8=r3], 0x0, 0x0}) 3.992295781s ago: executing program 4 (id=1688): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/215, &(0x7f00000001c0)=0xd7) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = socket(0x1d, 0x2, 0x6) recvmmsg(r7, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10140, 0x0) r8 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)) 3.819965084s ago: executing program 3 (id=1689): unshare(0xc010180) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) userfaultfd(0x80801) unshare(0x20040000) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 3.59767797s ago: executing program 3 (id=1690): setsockopt(0xffffffffffffffff, 0x8001, 0x8, &(0x7f00000001c0)="8f49041fbba9e7bace36eeda8d4a6554035e0d949bdf04b3810ea697ddcd837427209ff34e5982446e61d67b38f0b1b870bf67fd9763e39dfc62681ae58440d489a297a01245f703abad2766770fe351bb6ee260854e92", 0x57) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb55aae60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.438257504s ago: executing program 4 (id=1691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x400000000000000) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000090) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x401, 0x0, 0xf4ae, 0x9, 0x400000006, 0x12ce, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = socket$inet(0x2, 0x4000000805, 0x0) listen(r6, 0x5) sendmmsg(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0022ffffffff86dd60b8192300080000fe8000000000000600000000000000aafe8000000000000000000000000000aa0000000000000000"], 0x0) 3.101477257s ago: executing program 3 (id=1693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000002000000000000000000000aa87"], 0x0) 2.880596666s ago: executing program 3 (id=1694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x81c3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/67, 0x43}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f0000000700)=""/67, 0x43}], 0x6, &(0x7f0000000940)=""/143, 0x8f}, 0x40004060) 2.063953691s ago: executing program 1 (id=1696): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_io_uring_setup(0x4d50, &(0x7f0000000300)={0x0, 0xf36a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) 1.9596086s ago: executing program 2 (id=1697): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a300000"], 0x122}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r7 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r9, @ANYBLOB="f3dafedc6bfd9a55a27454c096a79723f7ac4eb63e24075d053d2651bba6cb707176f46ada9a9bfde5e4dee1daa3162b3481"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000500)={0x0, 0xe, 0x71, "c318a8c52ddee94fd6b22121cd454f13e20f4f6c2443a46b7669507256a770ffb2c30e49ecb9f7207e45669624fb8cda074aa45fab27bee85230b7cb28b47d319ba7490cde0c89ac4cac0f39303864433d6ad46e98787facca381f5fb9594f0539aa4394b8f02e0fda01efec66b08d31d7"}, 0x79) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.185522601s ago: executing program 4 (id=1698): syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 1.009100759s ago: executing program 4 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000000000ef00000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800801034000000002140000001000010000000000000000000084000a17d970d45f6272eefe2da8b84d63ab416923b7e47b07e55f09c313627b6c262366ecbb9d2e228f6631c417c3"], 0x100}}, 0x0) 783.882579ms ago: executing program 4 (id=1700): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x22020600) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x400}], 0x2, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) 549.520766ms ago: executing program 1 (id=1701): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/215, &(0x7f00000001c0)=0xd7) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r2, 0x0, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = socket(0x1d, 0x2, 0x6) recvmmsg(r7, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10140, 0x0) r8 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)) 443.014434ms ago: executing program 2 (id=1702): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000007000100"/20, @ANYRES32], 0x50) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x100, 0x3000, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x200, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb1200e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 277.499945ms ago: executing program 2 (id=1703): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x4788}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x0) 242.425608ms ago: executing program 0 (id=1704): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2027) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x42140, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x10110009, 0x0, 0x0, 0x4}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f000000a400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x8000000000101, {0x0, 0x0, 0x7, 0x4b, 0x8007, 0x0, {0x2, 0x280, 0x4000000100, 0x2, 0x0, 0x800201002, 0x800, 0x8, 0xfffffffe, 0x1000, 0x0, 0x0, r2, 0xfffb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0xa0, 0x0, 0xe2, {{0xff, 0x0, 0x1922, 0xc, 0x4, 0x73d, {0x2, 0x8, 0x2, 0x0, 0xfffffffffffffffe, 0x8, 0x5, 0x9, 0x1, 0x8000, 0x7, 0x0, r2, 0xf880, 0xf08}}, {0x0, 0x8}}}, 0x0, 0x0}) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r4, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 195.710388ms ago: executing program 2 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0xfff5}, 0x0) 161.540629ms ago: executing program 3 (id=1706): socket(0xf, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="010000000000000014001a80100004800c00098008100900"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket(0x18, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="bc39664c71d7bd6fdaaad09cab00a1e096aa203430140769c4af5dc5fbf1c298faa8b637b455dcc1d205814506a1bf7116bba862884e52397ad4da77e0b738ef08b505d29099392151dc76f8f7415d93633917edc56ab815b0c219dde1837d6d4ea4cd74f876ad9e52a7be5144b4af198d555165a3cb1172e8a984ab10677d40b9926a6cf7ead1b2e10cae97fa2b7df8792bef1f932e4cdfddad0b302feb5bee0ca287e9aac8e8581f62afabffa972bd2ddf698574a3e85a77077bf269dc9e537759537d285ece2370e9eda3870bc9ae8f0d", 0xd2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x4000003}, 0x0) socket$kcm(0x2d, 0x2, 0x0) r7 = gettid() ptrace$getregset(0x4204, r7, 0x201, &(0x7f00000002c0)={0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) fcntl$addseals(r4, 0x409, 0x2) 77.493191ms ago: executing program 2 (id=1707): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 0s ago: executing program 2 (id=1708): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\f@\x00\x00\x00@\"'], 0x0}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f00000000c0), 0x0}, 0x20) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185) kernel console output (not intermixed with test programs): [ T9720] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.554254][ T5919] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 301.757121][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.767571][ T5919] usb 5-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 301.781484][ T5919] usb 5-1: config 1 interface 0 has no altsetting 0 [ 301.811442][ T5919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.834183][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 301.850677][ T5919] usb 5-1: SerialNumber: syz [ 301.883100][ T5919] usb 5-1: bad CDC descriptors [ 302.137842][ T5919] usb 5-1: USB disconnect, device number 64 [ 302.196877][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 302.234658][ T9754] geneve2: entered promiscuous mode [ 302.240046][ T9754] geneve2: entered allmulticast mode [ 303.489074][ T9771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.064699][ T43] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 304.544230][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 304.557798][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.623020][ T9781] loop6: detected capacity change from 0 to 7 [ 304.719358][ T43] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 304.730760][ T43] usb 5-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.779204][ T9781] Dev loop6: unable to read RDB block 7 [ 304.785144][ T9781] loop6: unable to read partition table [ 304.791048][ T9781] loop6: partition table beyond EOD, truncated [ 304.823245][ T43] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 305.003112][ T9781] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 305.066147][ T43] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0 [ 305.105555][ T43] usb 5-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.166595][ T43] usb 5-1: config 8 interface 0 has no altsetting 0 [ 305.177510][ T43] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 305.198198][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.218771][ T43] usb 5-1: Product: syz [ 305.228891][ T43] usb 5-1: Manufacturer: syz [ 305.233569][ T43] usb 5-1: SerialNumber: syz [ 305.497123][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.515110][ T43] usb 5-1: selecting invalid altsetting 0 [ 305.674449][ T9793] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1208'. [ 305.685012][ T9793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1208'. [ 305.699344][ T9793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1208'. [ 305.798923][ T43] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 305.872866][ T43] usb 5-1: USB disconnect, device number 65 [ 305.942474][ T6841] udevd[6841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.115811][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 306.384175][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 306.454191][ T5919] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 306.594124][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 306.604194][ T5919] usb 2-1: device descriptor read/64, error -71 [ 306.617368][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 306.644541][ T10] usb 3-1: can't read configurations, error -61 [ 306.780455][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 306.792355][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 306.815527][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 306.874536][ T5919] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 306.889900][ T9814] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.1214'. [ 307.014928][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 307.024569][ T5919] usb 2-1: device descriptor read/64, error -71 [ 307.037398][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 307.056842][ T10] usb 3-1: can't read configurations, error -61 [ 307.065549][ T10] usb usb3-port1: attempt power cycle [ 307.144461][ T5919] usb usb2-port1: attempt power cycle [ 307.425136][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 307.434690][ T5871] Bluetooth: hci3: Malformed LE Event: 0x0d [ 307.484421][ T5919] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 307.502991][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 307.512105][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 307.521039][ T10] usb 3-1: can't read configurations, error -61 [ 307.528676][ T5919] usb 2-1: device descriptor read/8, error -71 [ 307.642599][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1221'. [ 307.665733][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 307.754424][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 307.765922][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 307.773924][ T10] usb 3-1: can't read configurations, error -61 [ 307.781722][ T5919] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 307.838273][ T10] usb usb3-port1: unable to enumerate USB device [ 307.869085][ T5919] usb 2-1: device descriptor read/8, error -71 [ 307.987729][ T5919] usb usb2-port1: unable to enumerate USB device [ 308.506284][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 308.523702][ T9844] geneve2: entered promiscuous mode [ 308.529175][ T9844] geneve2: entered allmulticast mode [ 308.895087][ T9841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'. [ 309.017618][ T9848] netlink: 'syz.3.1224': attribute type 13 has an invalid length. [ 309.027210][ T9848] netlink: 'syz.3.1224': attribute type 17 has an invalid length. [ 309.156451][ T9848] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 310.011430][ T9860] vlan0: entered allmulticast mode [ 310.017038][ T9860] hsr0: entered allmulticast mode [ 310.022297][ T9860] hsr_slave_0: entered allmulticast mode [ 310.036073][ T9860] hsr_slave_1: entered allmulticast mode [ 312.034132][ T5919] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 312.213498][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 312.233595][ T5919] usb 4-1: config 2 has an invalid interface number: 15 but max is 0 [ 312.252328][ T5919] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 312.277327][ T5919] usb 4-1: config 2 has no interface number 1 [ 312.313611][ T5919] usb 4-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.375353][ T5919] usb 4-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 312.391788][ T5919] usb 4-1: config 2 interface 0 has no altsetting 0 [ 312.408694][ T5919] usb 4-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 312.421446][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.434204][ T5919] usb 4-1: Product: syz [ 312.438612][ T5919] usb 4-1: Manufacturer: syz [ 312.439010][ T9885] loop3: detected capacity change from 0 to 1 [ 312.455832][ T5919] usb 4-1: SerialNumber: syz [ 312.481932][ T5919] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 312.493573][ T6650] Dev loop3: unable to read RDB block 1 [ 312.535530][ T6650] loop3: unable to read partition table [ 312.554165][ T6650] loop3: partition table beyond EOD, truncated [ 312.588467][ T9885] Dev loop3: unable to read RDB block 1 [ 312.596795][ T9885] loop3: unable to read partition table [ 312.602811][ T9885] loop3: partition table beyond EOD, truncated [ 312.609362][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 312.627411][ T9885] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– Uª¨â·û) failed (rc=-5) [ 312.686121][ T5919] pwc: Failed to set LED on/off time (-71) [ 312.702307][ T5919] pwc: send_video_command error -71 [ 312.726301][ T5919] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 312.767822][ T5919] Philips webcam 4-1:2.0: probe with driver Philips webcam failed with error -71 [ 312.768775][ T9891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.787238][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 312.821878][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 312.831653][ T10] usb 5-1: can't read configurations, error -61 [ 312.844685][ T9891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.850816][ T5919] usb 4-1: USB disconnect, device number 57 [ 312.953418][ T9895] tipc: Started in network mode [ 312.958667][ T9895] tipc: Node identity becb9aa15473, cluster identity 4711 [ 312.968924][ T9895] tipc: Enabled bearer , priority 0 [ 312.976415][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 312.979227][ T9895] syzkaller0: entered promiscuous mode [ 312.994197][ T9895] syzkaller0: entered allmulticast mode [ 313.055365][ T9895] bond3: entered promiscuous mode [ 313.061844][ T9895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.113959][ T9899] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 313.122901][ T9899] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 313.164551][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 313.177938][ T9895] tipc: Resetting bearer [ 313.199615][ T9894] tipc: Resetting bearer [ 313.225809][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 313.233896][ T10] usb 5-1: can't read configurations, error -61 [ 313.234504][ T9894] tipc: Disabling bearer [ 313.320425][ T10] usb usb5-port1: attempt power cycle [ 313.684402][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 313.767993][ T9913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.799337][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 313.830411][ T9901] sctp: failed to load transform for md5: -2 [ 313.843467][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 313.858141][ T10] usb 5-1: can't read configurations, error -61 [ 314.034216][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 314.054804][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 314.062110][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 314.072874][ T10] usb 5-1: can't read configurations, error -61 [ 314.083420][ T10] usb usb5-port1: unable to enumerate USB device [ 314.347330][ T9920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.644186][ T5936] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 314.794963][ T5936] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 314.819222][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.841249][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 314.852485][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.903397][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.072207][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.217693][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.257693][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.280595][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.292611][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.303935][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.319888][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.332114][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.350395][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.362451][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.388196][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.551207][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.620319][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.694282][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.708656][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.719747][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.733188][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.742148][ T5936] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.752296][ T5936] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.775403][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.830647][ T5936] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 315.842879][ T5936] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 315.867523][ T5936] usb 3-1: Product: syz [ 315.890873][ T5936] usb 3-1: Manufacturer: syz [ 315.902928][ T5936] usb 3-1: SerialNumber: syz [ 315.919985][ T5936] usb 3-1: config 0 descriptor?? [ 315.959215][ T9939] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1251'. [ 315.971459][ T5936] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 315.979162][ T9939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1251'. [ 316.034352][ T9939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1251'. [ 316.233948][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 316.239502][ T10] usb 3-1: USB disconnect, device number 55 [ 316.253057][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 316.764276][ T5936] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 316.861502][ T9956] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1256'. [ 316.914218][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 316.922633][ T5936] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 316.932160][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.969931][ T5936] usb 2-1: config 0 descriptor?? [ 317.091950][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.098531][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.192878][ T5936] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 317.205443][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 317.365184][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 317.373463][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.384563][ T10] usb 3-1: config 0 has no interfaces? [ 317.392516][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 317.418658][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.449232][ T10] usb 3-1: config 0 descriptor?? [ 317.579260][ T9954] syz.4.1255 (9954): drop_caches: 2 [ 317.688205][ T43] usb 3-1: USB disconnect, device number 56 [ 317.984871][ T9960] ip6gre1: entered promiscuous mode [ 317.991831][ T9960] ip6gre1: entered allmulticast mode [ 318.376655][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 318.401810][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 318.593907][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 318.672912][ T9971] binder_alloc: binder_alloc_mmap_handler: 9970 200000ffe000-200001000000 already mapped failed -16 [ 318.690852][ T9971] binder_alloc: 9970: binder_alloc_buf, no vma [ 318.913764][ T9976] tipc: Enabled bearer , priority 0 [ 318.931226][ T9977] syzkaller0: entered promiscuous mode [ 318.938569][ T9977] syzkaller0: entered allmulticast mode [ 319.023600][ T9976] tipc: Resetting bearer [ 319.118936][ T9976] tipc: Disabling bearer [ 319.282125][ T9993] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1269'. [ 319.301917][ T9993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1269'. [ 319.313815][ T9993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1269'. [ 319.352470][ T9981] netlink: 'syz.2.1266': attribute type 4 has an invalid length. [ 319.427694][ T9981] dvmrp1: entered allmulticast mode [ 319.644703][ T5886] iguanair 1-1:0.0: failed to get version [ 319.657015][ T5886] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 319.678306][ T5886] usb 1-1: USB disconnect, device number 62 [ 319.693596][T10003] binder: BINDER_SET_CONTEXT_MGR already set [ 319.724466][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 319.732585][T10003] binder: 10000:10003 ioctl 4018620d 200000004a80 returned -16 [ 319.742851][T10003] binder_alloc: binder_alloc_mmap_handler: 10000 200000ffe000-200001000000 already mapped failed -16 [ 319.779630][T10010] loop6: detected capacity change from 0 to 7 [ 319.788220][ T5929] Dev loop6: unable to read RDB block 7 [ 319.793944][ T5929] loop6: AHDI p3 [ 319.802891][ T5929] loop6: partition table partially beyond EOD, truncated [ 319.817973][T10010] Dev loop6: unable to read RDB block 7 [ 319.831606][T10010] loop6: AHDI p3 [ 319.837358][T10010] loop6: partition table partially beyond EOD, truncated [ 320.245064][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 320.783001][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 320.802216][ T5936] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 320.816039][ T9946] delete_channel: no stack [ 320.821534][ T5936] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 320.835632][ T5936] asix 2-1:0.0: probe with driver asix failed with error -71 [ 320.866004][ T5936] usb 2-1: USB disconnect, device number 55 [ 320.921250][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 320.988839][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.053344][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.087949][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.112928][ T10] usb 4-1: config 0 descriptor?? [ 321.229968][T10030] loop6: detected capacity change from 0 to 7 [ 321.240101][ T5929] Dev loop6: unable to read RDB block 7 [ 321.250293][ T5929] loop6: unable to read partition table [ 321.257081][ T5929] loop6: partition table beyond EOD, truncated [ 321.269650][T10030] Dev loop6: unable to read RDB block 7 [ 321.275473][T10030] loop6: unable to read partition table [ 321.281447][T10030] loop6: partition table beyond EOD, truncated [ 321.288746][T10030] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 321.366096][T10035] __nla_validate_parse: 2 callbacks suppressed [ 321.366109][T10035] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1283'. [ 321.382350][T10035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1283'. [ 321.394656][T10035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1283'. [ 321.498239][T10038] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1284'. [ 321.532750][ T10] hid_parser_main: 456 callbacks suppressed [ 321.532766][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 321.644673][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 321.653534][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 321.686418][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 321.807251][T10046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.851834][T10049] binder: 9997:10049 ioctl 660c 0 returned -22 [ 321.991573][T10054] : renamed from bridge_slave_0 (while UP) [ 322.098886][T10033] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 322.129356][T10033] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 322.154577][ T5990] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 322.178920][T10033] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.189843][T10033] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 322.254360][T10033] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.382250][T10033] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 322.390121][ T5990] usb 1-1: Using ep0 maxpacket: 32 [ 322.405725][ T5990] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.422180][ T5990] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.508238][ T5990] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 322.527935][T10033] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.533977][T10033] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 322.544263][ T5990] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 322.564220][ T5990] usb 1-1: Product: syz [ 322.573457][T10033] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.586727][ T5990] usb 1-1: Manufacturer: syz [ 322.587393][T10033] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 322.636728][ T5990] hub 1-1:4.0: USB hub found [ 322.832574][ T5990] hub 1-1:4.0: 2 ports detected [ 322.894205][ T5886] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 323.041499][T10066] loop6: detected capacity change from 0 to 7 [ 323.042847][T10051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.060441][T10051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.099547][T10066] Dev loop6: unable to read RDB block 7 [ 323.116693][T10066] loop6: unable to read partition table [ 323.133259][T10066] loop6: partition table beyond EOD, truncated [ 323.191621][T10066] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 323.458407][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1295'. [ 323.483262][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1295'. [ 323.546971][T10077] QAT: failed to copy from user. [ 323.659984][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 324.127238][ T5990] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 324.133708][ T10] usb 4-1: USB disconnect, device number 58 [ 324.139837][ T5990] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 324.168786][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 324.245960][ T5990] usb 1-1: USB disconnect, device number 63 [ 324.364262][ T10] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 324.560506][ T10] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 324.569979][ T10] usb 4-1: config 0 has no interface number 0 [ 324.585187][ T10] usb 4-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 324.599568][ T10] usb 4-1: config 0 interface 128 has no altsetting 0 [ 324.612946][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 324.810026][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.868951][ T10] usb 4-1: Product: syz [ 324.941030][ T10] usb 4-1: Manufacturer: syz [ 324.945800][ T10] usb 4-1: SerialNumber: syz [ 324.967414][T10087] delete_channel: no stack [ 324.974187][ T10] usb 4-1: config 0 descriptor?? [ 324.997825][ T10] radio-si470x 4-1:0.128: could not find interrupt in endpoint [ 325.041460][ T10] radio-si470x 4-1:0.128: probe with driver radio-si470x failed with error -5 [ 325.083631][ T10] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 325.394170][ T920] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 325.588375][ T920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 325.607554][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 325.627600][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 325.659458][ T920] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 325.672976][ T920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.693787][ T920] usb 1-1: Product: syz [ 325.701636][ T920] usb 1-1: Manufacturer: syz [ 325.727693][ T920] usb 1-1: SerialNumber: syz [ 325.750533][ T920] usb 1-1: config 0 descriptor?? [ 325.856746][T10102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.894701][T10102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.926993][T10102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.961435][T10102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.029517][ T10] usb 4-1: USB disconnect, device number 59 [ 326.054257][ T5936] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 326.216011][ T5936] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 326.242006][ T5936] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 326.276776][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.357803][ T5936] usb 5-1: Product: syz [ 326.362156][ T5936] usb 5-1: Manufacturer: syz [ 326.388237][ T5936] usb 5-1: SerialNumber: syz [ 326.458720][ T5936] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 326.648216][T10107] veth1_to_team: entered promiscuous mode [ 326.681947][T10107] batadv_slave_1: entered promiscuous mode [ 326.698882][ T5936] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 326.716267][T10107] debugfs: 'hsr2' already exists in 'hsr' [ 326.722144][T10107] Cannot create hsr debugfs directory [ 326.744329][ T5936] usb 5-1: USB disconnect, device number 70 [ 326.783475][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 326.804646][T10107] hsr2: entered promiscuous mode [ 326.812377][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 327.108048][T10124] loop6: detected capacity change from 0 to 7 [ 327.124459][T10124] Dev loop6: unable to read RDB block 7 [ 327.130340][T10124] loop6: AHDI p2 p3 [ 327.134423][T10124] loop6: partition table partially beyond EOD, truncated [ 327.159124][T10124] loop6: p2 size 46 extends beyond EOD, truncated [ 327.174869][ T43] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 327.247477][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 327.355594][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 327.366950][ T43] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 327.385612][ T43] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 327.416199][ T43] usb 4-1: config 6 has no interface number 0 [ 327.437737][ T43] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 327.460345][ T43] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 327.478914][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 327.495895][T10137] geneve2: entered promiscuous mode [ 327.501237][T10137] geneve2: entered allmulticast mode [ 327.520839][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 327.532053][ T43] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.548489][ T43] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 327.569162][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.580453][ T43] usb 4-1: Product: syz [ 327.598830][ T43] usb 4-1: Manufacturer: syz [ 327.612893][ T43] usb 4-1: SerialNumber: syz [ 327.628198][ T43] hso 4-1:6.2: Failed to find INT IN ep [ 327.665789][ T10] usb 2-1: device descriptor read/64, error -71 [ 327.675572][ T5919] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 327.872369][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 327.896693][ T43] usb 4-1: USB disconnect, device number 60 [ 327.904428][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 327.916387][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 327.951908][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 327.963037][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 327.993538][ T5919] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 328.013490][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.036109][ T5919] usb 5-1: Product: syz [ 328.048545][ T5919] usb 5-1: Manufacturer: syz [ 328.057432][ T5919] usb 5-1: SerialNumber: syz [ 328.082205][ T5919] usb 5-1: config 0 descriptor?? [ 328.104198][ T10] usb 2-1: device descriptor read/64, error -71 [ 328.243031][ T10] usb usb2-port1: attempt power cycle [ 328.604178][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 328.645103][ T10] usb 2-1: device descriptor read/8, error -71 [ 328.894280][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 328.923050][ T10] usb 2-1: device descriptor read/8, error -71 [ 329.044442][ T10] usb usb2-port1: unable to enumerate USB device [ 329.332414][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 329.454247][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 329.500925][T10154] program syz.3.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.926131][T10161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.199339][T10163] loop6: detected capacity change from 0 to 7 [ 330.263062][T10163] Dev loop6: unable to read RDB block 7 [ 330.273789][T10163] loop6: AHDI p2 p3 [ 330.281528][T10163] loop6: partition table partially beyond EOD, truncated [ 330.291716][T10163] loop6: p2 size 46 extends beyond EOD, truncated [ 330.469942][T10168] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 330.627185][ T6650] udevd[6650]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 330.959775][T10168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.975368][T10171] bond2: entered promiscuous mode [ 333.689410][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'. [ 333.967039][ T5936] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 334.034483][ T5936] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.504235][ T5886] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 334.518953][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1344'. [ 334.745693][ T5886] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 334.774249][ T5886] usb 4-1: can't read configurations, error -22 [ 334.937027][ T5886] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 335.139449][ T5886] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 335.164151][ T5886] usb 4-1: can't read configurations, error -22 [ 335.190376][ T5886] usb usb4-port1: attempt power cycle [ 335.614154][ T5886] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 335.682217][ T5886] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 335.710876][ T5886] usb 4-1: can't read configurations, error -22 [ 335.874503][ T5886] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 335.928022][ T5886] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 335.936607][ T5886] usb 4-1: can't read configurations, error -22 [ 335.943785][ T5886] usb usb4-port1: unable to enumerate USB device [ 336.594380][ T5886] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 336.764352][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 336.772630][ T5886] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.791619][ T5886] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.824343][ T43] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 336.866265][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.875886][ T5886] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 336.894431][ T5886] usb 3-1: Product: syz [ 336.914117][ T5886] usb 3-1: Manufacturer: syz [ 336.932006][ T5886] hub 3-1:4.0: USB hub found [ 336.997042][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 337.012236][ T43] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.026944][ T43] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.049276][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 337.129955][ T43] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 337.135977][ T5886] hub 3-1:4.0: 2 ports detected [ 337.154715][ T43] usb 2-1: Product: syz [ 337.159789][ T43] usb 2-1: Manufacturer: syz [ 337.240032][ T43] hub 2-1:4.0: USB hub found [ 337.484464][ T43] hub 2-1:4.0: 2 ports detected [ 337.925142][T10264] loop6: detected capacity change from 0 to 7 [ 337.936812][T10264] Dev loop6: unable to read RDB block 7 [ 337.943852][T10264] loop6: AHDI p2 p3 [ 337.982887][T10264] loop6: partition table partially beyond EOD, truncated [ 338.022004][T10264] loop6: p2 size 46 extends beyond EOD, truncated [ 338.365028][ T5886] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 338.428210][ T5886] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 338.519401][ T6842] udevd[6842]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 338.535472][ T5886] usb 3-1: USB disconnect, device number 57 [ 338.685585][ T43] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 338.692041][ T43] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 338.941231][ T43] usb 2-1: USB disconnect, device number 60 [ 338.984136][ T5936] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 339.243513][ T5936] usb 4-1: config 0 has no interfaces? [ 339.313791][ T5936] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.451246][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.486263][ T5936] usb 4-1: config 0 descriptor?? [ 339.702469][T10283] loop3: detected capacity change from 0 to 1 [ 339.799718][ T5966] Dev loop3: unable to read RDB block 1 [ 339.818018][ T5966] loop3: unable to read partition table [ 339.830540][ T5966] loop3: partition table beyond EOD, truncated [ 339.846535][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 339.940472][T10283] Dev loop3: unable to read RDB block 1 [ 339.946453][T10283] loop3: unable to read partition table [ 339.952493][T10283] loop3: partition table beyond EOD, truncated [ 339.959097][T10283] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 340.074248][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 340.128168][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 340.164508][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.251024][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.281144][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.295085][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.327886][ T43] usb 3-1: Product: syz [ 340.353338][ T43] usb 3-1: Manufacturer: syz [ 340.384428][ T43] usb 3-1: SerialNumber: syz [ 340.474234][ T5886] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 340.647453][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 340.655437][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 340.672663][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.691045][ T5886] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 340.700531][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.714170][ T5886] usb 2-1: Product: syz [ 340.778011][ T5886] usb 2-1: Manufacturer: syz [ 340.796146][ T5886] usb 2-1: SerialNumber: syz [ 340.818629][ T5886] usb 2-1: config 0 descriptor?? [ 340.910476][ T43] usb 3-1: 0:2 : does not exist [ 340.919218][ T5886] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 340.933425][ T5886] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 341.499301][ T43] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 341.636209][ T43] usb 3-1: USB disconnect, device number 58 [ 341.720433][ T5886] em28xx 2-1:0.0: chip ID is em2874 [ 341.757403][ T6650] udevd[6650]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.969531][ T5886] usb 4-1: USB disconnect, device number 65 [ 342.352605][T10300] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1374'. [ 342.400555][ T5886] usb 2-1: USB disconnect, device number 61 [ 342.423675][ T5886] em28xx 2-1:0.0: Disconnecting em28xx [ 342.487247][ T5886] em28xx 2-1:0.0: Freeing device [ 342.769772][T10306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 342.892050][T10308] program syz.0.1375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.983344][T10306] netlink: 'syz.2.1376': attribute type 1 has an invalid length. [ 343.736697][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 344.527759][T10324] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1381'. [ 345.832483][ T43] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 346.478429][ T43] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 346.525009][ T920] iguanair 1-1:0.0: failed to get version [ 346.556524][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.565518][ T920] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 346.586007][T10354] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1390'. [ 346.586558][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.612872][T10355] loop6: detected capacity change from 0 to 7 [ 346.616436][ T920] usb 1-1: USB disconnect, device number 64 [ 346.650762][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.660759][T10355] Dev loop6: unable to read RDB block 7 [ 346.687080][ T43] usb 3-1: Product: syz [ 346.687596][T10355] loop6: unable to read partition table [ 346.691313][ T43] usb 3-1: Manufacturer: syz [ 346.691333][ T43] usb 3-1: SerialNumber: syz [ 346.746055][ T43] usb 3-1: config 0 descriptor?? [ 346.777931][T10355] loop6: partition table beyond EOD, truncated [ 346.919061][T10355] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ïÿ¨â·û) failed (rc=-5) [ 347.112635][ T43] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 347.159407][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.204683][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.278740][T10362] FAULT_INJECTION: forcing a failure. [ 347.278740][T10362] name failslab, interval 1, probability 0, space 0, times 0 [ 347.318385][T10362] CPU: 0 UID: 0 PID: 10362 Comm: syz.3.1393 Not tainted syzkaller #0 PREEMPT(full) [ 347.318411][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.318421][T10362] Call Trace: [ 347.318428][T10362] [ 347.318436][T10362] dump_stack_lvl+0x189/0x250 [ 347.318460][T10362] ? __pfx____ratelimit+0x10/0x10 [ 347.318489][T10362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.318508][T10362] ? __pfx__printk+0x10/0x10 [ 347.318536][T10362] ? __pfx___might_resched+0x10/0x10 [ 347.318556][T10362] should_fail_ex+0x414/0x560 [ 347.318583][T10362] should_failslab+0xa8/0x100 [ 347.318607][T10362] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 347.318629][T10362] ? __alloc_skb+0x112/0x2d0 [ 347.318651][T10362] __alloc_skb+0x112/0x2d0 [ 347.318673][T10362] netlink_sendmsg+0x5c6/0xb30 [ 347.318700][T10362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.318718][T10362] ? aa_sock_msg_perm+0xf1/0x1d0 [ 347.318736][T10362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.318754][T10362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.318772][T10362] __sock_sendmsg+0x21c/0x270 [ 347.318797][T10362] ____sys_sendmsg+0x505/0x830 [ 347.318823][T10362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.318857][T10362] ? import_iovec+0x74/0xa0 [ 347.318881][T10362] ___sys_sendmsg+0x21f/0x2a0 [ 347.318903][T10362] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.318956][T10362] ? __fget_files+0x2a/0x420 [ 347.318970][T10362] ? __fget_files+0x3a0/0x420 [ 347.318995][T10362] __x64_sys_sendmsg+0x19b/0x260 [ 347.319023][T10362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.319053][T10362] ? __pfx_ksys_write+0x10/0x10 [ 347.319072][T10362] ? rcu_is_watching+0x15/0xb0 [ 347.319094][T10362] ? do_syscall_64+0xbe/0x3b0 [ 347.319115][T10362] do_syscall_64+0xfa/0x3b0 [ 347.319131][T10362] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.319147][T10362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.319164][T10362] ? clear_bhb_loop+0x60/0xb0 [ 347.319183][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.319199][T10362] RIP: 0033:0x7f4473b8ebe9 [ 347.319215][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.319228][T10362] RSP: 002b:00007f4474abe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.319246][T10362] RAX: ffffffffffffffda RBX: 00007f4473dc5fa0 RCX: 00007f4473b8ebe9 [ 347.319257][T10362] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 347.319268][T10362] RBP: 00007f4474abe090 R08: 0000000000000000 R09: 0000000000000000 [ 347.319278][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.319288][T10362] R13: 00007f4473dc6038 R14: 00007f4473dc5fa0 R15: 00007f4473eefa28 [ 347.319316][T10362] [ 347.338033][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.345771][T10360] binder: BINDER_SET_CONTEXT_MGR already set [ 347.474978][T10365] binder_alloc: binder_alloc_mmap_handler: 10358 200000ffe000-200001000000 already mapped failed -16 [ 347.541028][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.659551][T10360] binder: 10358:10360 ioctl 4018620d 200000004a80 returned -16 [ 347.862680][T10369] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1395'. [ 347.882628][T10369] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1395'. [ 347.906018][T10369] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1395'. [ 348.116830][T10382] loop6: detected capacity change from 0 to 7 [ 348.183587][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 348.201698][T10382] Dev loop6: unable to read RDB block 7 [ 348.215477][T10382] loop6: AHDI p3 [ 348.233056][T10382] loop6: partition table partially beyond EOD, truncated [ 348.399519][ T43] usb 3-1: USB disconnect, device number 59 [ 348.464241][ T5919] iguanair 5-1:0.0: failed to get version [ 348.509897][ T5919] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 348.572860][ T5919] usb 5-1: USB disconnect, device number 71 [ 348.703845][T10404] binder: BINDER_SET_CONTEXT_MGR already set [ 348.733553][T10404] binder: 10401:10404 ioctl 4018620d 200000004a80 returned -16 [ 348.743752][T10404] binder_alloc: binder_alloc_mmap_handler: 10401 200000ffe000-200001000000 already mapped failed -16 [ 348.894192][ T43] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 348.904119][ T5886] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 349.044109][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 349.057596][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 349.058495][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 349.067098][ T5886] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.109656][ T5886] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.127105][ T43] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 349.135923][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 349.159832][ T5886] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 349.160576][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.170188][ T5886] usb 2-1: Product: syz [ 349.183125][ T5886] usb 2-1: Manufacturer: syz [ 349.201245][ T43] usb 3-1: Product: syz [ 349.208325][ T43] usb 3-1: Manufacturer: syz [ 349.211489][ T5886] hub 2-1:4.0: USB hub found [ 349.212952][ T43] usb 3-1: SerialNumber: syz [ 349.216136][ T43] usb 3-1: config 0 descriptor?? [ 349.240693][ T43] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 349.252615][ T43] usb 3-1: Detected FT232R [ 349.408442][ T5886] hub 2-1:4.0: 2 ports detected [ 349.461982][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 349.665492][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1415'. [ 349.706319][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1415'. [ 350.024793][ T920] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 350.222570][ T920] usb 5-1: config 0 has no interfaces? [ 350.251786][ T920] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 350.267220][ T920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.292197][ T920] usb 5-1: Product: syz [ 350.303788][ T920] usb 5-1: Manufacturer: syz [ 350.318221][ T920] usb 5-1: SerialNumber: syz [ 350.414286][ T920] usb 5-1: config 0 descriptor?? [ 350.687873][ T10] usb 5-1: USB disconnect, device number 72 [ 350.693966][ T5886] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 350.702419][ T5886] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 350.735793][ T5886] usb 2-1: USB disconnect, device number 62 [ 351.089316][T10443] loop6: detected capacity change from 0 to 7 [ 351.099257][ T5929] Dev loop6: unable to read RDB block 7 [ 351.108060][ T5929] loop6: AHDI p3 [ 351.112278][ T5929] loop6: partition table partially beyond EOD, truncated [ 351.127995][T10443] Dev loop6: unable to read RDB block 7 [ 351.160602][T10443] loop6: AHDI p3 [ 351.168810][T10443] loop6: partition table partially beyond EOD, truncated [ 351.765879][ T43] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 351.787138][ T43] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 351.881296][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 352.038651][ T43] usb 3-1: USB disconnect, device number 60 [ 352.075475][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 352.102500][ T43] ftdi_sio 3-1:0.0: device disconnected [ 352.179314][T10464] binder_alloc: binder_alloc_mmap_handler: 10459 200000ffe000-200001000000 already mapped failed -16 [ 352.454116][ T920] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 352.614222][ T920] usb 1-1: Using ep0 maxpacket: 8 [ 352.632720][ T920] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 352.654922][ T920] usb 1-1: config 0 has no interface number 0 [ 352.686729][ T920] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 352.707367][ T920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.728891][ T920] usb 1-1: Product: syz [ 352.743088][ T920] usb 1-1: Manufacturer: syz [ 352.757196][ T920] usb 1-1: SerialNumber: syz [ 352.773837][ T920] usb 1-1: config 0 descriptor?? [ 353.004251][ T5886] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 353.005957][ T920] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 353.032276][ T920] usb 1-1: No valid video chain found. [ 353.049907][ T920] usb 1-1: USB disconnect, device number 65 [ 353.157547][ T5886] usb 3-1: config 0 has no interfaces? [ 353.173937][ T5886] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 353.210895][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.224872][ T5886] usb 3-1: Product: syz [ 353.230004][ T5886] usb 3-1: Manufacturer: syz [ 353.235950][ T5886] usb 3-1: SerialNumber: syz [ 353.245360][ T5886] usb 3-1: config 0 descriptor?? [ 353.427104][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1435'. [ 353.454779][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 353.530116][T10496] FAULT_INJECTION: forcing a failure. [ 353.530116][T10496] name failslab, interval 1, probability 0, space 0, times 0 [ 353.543772][T10496] CPU: 1 UID: 0 PID: 10496 Comm: syz.1.1438 Not tainted syzkaller #0 PREEMPT(full) [ 353.543805][T10496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.543814][T10496] Call Trace: [ 353.543820][T10496] [ 353.543827][T10496] dump_stack_lvl+0x189/0x250 [ 353.543852][T10496] ? __pfx____ratelimit+0x10/0x10 [ 353.543869][T10496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.543888][T10496] ? __pfx__printk+0x10/0x10 [ 353.543912][T10496] ? __lock_acquire+0xab9/0xd20 [ 353.543944][T10496] should_fail_ex+0x414/0x560 [ 353.543972][T10496] should_failslab+0xa8/0x100 [ 353.544000][T10496] kmem_cache_alloc_noprof+0x73/0x3c0 [ 353.544019][T10496] ? skb_clone+0x212/0x3a0 [ 353.544041][T10496] skb_clone+0x212/0x3a0 [ 353.544063][T10496] __netlink_deliver_tap+0x404/0x850 [ 353.544092][T10496] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.544109][T10496] netlink_deliver_tap+0x19c/0x1b0 [ 353.544125][T10496] netlink_unicast+0x7fa/0x9e0 [ 353.544154][T10496] ? __pfx_netlink_unicast+0x10/0x10 [ 353.544178][T10496] ? netlink_sendmsg+0x642/0xb30 [ 353.544191][T10496] ? skb_put+0x11b/0x210 [ 353.544211][T10496] netlink_sendmsg+0x805/0xb30 [ 353.544236][T10496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.544256][T10496] ? aa_sock_msg_perm+0xf1/0x1d0 [ 353.544274][T10496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.544292][T10496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.544311][T10496] __sock_sendmsg+0x21c/0x270 [ 353.544338][T10496] ____sys_sendmsg+0x505/0x830 [ 353.544364][T10496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.544393][T10496] ? import_iovec+0x74/0xa0 [ 353.544418][T10496] ___sys_sendmsg+0x21f/0x2a0 [ 353.544441][T10496] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.544499][T10496] ? __fget_files+0x2a/0x420 [ 353.544513][T10496] ? __fget_files+0x3a0/0x420 [ 353.544539][T10496] __x64_sys_sendmsg+0x19b/0x260 [ 353.544561][T10496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.544591][T10496] ? __pfx_ksys_write+0x10/0x10 [ 353.544610][T10496] ? rcu_is_watching+0x15/0xb0 [ 353.544632][T10496] ? do_syscall_64+0xbe/0x3b0 [ 353.544654][T10496] do_syscall_64+0xfa/0x3b0 [ 353.544670][T10496] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.544686][T10496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.544702][T10496] ? clear_bhb_loop+0x60/0xb0 [ 353.544723][T10496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.544739][T10496] RIP: 0033:0x7f2cf8b8ebe9 [ 353.544754][T10496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.544769][T10496] RSP: 002b:00007f2cf9a0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.544795][T10496] RAX: ffffffffffffffda RBX: 00007f2cf8dc5fa0 RCX: 00007f2cf8b8ebe9 [ 353.544808][T10496] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 353.544819][T10496] RBP: 00007f2cf9a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 353.544830][T10496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.544840][T10496] R13: 00007f2cf8dc6038 R14: 00007f2cf8dc5fa0 R15: 00007f2cf8eefa28 [ 353.544870][T10496] [ 353.842021][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.869695][ T10] usb 5-1: config 0 has no interfaces? [ 353.895424][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 353.904758][ T5886] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 353.916857][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.939853][T10501] loop6: detected capacity change from 0 to 7 [ 353.947989][ T10] usb 5-1: Product: syz [ 353.954258][T10501] Dev loop6: unable to read RDB block 7 [ 353.959865][T10501] loop6: AHDI p3 [ 353.967450][T10501] loop6: partition table partially beyond EOD, truncated [ 353.972900][ T10] usb 5-1: Manufacturer: syz [ 354.005122][ T10] usb 5-1: SerialNumber: syz [ 354.033117][ T10] usb 5-1: config 0 descriptor?? [ 354.038826][T10503] tipc: Enabled bearer , priority 0 [ 354.066277][T10505] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1442'. [ 354.085686][T10503] syzkaller0: entered promiscuous mode [ 354.091231][T10503] syzkaller0: entered allmulticast mode [ 354.094819][ T5886] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 354.116751][T10503] tipc: Resetting bearer [ 354.122882][T10505] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1442'. [ 354.137126][T10505] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1442'. [ 354.154293][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.173345][ T5886] usb 4-1: config 0 descriptor?? [ 354.201324][ T5886] usb 4-1: selecting invalid altsetting 1 [ 354.317745][ T5886] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 354.428128][ T43] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 354.494184][ T920] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 354.517110][ T5886] usb 4-1: USB disconnect, device number 67 [ 354.594853][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 354.658591][ T920] usb 1-1: Using ep0 maxpacket: 32 [ 354.682041][ T920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.695161][ T920] usb 1-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=ce.6f [ 354.704473][ T920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.712485][ T920] usb 1-1: Product: syz [ 354.717106][ T920] usb 1-1: Manufacturer: syz [ 354.721751][ T920] usb 1-1: SerialNumber: syz [ 354.726579][ T43] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 354.743505][ T920] usb 1-1: config 0 descriptor?? [ 354.752964][ T920] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 354.884243][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 354.890120][ T43] usb usb2-port1: attempt power cycle [ 355.000629][ T920] usb 1-1: qt2_attach - failed to power on unit: -71 [ 355.010135][ T920] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 355.027709][ T920] usb 1-1: USB disconnect, device number 66 [ 355.099912][ T5936] tipc: Node number set to 3937966753 [ 355.237049][ T43] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 355.272779][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 355.419127][ T43] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 355.445674][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 355.463179][ T43] usb usb2-port1: unable to enumerate USB device [ 355.632132][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 355.790712][ T43] usb 3-1: USB disconnect, device number 61 [ 356.078477][ T43] usb 5-1: USB disconnect, device number 73 [ 356.080669][T10513] batadv0: entered promiscuous mode [ 356.096250][T10513] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 356.105992][T10513] batadv0: left promiscuous mode [ 356.519931][T10532] loop6: detected capacity change from 0 to 7 [ 356.531099][ T5929] Dev loop6: unable to read RDB block 7 [ 356.540958][ T5929] loop6: unable to read partition table [ 356.612092][ T5929] loop6: partition table beyond EOD, truncated [ 356.719430][T10532] Dev loop6: unable to read RDB block 7 [ 356.758061][T10532] loop6: unable to read partition table [ 356.780745][T10532] loop6: partition table beyond EOD, truncated [ 356.807199][T10535] loop3: detected capacity change from 0 to 1 [ 356.816921][T10532] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 356.836415][T10535] Dev loop3: unable to read RDB block 1 [ 356.857976][T10535] loop3: unable to read partition table [ 356.884486][T10535] loop3: partition table beyond EOD, truncated [ 356.890707][T10535] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 357.129066][T10503] tipc: Resetting bearer [ 357.177486][T10503] tipc: Disabling bearer [ 357.400322][ T30] audit: type=1326 audit(1757386291.781:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10542 comm="syz.0.1457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bb2b8ebe9 code=0x0 [ 357.464624][T10550] loop6: detected capacity change from 0 to 7 [ 357.478170][T10550] Dev loop6: unable to read RDB block 7 [ 357.483769][T10550] loop6: AHDI p2 p3 [ 357.521933][T10550] loop6: partition table partially beyond EOD, truncated [ 357.554318][T10550] loop6: p2 size 46 extends beyond EOD, truncated [ 357.743369][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 358.074856][ T43] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 358.217561][T10565] loop3: detected capacity change from 0 to 1 [ 358.231727][ T5929] Dev loop3: unable to read RDB block 1 [ 358.239114][ T5929] loop3: unable to read partition table [ 358.246920][ T5929] loop3: partition table beyond EOD, truncated [ 358.257756][T10565] Dev loop3: unable to read RDB block 1 [ 358.263563][T10565] loop3: unable to read partition table [ 358.265176][ T43] usb 5-1: too many configurations: 164, using maximum allowed: 8 [ 358.272956][T10565] loop3: partition table beyond EOD, truncated [ 358.298636][ T43] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 358.301511][T10565] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 358.315197][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.348830][ T43] usb 5-1: config 0 descriptor?? [ 358.374437][ T43] usb 5-1: bad CDC descriptors [ 358.591583][ T920] usb 5-1: USB disconnect, device number 74 [ 358.744123][ T43] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 358.838214][T10577] loop6: detected capacity change from 0 to 7 [ 358.855614][T10577] Dev loop6: unable to read RDB block 7 [ 358.861220][T10577] loop6: unable to read partition table [ 358.870178][T10577] loop6: partition table beyond EOD, truncated [ 358.876880][T10577] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 358.935120][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 358.943690][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.955013][ T43] usb 1-1: config 0 has no interfaces? [ 358.960516][ T43] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 359.004152][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.014662][ T5886] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 359.046570][ T43] usb 1-1: config 0 descriptor?? [ 359.195987][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.207961][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 359.234099][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 359.276280][ T10] usb 1-1: USB disconnect, device number 67 [ 359.302269][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 359.369891][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.498389][ T5886] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 359.613271][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.630813][ T5886] usb 3-1: Product: syz [ 359.635109][ T5886] usb 3-1: Manufacturer: syz [ 359.639721][ T5886] usb 3-1: SerialNumber: syz [ 359.652266][ T5886] usb 3-1: config 0 descriptor?? [ 359.658101][T10573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 359.727520][ T5886] rc_core: IR keymap rc-xbox-dvd not found [ 359.733426][ T5886] Registered IR keymap rc-empty [ 359.739751][ T5886] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 359.796058][T10605] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1478'. [ 359.931041][ T5886] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 359.941313][T10607] loop6: detected capacity change from 0 to 7 [ 359.960312][T10607] Dev loop6: unable to read RDB block 7 [ 359.978961][T10607] loop6: unable to read partition table [ 360.259988][T10607] loop6: partition table beyond EOD, truncated [ 360.302849][T10607] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ªU¨â·û) failed (rc=-5) [ 360.362556][ T5886] usb 3-1: USB disconnect, device number 62 [ 360.368657][ C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 361.314702][T10630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1483'. [ 361.618673][T10641] loop6: detected capacity change from 0 to 7 [ 361.628022][ T5929] Dev loop6: unable to read RDB block 7 [ 361.656972][ T5929] loop6: AHDI p3 [ 361.660665][ T5929] loop6: partition table partially beyond EOD, truncated [ 361.692360][T10641] Dev loop6: unable to read RDB block 7 [ 361.698526][T10641] loop6: AHDI p3 [ 361.707928][T10641] loop6: partition table partially beyond EOD, truncated [ 361.914303][ T5886] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 362.000931][T10647] loop3: detected capacity change from 0 to 1 [ 362.019474][T10647] Dev loop3: unable to read RDB block 1 [ 362.028066][T10647] loop3: unable to read partition table [ 362.033926][T10647] loop3: partition table beyond EOD, truncated [ 362.040399][T10647] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 362.124349][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 362.147821][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.178879][ T5886] usb 4-1: config 0 has no interfaces? [ 362.201919][ T5886] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 362.247054][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.255195][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 362.297402][ T5886] usb 4-1: config 0 descriptor?? [ 362.458722][ T10] usb 5-1: config 0 has no interfaces? [ 362.469298][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 362.488782][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.506787][ T10] usb 5-1: Product: syz [ 362.510596][ T43] usb 4-1: USB disconnect, device number 68 [ 362.517246][ T10] usb 5-1: Manufacturer: syz [ 362.521942][ T10] usb 5-1: SerialNumber: syz [ 362.550388][ T10] usb 5-1: config 0 descriptor?? [ 362.584122][ T5886] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 362.657197][T10661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 362.673186][T10661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 362.700018][T10664] fuse: Unknown parameter 'mGN‡8o«ad' [ 362.744124][ T5886] usb 1-1: device descriptor read/64, error -71 [ 362.775715][ T10] usb 5-1: USB disconnect, device number 75 [ 362.830789][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 362.845569][T10666] batadv0: entered promiscuous mode [ 362.851960][T10666] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.864333][T10666] batadv0: left promiscuous mode [ 362.994576][ T5886] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 363.136704][ T5886] usb 1-1: device descriptor read/64, error -71 [ 363.573676][ T5886] usb usb1-port1: attempt power cycle [ 363.736355][T10684] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1502'. [ 363.770882][T10685] futex_wake_op: syz.4.1505 tries to shift op by 36; fix this program [ 363.786276][T10685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1505'. [ 363.954340][ T5886] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 363.997932][ T5886] usb 1-1: device descriptor read/8, error -71 [ 364.021617][T10687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.346337][ T5886] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 364.458574][ T5886] usb 1-1: device descriptor read/8, error -71 [ 364.539039][ T43] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 364.714281][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 364.743162][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.745120][ T5886] usb usb1-port1: unable to enumerate USB device [ 364.753940][ T43] usb 3-1: config 0 has no interfaces? [ 364.889737][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 364.911776][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 364.922538][ T43] usb 3-1: Manufacturer: syz [ 364.938982][ T43] usb 3-1: config 0 descriptor?? [ 364.964312][ T920] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 365.124477][ T920] usb 4-1: Using ep0 maxpacket: 8 [ 365.132168][ T920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.142918][ T920] usb 4-1: config 0 has no interfaces? [ 365.155466][ T920] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 365.196256][ T920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.264338][ T920] usb 4-1: config 0 descriptor?? [ 365.370960][T10724] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1515'. [ 365.400971][T10724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1515'. [ 365.424323][T10724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1515'. [ 365.530114][ T920] usb 4-1: USB disconnect, device number 69 [ 365.844610][ T5886] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 365.892861][T10733] loop3: detected capacity change from 0 to 1 [ 365.901516][ T5929] Dev loop3: unable to read RDB block 1 [ 365.908745][ T5929] loop3: unable to read partition table [ 365.915151][ T5929] loop3: partition table beyond EOD, truncated [ 365.923641][T10733] Dev loop3: unable to read RDB block 1 [ 365.933487][T10733] loop3: unable to read partition table [ 365.943715][T10733] loop3: partition table beyond EOD, truncated [ 365.959259][T10733] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 366.028602][ T5886] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 366.039320][T10735] netlink: 'syz.4.1520': attribute type 8 has an invalid length. [ 366.074145][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.112386][ T5886] usb 2-1: Product: syz [ 366.122958][ T5886] usb 2-1: Manufacturer: syz [ 366.137063][ T5886] usb 2-1: SerialNumber: syz [ 366.186888][ T5886] usb 2-1: config 0 descriptor?? [ 366.196809][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.229687][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.414129][ T5936] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 366.433600][ T5886] usb 2-1: ignoring: probably an ADSL modem [ 366.564124][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 366.572897][ T5936] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.583828][ T5936] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.597050][ T5936] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.614576][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.652158][ T5936] usb 1-1: Product: syz [ 366.663103][ T5886] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 366.665506][ T5936] usb 1-1: Manufacturer: syz [ 366.677750][ T43] usb 3-1: USB disconnect, device number 63 [ 366.703306][ T5886] usb 2-1: USB disconnect, device number 67 [ 366.711989][ T5936] usb 1-1: SerialNumber: syz [ 366.985033][ T5936] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 367.055960][ T5936] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 367.087530][ T5936] usb 1-1: USB disconnect, device number 72 [ 367.118412][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.194137][ T43] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 367.361756][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.436101][ T43] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 367.447527][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.489463][ T43] usb 3-1: Product: syz [ 367.493643][ T43] usb 3-1: Manufacturer: syz [ 367.516516][ T43] usb 3-1: SerialNumber: syz [ 367.599447][ T43] usb 3-1: config 0 descriptor?? [ 367.766839][T10769] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1527'. [ 368.038500][ T43] usb 3-1: probing VID:PID(2201:012C) [ 368.048065][ T43] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 368.058737][ T43] vub300 3-1:0.0: probe with driver vub300 failed with error -22 [ 368.073938][ T43] usb 3-1: USB disconnect, device number 64 [ 368.544109][ T920] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 368.908784][ T920] usb 2-1: config index 0 descriptor too short (expected 65249, got 45) [ 368.918221][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 368.937136][ T920] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 368.957810][ T920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.974254][ T5886] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 368.992350][T10785] geneve2: entered promiscuous mode [ 369.002250][ T920] usb 2-1: Product: syz [ 369.006904][T10785] geneve2: entered allmulticast mode [ 369.032731][ T920] usb 2-1: Manufacturer: syz [ 369.042917][ T920] usb 2-1: SerialNumber: syz [ 369.118099][T10788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.145002][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 369.156201][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.171145][ T5886] usb 5-1: config 0 has no interfaces? [ 369.195269][ T5886] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 369.231062][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.292021][ T5886] usb 5-1: config 0 descriptor?? [ 369.363546][T10794] fuse: Unknown parameter 'mGN‡8o«ad' [ 369.609548][ T5886] usb 5-1: USB disconnect, device number 76 [ 370.668174][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 370.795029][ T5886] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 370.954123][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 370.967416][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 370.984380][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.020880][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 371.030214][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.041787][ T5919] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 371.090712][ T5886] usb 1-1: Product: syz [ 371.099692][ T5886] usb 1-1: Manufacturer: syz [ 371.111772][ T5886] usb 1-1: SerialNumber: syz [ 371.115469][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 371.131464][ T5886] usb 1-1: config 0 descriptor?? [ 371.154357][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 371.163298][ T5886] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 371.178381][ T5886] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 371.199928][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 371.218008][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 371.237174][ T920] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 371.263092][ T920] usb 2-1: USB disconnect, device number 68 [ 371.276153][ T5919] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.299622][ T5919] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 371.336875][ T5919] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 371.348427][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.359308][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 371.374319][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.382484][ T5919] usb 4-1: Product: syz [ 371.389378][ T5919] usb 4-1: Manufacturer: syz [ 371.395494][ T5919] usb 4-1: SerialNumber: syz [ 371.416532][ T5919] usb 4-1: config 0 descriptor?? [ 371.441448][ T5919] usb 4-1: selecting invalid altsetting 0 [ 371.652692][T10810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.661585][T10810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.783799][ T5886] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 371.830650][ T5886] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 372.214097][ T920] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 372.241960][ T43] usb 4-1: USB disconnect, device number 70 [ 372.389537][ T920] usb 2-1: config 0 has no interfaces? [ 372.400415][ T920] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 372.430034][ T920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.454893][T10833] netlink: 'syz.2.1546': attribute type 15 has an invalid length. [ 372.486479][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 372.504631][T10834] geneve3: entered promiscuous mode [ 372.510099][T10834] geneve3: entered allmulticast mode [ 372.568848][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 372.578570][ T5886] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 372.594307][ T920] usb 2-1: Product: syz [ 372.598921][ T920] usb 2-1: Manufacturer: syz [ 372.603528][ T920] usb 2-1: SerialNumber: syz [ 372.617554][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 372.625726][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 372.635403][ T920] usb 2-1: config 0 descriptor?? [ 372.683051][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 372.698027][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 372.934401][ T5919] usb 2-1: USB disconnect, device number 69 [ 373.657657][T10839] loop6: detected capacity change from 0 to 7 [ 373.730563][T10839] Dev loop6: unable to read RDB block 7 [ 373.744163][T10839] loop6: unable to read partition table [ 373.750326][T10839] loop6: partition table beyond EOD, truncated [ 373.758855][T10839] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 373.940828][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.963198][T10841] FAULT_INJECTION: forcing a failure. [ 373.963198][T10841] name failslab, interval 1, probability 0, space 0, times 0 [ 373.976333][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.1.1550 Not tainted syzkaller #0 PREEMPT(full) [ 373.976356][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.976370][T10841] Call Trace: [ 373.976376][T10841] [ 373.976383][T10841] dump_stack_lvl+0x189/0x250 [ 373.976405][T10841] ? __pfx____ratelimit+0x10/0x10 [ 373.976422][T10841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.976448][T10841] ? __pfx__printk+0x10/0x10 [ 373.976475][T10841] ? __pfx___might_resched+0x10/0x10 [ 373.976490][T10841] ? fs_reclaim_acquire+0x7d/0x100 [ 373.976518][T10841] should_fail_ex+0x414/0x560 [ 373.976546][T10841] should_failslab+0xa8/0x100 [ 373.976570][T10841] __kmalloc_noprof+0xcb/0x4f0 [ 373.976586][T10841] ? kfree+0x4d/0x440 [ 373.976602][T10841] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.976624][T10841] tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.976644][T10841] ? tomoyo_domain+0xd9/0x130 [ 373.976665][T10841] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 373.976686][T10841] tomoyo_path_number_perm+0x1e8/0x5a0 [ 373.976709][T10841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 373.976746][T10841] ? __lock_acquire+0xab9/0xd20 [ 373.976787][T10841] ? __fget_files+0x2a/0x420 [ 373.976805][T10841] ? __fget_files+0x2a/0x420 [ 373.976819][T10841] ? __fget_files+0x3a0/0x420 [ 373.976832][T10841] ? __fget_files+0x2a/0x420 [ 373.976851][T10841] security_file_ioctl+0xcb/0x2d0 [ 373.976874][T10841] __se_sys_ioctl+0x47/0x170 [ 373.976896][T10841] do_syscall_64+0xfa/0x3b0 [ 373.976913][T10841] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.976930][T10841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.976946][T10841] ? clear_bhb_loop+0x60/0xb0 [ 373.976967][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.976988][T10841] RIP: 0033:0x7f2cf8b8ebe9 [ 373.977003][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.977018][T10841] RSP: 002b:00007f2cf9a0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.977035][T10841] RAX: ffffffffffffffda RBX: 00007f2cf8dc5fa0 RCX: 00007f2cf8b8ebe9 [ 373.977048][T10841] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003 [ 373.977058][T10841] RBP: 00007f2cf9a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 373.977068][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.977077][T10841] R13: 00007f2cf8dc6038 R14: 00007f2cf8dc5fa0 R15: 00007f2cf8eefa28 [ 373.977104][T10841] [ 373.977111][T10841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 374.228527][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.264238][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 20 [ 374.367126][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 16 [ 374.435511][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 12 [ 374.483129][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 14 [ 374.511910][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 18 [ 374.542910][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 22 [ 374.562665][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 24 [ 374.597621][ T5886] em28xx 1-1:0.0: Binding audio extension [ 374.622659][ T5886] em28xx 1-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 374.639961][T10844] fuse: Unknown parameter 'mGN‡8o«ad' [ 374.653291][ T5886] em28xx 1-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 374.760552][ T5886] em28xx 1-1:0.0: alt 0 doesn't exist on interface 7 [ 374.876653][ T5886] usb 1-1: USB disconnect, device number 73 [ 374.921963][ T5886] em28xx 1-1:0.0: Disconnecting em28xx [ 374.940037][ T5886] em28xx 1-1:0.0: Closing audio extension [ 374.972954][ T5886] em28xx 1-1:0.0: Freeing device [ 374.989438][T10854] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 374.996229][T10854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.018275][T10854] vhci_hcd vhci_hcd.0: Device attached [ 375.026135][T10855] vhci_hcd: connection closed [ 375.029041][ T36] vhci_hcd: stop threads [ 375.049421][ T36] vhci_hcd: release socket [ 375.059885][ T36] vhci_hcd: disconnect device [ 375.274281][ T43] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 375.324521][ T5886] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 375.454208][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 375.464537][ T43] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 375.481472][ T43] usb 5-1: config 0 has no interface number 0 [ 375.511585][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 375.513850][T10866] vlan0: entered allmulticast mode [ 375.526016][ T5886] usb 1-1: device descriptor read/64, error -71 [ 375.534443][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.544279][ T43] usb 5-1: Product: syz [ 375.552235][ T43] usb 5-1: Manufacturer: syz [ 375.558710][ T43] usb 5-1: SerialNumber: syz [ 375.564296][ T5919] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 375.575152][ T43] usb 5-1: config 0 descriptor?? [ 375.730877][ T5919] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.741912][T10870] loop6: detected capacity change from 0 to 7 [ 375.745314][ T5919] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 375.752644][T10870] Dev loop6: unable to read RDB block 7 [ 375.766368][T10870] loop6: AHDI p2 p3 [ 375.771284][T10870] loop6: partition table partially beyond EOD, truncated [ 375.783366][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.784210][ T5886] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 375.797380][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.814543][T10870] loop6: p2 size 46 extends beyond EOD, truncated [ 375.821122][ T5919] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 375.846900][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.852806][ T43] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 375.881911][ T5919] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 375.905840][ T43] usb 5-1: No valid video chain found. [ 375.927533][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.938078][ T43] usb 5-1: USB disconnect, device number 77 [ 375.964764][ T5919] usb 3-1: Product: syz [ 375.969435][ T5919] usb 3-1: Manufacturer: syz [ 375.984131][ T5886] usb 1-1: device descriptor read/64, error -71 [ 375.990534][ T5919] usb 3-1: SerialNumber: syz [ 376.026028][ T5919] usb 3-1: config 0 descriptor?? [ 376.064361][ T5919] usb 3-1: selecting invalid altsetting 0 [ 376.075567][ T5929] udevd[5929]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 376.105567][ T5886] usb usb1-port1: attempt power cycle [ 376.335106][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.344496][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.456090][ T5886] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 376.494878][ T5886] usb 1-1: device descriptor read/8, error -71 [ 376.584151][ T5919] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 376.734102][ T5886] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 376.785042][ T5919] usb 4-1: config 0 has no interfaces? [ 376.867445][ T5886] usb 1-1: device descriptor read/8, error -71 [ 376.922008][ T5919] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 376.929232][ T920] usb 3-1: USB disconnect, device number 65 [ 376.937468][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.969330][ T5919] usb 4-1: Product: syz [ 376.977830][ T5919] usb 4-1: Manufacturer: syz [ 376.982454][ T5919] usb 4-1: SerialNumber: syz [ 376.994717][ T5886] usb usb1-port1: unable to enumerate USB device [ 377.021761][ T5919] usb 4-1: config 0 descriptor?? [ 377.253675][T10894] fuse: Unknown parameter 'mGN‡8o«ad' [ 377.340884][T10896] binder_alloc: binder_alloc_mmap_handler: 10895 200000ffe000-200001000000 already mapped failed -16 [ 377.402317][T10898] loop6: detected capacity change from 0 to 524288000 [ 377.544519][T10900] support for the xor transformation has been removed. [ 377.950959][T10905] loop3: detected capacity change from 0 to 1 [ 377.968616][T10905] Dev loop3: unable to read RDB block 1 [ 377.975060][T10905] loop3: unable to read partition table [ 377.982846][T10905] loop3: partition table beyond EOD, truncated [ 377.989499][T10905] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 378.353618][T10913] loop3: detected capacity change from 0 to 1 [ 378.375769][T10913] Dev loop3: unable to read RDB block 1 [ 378.391104][T10913] loop3: unable to read partition table [ 378.402052][T10913] loop3: partition table beyond EOD, truncated [ 378.415837][T10913] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 378.529429][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.535945][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.811342][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1577'. [ 379.436210][ T920] usb 4-1: USB disconnect, device number 71 [ 379.828260][T10934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.914230][ T5919] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 380.018009][T10936] loop6: detected capacity change from 0 to 7 [ 380.025141][T10936] Dev loop6: unable to read RDB block 7 [ 380.030724][T10936] loop6: unable to read partition table [ 380.047025][T10936] loop6: partition table beyond EOD, truncated [ 380.066252][T10936] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 380.085977][ T5919] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 380.130631][ T5919] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 380.178619][ T5919] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 380.207866][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 380.218318][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 380.232255][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.273276][ T5919] usb 4-1: Product: syz [ 380.284051][ T5919] usb 4-1: Manufacturer: syz [ 380.296459][ T5919] usb 4-1: SerialNumber: syz [ 380.315979][ T5919] usb 4-1: config 0 descriptor?? [ 380.330715][ T5919] usb 4-1: selecting invalid altsetting 0 [ 380.336448][T10943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.499206][T10949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1585'. [ 380.542153][T10948] binder_alloc: binder_alloc_mmap_handler: 10945 200000ffe000-200001000000 already mapped failed -16 [ 380.550169][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.563167][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 380.581181][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.771515][T10958] trusted_key: encrypted_key: key user:syz not found [ 381.110690][ T920] usb 4-1: USB disconnect, device number 72 [ 381.595737][T10975] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1591'. [ 381.711383][T10977] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 381.721917][T10977] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 381.730171][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1592'. [ 382.004211][ T5919] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 382.287440][ T5919] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 382.296118][ T5919] usb 5-1: config 0 has no interface number 0 [ 382.302274][ T5919] usb 5-1: config 0 interface 29 has no altsetting 0 [ 382.327361][ T5919] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 382.397735][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.424202][ T5919] usb 5-1: Product: syz [ 382.428501][ T5919] usb 5-1: Manufacturer: syz [ 382.435101][ T5919] usb 5-1: SerialNumber: syz [ 382.443971][ T5919] usb 5-1: config 0 descriptor?? [ 382.693039][ T5919] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v40.0.0 (2 channels) [ 382.708657][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 382.896475][ T5919] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 382.918650][ T5919] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 382.987507][ T5919] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 383.036537][ T5919] usb 5-1: USB disconnect, device number 78 [ 383.050376][T10995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1599'. [ 383.214128][ T10] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 383.385788][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 383.397886][ T10] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 383.410872][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 383.417741][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 383.427790][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.440259][ T10] usb 2-1: config 0 descriptor?? [ 383.454386][ T920] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 383.462291][T11001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.512471][T11008] loop3: detected capacity change from 0 to 1 [ 383.521426][ T5929] Dev loop3: unable to read RDB block 1 [ 383.539650][ T5929] loop3: unable to read partition table [ 383.548121][ T5929] loop3: partition table beyond EOD, truncated [ 383.556987][T11008] Dev loop3: unable to read RDB block 1 [ 383.562750][T11008] loop3: unable to read partition table [ 383.568849][T11008] loop3: partition table beyond EOD, truncated [ 383.575248][ T43] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 383.583064][T11008] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 383.626293][ T920] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.646489][ T920] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 383.689732][ T920] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 383.701658][ T920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 383.712872][ T920] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 383.722219][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.732888][ T920] usb 4-1: Product: syz [ 383.740336][ T920] usb 4-1: Manufacturer: syz [ 383.748346][ T920] usb 4-1: SerialNumber: syz [ 383.761694][ T43] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 383.763064][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'. [ 383.775946][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.780643][T11016] loop3: detected capacity change from 0 to 1 [ 383.795190][ T920] usb 4-1: config 0 descriptor?? [ 383.795565][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'. [ 383.809469][ T43] usb 3-1: Product: syz [ 383.810143][T11016] Dev loop3: unable to read RDB block 1 [ 383.818716][ T920] usb 4-1: selecting invalid altsetting 0 [ 383.827347][ T43] usb 3-1: Manufacturer: syz [ 383.828029][T11016] loop3: unable to read partition table [ 383.835154][ T43] usb 3-1: SerialNumber: syz [ 383.843122][T11016] loop3: partition table beyond EOD, truncated [ 383.851088][T11016] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 383.873403][ T43] usb 3-1: config 0 descriptor?? [ 384.038772][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.047772][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.077963][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.091166][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.101017][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 384.105966][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 384.109411][ T43] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 384.145260][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 384.153720][ T43] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 384.187591][ T10] usb 2-1: USB disconnect, device number 70 [ 384.193637][ T43] usb 3-1: USB disconnect, device number 66 [ 384.658065][T11027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.676680][ T920] usb 4-1: USB disconnect, device number 73 [ 384.926818][T11036] FAULT_INJECTION: forcing a failure. [ 384.926818][T11036] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 385.009972][T11036] CPU: 0 UID: 0 PID: 11036 Comm: syz.1.1612 Not tainted syzkaller #0 PREEMPT(full) [ 385.009998][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.010008][T11036] Call Trace: [ 385.010015][T11036] [ 385.010023][T11036] dump_stack_lvl+0x189/0x250 [ 385.010048][T11036] ? __pfx____ratelimit+0x10/0x10 [ 385.010065][T11036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.010084][T11036] ? __pfx__printk+0x10/0x10 [ 385.010106][T11036] ? __might_fault+0xb0/0x130 [ 385.010139][T11036] should_fail_ex+0x414/0x560 [ 385.010168][T11036] _copy_from_user+0x2d/0xb0 [ 385.010190][T11036] kstrtouint_from_user+0xc4/0x170 [ 385.010210][T11036] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 385.010245][T11036] proc_fail_nth_write+0x88/0x200 [ 385.010264][T11036] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 385.010286][T11036] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 385.010307][T11036] vfs_write+0x27b/0xb30 [ 385.010337][T11036] ? __pfx_vfs_write+0x10/0x10 [ 385.010359][T11036] ? __fget_files+0x2a/0x420 [ 385.010379][T11036] ? __fget_files+0x3a0/0x420 [ 385.010393][T11036] ? __fget_files+0x2a/0x420 [ 385.010417][T11036] ksys_write+0x145/0x250 [ 385.010437][T11036] ? __fget_files+0x3a0/0x420 [ 385.010453][T11036] ? __pfx_ksys_write+0x10/0x10 [ 385.010478][T11036] ? do_syscall_64+0xbe/0x3b0 [ 385.010501][T11036] do_syscall_64+0xfa/0x3b0 [ 385.010516][T11036] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.010531][T11036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.010547][T11036] ? clear_bhb_loop+0x60/0xb0 [ 385.010567][T11036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.010588][T11036] RIP: 0033:0x7f2cf8b8d69f [ 385.010604][T11036] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 385.010618][T11036] RSP: 002b:00007f2cf9a0a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 385.010637][T11036] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2cf8b8d69f [ 385.010648][T11036] RDX: 0000000000000001 RSI: 00007f2cf9a0a0a0 RDI: 0000000000000004 [ 385.010658][T11036] RBP: 00007f2cf9a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 385.010667][T11036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 385.010676][T11036] R13: 00007f2cf8dc6038 R14: 00007f2cf8dc5fa0 R15: 00007f2cf8eefa28 [ 385.010703][T11036] [ 385.514092][ T10] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 385.699104][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.710324][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 385.724756][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 385.765758][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 385.816035][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 385.829768][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 385.871889][ T10] usb 5-1: Manufacturer: syz [ 385.889683][ T10] usb 5-1: config 0 descriptor?? [ 385.944263][ T5886] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 386.112783][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 386.120452][ T5886] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 386.130882][ T5886] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.149341][ T5886] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 386.166922][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.178412][ T5886] usb 4-1: config 0 descriptor?? [ 386.396367][ T5919] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 386.514148][ T5886] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 386.588079][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.598356][ T5919] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 386.609561][ T5919] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 386.619705][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.647178][ T5919] usb 1-1: config 0 descriptor?? [ 386.668699][ T5886] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.692357][ T5886] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 386.713926][ T5886] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 386.725263][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 386.735421][ T5886] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 386.745751][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.753877][ T5886] usb 2-1: Product: syz [ 386.758400][ T5886] usb 2-1: Manufacturer: syz [ 386.765020][ T5886] usb 2-1: SerialNumber: syz [ 386.786628][T11067] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 386.842792][ T5886] usb 2-1: config 0 descriptor?? [ 386.865019][ T5886] usb 2-1: selecting invalid altsetting 0 [ 386.903871][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.913037][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.947283][ T5919] Bluetooth: Can't get state to change to load ram patch err [ 386.954783][ T5919] Bluetooth: Loading patch file failed [ 386.960414][ T5919] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 387.037851][T11069] gretap1: entered promiscuous mode [ 387.048316][T11069] bond2: (slave gretap1): making interface the new active one [ 387.058323][T11069] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 387.103815][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.129447][T11067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1622'. [ 387.154591][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.250212][ T920] usb 1-1: USB disconnect, device number 78 [ 387.738323][ T920] usb 2-1: USB disconnect, device number 71 [ 388.184107][ T10] rc_core: IR keymap rc-hauppauge not found [ 388.235280][ T10] Registered IR keymap rc-empty [ 388.284289][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.335624][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.376749][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 388.421842][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 388.518086][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.534408][ T920] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 388.555072][ T5936] usb 4-1: USB disconnect, device number 74 [ 388.614264][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.642793][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.687799][T11087] loop6: detected capacity change from 0 to 7 [ 388.699173][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.703191][ T920] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 388.727086][T11087] Dev loop6: unable to read RDB block 7 [ 388.734238][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.761863][T11087] loop6: unable to read partition table [ 388.761890][ T920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.781334][ T920] usb 2-1: Product: syz [ 388.785881][ T920] usb 2-1: Manufacturer: syz [ 388.790537][ T920] usb 2-1: SerialNumber: syz [ 388.794188][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.803173][T11087] loop6: partition table beyond EOD, truncated [ 388.836823][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.851023][T11087] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 388.884176][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 388.927350][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.008335][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 389.049299][ T10] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 389.078207][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 389.132724][ T10] usb 5-1: USB disconnect, device number 79 [ 389.379377][ T5936] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 389.544110][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 389.561603][ T5936] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 389.589860][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.601859][ T5936] usb 1-1: Product: syz [ 389.606215][ T43] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 389.619853][ T5936] usb 1-1: Manufacturer: syz [ 389.626251][ T5936] usb 1-1: SerialNumber: syz [ 389.653889][ T5936] usb 1-1: config 0 descriptor?? [ 389.699013][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 389.706217][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 389.733532][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 389.757835][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 389.775900][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 389.776271][ T43] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.787109][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 389.812254][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 389.813104][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 389.825379][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 389.844781][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.855086][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.864260][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 389.864285][ T10] usb 5-1: SerialNumber: syz [ 389.877648][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.886069][T11089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 389.897831][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 389.898003][T11089] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 389.911487][ T5936] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 389.921325][ T43] usb 3-1: Product: syz [ 389.927431][ T43] usb 3-1: Manufacturer: syz [ 389.935203][ T5936] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 389.944121][ T43] usb 3-1: SerialNumber: syz [ 389.960913][ T5936] usb 1-1: USB disconnect, device number 79 [ 389.972937][ T43] usb 3-1: config 0 descriptor?? [ 390.015371][ T43] usb 3-1: selecting invalid altsetting 0 [ 390.199047][ T10] usb 5-1: USB disconnect, device number 80 [ 390.254093][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 390.296417][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.327595][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.513281][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.530768][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.591239][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 390.630053][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 390.671148][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 390.713513][ T920] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 390.750075][ T920] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 390.801075][ T920] usb 2-1: USB disconnect, device number 72 [ 390.892178][T11108] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1636'. [ 390.924127][ T5936] usb 3-1: USB disconnect, device number 67 [ 390.943843][T11108] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1636'. [ 390.954134][T11108] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1636'. [ 391.144297][ T920] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 391.477046][ T920] usb 2-1: device descriptor read/64, error -71 [ 391.754372][ T920] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 391.964705][ T920] usb 2-1: device descriptor read/64, error -71 [ 392.087203][ T920] usb usb2-port1: attempt power cycle [ 392.283801][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1641'. [ 392.348378][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1641'. [ 392.444139][ T920] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 392.464630][ T920] usb 2-1: device descriptor read/8, error -71 [ 392.567849][T11129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1642'. [ 392.581901][T11129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.632714][T11132] ip6tnl2: entered promiscuous mode [ 392.640064][T11132] ip6tnl2: entered allmulticast mode [ 392.705565][ T920] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 392.745716][ T920] usb 2-1: device descriptor read/8, error -71 [ 392.854780][ T920] usb usb2-port1: unable to enumerate USB device [ 392.974172][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 393.135436][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 393.148976][ T10] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 393.158785][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 393.179109][ T10] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 393.191889][ T10] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 393.205867][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 393.229726][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 393.244975][ T10] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 393.253663][ T10] usb 5-1: Product: syz [ 393.261145][ T10] usb 5-1: Manufacturer: syz [ 393.266672][ T10] usb 5-1: SerialNumber: syz [ 393.281788][ T10] usb 5-1: config 0 descriptor?? [ 393.290125][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 393.302699][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 393.365190][ T5886] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 393.542976][ T5886] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 393.553428][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.569106][ T5886] usb 3-1: Product: syz [ 393.578691][ T5886] usb 3-1: Manufacturer: syz [ 393.588254][ T5886] usb 3-1: SerialNumber: syz [ 393.616569][ T5886] usb 3-1: config 0 descriptor?? [ 393.714191][ T920] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 393.846590][ T5886] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 393.858961][ T5886] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 393.946609][ T920] usb 4-1: config index 0 descriptor too short (expected 65249, got 45) [ 393.958115][ T5886] usb 3-1: USB disconnect, device number 68 [ 393.979603][ T920] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 393.994267][ T920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.004449][ T920] usb 4-1: Product: syz [ 394.008708][ T920] usb 4-1: Manufacturer: syz [ 394.015604][ T920] usb 4-1: SerialNumber: syz [ 394.064760][ T5936] usb 5-1: USB disconnect, device number 81 [ 394.083121][ T5936] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 394.249788][ T920] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 394.262051][ T920] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 394.277036][ T920] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 394.289242][ T920] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 394.792177][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1655'. [ 394.829280][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1655'. [ 394.915381][T11173] loop3: detected capacity change from 0 to 1 [ 394.930808][ T5929] Dev loop3: unable to read RDB block 1 [ 394.940127][ T5929] loop3: unable to read partition table [ 394.949552][ T5929] loop3: partition table beyond EOD, truncated [ 394.958618][T11173] Dev loop3: unable to read RDB block 1 [ 394.966685][T11173] loop3: unable to read partition table [ 395.004580][T11173] loop3: partition table beyond EOD, truncated [ 395.011076][T11173] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 395.504236][ T5886] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 395.694140][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 395.706903][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.731872][T11193] loop3: detected capacity change from 0 to 1 [ 395.738277][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.750178][ T5886] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 395.759902][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.893161][ T5929] Dev loop3: unable to read RDB block 1 [ 395.952484][ T5886] usb 2-1: config 0 descriptor?? [ 395.960625][ T5886] hub 2-1:0.0: USB hub found [ 395.967990][ T5929] loop3: unable to read partition table [ 395.991086][ T5929] loop3: partition table beyond EOD, truncated [ 396.032090][T11193] Dev loop3: unable to read RDB block 1 [ 396.043336][T11193] loop3: unable to read partition table [ 396.159818][T11193] loop3: partition table beyond EOD, truncated [ 396.185731][T11193] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 396.238642][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.444834][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.635968][ T5886] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 396.695874][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 396.702048][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 396.764975][ T5886] usb 2-1: USB disconnect, device number 77 [ 396.984272][ T920] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 397.146191][ T920] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.164148][ T920] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.190518][ T920] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 397.224221][ T920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.237809][ T920] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.249930][ T920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.260941][ T920] usb 1-1: Product: syz [ 397.281344][ T920] usb 1-1: Manufacturer: syz [ 397.287916][ T920] usb 1-1: SerialNumber: syz [ 397.294386][ T5886] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 397.312239][ T920] usb 1-1: config 0 descriptor?? [ 397.331984][ T920] usb 1-1: selecting invalid altsetting 0 [ 397.467025][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 397.474532][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 397.494341][ T5886] usb 3-1: config 136 has an invalid descriptor of length 86, skipping remainder of the config [ 397.513322][ T5886] usb 3-1: config 136 has 0 interfaces, different from the descriptor's value: 1 [ 397.534117][T11203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.543596][ T5886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.549412][T11203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.576285][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.585624][ T5886] usb 3-1: Product: syz [ 397.589796][ T5886] usb 3-1: Manufacturer: syz [ 397.712731][ T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 397.729495][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.738192][ T5886] usb 3-1: SerialNumber: syz [ 397.754172][ T5919] usb 4-1: USB disconnect, device number 75 [ 397.812960][ T10] usb 2-1: config 0 descriptor?? [ 397.848896][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 397.993144][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.021996][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.267467][T11217] fuse: Bad value for 'fd' [ 398.278377][T11217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 398.297948][ T10] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 398.317447][ T920] usb 1-1: USB disconnect, device number 80 [ 398.500414][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.669195][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.700686][ T5886] usb 3-1: USB disconnect, device number 69 [ 398.921561][ T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 34) [ 399.139967][ T10] usb 2-1: USB disconnect, device number 78 [ 399.678883][T11238] loop3: detected capacity change from 0 to 1 [ 399.719162][T11238] Dev loop3: unable to read RDB block 1 [ 399.762432][T11238] loop3: unable to read partition table [ 399.786930][T11238] loop3: partition table beyond EOD, truncated [ 399.810953][T11238] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 399.910584][ T5235] Dev loop3: unable to read RDB block 1 [ 399.920318][ T5235] loop3: unable to read partition table [ 400.134873][ T5235] loop3: partition table beyond EOD, truncated [ 400.375424][T11249] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1679'. [ 400.396105][T11244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.433819][T11249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1679'. [ 400.544193][T11249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1679'. [ 400.560959][T11211] syz.4.1667 (11211): drop_caches: 2 [ 400.654154][ T920] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 400.717689][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 400.738034][T11257] netlink: 'syz.0.1682': attribute type 30 has an invalid length. [ 400.794449][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'. [ 400.830188][ T920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 400.840563][ T920] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 400.892605][ T920] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.956221][ T920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 400.968911][ T920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.002617][ T920] usb 2-1: Product: syz [ 401.029729][ T920] usb 2-1: Manufacturer: syz [ 401.045527][ T920] usb 2-1: SerialNumber: syz [ 401.080676][ T920] hub 2-1:1.0: bad descriptor, ignoring hub [ 401.113406][ T920] hub 2-1:1.0: probe with driver hub failed with error -5 [ 401.289561][ T920] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 79 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 401.358339][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 401.541767][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 401.669445][T11273] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 401.682976][T11273] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 401.904139][ T5886] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 401.934211][T11244] usb 2-1: reset high-speed USB device number 79 using dummy_hcd [ 402.086864][T11278] loop3: detected capacity change from 0 to 1 [ 402.094152][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 402.106682][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 402.123613][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 402.167377][T11278] Dev loop3: unable to read RDB block 1 [ 402.172987][T11278] loop3: unable to read partition table [ 402.206974][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 402.230924][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.272820][T11278] loop3: partition table beyond EOD, truncated [ 402.288748][ T5886] usb 1-1: Product: syz [ 402.293077][ T5886] usb 1-1: Manufacturer: syz [ 402.297901][T11278] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 402.315710][ T5886] usb 1-1: SerialNumber: syz [ 402.346673][ T5886] usb 1-1: config 0 descriptor?? [ 402.375447][ T5886] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 402.447239][ T5886] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 402.971560][ T5886] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 402.979370][ T5886] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 403.044598][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 403.214278][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 403.221112][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.312511][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.336736][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 403.349807][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 403.360373][ T10] usb 4-1: Product: syz [ 403.367998][ T10] usb 4-1: Manufacturer: syz [ 403.406910][ T10] hub 4-1:4.0: USB hub found [ 403.423081][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 403.434230][T11299] netlink: 'syz.2.1695': attribute type 30 has an invalid length. [ 403.445842][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 403.545869][ T43] usb 2-1: USB disconnect, device number 79 [ 403.556243][ T43] usblp0: removed [ 403.594493][ T5886] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 403.607393][ T10] hub 4-1:4.0: 2 ports detected [ 403.614353][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 403.641510][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 403.649113][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 403.657996][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 403.820133][T11307] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1697'. [ 404.692766][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 404.744332][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 404.794586][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 404.801013][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 404.809576][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 404.832168][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 404.845608][ T10] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 404.852013][ T10] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 404.878997][ T5886] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 404.925028][ T10] usb 4-1: USB disconnect, device number 76 [ 404.938790][ T5886] usb 1-1: USB disconnect, device number 81 [ 405.161484][T11319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.177009][T11319] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 405.197523][T11321] loop6: detected capacity change from 0 to 7 [ 405.205279][T11321] Dev loop6: unable to read RDB block 7 [ 405.212692][T11321] loop6: unable to read partition table [ 405.219590][T11321] loop6: partition table beyond EOD, truncated [ 405.235550][T11321] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 405.528104][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'. [ 405.536647][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 405.547175][T11336] netlink: 'syz.2.1707': attribute type 30 has an invalid length. [ 405.560097][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 405.731945][T11340] [ 405.734294][T11340] ============================================ [ 405.740441][T11340] WARNING: possible recursive locking detected [ 405.746611][T11340] syzkaller #0 Not tainted [ 405.751026][T11340] -------------------------------------------- [ 405.757172][T11340] syz.3.1706/11340 is trying to acquire lock: [ 405.763232][T11340] ffff888056a20d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 405.774227][T11340] [ 405.774227][T11340] but task is already holding lock: [ 405.781587][T11340] ffff888056a20d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 405.791446][T11340] and the lock comparison function returns 0: [ 405.797512][T11340] [ 405.797512][T11340] other info that might help us debug this: [ 405.805571][T11340] Possible unsafe locking scenario: [ 405.805571][T11340] [ 405.813025][T11340] CPU0 [ 405.816304][T11340] ---- [ 405.819587][T11340] lock(&dev_instance_lock_key#20); [ 405.824889][T11340] lock(&dev_instance_lock_key#20); [ 405.830191][T11340] [ 405.830191][T11340] *** DEADLOCK *** [ 405.830191][T11340] [ 405.838330][T11340] May be due to missing lock nesting notation [ 405.838330][T11340] [ 405.846652][T11340] 2 locks held by syz.3.1706/11340: [ 405.851844][T11340] #0: ffffffff8f539b08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 405.860829][T11340] #1: ffff888056a20d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 405.864078][ T43] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 405.871122][T11340] [ 405.871122][T11340] stack backtrace: [ 405.871137][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.3.1706 Not tainted syzkaller #0 PREEMPT(full) [ 405.871154][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.871164][T11340] Call Trace: [ 405.871174][T11340] [ 405.871182][T11340] dump_stack_lvl+0x189/0x250 [ 405.871207][T11340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.871227][T11340] ? __pfx__printk+0x10/0x10 [ 405.871248][T11340] ? print_lock_name+0xde/0x100 [ 405.871268][T11340] print_deadlock_bug+0x28b/0x2a0 [ 405.871286][T11340] validate_chain+0x1a3f/0x2140 [ 405.871305][T11340] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 405.871329][T11340] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.871355][T11340] __lock_acquire+0xab9/0xd20 [ 405.871380][T11340] ? __netdev_update_features+0xcb1/0x1be0 [ 405.871402][T11340] lock_acquire+0x120/0x360 [ 405.871423][T11340] ? __netdev_update_features+0xcb1/0x1be0 [ 405.871444][T11340] ? kasan_save_free_info+0x46/0x50 [ 405.871461][T11340] ? kmem_cache_free+0x18f/0x400 [ 405.871482][T11340] ? ethnl_multicast+0xb6/0x100 [ 405.871501][T11340] __mutex_lock+0x187/0x1350 [ 405.871517][T11340] ? __netdev_update_features+0xcb1/0x1be0 [ 405.871539][T11340] ? do_raw_spin_lock+0x121/0x290 [ 405.871558][T11340] ? __netdev_update_features+0xcb1/0x1be0 [ 405.871579][T11340] ? __pfx___mutex_lock+0x10/0x10 [ 405.871593][T11340] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 405.871615][T11340] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.871636][T11340] __netdev_update_features+0xcb1/0x1be0 [ 405.871661][T11340] ? __pfx___netdev_update_features+0x10/0x10 [ 405.871683][T11340] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 405.871704][T11340] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 405.871724][T11340] ? __lock_acquire+0xab9/0xd20 [ 405.871748][T11340] ? do_raw_spin_lock+0x121/0x290 [ 405.871768][T11340] netdev_update_features+0x6d/0xe0 [ 405.871785][T11340] ? __pfx_netdev_update_features+0x10/0x10 [ 405.871804][T11340] macsec_notify+0x2f5/0x660 [ 405.871825][T11340] ? __pfx_macsec_notify+0x10/0x10 [ 405.871846][T11340] notifier_call_chain+0x1b3/0x3e0 [ 405.871865][T11340] netdev_features_change+0x85/0xc0 [ 405.871881][T11340] ? __pfx_netdev_features_change+0x10/0x10 [ 405.871896][T11340] ? security_capable+0x7e/0x2e0 [ 405.871921][T11340] dev_ethtool+0x1536/0x19b0 [ 405.871944][T11340] ? __pfx_dev_ethtool+0x10/0x10 [ 405.871969][T11340] ? dev_load+0x21/0x1f0 [ 405.871984][T11340] dev_ioctl+0x392/0x1150 [ 405.872000][T11340] sock_do_ioctl+0x22c/0x300 [ 405.872023][T11340] ? __pfx_sock_do_ioctl+0x10/0x10 [ 405.872043][T11340] ? __lock_acquire+0xab9/0xd20 [ 405.872069][T11340] sock_ioctl+0x576/0x790 [ 405.872089][T11340] ? __pfx_sock_ioctl+0x10/0x10 [ 405.872110][T11340] ? __fget_files+0x2a/0x420 [ 405.872123][T11340] ? __fget_files+0x3a0/0x420 [ 405.872136][T11340] ? __fget_files+0x2a/0x420 [ 405.872150][T11340] ? bpf_lsm_file_ioctl+0x9/0x20 [ 405.872169][T11340] ? __pfx_sock_ioctl+0x10/0x10 [ 405.872189][T11340] __se_sys_ioctl+0xfc/0x170 [ 405.872208][T11340] do_syscall_64+0xfa/0x3b0 [ 405.872224][T11340] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.872239][T11340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.872255][T11340] ? clear_bhb_loop+0x60/0xb0 [ 405.872272][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.872288][T11340] RIP: 0033:0x7f4473b8ebe9 [ 405.872303][T11340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.872318][T11340] RSP: 002b:00007f4474a7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.872343][T11340] RAX: ffffffffffffffda RBX: 00007f4473dc6180 RCX: 00007f4473b8ebe9 [ 405.872355][T11340] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000f [ 405.872367][T11340] RBP: 00007f4473c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 405.872376][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.872387][T11340] R13: 00007f4473dc6218 R14: 00007f4473dc6180 R15: 00007f4473eefa28 [ 405.872404][T11340] [ 406.424455][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 406.430854][ T43] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 406.439999][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.448908][ T43] usb 3-1: config 0 descriptor?? [ 406.455713][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 407.349125][T11339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.357924][T11339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.368400][ T43] gspca_sunplus: reg_r err -71 [ 407.373253][ T43] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 407.386127][ T43] usb 3-1: USB disconnect, device number 70