last executing test programs: 5.717775171s ago: executing program 2 (id=447): close(0x3) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002aafee0866da2887e446e35600010109022400010000004d920a0744fd4736bf000904010002ffffff000905b6"], 0x0) 5.304109052s ago: executing program 3 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 4.87048341s ago: executing program 3 (id=452): faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x34, &(0x7f00000000c0)=0x2) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @bcast}, [@rose, @remote, @rose, @netrom, @rose, @default, @netrom, @bcast]}, &(0x7f0000000180)=0x48) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}}}, &(0x7f00000002c0)=0x84) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x60002009}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000380)="6a10cde8da5ab1a16ff2aa82a7d89c2fd1f00384848bdfa99d69f45ba6") read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002400)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2b, 0xd18f, 0x800230, 0x3ca6, 0x6, 0x80, 0x1, 0x0, 0x0, 0x8, 0x5}}, 0x50) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000002480)={r2, 0x7, 0x9, 0x100}, &(0x7f00000024c0)=0x10) getresuid(&(0x7f0000004880), &(0x7f00000048c0)=0x0, &(0x7f0000004900)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002500)="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", 0x2000, &(0x7f0000004d80)={&(0x7f0000004500)={0x50, 0xfffffffffffffff5, 0x9, {0x7, 0x2b, 0x5, 0x2200, 0x1, 0x6, 0x656, 0x20c2, 0x0, 0x0, 0x4, 0x3}}, &(0x7f0000004580)={0x18, 0xfffffffffffffff5, 0x0, {0x8}}, &(0x7f00000045c0)={0x18, 0x0, 0x9, {0x5ee}}, &(0x7f0000004600)={0x18, 0x0, 0x9, {0x2}}, &(0x7f0000004640)={0x18, 0x0, 0xfffffffffffffffe, {0x1}}, &(0x7f0000004680)={0x28, 0xfffffffffffffff5, 0xffffffffffff6528, {{0x9, 0x5637, 0x0, r6}}}, &(0x7f00000046c0)={0x60, 0x0, 0x81, {{0x101, 0x9, 0x7, 0x6, 0x9, 0x3, 0x2, 0xff}}}, &(0x7f0000004740)={0x18, 0x0, 0x3, {0x6}}, &(0x7f0000004780)={0x11, 0x0, 0xfffffffffffffffd, {'\x00'}}, &(0x7f00000047c0)={0x20, 0x0, 0x94d, {0x0, 0x10}}, &(0x7f0000004800)={0x78, 0x0, 0x4, {0x2, 0xb, 0x0, {0x0, 0x8, 0x7, 0x1, 0xf, 0x1, 0x7, 0x5, 0x9dee, 0x6000, 0x8, r4, r5, 0x5, 0x6}}}, &(0x7f0000004940)={0x90, 0x0, 0x400000, {0x1, 0x2, 0xf60000, 0x8, 0x5, 0x7, {0x4, 0x8, 0xffff, 0x200, 0x3, 0x7fff, 0xd3, 0xd5, 0x8, 0x4000, 0xb78, r7, r5, 0x2, 0x9}}}, &(0x7f0000004a00)={0x70, 0x7fffffffffffffff, 0xd8b7, [{0x6, 0x9, 0x1, 0x5, '\x00'}, {0x0, 0xc2, 0x1, 0x56, '\x00'}, {0x5, 0x1000, 0x7, 0x200, ')\xfb,\x18^!\\'}]}, &(0x7f0000004a80)={0xb8, 0xfffffffffffffffe, 0x6, [{{0x5, 0x0, 0xffffffffffffffbf, 0x8000000000000000, 0xb, 0x1000000, {0x4, 0x0, 0x8, 0x8001, 0x2, 0x7, 0x4, 0x1, 0xffffd420, 0x7000, 0x4, r4, r5, 0x4, 0x6123a499}}, {0x6, 0x8e5c, 0x10, 0x81, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, &(0x7f0000004b40)={0xa0, 0x0, 0x2, {{0x0, 0x1, 0x120, 0x9, 0x4, 0x9, {0x3, 0x0, 0xa83d, 0x9, 0x1, 0x4b, 0x7, 0xd32, 0x6, 0x2000, 0xfffffffd, r4, r5, 0x1, 0x6}}, {0x0, 0x9}}}, &(0x7f0000004c00)={0x20, 0x0, 0xfffffffffffffff5, {0x7, 0x0, 0xe, 0xfffffffe}}, &(0x7f0000004c40)={0x130, 0x0, 0xffff, {0x9, 0x4, 0x0, '\x00', {0x1, 0x0, 0x4, 0x5, r4, r5, 0x8000, '\x00', 0x9, 0x4, 0xd3c9, 0x400, {0x3, 0xdd5}, {0x8, 0xfffffff7}, {0x6e7, 0x9}, {0xd0, 0x8}, 0x2, 0x5, 0x8, 0x9}}}}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004e80), r1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000005100)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000050c0)={&(0x7f0000004ec0)={0x1e4, r8, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @loopback, 0x200}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2714}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x91}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf835}]}]}, 0x1e4}}, 0x400c000) r9 = openat(r1, &(0x7f0000005140)='./file0\x00', 0x8000, 0x22) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000005300)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000052c0)={&(0x7f00000051c0)={0xe4, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x23}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdc}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x39f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x44d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x42f3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x55}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x797a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x404c081) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000053c0)={'syztnl0\x00', &(0x7f0000005340)={'tunl0\x00', 0x0, 0x717, 0x20, 0x800, 0x658, {{0xc, 0x4, 0x0, 0x1d, 0x30, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x1a, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x26}]}, @generic={0x88, 0xb, "0b66208c8cac63509b"}]}}}}}) bind$xdp(r9, &(0x7f0000005400)={0x2c, 0x2, r10, 0xd}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000005440)={0x2000200c}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r0, 0x97c93000) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000005480)=0x7) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000005580)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005540)={&(0x7f0000005500)={0x38, 0x0, 0x206, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x8004) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000056c0)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005680)={&(0x7f0000005600)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005740), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000005940)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005900)={&(0x7f0000005780)={0x144, r11, 0x100, 0x800, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20048814}, 0x4040000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), r1) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000005b00)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a40)={0x6c, r12, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6e}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 4.277881573s ago: executing program 3 (id=455): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r1}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e", 0x5f, 0x4008044, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)='}', 0x1) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000440)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2.681167816s ago: executing program 2 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.68058818s ago: executing program 3 (id=462): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x4044005) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000ec0)={0x0, 0x0, {0x3, @usage=0x2, 0x0, 0x7, 0x401, 0x8, 0x9, 0x5, 0x400, @struct={0x5, 0xe}, 0x9, 0xffffffff, [0x7, 0x3, 0xdac, 0x72, 0x34c, 0x9]}, {0x4, @struct={0x6, 0x7fff}, 0x0, 0x7, 0x10000, 0xfff, 0x81, 0x9, 0xa0, @usage=0x7, 0x75486bb1, 0xff000000, [0x1, 0xc, 0xa1, 0x0, 0x3ff, 0x30e]}, {0x4, @struct={0xff, 0x800}, 0x0, 0x4db1, 0xa, 0x101, 0xd6b9, 0x25, 0x80, @struct={0xe, 0x9}, 0x9, 0x10001, [0x7fffffffffffffff, 0x5, 0xfffffffffffffffb, 0x5, 0x7, 0x7]}, {0x2, 0x3, 0x7}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000006c0)={0xa, 0x0, {0x8, @usage=0x2, r3, 0x4, 0xb121, 0x3, 0x2, 0x3, 0xb4, @usage=0x2, 0x2a2, 0x9, [0xffffffffffffffff, 0xe409, 0x3, 0xffff, 0xab8, 0x1]}, {0x6, @struct={0xc, 0x1ff}, 0x0, 0xde8b, 0xe622, 0x7, 0x1, 0x668, 0x10, @usage=0x5, 0x2b7, 0x2, [0x5, 0x7, 0x1ce43da2, 0x1bd, 0x6, 0x79]}, {0x3, @struct={0x400, 0x9871}, 0x0, 0x3, 0x7fff, 0x4887, 0xfffffffffffffffb, 0x6, 0x440, @struct={0x5, 0x7}, 0x6, 0x1, [0xd2, 0x5, 0x1, 0x4, 0x2, 0xffffffff]}, {0x1, 0x7e, 0x92b}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000ac0)={r4, 0x4f, 0x4}) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000002c0)={r5, 0x1, 0x6, @local}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000500)={0x43, 0x9, 0x1, {0x3, 0x9, 0x7, 0x4, 0x8, 0x4b, 0x8e5, 0xfffffffffffff000, 0xffff}}, 0x43) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) sendto$rose(r1, &(0x7f0000000300)="20ef09a547b695789a6ece2670d0e1039ab3d68b83eee4093f51dda7e177269f88a62e79bd29", 0x26, 0x84, &(0x7f0000000340)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r9, &(0x7f0000000040)=""/195, 0xc3, 0x0, &(0x7f0000000140)=@phonet={0x23, 0x93, 0x4e, 0x7f}, 0x80) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) fchdir(r10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r11, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000240)=0x19) ioctl$KVM_RUN(r8, 0xae80, 0x0) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r12, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 2.168842305s ago: executing program 2 (id=468): r0 = socket$pptp(0x18, 0x1, 0x2) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) (async) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0xc00, 0x10) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000000c0)=""/48) (async) accept4(r0, 0x0, 0x0, 0x80000) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@index_off}]}) 2.112693811s ago: executing program 0 (id=470): r0 = inotify_init1(0x80000) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x5000) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) inotify_init1(0x80000) (async) dup(r0) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x5000) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) (async) 2.062226985s ago: executing program 2 (id=471): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424020244"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.049344685s ago: executing program 0 (id=472): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_io_uring_setup(0x3a82, &(0x7f0000000040)={0x0, 0x8df4, 0x20, 0x2, 0x265}, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000302000/0x4000)=nil, 0x4000, 0x2000003, 0x80010, r1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) 1.982735753s ago: executing program 0 (id=473): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000005b000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a67, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x1d, 0x5, 0x1173) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) 1.786260692s ago: executing program 0 (id=474): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x4044005) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (fail_nth: 16) 957.922545ms ago: executing program 3 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a3000000000050004000040000005000500020000000500010006000000140007800800064000000000080013"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c0018800800fc400000800018000d8014000547a7378b474b3b2fb90075ea84e92ef75647ddb20256cc442bb72e4ac52dcbb83a4880c34e0257bad9df8f9b95e33d9d78c40f5c9bb1d14883f28a2edb296a4d619ffe999d63085c1e07e4d0ff7a7ee45202e432c8c3b044b73f7f837a968c245d2876f35596765c4bcf1257d6d5628709eee2a88dac6616558e5be40b4d1655f62ec4d2a9cc44fa45541ab4bd08cc641958870d71a6d688d2acb6f1703cbc2175ed1146426ab6c0dbec356353fff3b4f11de2ce27b6809f24b03758d9f824b23bf315cc043d75d6a688a4f39556"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cbe528bd7000fedbdf252500000005002b00edffffff05002e00000000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044030}, 0x80) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r4 = fcntl$dupfd(r1, 0x406, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000200)={0x5, 0x7, 0x1}) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r4, &(0x7f0000000e00)=ANY=[], 0x958) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "574af3849be33785b8533755d135a661c49e5813ce6cfad6af590cb0ae34861ff44550bf90618d864e6debacc0748cc674188f2f0dd20d9d17c5edc4d864d92c1f9782a699abf5ff815710f5907799384387b5a895899d2b32dcb2691cfbc900a98a96c50516d5d08d4aefd0af39a12ebb50fc40fc4d3540cb0cb8795254090919fc69d60e9b2de868dd40ffc1563b8f75056efda7b0b037dcd65dc57620a9d606d2bb4aaa5c5abb7a7744b359a2829a411b5143f300ed4e334d802c631a890009149eae0b7cf512"}, 0xd3) (async) r6 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r6, r6, 0x27, &(0x7f00000007c0)={0x3, 0x8, 0x8}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf251900000050000180140002000000000000000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="4400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f300000140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1a5695a14da152ab7653c398fa4d03d060d98d5c0a665c7591c583d37f31f60518098b7d50f0f5d8893b3be1603f52a7654d817e1b3a23dda9f37e8d7552c7aaccf82f525d03eea87236f215f06825b741499382e70180c666d67a0aedac58fb7dc1857e3cf7ab09d745c3beb1b7e7dcf9c5ad553cbc8561a08cf457801d25e91633e8ddb130a4ee1686fb8a58f3ceea4c156b2ffa59f753ab27b7c3c92f7df357a0da01216b21d84065449eb06e0f8dfdf3840117874ba8975e208e3ef9804d991f6456dfa896570fb30e0309823692f2"], 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) (async) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) dup2(r10, 0xffffffffffffffff) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052413"], 0x0) 947.832518ms ago: executing program 0 (id=483): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4044005) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000176222039195022010071dae27be9396a0102010040be128cad2bc5af2d74a8a0ab19540e3f390c169efc19863148fc"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000000)='`', 0x1, 0x41, &(0x7f0000000240)={0x6, 0x0, r3, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0x5460, 0x1000000000000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) 842.243923ms ago: executing program 3 (id=477): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) close(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff3400048005000300010000000500030002000000050003000500000005000300050000000500030080ff00008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e24, 0x401, @mcast2, 0xfffffff8}}, 0x0, 0xdc}, &(0x7f0000000840)=0x90) userfaultfd(0x801) (async) r3 = userfaultfd(0x801) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KIOCSOUND(r5, 0x4b2f, 0x7f) (async) ioctl$KIOCSOUND(r5, 0x4b2f, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010000000000000000002d00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$rds(r8, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/86, 0x56}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/141, 0x8d}], 0x8, 0x0, 0x0, 0x40000}, 0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r9 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) (async) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x2000008f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x3, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x4, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x2, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x0, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x6, 0x80a2f1, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10001, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x95ff, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x6, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006e8000/0x4000)=nil, 0x800000, 0x1, 0x900}) 688.805228ms ago: executing program 1 (id=478): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000280)={0x200000000000, 0x48, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004804) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x6001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000080)={'veth0_to_bridge\x00', @local}) 647.880632ms ago: executing program 1 (id=479): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000000)=""/13, 0xd}], 0x9, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 593.755744ms ago: executing program 2 (id=480): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x0, [0x4, 0x2, 0x100, 0x8, 0x4, 0x4]}) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000000c0)={0x91d8, 0x0, '\x00', {0x0, @bt={0x7fffffff, 0x8000, 0x0, 0x1, 0x4, 0x1, 0xa, 0x9, 0x4, 0x0, 0x8, 0xb33, 0x6, 0x4, 0x8, 0x30, {0x5, 0x800}, 0x0, 0x2}}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000180)=0x7ff, 0x4) bind$tipc(r0, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000080) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000003c0)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffa, 0x20f1}, &(0x7f00000004c0)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000500)={r7, 0xca, "ad1eb2ba836fb5e32c4d3c5b494a98180609e0eeb7000ca5a0e418b53e912f13b84222311b4c5559baa6fd23ba5309514ba79e1d6fae88e45f387f3f893f980b3bf529824a637b414c8393314197fa6f2efb9a57c67ba7cff03d679a949813dd005df680ea27b2102ef7e460bef37e98592ff3bb4c9ec423a1972f9c0b202e3ea338b93e789e5d6d50fb39979495aae2ed8d64e813f1719de1c82666aba3205b257423372d487c6f731c51be25724aa17bd7b2400fd683110d2430f19233196b9a12fc16515bd7e1dc1c"}, &(0x7f0000000600)=0xd2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000680)={'macvtap0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r9, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x24000054) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000840)={{0x0, @addr=0x2}, 0x8, 0x7, 0x1}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000880)='ip6_vti0\x00', 0x10) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r9, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfe}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004844) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000a00)={r8, 0xf7}, 0x8) connect$rxrpc(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e23, 0x479e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x9, 0x5}, &(0x7f0000000b00)=0x90) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000bc0)={'wlan1\x00'}) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xc0, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xd5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffff03}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x30}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, r10, 0x20, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 592.495288ms ago: executing program 1 (id=481): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac0000000000000000000000000000000000004b1400", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 509.823389ms ago: executing program 2 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9741, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001e07ddb406d0490092c4b0102030109818e41a0970c401709048308000101c104"], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$unlink(0x9, r3, r2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000100)={0x10001, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0xb52}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1d, 0x70}}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040801}, 0x20040000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000005c0)={@val={0x0, 0x800}, @val={0x3, 0x5, 0x7, 0x2, 0x80, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x60, 0x0, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446031e6847afe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c"}}}, 0x96) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpgid(r8) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, 0x0, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) write$cgroup_subtree(r11, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0xfe33) 442.118193ms ago: executing program 1 (id=484): syz_open_dev$video(&(0x7f0000000000), 0x7b, 0x2200) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x100400) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c000000070a010400000000000000000a0000040900010073797a31000000002c0004802800018011000100666c6f775f6f66666c6f6164000000001000028009ee010073797a3200000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x4011) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r2, 0x541b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x4, 0x80) 393.571685ms ago: executing program 1 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) (async) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 256.846399ms ago: executing program 0 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x334) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000040)={0xf, 0xfff, [{0x1b10f3cf, 0x0, 0x6}, {0x19fc9256, 0x0, 0xf}, {0x3, 0x0, 0x7}, {0x800, 0x0, 0x1}, {0xfa93, 0x0, 0xd7d1}, {0x2, 0x0, 0xfacc}, {0xb, 0x0, 0xfffffffeffffffff}, {0x0, 0x0, 0x7}, {0xf, 0x0, 0x9}, {0xfffffff9, 0x0, 0x1ff}, {0x0, 0x0, 0x6}, {0x1, 0x0, 0x10000}, {0x5}, {0x2}, {0x8001, 0x0, 0x7}, {0x5, 0x0, 0x9b5}]}) (async) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd3, 0xcc, 0xb5, 0x10, 0x13b1, 0x42, 0x2b29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xe7, 0x11, 0xe1, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000bc0)="f30f21f866baf80cb88cf6828cef66bafc0c66b80d0066ef0f013d505500000f083e0fc79c258d00c0fe0f060f20d835080000000f22d8ff32c4e17b1117c4e295008382000000", 0x47}], 0x1, 0x40, 0x0, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x4}, 0x1c) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x8, 0x8b, 0xb4, 0x2]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=487): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5e, 0xc9, 0x5e, 0x20, 0x7ca, 0xb800, 0x76b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x41, 0x2, 0x0, 0x3}}]}}]}}, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0xff, 0x6, @multicast}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000)=0x80000, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x9, 0xff) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r5, 0x4068aea3, &(0x7f00000000c0)={0xcc, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) kernel console output (not intermixed with test programs): 112.660955][ T6467] loop3: detected capacity change from 0 to 7 [ 112.674700][ T6467] Dev loop3: unable to read RDB block 7 [ 112.680770][ T6467] loop3: unable to read partition table [ 112.687164][ T6467] loop3: partition table beyond EOD, truncated [ 112.693375][ T6467] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.791780][ T6471] loop6: detected capacity change from 0 to 524287999 [ 112.921739][ T6478] netlink: 'syz.3.204': attribute type 11 has an invalid length. [ 112.938797][ T5914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 113.107411][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 113.116016][ T5914] usb 3-1: config 9 has an invalid interface number: 200 but max is 1 [ 113.137629][ T5914] usb 3-1: config 9 has an invalid interface descriptor of length 7, skipping [ 113.157752][ T5914] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 113.175603][ T5914] usb 3-1: config 9 has an invalid interface number: 58 but max is 1 [ 113.193801][ T5914] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 113.225148][ T5914] usb 3-1: config 9 has no interface number 0 [ 113.250464][ T5914] usb 3-1: config 9 has no interface number 1 [ 113.259902][ T5914] usb 3-1: config 9 interface 200 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 113.278243][ T5914] usb 3-1: config 9 interface 58 altsetting 4 endpoint 0xE has an invalid bInterval 231, changing to 7 [ 113.307758][ T5914] usb 3-1: config 9 interface 58 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 113.336724][ T5914] usb 3-1: config 9 interface 58 altsetting 4 endpoint 0x9 has invalid maxpacket 1592, setting to 64 [ 113.353515][ T5914] usb 3-1: config 9 interface 58 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 113.364796][ T5914] usb 3-1: config 9 interface 58 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 113.397824][ T5914] usb 3-1: config 9 interface 200 has no altsetting 0 [ 113.411745][ T5914] usb 3-1: config 9 interface 58 has no altsetting 0 [ 113.424880][ T5914] usb 3-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice=ec.b1 [ 113.438009][ T6488] binder: BINDER_SET_CONTEXT_MGR already set [ 113.444031][ T6488] binder: 6487:6488 ioctl 4018620d 2000000000c0 returned -16 [ 113.446367][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.480967][ T5914] usb 3-1: Product: syz [ 113.485207][ T5914] usb 3-1: Manufacturer: syz [ 113.487550][ T6488] binder: 6487:6488 unknown command 0 [ 113.495178][ T6488] binder: 6487:6488 ioctl c0306201 200000000080 returned -22 [ 113.520424][ T5914] usb 3-1: SerialNumber: syz [ 113.546130][ T5914] usb 3-1: Interface #200 referenced by multiple IADs [ 113.561252][ T6488] binder: BINDER_SET_CONTEXT_MGR already set [ 113.578671][ T6488] binder: 6487:6488 ioctl 4018620d 200000000040 returned -16 [ 113.601547][ T6494] loop3: detected capacity change from 0 to 7 [ 113.608720][ T6494] Dev loop3: unable to read RDB block 7 [ 113.614329][ T6494] loop3: unable to read partition table [ 113.645068][ T6494] loop3: partition table beyond EOD, truncated [ 113.664322][ T6494] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.850089][ T6500] tmpfs: Bad value for 'mpol' [ 113.868692][ T6496] usb usb8: usbfs: process 6496 (syz.0.214) did not claim interface 0 before use [ 113.900787][ T5914] usb 3-1: unknown interface protocol 0xb6, assuming v1 [ 113.907923][ T5914] usb 3-1: cannot find UAC_HEADER [ 113.964079][ T5914] snd-usb-audio 3-1:9.200: probe with driver snd-usb-audio failed with error -22 [ 113.999595][ T5914] usb 3-1: USB disconnect, device number 15 [ 114.017670][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.047779][ T6507] vxcan0: tx address claim with dlc 1 [ 114.096413][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 114.396380][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 114.404851][ T9] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 114.413971][ T9] usb 2-1: config 0 has no interface number 0 [ 114.424546][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 114.434709][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.453988][ T9] usb 2-1: Product: syz [ 114.461739][ T9] usb 2-1: Manufacturer: syz [ 114.470914][ T9] usb 2-1: SerialNumber: syz [ 114.482139][ T9] usb 2-1: config 0 descriptor?? [ 114.494894][ T9] hub 2-1:0.145: bad descriptor, ignoring hub [ 114.506458][ T9] hub 2-1:0.145: probe with driver hub failed with error -5 [ 114.521919][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input11 [ 114.762171][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.784866][ T6525] netlink: 52 bytes leftover after parsing attributes in process `syz.2.221'. [ 114.807593][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.066418][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 115.216695][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 115.238736][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.256803][ T10] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 115.268007][ T10] usb 3-1: config 8 interface 0 has no altsetting 0 [ 115.278745][ T6536] loop3: detected capacity change from 0 to 7 [ 115.286404][ T10] usb 3-1: config 8 interface 0 has no altsetting 0 [ 115.293627][ T5991] Dev loop3: unable to read RDB block 7 [ 115.301246][ T10] usb 3-1: config 8 interface 0 has no altsetting 0 [ 115.307797][ T5991] loop3: unable to read partition table [ 115.313899][ T10] usb 3-1: config 8 interface 0 has no altsetting 0 [ 115.321696][ T5991] loop3: partition table beyond EOD, truncated [ 115.324661][ T10] usb 3-1: config 8 interface 0 has no altsetting 0 [ 115.336861][ T10] usb 3-1: config 8 interface 0 has no altsetting 0 [ 115.344154][ T6536] Dev loop3: unable to read RDB block 7 [ 115.350123][ T6536] loop3: unable to read partition table [ 115.356111][ T6536] loop3: partition table beyond EOD, truncated [ 115.357238][ T10] usb 3-1: config 8 interface 0 has no altsetting 0 [ 115.367421][ T6536] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.372669][ T10] usb 3-1: config 8 interface 0 has no altsetting 0 [ 115.400572][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=817b, bcdDevice=b9.c4 [ 115.418062][ T9] usb 2-1: USB disconnect, device number 20 [ 115.425330][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.441024][ T10] usb 3-1: Product: syz [ 115.449003][ T10] usb 3-1: Manufacturer: syz [ 115.453672][ T10] usb 3-1: SerialNumber: syz [ 115.484621][ T6540] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.556552][ T796] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 115.680718][ T10] usb 3-1: USB disconnect, device number 16 [ 115.727188][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 115.735201][ T796] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.744419][ T796] usb 4-1: config 1 has no interface number 1 [ 115.750657][ T796] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.761415][ T796] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 115.774429][ T796] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.786424][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 115.796063][ T796] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.805738][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.814817][ T796] usb 4-1: Product: syz [ 115.819164][ T796] usb 4-1: Manufacturer: syz [ 115.823768][ T796] usb 4-1: SerialNumber: syz [ 115.940653][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 115.949760][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.962474][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.974084][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15904, setting to 1024 [ 115.986140][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 115.996530][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.010263][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.031080][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.237610][ T6552] FAULT_INJECTION: forcing a failure. [ 116.237610][ T6552] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.252226][ T796] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 116.263294][ T9] usb 1-1: usb_control_msg returned -32 [ 116.264155][ T6552] CPU: 1 UID: 0 PID: 6552 Comm: syz.2.232 Not tainted syzkaller #0 PREEMPT(full) [ 116.264178][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.264189][ T6552] Call Trace: [ 116.264196][ T6552] [ 116.264204][ T6552] dump_stack_lvl+0x189/0x250 [ 116.264231][ T6552] ? __pfx____ratelimit+0x10/0x10 [ 116.264263][ T6552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.264285][ T6552] ? __pfx__printk+0x10/0x10 [ 116.264312][ T6552] ? __might_fault+0xb0/0x130 [ 116.264352][ T6552] should_fail_ex+0x414/0x560 [ 116.264382][ T6552] _copy_from_user+0x2d/0xb0 [ 116.264403][ T6552] ___sys_sendmsg+0x158/0x2a0 [ 116.264427][ T6552] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.264445][ T6552] ? __lock_acquire+0x6b6/0x2cf0 [ 116.264506][ T6552] ? __might_fault+0xb0/0x130 [ 116.264537][ T6552] __sys_sendmmsg+0x227/0x430 [ 116.264562][ T6552] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.264591][ T6552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.264627][ T6552] ? ksys_write+0x22a/0x250 [ 116.264648][ T6552] ? __pfx_ksys_write+0x10/0x10 [ 116.264672][ T6552] __x64_sys_sendmmsg+0xa0/0xc0 [ 116.264693][ T6552] do_syscall_64+0xfa/0xf80 [ 116.264712][ T6552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.264731][ T6552] ? clear_bhb_loop+0x60/0xb0 [ 116.264752][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.264770][ T6552] RIP: 0033:0x7fd6a8d8f749 [ 116.264785][ T6552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.264801][ T6552] RSP: 002b:00007fd6a9c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.264820][ T6552] RAX: ffffffffffffffda RBX: 00007fd6a8fe5fa0 RCX: 00007fd6a8d8f749 [ 116.264834][ T6552] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 116.264845][ T6552] RBP: 00007fd6a9c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 116.264857][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.264865][ T6552] R13: 00007fd6a8fe6038 R14: 00007fd6a8fe5fa0 R15: 00007ffd72978d48 [ 116.264895][ T6552] [ 116.426584][ T5919] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 116.440637][ T9] usbtmc 1-1:16.0: can't read capabilities [ 116.482082][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.503015][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.588654][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.598991][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.609512][ T5919] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.618677][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.627710][ T5919] usb 2-1: SerialNumber: syz [ 116.715681][ T796] usb 4-1: 2:1: cannot get freq at ep 0x82 [ 116.847938][ T6550] tls_set_device_offload_rx: netdev not found [ 116.927522][ T9] usb 4-1: USB disconnect, device number 18 [ 116.980332][ T5919] usb 2-1: 0:2 : does not exist [ 116.993950][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 117.016442][ T6563] usbtmc 1-1:16.0: Unable to send data, error -71 [ 117.051239][ T5919] usb 2-1: USB disconnect, device number 21 [ 117.097462][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.109813][ T6565] loop3: detected capacity change from 0 to 7 [ 117.123841][ T5834] Dev loop3: unable to read RDB block 7 [ 117.130221][ T5834] loop3: unable to read partition table [ 117.136290][ T5834] loop3: partition table beyond EOD, truncated [ 117.145276][ T6565] Dev loop3: unable to read RDB block 7 [ 117.151119][ T6565] loop3: unable to read partition table [ 117.158044][ T6565] loop3: partition table beyond EOD, truncated [ 117.164220][ T6565] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 117.476837][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 117.660026][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 117.679584][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.686201][ T6577] FAULT_INJECTION: forcing a failure. [ 117.686201][ T6577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.688316][ T10] usb 3-1: Product: syz [ 117.701165][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.3.241 Not tainted syzkaller #0 PREEMPT(full) [ 117.701189][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.701201][ T6577] Call Trace: [ 117.701208][ T6577] [ 117.701215][ T6577] dump_stack_lvl+0x189/0x250 [ 117.701243][ T6577] ? __pfx____ratelimit+0x10/0x10 [ 117.701271][ T6577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.701294][ T6577] ? __pfx__printk+0x10/0x10 [ 117.701316][ T6577] ? __might_fault+0xb0/0x130 [ 117.701354][ T6577] should_fail_ex+0x414/0x560 [ 117.701385][ T6577] _copy_from_user+0x2d/0xb0 [ 117.701406][ T6577] ___sys_sendmsg+0x158/0x2a0 [ 117.701438][ T6577] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.701456][ T6577] ? __lock_acquire+0x6b6/0x2cf0 [ 117.701517][ T6577] ? __might_fault+0xb0/0x130 [ 117.701548][ T6577] __sys_sendmmsg+0x227/0x430 [ 117.701574][ T6577] ? __pfx___sys_sendmmsg+0x10/0x10 [ 117.701603][ T6577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.701639][ T6577] ? ksys_write+0x22a/0x250 [ 117.701660][ T6577] ? __pfx_ksys_write+0x10/0x10 [ 117.701683][ T6577] __x64_sys_sendmmsg+0xa0/0xc0 [ 117.701706][ T6577] do_syscall_64+0xfa/0xf80 [ 117.701725][ T6577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.701743][ T6577] ? clear_bhb_loop+0x60/0xb0 [ 117.701764][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.701782][ T6577] RIP: 0033:0x7fc531d8f749 [ 117.701799][ T6577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.701814][ T6577] RSP: 002b:00007fc532b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.701834][ T6577] RAX: ffffffffffffffda RBX: 00007fc531fe5fa0 RCX: 00007fc531d8f749 [ 117.701847][ T6577] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 117.701859][ T6577] RBP: 00007fc532b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 117.701870][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.701880][ T6577] R13: 00007fc531fe6038 R14: 00007fc531fe5fa0 R15: 00007ffe0707e778 [ 117.701910][ T6577] [ 117.912869][ T10] usb 3-1: Manufacturer: syz [ 117.917571][ T10] usb 3-1: SerialNumber: syz [ 117.924108][ T10] usb 3-1: config 0 descriptor?? [ 117.932241][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 118.068314][ T5919] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 118.133672][ T6567] netlink: 'syz.2.236': attribute type 9 has an invalid length. [ 118.229909][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.251490][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.268456][ T6582] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.270037][ T5919] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 118.284191][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.307171][ T5919] usb 2-1: config 0 descriptor?? [ 118.345024][ T10] gspca_sunplus: reg_r err -71 [ 118.350511][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 118.363935][ T10] usb 3-1: USB disconnect, device number 17 [ 118.547645][ T10] usb 1-1: USB disconnect, device number 15 [ 118.653571][ T6588] loop3: detected capacity change from 0 to 7 [ 118.662233][ T5991] Dev loop3: unable to read RDB block 7 [ 118.667970][ T5991] loop3: unable to read partition table [ 118.675010][ T5991] loop3: partition table beyond EOD, truncated [ 118.684533][ T6588] Dev loop3: unable to read RDB block 7 [ 118.690252][ T6588] loop3: unable to read partition table [ 118.696066][ T6588] loop3: partition table beyond EOD, truncated [ 118.702529][ T6588] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.724666][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 118.756421][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 118.766498][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 118.773909][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 118.784309][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 118.793094][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 118.800595][ T5919] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 118.811648][ T5919] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 118.928802][ T5919] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 118.936267][ T5919] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 118.950641][ T5919] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -71 [ 118.964965][ T5919] usb 2-1: USB disconnect, device number 22 [ 119.108980][ T6602] FAULT_INJECTION: forcing a failure. [ 119.108980][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.122278][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.2.251 Not tainted syzkaller #0 PREEMPT(full) [ 119.122302][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.122314][ T6602] Call Trace: [ 119.122321][ T6602] [ 119.122329][ T6602] dump_stack_lvl+0x189/0x250 [ 119.122357][ T6602] ? __pfx____ratelimit+0x10/0x10 [ 119.122392][ T6602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.122415][ T6602] ? __pfx__printk+0x10/0x10 [ 119.122437][ T6602] ? __might_fault+0xb0/0x130 [ 119.122476][ T6602] should_fail_ex+0x414/0x560 [ 119.122508][ T6602] _copy_from_user+0x2d/0xb0 [ 119.122529][ T6602] ___sys_sendmsg+0x158/0x2a0 [ 119.122552][ T6602] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.122571][ T6602] ? __lock_acquire+0x6b6/0x2cf0 [ 119.122633][ T6602] ? __might_fault+0xb0/0x130 [ 119.122665][ T6602] __sys_sendmmsg+0x227/0x430 [ 119.122691][ T6602] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.122721][ T6602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.122757][ T6602] ? ksys_write+0x22a/0x250 [ 119.122779][ T6602] ? __pfx_ksys_write+0x10/0x10 [ 119.122803][ T6602] __x64_sys_sendmmsg+0xa0/0xc0 [ 119.122826][ T6602] do_syscall_64+0xfa/0xf80 [ 119.122845][ T6602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.122864][ T6602] ? clear_bhb_loop+0x60/0xb0 [ 119.122886][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.122904][ T6602] RIP: 0033:0x7fd6a8d8f749 [ 119.122921][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.122936][ T6602] RSP: 002b:00007fd6a9c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.122956][ T6602] RAX: ffffffffffffffda RBX: 00007fd6a8fe5fa0 RCX: 00007fd6a8d8f749 [ 119.122969][ T6602] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 119.122982][ T6602] RBP: 00007fd6a9c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 119.122993][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.123004][ T6602] R13: 00007fd6a8fe6038 R14: 00007fd6a8fe5fa0 R15: 00007ffd72978d48 [ 119.123035][ T6602] [ 119.584464][ T6612] fuse: Bad value for 'group_id' [ 119.589578][ T6612] fuse: Bad value for 'group_id' [ 119.708827][ T6616] loop3: detected capacity change from 0 to 7 [ 119.722520][ T5824] Dev loop3: unable to read RDB block 7 [ 119.728585][ T5824] loop3: unable to read partition table [ 119.734577][ T5824] loop3: partition table beyond EOD, truncated [ 119.742087][ T6616] Dev loop3: unable to read RDB block 7 [ 119.777218][ T6616] loop3: unable to read partition table [ 119.794401][ T6616] loop3: partition table beyond EOD, truncated [ 119.812251][ T6621] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.820677][ T6616] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.126489][ T5919] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 120.227568][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 120.245843][ T6638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.265'. [ 120.255885][ T6638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.265'. [ 120.257310][ T5919] usb 1-1: device descriptor read/64, error -71 [ 120.307018][ T6640] binder: 6639:6640 ioctl c0306201 0 returned -14 [ 120.380507][ T6644] FAULT_INJECTION: forcing a failure. [ 120.380507][ T6644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.380975][ T10] usb 4-1: no configurations [ 120.400225][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 120.400250][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.400262][ T6644] Call Trace: [ 120.400269][ T6644] [ 120.400277][ T6644] dump_stack_lvl+0x189/0x250 [ 120.400305][ T6644] ? __pfx____ratelimit+0x10/0x10 [ 120.400334][ T6644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.400358][ T6644] ? __pfx__printk+0x10/0x10 [ 120.400381][ T6644] ? __might_fault+0xb0/0x130 [ 120.400420][ T6644] should_fail_ex+0x414/0x560 [ 120.400452][ T6644] _copy_from_user+0x2d/0xb0 [ 120.400473][ T6644] ___sys_sendmsg+0x158/0x2a0 [ 120.400497][ T6644] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.400515][ T6644] ? __lock_acquire+0x6b6/0x2cf0 [ 120.400583][ T6644] ? __might_fault+0xb0/0x130 [ 120.400615][ T6644] __sys_sendmmsg+0x227/0x430 [ 120.400642][ T6644] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.400671][ T6644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.400708][ T6644] ? ksys_write+0x22a/0x250 [ 120.400730][ T6644] ? __pfx_ksys_write+0x10/0x10 [ 120.400754][ T6644] __x64_sys_sendmmsg+0xa0/0xc0 [ 120.400778][ T6644] do_syscall_64+0xfa/0xf80 [ 120.400797][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.400814][ T6644] ? clear_bhb_loop+0x60/0xb0 [ 120.400837][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.400855][ T6644] RIP: 0033:0x7f053958f749 [ 120.400872][ T6644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.400888][ T6644] RSP: 002b:00007f053a35a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.400908][ T6644] RAX: ffffffffffffffda RBX: 00007f05397e5fa0 RCX: 00007f053958f749 [ 120.400922][ T6644] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 120.400935][ T6644] RBP: 00007f053a35a090 R08: 0000000000000000 R09: 0000000000000000 [ 120.400946][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.400957][ T6644] R13: 00007f05397e6038 R14: 00007f05397e5fa0 R15: 00007ffcd3061c78 [ 120.400994][ T6644] [ 120.421520][ T10] usb 4-1: can't read configurations, error -22 [ 120.526554][ T5919] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 120.676720][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 120.695713][ T6654] sctp: [Deprecated]: syz.2.270 (pid 6654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.695713][ T6654] Use struct sctp_sack_info instead [ 120.787444][ T5919] usb 1-1: device descriptor read/64, error -71 [ 120.847166][ T10] usb 4-1: no configurations [ 120.852173][ T10] usb 4-1: can't read configurations, error -22 [ 120.858912][ T10] usb usb4-port1: attempt power cycle [ 120.906620][ T5919] usb usb1-port1: attempt power cycle [ 121.021837][ T6661] loop3: detected capacity change from 0 to 7 [ 121.030730][ T6661] Dev loop3: unable to read RDB block 7 [ 121.046415][ T6661] loop3: unable to read partition table [ 121.052379][ T6661] loop3: partition table beyond EOD, truncated [ 121.059022][ T6661] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 121.170465][ T6664] tmpfs: Bad value for 'mpol' [ 121.178509][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 121.189638][ T6664] overlayfs: upper fs does not support tmpfile. [ 121.206449][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 121.238788][ T10] usb 4-1: no configurations [ 121.243886][ T10] usb 4-1: can't read configurations, error -22 [ 121.267702][ T5919] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 121.307124][ T5919] usb 1-1: device descriptor read/8, error -71 [ 121.396459][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 121.428204][ T10] usb 4-1: no configurations [ 121.432924][ T10] usb 4-1: can't read configurations, error -22 [ 121.440984][ T10] usb usb4-port1: unable to enumerate USB device [ 121.516484][ T982] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 121.546501][ T5919] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 121.566970][ T5919] usb 1-1: device descriptor read/8, error -71 [ 121.596427][ T39] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 121.669804][ T982] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 121.678606][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.688516][ T5919] usb usb1-port1: unable to enumerate USB device [ 121.697471][ T982] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 121.706595][ T982] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 121.714571][ T982] usb 2-1: Manufacturer: syz [ 121.721995][ T982] usb 2-1: config 0 descriptor?? [ 121.746405][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 121.753229][ T39] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 121.761762][ T39] usb 3-1: config 0 has no interface number 0 [ 121.769702][ T39] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.780804][ T39] usb 3-1: config 0 interface 85 has no altsetting 0 [ 121.789953][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 121.799273][ T982] rc_core: IR keymap rc-hauppauge not found [ 121.805189][ T982] Registered IR keymap rc-empty [ 121.810358][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.819758][ T982] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 121.829894][ T39] usb 3-1: Product: syz [ 121.834037][ T39] usb 3-1: Manufacturer: syz [ 121.840214][ T982] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 121.851467][ T39] usb 3-1: SerialNumber: syz [ 121.858821][ T39] usb 3-1: config 0 descriptor?? [ 122.348972][ T982] usb 2-1: USB disconnect, device number 23 [ 122.417849][ T39] appletouch 3-1:0.85: Failed to read mode from device. [ 122.425018][ T39] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 123.954390][ T6685] FAULT_INJECTION: forcing a failure. [ 123.954390][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.988231][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.3.281 Not tainted syzkaller #0 PREEMPT(full) [ 123.988258][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.988269][ T6685] Call Trace: [ 123.988277][ T6685] [ 123.988284][ T6685] dump_stack_lvl+0x189/0x250 [ 123.988312][ T6685] ? __pfx____ratelimit+0x10/0x10 [ 123.988341][ T6685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.988364][ T6685] ? __pfx__printk+0x10/0x10 [ 123.988387][ T6685] ? __might_fault+0xb0/0x130 [ 123.988426][ T6685] should_fail_ex+0x414/0x560 [ 123.988457][ T6685] _copy_from_user+0x2d/0xb0 [ 123.988478][ T6685] ___sys_sendmsg+0x158/0x2a0 [ 123.988502][ T6685] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.988520][ T6685] ? __lock_acquire+0x6b6/0x2cf0 [ 123.988586][ T6685] ? __might_fault+0xb0/0x130 [ 123.988618][ T6685] __sys_sendmmsg+0x227/0x430 [ 123.988644][ T6685] ? __pfx___sys_sendmmsg+0x10/0x10 [ 123.988681][ T6685] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.988719][ T6685] ? ksys_write+0x22a/0x250 [ 123.988741][ T6685] ? __pfx_ksys_write+0x10/0x10 [ 123.988765][ T6685] __x64_sys_sendmmsg+0xa0/0xc0 [ 123.988788][ T6685] do_syscall_64+0xfa/0xf80 [ 123.988808][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.988826][ T6685] ? clear_bhb_loop+0x60/0xb0 [ 123.988849][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.988867][ T6685] RIP: 0033:0x7fc531d8f749 [ 123.988884][ T6685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.988899][ T6685] RSP: 002b:00007fc532b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.988919][ T6685] RAX: ffffffffffffffda RBX: 00007fc531fe5fa0 RCX: 00007fc531d8f749 [ 123.988933][ T6685] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 123.988944][ T6685] RBP: 00007fc532b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 123.988956][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.988967][ T6685] R13: 00007fc531fe6038 R14: 00007fc531fe5fa0 R15: 00007ffe0707e778 [ 123.988997][ T6685] [ 123.994277][ T6684] loop3: detected capacity change from 0 to 7 [ 124.227000][ T5991] Dev loop3: unable to read RDB block 7 [ 124.232801][ T5991] loop3: unable to read partition table [ 124.239374][ T5991] loop3: partition table beyond EOD, truncated [ 124.246867][ T6684] Dev loop3: unable to read RDB block 7 [ 124.252661][ T6684] loop3: unable to read partition table [ 124.259328][ T6684] loop3: partition table beyond EOD, truncated [ 124.276390][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 124.297620][ T6684] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.415457][ T39] usb 3-1: USB disconnect, device number 18 [ 124.428832][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 124.436767][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 124.449612][ T9] usb 2-1: config 0 has no interface number 0 [ 124.478718][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 124.500819][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.525119][ T9] usb 2-1: Product: syz [ 124.543414][ T9] usb 2-1: Manufacturer: syz [ 124.549561][ T9] usb 2-1: SerialNumber: syz [ 124.574819][ T9] usb 2-1: config 0 descriptor?? [ 124.587820][ T9] smsc95xx v2.0.0 [ 124.700642][ T30] audit: type=1800 audit(1764197679.486:3): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.285" name="bus" dev="tmpfs" ino=340 res=0 errno=0 [ 124.788146][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.798645][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.156418][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 125.286472][ T10] usb 3-1: device descriptor read/64, error -71 [ 125.463677][ T6714] loop3: detected capacity change from 0 to 7 [ 125.476671][ T5991] Dev loop3: unable to read RDB block 7 [ 125.482573][ T5991] loop3: unable to read partition table [ 125.489617][ T5991] loop3: partition table beyond EOD, truncated [ 125.498065][ T6714] Dev loop3: unable to read RDB block 7 [ 125.507273][ T6714] loop3: unable to read partition table [ 125.513115][ T6714] loop3: partition table beyond EOD, truncated [ 125.526439][ T6714] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 125.555997][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 125.696468][ T10] usb 3-1: device descriptor read/64, error -71 [ 125.814055][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 125.826854][ T10] usb usb3-port1: attempt power cycle [ 125.833827][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 125.856970][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 125.885025][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 125.887107][ T6725] input: syz1 as /devices/virtual/input/input14 [ 125.904318][ T9] usb 2-1: USB disconnect, device number 24 [ 126.188255][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 126.227392][ T10] usb 3-1: device descriptor read/8, error -71 [ 126.336943][ T982] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 126.469175][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 126.497137][ T10] usb 3-1: device descriptor read/8, error -71 [ 126.510176][ T982] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 126.519399][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.527743][ T982] usb 1-1: Product: syz [ 126.532973][ T982] usb 1-1: Manufacturer: syz [ 126.540915][ T982] usb 1-1: SerialNumber: syz [ 126.548472][ T982] usb 1-1: config 0 descriptor?? [ 126.568214][ T982] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 126.606941][ T10] usb usb3-port1: unable to enumerate USB device [ 126.759588][ T6732] netlink: 'syz.0.298': attribute type 9 has an invalid length. [ 127.180110][ T982] gspca_sunplus: reg_r err -71 [ 127.185018][ T982] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 127.201957][ T982] usb 1-1: USB disconnect, device number 20 [ 127.356564][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 127.517997][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.528277][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.541527][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.550790][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.558840][ T10] usb 4-1: Product: syz [ 127.563010][ T10] usb 4-1: Manufacturer: syz [ 127.567695][ T10] usb 4-1: SerialNumber: syz [ 127.790950][ T6748] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 127.809118][ T6748] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 127.815931][ T6748] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 127.822628][ T6748] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 127.829812][ T6748] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 127.838569][ T6756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.858195][ T6748] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 127.865587][ T6748] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 127.872958][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 127.896515][ T6748] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 127.902993][ T6748] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 127.919403][ T6748] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 128.049047][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.059042][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 128.071757][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.074087][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.091071][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.092450][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.100634][ T9] usb 2-1: SerialNumber: syz [ 128.236384][ T5914] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 128.320321][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 128.334330][ T9] usb 2-1: USB disconnect, device number 25 [ 128.417415][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 128.429760][ T5914] usb 1-1: config 1 interface 0 altsetting 164 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.443115][ T5914] usb 1-1: config 1 interface 0 has no altsetting 0 [ 128.451952][ T5914] usb 1-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 128.461152][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.469253][ T5914] usb 1-1: Product: syz [ 128.473553][ T5914] usb 1-1: Manufacturer: syz [ 128.478218][ T5914] usb 1-1: SerialNumber: syz [ 128.695089][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.703976][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.716873][ T10] cdc_ncm 4-1:1.0: bind() failure [ 128.726826][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 128.733916][ T10] cdc_ncm 4-1:1.1: bind() failure [ 128.747743][ T5914] usbhid 1-1:1.0: can't add hid device: -71 [ 128.759884][ T5914] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 128.778082][ T5914] usb 1-1: USB disconnect, device number 21 [ 128.935387][ T982] usb 4-1: USB disconnect, device number 23 [ 129.176466][ T39] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 129.327790][ T39] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 129.338918][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 129.352075][ T39] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 129.361407][ T5919] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 129.369209][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.384251][ T39] usb 3-1: config 0 descriptor?? [ 129.506445][ T5919] usb 2-1: device descriptor read/64, error -71 [ 129.549151][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.318'. [ 129.627283][ T6789] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.686404][ T5914] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 129.752227][ T5919] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 129.785581][ T6791] netlink: 'syz.3.319': attribute type 21 has an invalid length. [ 129.793589][ T6791] netlink: 164 bytes leftover after parsing attributes in process `syz.3.319'. [ 129.806249][ T39] creative-sb0540 0003:041E:3100.0006: item fetching failed at offset 3/7 [ 129.815333][ T39] creative-sb0540 0003:041E:3100.0006: parse failed [ 129.822455][ T39] creative-sb0540 0003:041E:3100.0006: probe with driver creative-sb0540 failed with error -22 [ 129.862867][ T5914] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 129.872344][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.880872][ T5914] usb 1-1: Product: syz [ 129.885608][ T5914] usb 1-1: Manufacturer: syz [ 129.886475][ T5919] usb 2-1: device descriptor read/64, error -71 [ 129.890335][ T5914] usb 1-1: SerialNumber: syz [ 129.904599][ T5914] usb 1-1: config 0 descriptor?? [ 129.914097][ T5914] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 130.017575][ T10] usb 3-1: USB disconnect, device number 23 [ 130.018703][ T5919] usb usb2-port1: attempt power cycle [ 130.257664][ T39] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 130.366528][ T5919] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 130.386907][ T5919] usb 2-1: device descriptor read/8, error -71 [ 130.416720][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 130.425797][ T39] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 130.435015][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.443084][ T39] usb 4-1: Product: syz [ 130.447317][ T39] usb 4-1: Manufacturer: syz [ 130.452879][ T39] usb 4-1: SerialNumber: syz [ 130.459970][ T39] usb 4-1: config 0 descriptor?? [ 130.515837][ T5914] gspca_sunplus: reg_r err -71 [ 130.521440][ T5914] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 130.534539][ T5914] usb 1-1: USB disconnect, device number 22 [ 130.599047][ T6797] dvmrp12: entered allmulticast mode [ 130.626604][ T5919] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 130.649084][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 130.649108][ T5919] usb 2-1: device descriptor read/8, error -71 [ 130.777851][ T5919] usb usb2-port1: unable to enumerate USB device [ 130.868368][ T39] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 130.878226][ T39] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 130.907314][ T24] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 130.928016][ T39] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 130.942019][ T39] usb 4-1: USB disconnect, device number 24 [ 131.057931][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 131.069438][ T24] usb 3-1: config 1 has an invalid interface number: 78 but max is 0 [ 131.081232][ T24] usb 3-1: config 1 has no interface number 0 [ 131.087582][ T24] usb 3-1: config 1 interface 78 has no altsetting 0 [ 131.099496][ T24] usb 3-1: string descriptor 0 read error: -22 [ 131.106498][ T24] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 131.115664][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.133867][ T24] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 131.153092][ T24] usb 3-1: selecting invalid altsetting 0 [ 131.222555][ T6808] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.323301][ T6812] block nbd0: NBD_DISCONNECT [ 131.334990][ T2346] pvrusb2: control-write URB failure, status=-71 [ 131.342330][ T5914] usb 3-1: USB disconnect, device number 24 [ 131.353404][ T2346] pvrusb2: Device being rendered inoperable [ 131.367742][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 131.390087][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 131.532442][ T6816] loop3: detected capacity change from 0 to 7 [ 131.541398][ T5991] Dev loop3: unable to read RDB block 7 [ 131.547353][ T5991] loop3: unable to read partition table [ 131.553466][ T5991] loop3: partition table beyond EOD, truncated [ 131.561359][ T6816] Dev loop3: unable to read RDB block 7 [ 131.571341][ T6816] loop3: unable to read partition table [ 131.578641][ T6816] loop3: partition table beyond EOD, truncated [ 131.603436][ T6816] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.780211][ T5914] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 131.936615][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 131.962304][ T5914] usb 4-1: config 2 has an invalid interface number: 194 but max is 0 [ 131.972163][ T5914] usb 4-1: config 2 has no interface number 0 [ 131.980303][ T5914] usb 4-1: config 2 interface 194 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 131.993137][ T5914] usb 4-1: config 2 interface 194 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.004384][ T5914] usb 4-1: config 2 interface 194 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.035732][ T5914] usb 4-1: config 2 interface 194 has no altsetting 0 [ 132.048254][ T5914] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7 [ 132.058061][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.066082][ T5914] usb 4-1: Product: syz [ 132.073644][ T5914] usb 4-1: Manufacturer: syz [ 132.078335][ T5914] usb 4-1: SerialNumber: syz [ 132.126497][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 132.135610][ T9] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 132.144407][ T9] usb 1-1: config 0 has no interface number 0 [ 132.155117][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 132.197176][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.212867][ T9] usb 1-1: Product: syz [ 132.226773][ T9] usb 1-1: Manufacturer: syz [ 132.235226][ T9] usb 1-1: SerialNumber: syz [ 132.250796][ T9] usb 1-1: config 0 descriptor?? [ 132.300029][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.310480][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.322827][ T5914] cypress_m8 4-1:2.194: HID->COM RS232 Adapter converter detected [ 132.338646][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 132.339123][ T5914] cyphidcom ttyUSB0: required endpoint is missing [ 132.365978][ T5914] usb 4-1: USB disconnect, device number 25 [ 132.386065][ T5914] cypress_m8 4-1:2.194: device disconnected [ 132.469264][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.478434][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.487776][ T9] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 132.496175][ T9] uvcvideo 1-1:0.31: No streaming interface found for terminal 6. [ 132.511688][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 132.520650][ T9] usb 1-1: USB disconnect, device number 23 [ 132.545209][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.557998][ T24] usb 3-1: Product: syz [ 132.567582][ T39] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 132.581515][ T24] usb 3-1: Manufacturer: syz [ 132.586184][ T24] usb 3-1: SerialNumber: syz [ 132.616152][ T24] usb 3-1: config 0 descriptor?? [ 132.628514][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 132.736785][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 132.750046][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.760246][ T39] usb 2-1: config 1 has an invalid interface descriptor of length 5, skipping [ 132.770962][ T39] usb 2-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config [ 132.781906][ T39] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 132.791442][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 7 [ 132.802950][ T39] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.825900][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.832542][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.855936][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.865743][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.873889][ T39] usb 2-1: Product: о [ 132.878469][ T39] usb 2-1: Manufacturer: éŮ׺캲碥ﭙ逫৭殮쬿귈ì˜î·£ëºå–ºãº¤ä›Œäžµä–‚麳홇ê“Ԕ᳟èŒæŸªç½¹ç‚‰æ✪â¨ï¶†à¡¶ë–¥ïˆê¿ºãšŸäŒœë™—䣎圛䷚ᖱ劈皣筨狯顎⃎î…ར䗵邟穸龳èˆá«»ï¼½ç„¹â´¾ë½§è—œã®¡ä±¡ë½•á©§â‡Ÿà°ºî­’ஷ陭ì«ä•‰æ©›í”®å‰âŽ¶â¥œî²®ï³ïŠ½à¬½ê†’Ջ쥖਎ᠻ潲￙悳ᮥ璅َ꒔⪺퇾蛂᳠ã´ç”œç’¡çª‡ïŒ‡í£ï¡¤é¸§ì¢®ì¼œèª†Ê¹ê§µç¢® [ 132.915616][ T39] usb 2-1: SerialNumber: syz [ 133.052024][ T6830] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157661][ T39] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.222545][ T39] usb 2-1: USB disconnect, device number 30 [ 133.246705][ T24] gspca_sunplus: reg_r err -71 [ 133.285767][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 133.286136][ T6838] loop3: detected capacity change from 0 to 7 [ 133.315985][ T24] usb 3-1: USB disconnect, device number 25 [ 133.325818][ T6838] Dev loop3: unable to read RDB block 7 [ 133.333794][ T6838] loop3: unable to read partition table [ 133.346041][ T6838] loop3: partition table beyond EOD, truncated [ 133.378366][ T6840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.341'. [ 133.389382][ T6838] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.592902][ T6850] comedi: valid board names for 8255 driver are: [ 133.601571][ T6850] 8255 [ 133.604432][ T6850] comedi: valid board names for vmk80xx driver are: [ 133.618509][ T6850] vmk80xx [ 133.621686][ T6850] comedi: valid board names for usbduxsigma driver are: [ 133.631042][ T6850] usbduxsigma [ 133.634461][ T6850] comedi: valid board names for usbduxfast driver are: [ 133.642324][ T6850] usbduxfast [ 133.645603][ T6850] comedi: valid board names for usbdux driver are: [ 133.652559][ T6850] usbdux [ 133.655524][ T6850] comedi: valid board names for ni6501 driver are: [ 133.662603][ T6850] ni6501 [ 133.665542][ T6850] comedi: valid board names for dt9812 driver are: [ 133.672129][ T6850] dt9812 [ 133.675170][ T6850] comedi: valid board names for ni_labpc_cs driver are: [ 133.682354][ T6850] ni_labpc_cs [ 133.685843][ T6850] comedi: valid board names for ni_daq_700 driver are: [ 133.693663][ T6850] ni_daq_700 [ 133.697286][ T6850] comedi: valid board names for labpc_pci driver are: [ 133.704054][ T6850] labpc_pci [ 133.716394][ T6850] comedi: valid board names for adl_pci9118 driver are: [ 133.723453][ T6850] pci9118dg [ 133.738757][ T6850] pci9118hg [ 133.745318][ T6850] pci9118hr [ 133.757503][ T6850] comedi: valid board names for 8255_pci driver are: [ 133.766009][ T6850] 8255_pci [ 133.766060][ T6857] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.769380][ T6850] comedi: valid board names for s526 driver are: [ 133.806596][ T6850] s526 [ 133.810129][ T6850] comedi: valid board names for multiq3 driver are: [ 133.818368][ T6850] multiq3 [ 133.821576][ T6850] comedi: valid board names for pcmuio driver are: [ 133.830614][ T6850] pcmuio48 [ 133.833970][ T6850] pcmuio96 [ 133.837607][ T6850] comedi: valid board names for pcmmio driver are: [ 133.844418][ T6850] pcmmio [ 133.847911][ T6850] comedi: valid board names for pcmda12 driver are: [ 133.854775][ T6850] pcmda12 [ 133.860177][ T6850] comedi: valid board names for pcmad driver are: [ 133.860679][ T6859] FAULT_INJECTION: forcing a failure. [ 133.860679][ T6859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.867806][ T6850] pcmad12 [ 133.867817][ T6850] pcmad16 [ 133.867827][ T6850] comedi: valid board names for ni_labpc driver are: [ 133.867838][ T6850] lab-pc-1200 [ 133.867846][ T6850] lab-pc-1200ai [ 133.867854][ T6850] lab-pc+ [ 133.867862][ T6850] comedi: valid board names for atmio16 driver are: [ 133.867872][ T6850] atmio16 [ 133.867881][ T6850] atmio16d [ 133.867889][ T6850] comedi: valid board names for ni_at_ao driver are: [ 133.867899][ T6850] at-ao-6 [ 133.867906][ T6850] at-ao-10 [ 133.867914][ T6850] comedi: valid board names for ni_at_a2150 driver are: [ 133.867924][ T6850] ni_at_a2150 [ 133.867932][ T6850] comedi: valid board names for adq12b driver are: [ 133.867942][ T6850] adq12b [ 133.867951][ T6850] comedi: valid board names for mpc624 driver are: [ 133.867960][ T6850] mpc624 [ 133.867967][ T6850] comedi: valid board names for c6xdigio driver are: [ 133.867977][ T6850] c6xdigio [ 133.867985][ T6850] comedi: valid board names for aio_iiro_16 driver are: [ 133.867995][ T6850] aio_iiro_16 [ 133.868003][ T6850] comedi: valid board names for aio_aio12_8 driver are: [ 133.868013][ T6850] aio_aio12_8 [ 133.868021][ T6850] aio_ai12_8 [ 133.868029][ T6850] aio_ao12_4 [ 133.868037][ T6850] comedi: valid board names for fl512 driver are: [ 133.868047][ T6850] fl512 [ 133.868054][ T6850] comedi: valid board names for dmm32at driver are: [ 133.868064][ T6850] dmm32at [ 133.868071][ T6850] comedi: valid board names for dt282x driver are: [ 133.868082][ T6850] dt2821 [ 133.868089][ T6850] dt2821-f [ 133.868096][ T6850] dt2821-g [ 133.868103][ T6850] dt2823 [ 133.894592][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.2.348 Not tainted syzkaller #0 PREEMPT(full) [ 133.894620][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.894630][ T6859] Call Trace: [ 133.894637][ T6859] [ 133.894646][ T6859] dump_stack_lvl+0x189/0x250 [ 133.894670][ T6859] ? __pfx____ratelimit+0x10/0x10 [ 133.894695][ T6859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.894715][ T6859] ? __pfx__printk+0x10/0x10 [ 133.894736][ T6859] ? __might_fault+0xb0/0x130 [ 133.894776][ T6859] should_fail_ex+0x414/0x560 [ 133.894807][ T6859] _copy_from_iter+0x1cd/0x1630 [ 133.894846][ T6859] ? __pfx__copy_from_iter+0x10/0x10 [ 133.894872][ T6859] ? __local_bh_enable_ip+0x12d/0x1c0 [ 133.894892][ T6859] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 133.894918][ T6859] ? skb_put+0x11b/0x210 [ 133.894940][ T6859] raw_sendmsg+0x437/0x9c0 [ 133.894977][ T6859] ? __pfx_raw_sendmsg+0x10/0x10 [ 133.895005][ T6859] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 133.895024][ T6859] sock_sendmsg_nosec+0x18f/0x1d0 [ 133.895051][ T6859] ____sys_sendmsg+0x577/0x880 [ 133.895080][ T6859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.895109][ T6859] ? import_iovec+0x74/0xa0 [ 133.895132][ T6859] ___sys_sendmsg+0x21f/0x2a0 [ 133.895154][ T6859] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.895208][ T6859] ? __fget_files+0x2a/0x420 [ 133.895231][ T6859] ? __fget_files+0x3a0/0x420 [ 133.895265][ T6859] __sys_sendmmsg+0x227/0x430 [ 133.895291][ T6859] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.895320][ T6859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.895356][ T6859] ? ksys_write+0x22a/0x250 [ 133.895377][ T6859] ? __pfx_ksys_write+0x10/0x10 [ 133.895401][ T6859] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.895423][ T6859] do_syscall_64+0xfa/0xf80 [ 133.895442][ T6859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.895460][ T6859] ? clear_bhb_loop+0x60/0xb0 [ 133.895483][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.895500][ T6859] RIP: 0033:0x7fd6a8d8f749 [ 133.895517][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.895533][ T6859] RSP: 002b:00007fd6a9c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.895553][ T6859] RAX: ffffffffffffffda RBX: 00007fd6a8fe5fa0 RCX: 00007fd6a8d8f749 [ 133.895567][ T6859] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 133.895579][ T6859] RBP: 00007fd6a9c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 133.895590][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.895602][ T6859] R13: 00007fd6a8fe6038 R14: 00007fd6a8fe5fa0 R15: 00007ffd72978d48 [ 133.895632][ T6859] [ 133.994068][ T6863] netlink: 44 bytes leftover after parsing attributes in process `syz.1.349'. [ 134.015538][ T6850] dt2824-pgh [ 134.016815][ T6863] netlink: 43 bytes leftover after parsing attributes in process `syz.1.349'. [ 134.020130][ T6850] dt2824-pgl [ 134.032401][ T6863] netlink: 'syz.1.349': attribute type 5 has an invalid length. [ 134.047738][ T6850] dt2825 [ 134.052565][ T6863] netlink: 43 bytes leftover after parsing attributes in process `syz.1.349'. [ 134.060268][ T6850] dt2827 [ 134.201987][ T6866] loop3: detected capacity change from 0 to 7 [ 134.202744][ T6850] dt2828 [ 134.222564][ T6866] Dev loop3: unable to read RDB block 7 [ 134.226409][ T6850] dt2829 [ 134.229921][ T6866] loop3: unable to read partition table [ 134.233827][ T6850] dt21-ez [ 134.233838][ T6850] dt23-ez [ 134.233845][ T6850] dt24-ez [ 134.233852][ T6850] dt24-ez-pgl [ 134.233860][ T6850] comedi: valid board names for dt2817 driver are: [ 134.233871][ T6850] dt2817 [ 134.259394][ T6866] loop3: partition table beyond EOD, [ 134.355527][ T6850] comedi: valid board names for dt2815 driver are: [ 134.367008][ T6866] truncated [ 134.383815][ T6850] dt2815 [ 134.387202][ T6866] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.427714][ T6850] comedi: valid board names for dt2814 driver are: [ 134.445037][ T6850] dt2814 [ 134.450434][ T6850] comedi: valid board names for dt2811 driver are: [ 134.464966][ T6850] dt2811-pgh [ 134.469530][ T6850] dt2811-pgl [ 134.472836][ T6850] comedi: valid board names for dt2801 driver are: [ 134.486918][ T6850] dt2801 [ 134.490045][ T6850] comedi: valid board names for das6402 driver are: [ 134.497273][ T6850] das6402-12 [ 134.501029][ T6850] das6402-16 [ 134.504337][ T6850] comedi: valid board names for das1800 driver are: [ 134.512537][ T6850] das-1701st [ 134.515842][ T6850] das-1701st-da [ 134.519649][ T6850] das-1702st [ 134.523072][ T6850] das-1702st-da [ 134.527179][ T6850] das-1702hr [ 134.533170][ T6850] das-1702hr-da [ 134.537275][ T6850] das-1701ao [ 134.540653][ T6850] das-1702ao [ 134.544074][ T6850] das-1801st [ 134.550287][ T6850] das-1801st-da [ 134.553919][ T6850] das-1802st [ 134.557333][ T6850] das-1802st-da [ 134.560949][ T6850] das-1802hr [ 134.564288][ T6850] das-1802hr-da [ 134.569299][ T6850] das-1801hc [ 134.572672][ T6850] das-1802hc [ 134.576021][ T6850] das-1801ao [ 134.579798][ T6850] das-1802ao [ 134.583357][ T6850] comedi: valid board names for das800 driver are: [ 134.606417][ T6850] das-800 [ 134.613842][ T6850] cio-das800 [ 134.622036][ T6850] das-801 [ 134.629933][ T6850] cio-das801 [ 134.633322][ T6850] das-802 [ 134.649227][ T6850] cio-das802 [ 134.652580][ T6850] cio-das802/16 [ 134.662307][ T6850] comedi: valid board names for isa-das08 driver are: [ 134.676507][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 134.686462][ T6850] isa-das08 [ 134.689824][ T6850] das08-pgm [ 134.693040][ T6850] das08-pgh [ 134.696237][ T6850] das08-pgl [ 134.713444][ T6850] das08-aoh [ 134.720731][ T6850] das08-aol [ 134.724450][ T6850] das08-aom [ 134.735475][ T6850] das08/jr-ao [ 134.744609][ T6850] das08jr-16-ao [ 134.749896][ T6850] pc104-das08 [ 134.754544][ T6850] das08jr/16 [ 134.758000][ T6850] comedi: valid board names for das16m1 driver are: [ 134.764755][ T6850] das16m1 [ 134.770185][ T6850] comedi: valid board names for dac02 driver are: [ 134.777138][ T6850] dac02 [ 134.780071][ T6850] comedi: valid board names for rti802 driver are: [ 134.787890][ T6850] rti802 [ 134.790938][ T6850] comedi: valid board names for rti800 driver are: [ 134.797829][ T6850] rti800 [ 134.800915][ T6850] rti815 [ 134.803926][ T6850] comedi: valid board names for pcm3724 driver are: [ 134.815333][ T6850] pcm3724 [ 134.818772][ T6850] comedi: valid board names for pcl818 driver are: [ 134.825496][ T6850] pcl818l [ 134.828923][ T6850] pcl818h [ 134.832010][ T6850] pcl818hd [ 134.835177][ T6850] pcl818hg [ 134.838705][ T6850] pcl818 [ 134.841756][ T6850] pcl718 [ 134.844757][ T6850] pcm3718 [ 134.847937][ T6850] comedi: valid board names for pcl816 driver are: [ 134.856868][ T6850] pcl816 [ 134.859903][ T6850] pcl814b [ 134.863008][ T6850] comedi: valid board names for pcl812 driver are: [ 134.869859][ T6850] pcl812 [ 134.872875][ T6850] pcl812pg [ 134.876043][ T6850] acl8112pg [ 134.879336][ T6850] acl8112dg [ 134.882760][ T6850] acl8112hg [ 134.886016][ T6850] a821pgl [ 134.889211][ T6850] a821pglnda [ 134.892549][ T6850] a821pgh [ 134.895793][ T6850] a822pgl [ 134.898979][ T6850] a822pgh [ 134.902061][ T6850] a823pgl [ 134.905135][ T6850] a823pgh [ 134.908440][ T6850] pcl813 [ 134.911453][ T6850] pcl813b [ 134.914536][ T6850] acl8113 [ 134.922409][ T6850] iso813 [ 134.925426][ T6850] acl8216 [ 134.932551][ T6850] a826pg [ 134.935512][ T6850] comedi: valid board names for pcl730 driver are: [ 134.946428][ T6850] pcl730 [ 134.952373][ T6850] iso730 [ 134.962267][ T6850] acl7130 [ 134.967999][ T6850] pcm3730 [ 134.971536][ T6850] pcl725 [ 134.974568][ T6850] p8r8dio [ 134.978326][ T6850] acl7225b [ 134.981449][ T6850] p16r16dio [ 134.984723][ T6850] pcl733 [ 134.988530][ T6850] pcl734 [ 135.006536][ T6850] opmm-1616-xt [ 135.014372][ T6850] pearl-mm-p [ 135.030456][ T6850] ir104-pbf [ 135.040574][ T6850] comedi: valid board names for pcl726 driver are: [ 135.066464][ T6850] pcl726 [ 135.069450][ T6850] pcl727 [ 135.101406][ T6850] pcl728 [ 135.111731][ T6850] acl6126 [ 135.122213][ T6850] acl6128 [ 135.126699][ T6850] comedi: valid board names for pcl724 driver are: [ 135.144386][ T6850] pcl724 [ 135.158034][ T6850] pcl722 [ 135.164256][ T6850] pcl731 [ 135.167707][ T6850] acl7122 [ 135.170928][ T6850] acl7124 [ 135.174033][ T6850] pet48dio [ 135.177959][ T6850] pcmio48 [ 135.181148][ T6850] onyx-mm-dio [ 135.184597][ T6850] comedi: valid board names for pcl711 driver are: [ 135.191999][ T6850] pcl711 [ 135.195020][ T6850] pcl711b [ 135.199128][ T6850] acl8112hg [ 135.202492][ T6850] acl8112dg [ 135.205765][ T6850] comedi: valid board names for amplc_pc263 driver are: [ 135.213426][ T6850] pc263 [ 135.217286][ T6850] comedi: valid board names for amplc_pc236 driver are: [ 135.224394][ T6850] pc36at [ 135.227509][ T10] usb 3-1: device descriptor read/64, error -71 [ 135.234794][ T6850] comedi: valid board names for amplc_dio200 driver are: [ 135.241947][ T6850] pc212e [ 135.244960][ T6850] pc214e [ 135.247992][ T6850] pc215e [ 135.251004][ T6850] pc218e [ 135.254004][ T6850] pc272e [ 135.257028][ T6850] comedi: valid board names for comedi_parport driver are: [ 135.265060][ T6850] comedi_parport [ 135.268823][ T6850] comedi: valid board names for comedi_test driver are: [ 135.275814][ T6850] comedi_test [ 135.279293][ T6850] comedi: valid board names for comedi_bond driver are: [ 135.286340][ T6850] comedi_bond [ 135.396492][ T39] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 135.486466][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 135.548122][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.558529][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.568467][ T39] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.579036][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 135.587970][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 135.595600][ T39] usb 4-1: SerialNumber: syz [ 135.616585][ T10] usb 3-1: device descriptor read/64, error -71 [ 135.716418][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 135.727031][ T10] usb usb3-port1: attempt power cycle [ 135.750113][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 135.759403][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.767473][ T24] usb 1-1: Product: syz [ 135.771897][ T24] usb 1-1: Manufacturer: syz [ 135.777644][ T24] usb 1-1: SerialNumber: syz [ 135.784560][ T24] usb 1-1: config 0 descriptor?? [ 135.792517][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 135.819428][ T39] usb 4-1: 0:2 : does not exist [ 135.835320][ T39] usb 4-1: USB disconnect, device number 26 [ 135.847817][ T9] usb 2-1: device descriptor read/64, error -71 [ 135.861512][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.076409][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 136.096462][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 136.104984][ T10] usb 3-1: device descriptor read/8, error -71 [ 136.236508][ T9] usb 2-1: device descriptor read/64, error -71 [ 136.347447][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 136.355492][ T9] usb usb2-port1: attempt power cycle [ 136.376116][ T6885] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.383425][ T6885] FAULT_INJECTION: forcing a failure. [ 136.383425][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.397224][ T10] usb 3-1: device descriptor read/8, error -71 [ 136.404239][ T6885] CPU: 1 UID: 0 PID: 6885 Comm: syz.3.359 Not tainted syzkaller #0 PREEMPT(full) [ 136.404262][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.404272][ T6885] Call Trace: [ 136.404283][ T6885] [ 136.404291][ T6885] dump_stack_lvl+0x189/0x250 [ 136.404317][ T6885] ? __pfx____ratelimit+0x10/0x10 [ 136.404349][ T6885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.404372][ T6885] ? __pfx__printk+0x10/0x10 [ 136.404393][ T6885] ? __might_fault+0xb0/0x130 [ 136.404431][ T6885] should_fail_ex+0x414/0x560 [ 136.404459][ T6885] _copy_from_user+0x2d/0xb0 [ 136.404481][ T6885] ___sys_sendmsg+0x158/0x2a0 [ 136.404505][ T6885] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.404524][ T6885] ? __lock_acquire+0x6b6/0x2cf0 [ 136.404586][ T6885] ? __might_fault+0xb0/0x130 [ 136.404615][ T6885] __sys_sendmmsg+0x227/0x430 [ 136.404640][ T6885] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.404669][ T6885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.404702][ T6885] ? ksys_write+0x22a/0x250 [ 136.404723][ T6885] ? __pfx_ksys_write+0x10/0x10 [ 136.404747][ T6885] __x64_sys_sendmmsg+0xa0/0xc0 [ 136.404769][ T6885] do_syscall_64+0xfa/0xf80 [ 136.404788][ T6885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.404806][ T6885] ? clear_bhb_loop+0x60/0xb0 [ 136.404828][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.404846][ T6885] RIP: 0033:0x7fc531d8f749 [ 136.404863][ T6885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.404877][ T6885] RSP: 002b:00007fc532b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.404896][ T6885] RAX: ffffffffffffffda RBX: 00007fc531fe5fa0 RCX: 00007fc531d8f749 [ 136.404909][ T6885] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 136.404918][ T6885] RBP: 00007fc532b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 136.404928][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.404939][ T6885] R13: 00007fc531fe6038 R14: 00007fc531fe5fa0 R15: 00007ffe0707e778 [ 136.404964][ T6885] [ 136.405104][ T24] gspca_sunplus: reg_r err -71 [ 136.520871][ T10] usb usb3-port1: unable to enumerate USB device [ 136.538544][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 136.645109][ T24] usb 1-1: USB disconnect, device number 24 [ 136.716437][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 136.757005][ T9] usb 2-1: device descriptor read/8, error -71 [ 136.996421][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 137.027020][ T9] usb 2-1: device descriptor read/8, error -71 [ 137.055323][ T6915] loop3: detected capacity change from 0 to 7 [ 137.075512][ T6915] Dev loop3: unable to read RDB block 7 [ 137.085202][ T6915] loop3: unable to read partition table [ 137.095496][ T6915] loop3: partition table beyond EOD, truncated [ 137.106971][ T6915] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.146838][ T9] usb usb2-port1: unable to enumerate USB device [ 137.363866][ T6892] cgroup: fork rejected by pids controller in /syz3 [ 137.590544][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 137.747890][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 137.759659][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 137.772298][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.781647][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.789742][ T24] usb 1-1: Product: syz [ 137.793908][ T24] usb 1-1: Manufacturer: syz [ 137.798570][ T24] usb 1-1: SerialNumber: syz [ 137.805117][ T24] usb 1-1: config 0 descriptor?? [ 137.856459][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 137.866537][ T5919] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 138.008221][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.018942][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.036096][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.038880][ T5919] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 138.049405][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.062635][ T10] usb 3-1: Product: syz [ 138.067242][ T10] usb 3-1: Manufacturer: syz [ 138.067784][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.072023][ T10] usb 3-1: SerialNumber: syz [ 138.088307][ T24] usb 1-1: USB disconnect, device number 25 [ 138.105242][ T5919] usb 4-1: config 0 descriptor?? [ 138.604143][ T6943] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.612579][ T6943] FAULT_INJECTION: forcing a failure. [ 138.612579][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.626532][ T6943] CPU: 0 UID: 0 PID: 6943 Comm: syz.1.369 Not tainted syzkaller #0 PREEMPT(full) [ 138.626556][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.626568][ T6943] Call Trace: [ 138.626575][ T6943] [ 138.626581][ T6943] dump_stack_lvl+0x189/0x250 [ 138.626612][ T6943] ? __pfx____ratelimit+0x10/0x10 [ 138.626639][ T6943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.626662][ T6943] ? __pfx__printk+0x10/0x10 [ 138.626683][ T6943] ? __might_fault+0xb0/0x130 [ 138.626724][ T6943] should_fail_ex+0x414/0x560 [ 138.626755][ T6943] _copy_from_user+0x2d/0xb0 [ 138.626777][ T6943] ___sys_sendmsg+0x158/0x2a0 [ 138.626801][ T6943] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.626819][ T6943] ? __lock_acquire+0x6b6/0x2cf0 [ 138.626888][ T6943] ? __might_fault+0xb0/0x130 [ 138.626920][ T6943] __sys_sendmmsg+0x227/0x430 [ 138.626946][ T6943] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.626976][ T6943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.627014][ T6943] ? ksys_write+0x22a/0x250 [ 138.627036][ T6943] ? __pfx_ksys_write+0x10/0x10 [ 138.627059][ T6943] __x64_sys_sendmmsg+0xa0/0xc0 [ 138.627083][ T6943] do_syscall_64+0xfa/0xf80 [ 138.627102][ T6943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.627121][ T6943] ? clear_bhb_loop+0x60/0xb0 [ 138.627143][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.627161][ T6943] RIP: 0033:0x7f053958f749 [ 138.627179][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.627196][ T6943] RSP: 002b:00007f053a35a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.627216][ T6943] RAX: ffffffffffffffda RBX: 00007f05397e5fa0 RCX: 00007f053958f749 [ 138.627230][ T6943] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 138.627243][ T6943] RBP: 00007f053a35a090 R08: 0000000000000000 R09: 0000000000000000 [ 138.627255][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.627267][ T6943] R13: 00007f05397e6038 R14: 00007f05397e5fa0 R15: 00007ffcd3061c78 [ 138.627299][ T6943] [ 138.904931][ T6949] loop4: detected capacity change from 0 to 524287936 [ 138.972649][ T6949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.979388][ T6949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 139.201293][ T6953] loop3: detected capacity change from 0 to 7 [ 139.208531][ T6953] Dev loop3: unable to read RDB block 7 [ 139.214372][ T6953] loop3: unable to read partition table [ 139.223500][ T6953] loop3: partition table beyond EOD, truncated [ 139.230522][ T6953] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.310165][ T6956] comedi comedi2: ni_at_a2150: I/O port conflict (0x8,28) [ 139.399499][ T10] cdc_ncm 3-1:1.0: bind() failure [ 139.411823][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 139.419024][ T10] cdc_ncm 3-1:1.1: bind() failure [ 139.926693][ T6965] overlay: Unknown parameter '/' [ 139.933846][ T6965] mmap: syz.0.376 (6965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.216826][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 140.297205][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 140.360534][ T5837] block nbd0: Receive control failed (result -32) [ 140.465462][ T5919] pegasus 4-1:0.0: setup Pegasus II specific registers [ 140.626823][ T30] audit: type=1326 audit(1764197695.406:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6932 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a8d8f749 code=0x7fc00000 [ 140.711018][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.722104][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.752687][ T982] usb 3-1: USB disconnect, device number 30 [ 140.819898][ T6979] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.836426][ T6979] FAULT_INJECTION: forcing a failure. [ 140.836426][ T6979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.854222][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.2.380 Not tainted syzkaller #0 PREEMPT(full) [ 140.854252][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.854265][ T6979] Call Trace: [ 140.854273][ T6979] [ 140.854281][ T6979] dump_stack_lvl+0x189/0x250 [ 140.854310][ T6979] ? __pfx____ratelimit+0x10/0x10 [ 140.854339][ T6979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.854363][ T6979] ? __pfx__printk+0x10/0x10 [ 140.854383][ T6979] ? lock_acquire+0x16c/0x340 [ 140.854418][ T6979] should_fail_ex+0x414/0x560 [ 140.854450][ T6979] _copy_from_user+0x2d/0xb0 [ 140.854477][ T6979] ___sys_sendmsg+0x158/0x2a0 [ 140.854503][ T6979] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.854522][ T6979] ? __lock_acquire+0x6b6/0x2cf0 [ 140.854587][ T6979] ? __might_fault+0xb0/0x130 [ 140.854621][ T6979] __sys_sendmmsg+0x227/0x430 [ 140.854648][ T6979] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.854679][ T6979] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.854716][ T6979] ? ksys_write+0x22a/0x250 [ 140.854739][ T6979] ? __pfx_ksys_write+0x10/0x10 [ 140.854764][ T6979] __x64_sys_sendmmsg+0xa0/0xc0 [ 140.854787][ T6979] do_syscall_64+0xfa/0xf80 [ 140.854808][ T6979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.854827][ T6979] ? clear_bhb_loop+0x60/0xb0 [ 140.854850][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.854869][ T6979] RIP: 0033:0x7fd6a8d8f749 [ 140.854887][ T6979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.854903][ T6979] RSP: 002b:00007fd6a9c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.854924][ T6979] RAX: ffffffffffffffda RBX: 00007fd6a8fe5fa0 RCX: 00007fd6a8d8f749 [ 140.854939][ T6979] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 140.854952][ T6979] RBP: 00007fd6a9c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 140.854964][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.854975][ T6979] R13: 00007fd6a8fe6038 R14: 00007fd6a8fe5fa0 R15: 00007ffd72978d48 [ 140.855007][ T6979] [ 141.137831][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 141.237049][ T6984] loop3: detected capacity change from 0 to 7 [ 141.244029][ T6984] Dev loop3: unable to read RDB block 7 [ 141.250091][ T6984] loop3: unable to read partition table [ 141.255929][ T6984] loop3: partition table beyond EOD, truncated [ 141.285412][ T6984] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.295112][ T24] usb 2-1: device descriptor read/64, error -71 [ 141.556429][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 141.646433][ T5914] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 141.686426][ T24] usb 2-1: device descriptor read/64, error -71 [ 141.686426][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 141.796425][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 141.803669][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.806926][ T24] usb usb2-port1: attempt power cycle [ 141.814952][ T5914] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 141.828029][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.836227][ T5914] usb 3-1: Product: syz [ 141.841993][ T5914] usb 3-1: Manufacturer: syz [ 141.848360][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 141.853507][ T5914] usb 3-1: SerialNumber: syz [ 141.865194][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 141.875168][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.884730][ T9] usb 1-1: Product: syz [ 141.889010][ T9] usb 1-1: Manufacturer: syz [ 141.893632][ T9] usb 1-1: SerialNumber: syz [ 141.901829][ T9] usb 1-1: config 0 descriptor?? [ 141.910899][ T9] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 142.087688][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.097420][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.111566][ T5914] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 142.120700][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 142.157156][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 142.164535][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.176063][ T5914] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 142.177133][ T24] usb 2-1: device descriptor read/8, error -71 [ 142.189494][ T5914] usb 3-1: media controller created [ 142.208520][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.265887][ T5914] DVB: Unable to find symbol mt352_attach() [ 142.272067][ T5914] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 142.281455][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 142.306373][ T5914] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 142.316753][ T5919] pegasus 4-1:0.0: can't locate MII phy, using default [ 142.318559][ T5914] usb 3-1: USB disconnect, device number 31 [ 142.356178][ T5919] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, ca:d8:4a:42:11:93 [ 142.369766][ T5919] usb 4-1: USB disconnect, device number 27 [ 142.391994][ T5914] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 142.434678][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 142.467032][ T24] usb 2-1: device descriptor read/8, error -71 [ 142.576786][ T24] usb usb2-port1: unable to enumerate USB device [ 142.607427][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.633960][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.691949][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 142.760017][ T9] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 142.777121][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 142.797826][ T9] usb 1-1: USB disconnect, device number 26 [ 143.086447][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 143.256464][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 143.264211][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 143.277818][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a52, bcdDevice= 0.40 [ 143.287549][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.295634][ T24] usb 4-1: Product: syz [ 143.300025][ T24] usb 4-1: Manufacturer: syz [ 143.304705][ T24] usb 4-1: SerialNumber: syz [ 143.404460][ T7004] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.411094][ T7004] FAULT_INJECTION: forcing a failure. [ 143.411094][ T7004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.425104][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.2.390 Not tainted syzkaller #0 PREEMPT(full) [ 143.425119][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.425126][ T7004] Call Trace: [ 143.425131][ T7004] [ 143.425135][ T7004] dump_stack_lvl+0x189/0x250 [ 143.425156][ T7004] ? __pfx____ratelimit+0x10/0x10 [ 143.425172][ T7004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.425185][ T7004] ? __pfx__printk+0x10/0x10 [ 143.425200][ T7004] ? __might_fault+0xb0/0x130 [ 143.425222][ T7004] should_fail_ex+0x414/0x560 [ 143.425239][ T7004] _copy_from_user+0x2d/0xb0 [ 143.425251][ T7004] ___sys_sendmsg+0x158/0x2a0 [ 143.425265][ T7004] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.425274][ T7004] ? __lock_acquire+0x6b6/0x2cf0 [ 143.425307][ T7004] ? __might_fault+0xb0/0x130 [ 143.425323][ T7004] __sys_sendmmsg+0x227/0x430 [ 143.425337][ T7004] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.425353][ T7004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.425373][ T7004] ? ksys_write+0x22a/0x250 [ 143.425385][ T7004] ? __pfx_ksys_write+0x10/0x10 [ 143.425398][ T7004] __x64_sys_sendmmsg+0xa0/0xc0 [ 143.425410][ T7004] do_syscall_64+0xfa/0xf80 [ 143.425420][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.425430][ T7004] ? clear_bhb_loop+0x60/0xb0 [ 143.425442][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.425457][ T7004] RIP: 0033:0x7fd6a8d8f749 [ 143.425472][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.425488][ T7004] RSP: 002b:00007fd6a9c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.425508][ T7004] RAX: ffffffffffffffda RBX: 00007fd6a8fe5fa0 RCX: 00007fd6a8d8f749 [ 143.425521][ T7004] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 143.425533][ T7004] RBP: 00007fd6a9c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 143.425541][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.425547][ T7004] R13: 00007fd6a8fe6038 R14: 00007fd6a8fe5fa0 R15: 00007ffd72978d48 [ 143.425564][ T7004] [ 143.678438][ T7006] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.686778][ T5914] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 143.763574][ T7008] loop3: detected capacity change from 0 to 7 [ 143.771058][ T7008] Dev loop3: unable to read RDB block 7 [ 143.780286][ T7008] loop3: unable to read partition table [ 143.786175][ T7008] loop3: partition table beyond EOD, truncated [ 143.809599][ T7008] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.858829][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 143.865725][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 143.885635][ T5914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.887511][ T24] usb 4-1: USB disconnect, device number 28 [ 143.901305][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.920100][ T5914] usb 1-1: Product: syz [ 143.924660][ T5914] usb 1-1: Manufacturer: syz [ 143.931343][ T5914] usb 1-1: SerialNumber: syz [ 143.939346][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 144.056437][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 144.238033][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.249080][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.258889][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 144.266443][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 144.268026][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.286485][ T10] usb 3-1: config 0 descriptor?? [ 144.427946][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 144.439084][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.450702][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.460608][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.473604][ T24] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 144.483785][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.494972][ T24] usb 2-1: config 0 descriptor?? [ 144.666428][ T9] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 144.713575][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 144.720652][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 144.727693][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 144.734679][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 144.746930][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 144.754387][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 144.762606][ T10] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 144.772973][ T10] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 144.838599][ T9] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 144.846726][ T9] usb 4-1: config 0 has no interface number 0 [ 144.852844][ T9] usb 4-1: config 0 interface 3 has no altsetting 0 [ 144.863934][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=53.69 [ 144.873159][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.882807][ T9] usb 4-1: Product: syz [ 144.887033][ T9] usb 4-1: Manufacturer: syz [ 144.893106][ T9] usb 4-1: SerialNumber: syz [ 144.901644][ T9] usb 4-1: config 0 descriptor?? [ 144.914601][ T10] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 144.919218][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 144.925094][ T10] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 144.944110][ T10] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -5 [ 144.980444][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.003355][ T24] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 145.013194][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.014573][ T24] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 145.023781][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 145.111761][ T9] cdc_subset 4-1:0.3: probe with driver cdc_subset failed with error -22 [ 145.125984][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.136536][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.157175][ T5914] cdc_ncm 1-1:1.0: failed to get mac address [ 145.160744][ T5927] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 145.165194][ T5914] cdc_ncm 1-1:1.0: bind() failure [ 145.175059][ T24] usb 2-1: USB disconnect, device number 39 [ 145.193653][ T5914] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 145.211909][ T5927] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.221040][ T5914] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 145.230943][ T5927] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.247930][ T5914] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 145.278194][ T5914] usb 1-1: USB disconnect, device number 27 [ 145.313741][ T9] usb 4-1: USB disconnect, device number 29 [ 145.759706][ T7033] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.766178][ T7033] FAULT_INJECTION: forcing a failure. [ 145.766178][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.780018][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.0.400 Not tainted syzkaller #0 PREEMPT(full) [ 145.780045][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.780057][ T7033] Call Trace: [ 145.780064][ T7033] [ 145.780072][ T7033] dump_stack_lvl+0x189/0x250 [ 145.780099][ T7033] ? __pfx____ratelimit+0x10/0x10 [ 145.780128][ T7033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.780151][ T7033] ? __pfx__printk+0x10/0x10 [ 145.780173][ T7033] ? __might_fault+0xb0/0x130 [ 145.780212][ T7033] should_fail_ex+0x414/0x560 [ 145.780243][ T7033] _copy_from_user+0x2d/0xb0 [ 145.780264][ T7033] ___sys_sendmsg+0x158/0x2a0 [ 145.780288][ T7033] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.780306][ T7033] ? __lock_acquire+0x6b6/0x2cf0 [ 145.780377][ T7033] ? __might_fault+0xb0/0x130 [ 145.780409][ T7033] __sys_sendmmsg+0x227/0x430 [ 145.780435][ T7033] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.780465][ T7033] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.780501][ T7033] ? ksys_write+0x22a/0x250 [ 145.780521][ T7033] ? __pfx_ksys_write+0x10/0x10 [ 145.780544][ T7033] __x64_sys_sendmmsg+0xa0/0xc0 [ 145.780565][ T7033] do_syscall_64+0xfa/0xf80 [ 145.780584][ T7033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.780602][ T7033] ? clear_bhb_loop+0x60/0xb0 [ 145.780625][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.780644][ T7033] RIP: 0033:0x7f540558f749 [ 145.780662][ T7033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.780680][ T7033] RSP: 002b:00007f5406504038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.780700][ T7033] RAX: ffffffffffffffda RBX: 00007f54057e5fa0 RCX: 00007f540558f749 [ 145.780715][ T7033] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 145.780728][ T7033] RBP: 00007f5406504090 R08: 0000000000000000 R09: 0000000000000000 [ 145.780741][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.780753][ T7033] R13: 00007f54057e6038 R14: 00007f54057e5fa0 R15: 00007ffcaa141f18 [ 145.780782][ T7033] [ 146.316497][ T5927] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 146.466608][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 146.474489][ T5927] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 146.482702][ T5927] usb 1-1: config 0 has no interface number 0 [ 146.488884][ T5927] usb 1-1: config 0 interface 12 has no altsetting 0 [ 146.497578][ T5927] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 146.506785][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.514759][ T5927] usb 1-1: Product: syz [ 146.518953][ T5927] usb 1-1: Manufacturer: syz [ 146.523560][ T5927] usb 1-1: SerialNumber: syz [ 146.531351][ T5927] usb 1-1: config 0 descriptor?? [ 146.817321][ T24] usb 3-1: USB disconnect, device number 32 [ 146.874391][ T7049] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 146.882649][ T7048] binder: Binderfs stats mode cannot be changed during a remount [ 146.891418][ T7049] macvlan0: entered promiscuous mode [ 146.892076][ T7048] CUSE: zero length info key specified [ 146.899843][ T7049] macvlan0: entered allmulticast mode [ 146.908580][ T7048] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.914599][ T7049] veth1_vlan: entered allmulticast mode [ 146.929878][ T7049] team0: Port device macvlan0 added [ 146.939591][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.958156][ T7051] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 146.958734][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.966186][ T7051] veth1_vlan: left allmulticast mode [ 146.986609][ T7049] syz.2.407 (7049) used greatest stack depth: 17672 bytes left [ 147.043417][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 147.068398][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 147.079782][ T5927] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 147.102736][ T5927] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 147.113578][ T5927] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 147.123520][ T5927] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 147.128096][ T7059] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.142890][ T7059] FAULT_INJECTION: forcing a failure. [ 147.142890][ T7059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.152505][ T5927] usb 1-1: USB disconnect, device number 28 [ 147.159682][ T7059] CPU: 0 UID: 0 PID: 7059 Comm: syz.2.409 Not tainted syzkaller #0 PREEMPT(full) [ 147.159708][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.159721][ T7059] Call Trace: [ 147.159728][ T7059] [ 147.159736][ T7059] dump_stack_lvl+0x189/0x250 [ 147.159764][ T7059] ? __pfx____ratelimit+0x10/0x10 [ 147.159792][ T7059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.159815][ T7059] ? __pfx__printk+0x10/0x10 [ 147.159838][ T7059] ? __might_fault+0xb0/0x130 [ 147.159877][ T7059] should_fail_ex+0x414/0x560 [ 147.159908][ T7059] _copy_from_user+0x2d/0xb0 [ 147.159929][ T7059] ___sys_sendmsg+0x158/0x2a0 [ 147.159952][ T7059] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.159970][ T7059] ? __lock_acquire+0x6b6/0x2cf0 [ 147.160031][ T7059] ? __might_fault+0xb0/0x130 [ 147.160062][ T7059] __sys_sendmmsg+0x227/0x430 [ 147.160088][ T7059] ? __pfx___sys_sendmmsg+0x10/0x10 [ 147.160118][ T7059] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.160154][ T7059] ? ksys_write+0x22a/0x250 [ 147.160176][ T7059] ? __pfx_ksys_write+0x10/0x10 [ 147.160199][ T7059] __x64_sys_sendmmsg+0xa0/0xc0 [ 147.160228][ T7059] do_syscall_64+0xfa/0xf80 [ 147.160247][ T7059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.160265][ T7059] ? clear_bhb_loop+0x60/0xb0 [ 147.160287][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.160305][ T7059] RIP: 0033:0x7fd6a8d8f749 [ 147.160321][ T7059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.160338][ T7059] RSP: 002b:00007fd6a9c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.160358][ T7059] RAX: ffffffffffffffda RBX: 00007fd6a8fe5fa0 RCX: 00007fd6a8d8f749 [ 147.160373][ T7059] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 147.160385][ T7059] RBP: 00007fd6a9c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 147.160397][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.160407][ T7059] R13: 00007fd6a8fe6038 R14: 00007fd6a8fe5fa0 R15: 00007ffd72978d48 [ 147.160437][ T7059] [ 147.796471][ T5927] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 147.946417][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 147.955673][ T5927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.967959][ T5927] usb 1-1: config 2 has an invalid interface number: 227 but max is 0 [ 147.976963][ T5927] usb 1-1: config 2 has no interface number 0 [ 147.983199][ T5927] usb 1-1: config 2 interface 227 has no altsetting 0 [ 147.992462][ T7077] netlink: 763 bytes leftover after parsing attributes in process `syz.2.416'. [ 147.992692][ T5927] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=60.04 [ 148.013029][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.021225][ T5927] usb 1-1: Product: syz [ 148.025539][ T5927] usb 1-1: Manufacturer: syz [ 148.030456][ T5927] usb 1-1: SerialNumber: syz [ 148.261172][ T5927] usb 1-1: USB disconnect, device number 29 [ 148.364350][ T7084] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.403536][ T7086] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.408796][ T982] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 148.411272][ T7086] FAULT_INJECTION: forcing a failure. [ 148.411272][ T7086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.430893][ T7086] CPU: 0 UID: 0 PID: 7086 Comm: syz.1.420 Not tainted syzkaller #0 PREEMPT(full) [ 148.430919][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.430931][ T7086] Call Trace: [ 148.430939][ T7086] [ 148.430947][ T7086] dump_stack_lvl+0x189/0x250 [ 148.430975][ T7086] ? __pfx____ratelimit+0x10/0x10 [ 148.431005][ T7086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.431029][ T7086] ? __pfx__printk+0x10/0x10 [ 148.431052][ T7086] ? __might_fault+0xb0/0x130 [ 148.431101][ T7086] should_fail_ex+0x414/0x560 [ 148.431132][ T7086] _copy_from_user+0x2d/0xb0 [ 148.431154][ T7086] ___sys_sendmsg+0x158/0x2a0 [ 148.431179][ T7086] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.431198][ T7086] ? __lock_acquire+0x6b6/0x2cf0 [ 148.431263][ T7086] ? __might_fault+0xb0/0x130 [ 148.431295][ T7086] __sys_sendmmsg+0x227/0x430 [ 148.431322][ T7086] ? __pfx___sys_sendmmsg+0x10/0x10 [ 148.431353][ T7086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.431391][ T7086] ? ksys_write+0x22a/0x250 [ 148.431414][ T7086] ? __pfx_ksys_write+0x10/0x10 [ 148.431440][ T7086] __x64_sys_sendmmsg+0xa0/0xc0 [ 148.431462][ T7086] do_syscall_64+0xfa/0xf80 [ 148.431482][ T7086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.431502][ T7086] ? clear_bhb_loop+0x60/0xb0 [ 148.431525][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.431544][ T7086] RIP: 0033:0x7f053958f749 [ 148.431562][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.431579][ T7086] RSP: 002b:00007f053a35a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.431600][ T7086] RAX: ffffffffffffffda RBX: 00007f05397e5fa0 RCX: 00007f053958f749 [ 148.431616][ T7086] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 148.431628][ T7086] RBP: 00007f053a35a090 R08: 0000000000000000 R09: 0000000000000000 [ 148.431640][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.431652][ T7086] R13: 00007f05397e6038 R14: 00007f05397e5fa0 R15: 00007ffcd3061c78 [ 148.431684][ T7086] [ 148.656688][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 148.672894][ T7088] loop3: detected capacity change from 0 to 7 [ 148.673111][ T982] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 148.682029][ T7088] Dev loop3: unable to read RDB block 7 [ 148.695484][ T7088] loop3: unable to read partition table [ 148.703820][ T7088] loop3: partition table beyond EOD, truncated [ 148.706954][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.710590][ T7088] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 148.752201][ T982] usb 3-1: Product: syz [ 148.774928][ T982] usb 3-1: Manufacturer: syz [ 148.781854][ T982] usb 3-1: SerialNumber: syz [ 148.800331][ T982] usb 3-1: config 0 descriptor?? [ 148.921568][ T7096] mkiss: ax0: crc mode is auto. [ 149.014717][ T982] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 149.166590][ T5927] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 149.326450][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 149.335095][ T5927] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 149.344463][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 149.352702][ T5927] usb 4-1: Product: syz [ 149.356918][ T5927] usb 4-1: Manufacturer: syz [ 149.361508][ T5927] usb 4-1: SerialNumber: syz [ 149.368626][ T5927] usb 4-1: config 0 descriptor?? [ 149.377916][ T5927] gspca_main: sq905-2.14.0 probing 2770:9120 [ 149.614595][ T982] gspca_sunplus: reg_w_riv err -71 [ 149.620076][ T982] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 149.636058][ T982] usb 3-1: USB disconnect, device number 33 [ 149.787183][ T7111] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.862598][ T7114] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.872828][ T7114] FAULT_INJECTION: forcing a failure. [ 149.872828][ T7114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.886491][ T7114] CPU: 0 UID: 0 PID: 7114 Comm: syz.0.432 Not tainted syzkaller #0 PREEMPT(full) [ 149.886516][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.886528][ T7114] Call Trace: [ 149.886535][ T7114] [ 149.886542][ T7114] dump_stack_lvl+0x189/0x250 [ 149.886570][ T7114] ? __pfx____ratelimit+0x10/0x10 [ 149.886597][ T7114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.886620][ T7114] ? __pfx__printk+0x10/0x10 [ 149.886642][ T7114] ? __might_fault+0xb0/0x130 [ 149.886678][ T7114] should_fail_ex+0x414/0x560 [ 149.886709][ T7114] _copy_from_user+0x2d/0xb0 [ 149.886738][ T7114] ___sys_sendmsg+0x158/0x2a0 [ 149.886762][ T7114] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.886780][ T7114] ? __lock_acquire+0x6b6/0x2cf0 [ 149.886844][ T7114] ? __might_fault+0xb0/0x130 [ 149.886875][ T7114] __sys_sendmmsg+0x227/0x430 [ 149.886900][ T7114] ? __pfx___sys_sendmmsg+0x10/0x10 [ 149.886932][ T7114] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.886969][ T7114] ? ksys_write+0x22a/0x250 [ 149.886989][ T7114] ? __pfx_ksys_write+0x10/0x10 [ 149.887012][ T7114] __x64_sys_sendmmsg+0xa0/0xc0 [ 149.887036][ T7114] do_syscall_64+0xfa/0xf80 [ 149.887056][ T7114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.887075][ T7114] ? clear_bhb_loop+0x60/0xb0 [ 149.887098][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.887117][ T7114] RIP: 0033:0x7f540558f749 [ 149.887134][ T7114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.887151][ T7114] RSP: 002b:00007f5406504038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 149.887171][ T7114] RAX: ffffffffffffffda RBX: 00007f54057e5fa0 RCX: 00007f540558f749 [ 149.887186][ T7114] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 149.887199][ T7114] RBP: 00007f5406504090 R08: 0000000000000000 R09: 0000000000000000 [ 149.887210][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.887220][ T7114] R13: 00007f54057e6038 R14: 00007f54057e5fa0 R15: 00007ffcaa141f18 [ 149.887249][ T7114] [ 150.197324][ T5927] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 150.224786][ T5927] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 150.253264][ T5927] usb 4-1: USB disconnect, device number 30 [ 150.270903][ T7118] loop3: detected capacity change from 0 to 7 [ 150.285231][ T7118] Dev loop3: unable to read RDB block 7 [ 150.290996][ T7118] loop3: unable to read partition table [ 150.296940][ T7118] loop3: partition table beyond EOD, truncated [ 150.303165][ T7118] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.456057][ T7126] mkiss: ax0: crc mode is auto. [ 151.067590][ T5914] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 151.194826][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.205716][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.246391][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 151.253414][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 151.311245][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.334940][ T5914] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.378201][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.386231][ T5914] usb 2-1: Product: syz [ 151.401153][ T5914] usb 2-1: Manufacturer: syz [ 151.405830][ T5914] usb 2-1: SerialNumber: syz [ 151.434825][ T5914] usb 2-1: config 0 descriptor?? [ 151.447054][ T7142] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.452321][ T5914] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 151.465080][ T5914] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 151.474624][ T7144] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.564940][ T7148] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.571602][ T7148] FAULT_INJECTION: forcing a failure. [ 151.571602][ T7148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.584924][ T7148] CPU: 1 UID: 0 PID: 7148 Comm: syz.2.443 Not tainted syzkaller #0 PREEMPT(full) [ 151.584941][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.584952][ T7148] Call Trace: [ 151.584960][ T7148] [ 151.584967][ T7148] dump_stack_lvl+0x189/0x250 [ 151.584996][ T7148] ? __pfx____ratelimit+0x10/0x10 [ 151.585026][ T7148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.585046][ T7148] ? __pfx__printk+0x10/0x10 [ 151.585059][ T7148] ? __might_fault+0xb0/0x130 [ 151.585079][ T7148] should_fail_ex+0x414/0x560 [ 151.585108][ T7148] _copy_from_user+0x2d/0xb0 [ 151.585129][ T7148] ___sys_sendmsg+0x158/0x2a0 [ 151.585154][ T7148] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.585174][ T7148] ? __lock_acquire+0x6b6/0x2cf0 [ 151.585216][ T7148] ? __might_fault+0xb0/0x130 [ 151.585232][ T7148] __sys_sendmmsg+0x227/0x430 [ 151.585246][ T7148] ? __pfx___sys_sendmmsg+0x10/0x10 [ 151.585271][ T7148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.585309][ T7148] ? ksys_write+0x22a/0x250 [ 151.585332][ T7148] ? __pfx_ksys_write+0x10/0x10 [ 151.585350][ T7148] __x64_sys_sendmmsg+0xa0/0xc0 [ 151.585362][ T7148] do_syscall_64+0xfa/0xf80 [ 151.585373][ T7148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.585383][ T7148] ? clear_bhb_loop+0x60/0xb0 [ 151.585395][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.585408][ T7148] RIP: 0033:0x7fd6a8d8f749 [ 151.585425][ T7148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.585442][ T7148] RSP: 002b:00007fd6a9c2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 151.585462][ T7148] RAX: ffffffffffffffda RBX: 00007fd6a8fe5fa0 RCX: 00007fd6a8d8f749 [ 151.585477][ T7148] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 151.585490][ T7148] RBP: 00007fd6a9c2a090 R08: 0000000000000000 R09: 0000000000000000 [ 151.585497][ T7148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.585503][ T7148] R13: 00007fd6a8fe6038 R14: 00007fd6a8fe5fa0 R15: 00007ffd72978d48 [ 151.585520][ T7148] [ 151.747700][ T5914] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 151.831503][ T7150] syzkaller1: entered promiscuous mode [ 151.837164][ T7150] syzkaller1: entered allmulticast mode [ 151.852731][ T5914] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 151.860639][ T5914] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 151.867871][ T5914] em28xx 2-1:0.0: No AC97 audio processor [ 151.976416][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 152.129758][ T10] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 152.142547][ T10] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 152.152254][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.164244][ T10] usb 1-1: Product: syz [ 152.168737][ T10] usb 1-1: Manufacturer: syz [ 152.173570][ T10] usb 1-1: SerialNumber: syz [ 152.188362][ T10] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 152.306477][ T5914] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 152.464008][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.485287][ T5914] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 152.495193][ T10] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 152.504219][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.514519][ T10] usb 1-1: media controller created [ 152.521324][ T5914] usb 4-1: Product: syz [ 152.529012][ T5914] usb 4-1: Manufacturer: syz [ 152.540066][ T5914] usb 4-1: SerialNumber: syz [ 152.555108][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.567248][ T5914] usb 4-1: config 0 descriptor?? [ 152.590315][ T5914] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 152.633578][ T5879] usb 2-1: USB disconnect, device number 40 [ 152.642691][ T5879] em28xx 2-1:0.0: Disconnecting em28xx [ 152.668150][ T5879] em28xx 2-1:0.0: Freeing device [ 152.777485][ T10] usb 1-1: USB disconnect, device number 30 [ 153.052404][ T7158] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.060516][ T7158] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.077889][ T7158] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.091790][ T7158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.098773][ T7158] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.111043][ T7158] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.122925][ T7158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.131405][ T7158] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.144437][ T7158] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.156793][ T7158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.163150][ T7158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.172186][ T7158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.199527][ T5914] gspca_sunplus: reg_r err -71 [ 153.218305][ T5914] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 153.243732][ T5914] usb 4-1: USB disconnect, device number 31 [ 153.586586][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 153.766383][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 153.778527][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 153.786133][ T10] usb 3-1: can't read configurations, error -61 [ 153.838874][ T7207] loop3: detected capacity change from 0 to 7 [ 153.847444][ T7207] Dev loop3: unable to read RDB block 7 [ 153.853047][ T7207] loop3: unable to read partition table [ 153.866092][ T7209] mkiss: ax0: crc mode is auto. [ 153.876781][ T7207] loop3: partition table beyond EOD, truncated [ 153.883003][ T7207] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.956429][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 154.036714][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 154.046674][ T7213] block nbd1: Unsupported socket: should be TCP or UNIX. [ 154.125794][ T7218] UHID_CREATE from different security context by process 258 (syz.1.451), this is not allowed. [ 154.146382][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 154.159353][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 154.176730][ T7218] netlink: 'syz.1.451': attribute type 25 has an invalid length. [ 154.188548][ T7218] netlink: 'syz.1.451': attribute type 25 has an invalid length. [ 154.205772][ T10] usb 3-1: can't read configurations, error -61 [ 154.217165][ T10] usb usb3-port1: attempt power cycle [ 154.282278][ T7225] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.290193][ T7225] FAULT_INJECTION: forcing a failure. [ 154.290193][ T7225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.310175][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.0.453 Not tainted syzkaller #0 PREEMPT(full) [ 154.310201][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.310213][ T7225] Call Trace: [ 154.310220][ T7225] [ 154.310228][ T7225] dump_stack_lvl+0x189/0x250 [ 154.310256][ T7225] ? __pfx____ratelimit+0x10/0x10 [ 154.310285][ T7225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.310308][ T7225] ? __pfx__printk+0x10/0x10 [ 154.310331][ T7225] ? __might_fault+0xb0/0x130 [ 154.310370][ T7225] should_fail_ex+0x414/0x560 [ 154.310399][ T7225] _copy_from_user+0x2d/0xb0 [ 154.310421][ T7225] ___sys_sendmsg+0x158/0x2a0 [ 154.310445][ T7225] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.310464][ T7225] ? __lock_acquire+0x6b6/0x2cf0 [ 154.310526][ T7225] ? __might_fault+0xb0/0x130 [ 154.310558][ T7225] __sys_sendmmsg+0x227/0x430 [ 154.310585][ T7225] ? __pfx___sys_sendmmsg+0x10/0x10 [ 154.310615][ T7225] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.310659][ T7225] ? ksys_write+0x22a/0x250 [ 154.310682][ T7225] ? __pfx_ksys_write+0x10/0x10 [ 154.310706][ T7225] __x64_sys_sendmmsg+0xa0/0xc0 [ 154.310730][ T7225] do_syscall_64+0xfa/0xf80 [ 154.310750][ T7225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.310769][ T7225] ? clear_bhb_loop+0x60/0xb0 [ 154.310792][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.310811][ T7225] RIP: 0033:0x7f540558f749 [ 154.310827][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.310844][ T7225] RSP: 002b:00007f5406504038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.310865][ T7225] RAX: ffffffffffffffda RBX: 00007f54057e5fa0 RCX: 00007f540558f749 [ 154.310880][ T7225] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 154.310892][ T7225] RBP: 00007f5406504090 R08: 0000000000000000 R09: 0000000000000000 [ 154.310905][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.310916][ T7225] R13: 00007f54057e6038 R14: 00007f54057e5fa0 R15: 00007ffcaa141f18 [ 154.310948][ T7225] [ 154.521388][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.586460][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 154.661856][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 154.669576][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 154.686416][ T10] usb 3-1: can't read configurations, error -61 [ 154.828680][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 154.871442][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 154.907197][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 154.914810][ T10] usb 3-1: can't read configurations, error -61 [ 154.933279][ T10] usb usb3-port1: unable to enumerate USB device [ 155.034918][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 155.136454][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.140980][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.218546][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 156.409167][ T7271] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.416918][ T7271] FAULT_INJECTION: forcing a failure. [ 156.416918][ T7271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.433286][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.1.463 Not tainted syzkaller #0 PREEMPT(full) [ 156.433312][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.433323][ T7271] Call Trace: [ 156.433332][ T7271] [ 156.433339][ T7271] dump_stack_lvl+0x189/0x250 [ 156.433365][ T7271] ? __pfx____ratelimit+0x10/0x10 [ 156.433394][ T7271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.433417][ T7271] ? __pfx__printk+0x10/0x10 [ 156.433440][ T7271] ? __might_fault+0xb0/0x130 [ 156.433476][ T7271] should_fail_ex+0x414/0x560 [ 156.433508][ T7271] _copy_from_user+0x2d/0xb0 [ 156.433529][ T7271] ___sys_sendmsg+0x158/0x2a0 [ 156.433554][ T7271] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.433570][ T7271] ? __lock_acquire+0x6b6/0x2cf0 [ 156.433626][ T7271] ? __might_fault+0xb0/0x130 [ 156.433657][ T7271] __sys_sendmmsg+0x227/0x430 [ 156.433683][ T7271] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.433714][ T7271] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.433752][ T7271] ? ksys_write+0x22a/0x250 [ 156.433773][ T7271] ? __pfx_ksys_write+0x10/0x10 [ 156.433798][ T7271] __x64_sys_sendmmsg+0xa0/0xc0 [ 156.433821][ T7271] do_syscall_64+0xfa/0xf80 [ 156.433841][ T7271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.433860][ T7271] ? clear_bhb_loop+0x60/0xb0 [ 156.433884][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.433903][ T7271] RIP: 0033:0x7f053958f749 [ 156.433920][ T7271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.433938][ T7271] RSP: 002b:00007f053a35a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.433958][ T7271] RAX: ffffffffffffffda RBX: 00007f05397e5fa0 RCX: 00007f053958f749 [ 156.433973][ T7271] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 156.433985][ T7271] RBP: 00007f053a35a090 R08: 0000000000000000 R09: 0000000000000000 [ 156.433998][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.434009][ T7271] R13: 00007f05397e6038 R14: 00007f05397e5fa0 R15: 00007ffcd3061c78 [ 156.434040][ T7271] [ 156.476405][ T7273] mkiss: ax0: crc mode is auto. [ 156.559251][ T7274] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.654130][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.902609][ T7291] overlayfs: missing 'lowerdir' [ 156.958753][ T7294] netlink: 400 bytes leftover after parsing attributes in process `syz.0.470'. [ 157.003650][ T30] audit: type=1800 audit(1764197711.786:5): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.472" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 157.024592][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 157.122685][ T7302] kvm: emulating exchange as write [ 157.177323][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 157.185590][ T10] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 157.194522][ T10] usb 2-1: config 0 has no interface number 0 [ 157.204041][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=7e.fc [ 157.214781][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.216641][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.223274][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.245795][ T5914] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 157.251219][ T7305] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.260370][ T7305] FAULT_INJECTION: forcing a failure. [ 157.260370][ T7305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.274397][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT(full) [ 157.274420][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.274440][ T7305] Call Trace: [ 157.274447][ T7305] [ 157.274453][ T7305] dump_stack_lvl+0x189/0x250 [ 157.274480][ T7305] ? __pfx____ratelimit+0x10/0x10 [ 157.274509][ T7305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.274533][ T7305] ? __pfx__printk+0x10/0x10 [ 157.274557][ T7305] ? __might_fault+0xb0/0x130 [ 157.274597][ T7305] should_fail_ex+0x414/0x560 [ 157.274629][ T7305] _copy_from_user+0x2d/0xb0 [ 157.274650][ T7305] ___sys_sendmsg+0x158/0x2a0 [ 157.274674][ T7305] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.274693][ T7305] ? __lock_acquire+0x6b6/0x2cf0 [ 157.274754][ T7305] ? __might_fault+0xb0/0x130 [ 157.274785][ T7305] __sys_sendmmsg+0x227/0x430 [ 157.274809][ T7305] ? __pfx___sys_sendmmsg+0x10/0x10 [ 157.274837][ T7305] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.274875][ T7305] ? ksys_write+0x22a/0x250 [ 157.274895][ T7305] ? __pfx_ksys_write+0x10/0x10 [ 157.274918][ T7305] __x64_sys_sendmmsg+0xa0/0xc0 [ 157.274940][ T7305] do_syscall_64+0xfa/0xf80 [ 157.274959][ T7305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.274977][ T7305] ? clear_bhb_loop+0x60/0xb0 [ 157.274999][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.275017][ T7305] RIP: 0033:0x7f540558f749 [ 157.275033][ T7305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.275048][ T7305] RSP: 002b:00007f5406504038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 157.275067][ T7305] RAX: ffffffffffffffda RBX: 00007f54057e5fa0 RCX: 00007f540558f749 [ 157.275081][ T7305] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 157.275093][ T7305] RBP: 00007f5406504090 R08: 0000000000000000 R09: 0000000000000000 [ 157.275105][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.275116][ T7305] R13: 00007f54057e6038 R14: 00007f54057e5fa0 R15: 00007ffcaa141f18 [ 157.275145][ T7305] [ 157.275434][ T10] usb 2-1: config 0 descriptor?? [ 157.296700][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 157.465489][ T5914] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 157.511218][ T5914] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 157.521882][ T5914] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 157.532718][ T5914] usb 3-1: config 220 has no interface number 2 [ 157.556010][ T7287] 9p: Bad value for 'wfdno' [ 157.566887][ T10] usb 2-1: USB disconnect, device number 41 [ 157.584062][ T5914] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 157.604266][ T5914] usb 3-1: config 220 interface 0 has no altsetting 0 [ 157.611715][ T5914] usb 3-1: config 220 interface 76 has no altsetting 0 [ 157.622234][ T5914] usb 3-1: config 220 interface 1 has no altsetting 0 [ 157.631338][ T5914] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 157.642261][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.650332][ T5914] usb 3-1: Product: syz [ 157.654501][ T5914] usb 3-1: Manufacturer: syz [ 157.659230][ T5914] usb 3-1: SerialNumber: syz [ 157.876005][ T5914] usb 3-1: selecting invalid altsetting 0 [ 157.882380][ T5914] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 157.889893][ T5914] uvcvideo 3-1:220.0: No valid video chain found. [ 157.901710][ T5914] usb 3-1: selecting invalid altsetting 0 [ 157.907558][ T5914] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 157.918812][ T5914] usb 3-1: USB disconnect, device number 38 [ 158.282890][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 158.356896][ T7324] random: crng reseeded on system resumption [ 158.484547][ T7331] loop3: detected capacity change from 0 to 7 [ 158.492802][ T7331] Dev loop3: unable to read RDB block 7 [ 158.498976][ T7331] loop3: unable to read partition table [ 158.504923][ T7331] loop3: partition table beyond EOD, truncated [ 158.516479][ T7331] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.536460][ T5919] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 158.614345][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 158.696530][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 158.709166][ T5919] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 158.722884][ T5919] usb 4-1: config 0 has no interface number 0 [ 158.729789][ T5919] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.742016][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.750177][ T5919] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 158.768656][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 158.778169][ T5919] usb 4-1: Product: syz [ 158.782353][ T5919] usb 4-1: SerialNumber: syz [ 158.791890][ T5919] usb 4-1: config 0 descriptor?? [ 158.800651][ T5919] cm109 4-1:0.8: invalid payload size 41, expected 4 [ 158.809866][ T5919] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input16 [ 158.851479][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 158.928730][ T7342] syzkaller1: entered promiscuous mode [ 158.934602][ T7342] syzkaller1: entered allmulticast mode [ 159.038392][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 159.046006][ T9] usb 3-1: can't read configurations, error -61 [ 159.186444][ T5919] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 159.206521][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 159.232972][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 159.233397][ T5914] usb 4-1: USB disconnect, device number 32 [ 159.239993][ C1] ------------[ cut here ]------------ [ 159.251581][ C1] URB ffff888028e6cc00 submitted while active [ 159.257655][ C1] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#1: swapper/1/0 [ 159.265361][ C1] Modules linked in: [ 159.269397][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 159.278318][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.288359][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 159.293805][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 67 4e 21 fb 49 83 3e 00 74 40 e8 bc fe ba fa 48 8d 3d 75 5b c5 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 fe ba fa eb 05 e8 9a fe [ 159.313420][ C1] RSP: 0018:ffffc90000a08878 EFLAGS: 00010087 [ 159.319493][ C1] RAX: ffffffff8706e144 RBX: ffff888028e6cc00 RCX: 0000000000040000 [ 159.327452][ C1] RDX: ffffc90002392000 RSI: ffff888028e6cc00 RDI: ffffffff8fcc3cc0 [ 159.335409][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 159.343364][ C1] R10: dffffc0000000000 R11: fffff52000141100 R12: 0000000000000820 [ 159.351323][ C1] R13: ffff888031c36830 R14: ffff888028e6cc08 R15: dffffc0000000000 [ 159.359401][ C1] FS: 0000000000000000(0000) GS:ffff888125b3e000(0000) knlGS:0000000000000000 [ 159.368328][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.374914][ C1] CR2: 00007f05397e7dac CR3: 00000000778ac000 CR4: 00000000003526f0 [ 159.382882][ C1] Call Trace: [ 159.386155][ C1] [ 159.388999][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 159.394363][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 159.400270][ C1] ? kcov_remote_start+0x97/0x7f0 [ 159.405288][ C1] cm109_urb_irq_callback+0x709/0xcd0 [ 159.410657][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 159.416036][ C1] dummy_timer+0x85f/0x45b0 [ 159.420542][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.425923][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 159.430849][ C1] ? debug_object_deactivate+0x6d/0x360 [ 159.436395][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 159.441343][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 159.446274][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 159.451467][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 159.457442][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 159.463179][ C1] ? read_tsc+0x9/0x20 [ 159.467237][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 159.473379][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 159.478479][ C1] handle_softirqs+0x27d/0x850 [ 159.483233][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 159.487991][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 159.493276][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 159.498469][ C1] __irq_exit_rcu+0xca/0x1f0 [ 159.503078][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 159.508287][ C1] irq_exit_rcu+0x9/0x30 [ 159.512527][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 159.518152][ C1] [ 159.521080][ C1] [ 159.524002][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.529974][ C1] RIP: 0010:finish_task_switch+0x242/0x940 [ 159.535766][ C1] Code: 0f 84 c2 01 00 00 48 85 db 0f 85 e9 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 38 79 d2 09 e8 03 71 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 48 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 159.555369][ C1] RSP: 0018:ffffc90000197b58 EFLAGS: 00000282 [ 159.561449][ C1] RAX: 4773e47fdb3c8800 RBX: 0000000000000000 RCX: 4773e47fdb3c8800 [ 159.569428][ C1] RDX: 0000000000000000 RSI: ffffffff8da6f16a RDI: ffffffff8be146e0 [ 159.577403][ C1] RBP: ffffc90000197bb0 R08: ffffffff8fbf8277 R09: 1ffffffff1f7f04e [ 159.585371][ C1] R10: dffffc0000000000 R11: fffffbfff1f7f04f R12: ffff88801dac5b80 [ 159.593332][ C1] R13: dffffc0000000000 R14: ffff88802c008000 R15: ffff8880b873b498 [ 159.601331][ C1] ? finish_task_switch+0x23d/0x940 [ 159.606619][ C1] __schedule+0x14c4/0x5000 [ 159.611156][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 159.617418][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 159.623714][ C1] ? ct_nmi_exit+0xf1/0x1d0 [ 159.628229][ C1] ? irqentry_exit+0x5ba/0x660 [ 159.632984][ C1] ? __pfx___schedule+0x10/0x10 [ 159.637851][ C1] ? flush_smp_call_function_queue+0x116/0x250 [ 159.644282][ C1] ? __pfx_flush_smp_call_function_queue+0x10/0x10 [ 159.650819][ C1] ? tick_nohz_idle_exit+0x362/0x470 [ 159.656111][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 159.661755][ C1] schedule_idle+0x52/0x90 [ 159.666178][ C1] do_idle+0x4a7/0x510 [ 159.670255][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 159.674845][ C1] ? __pfx_do_idle+0x10/0x10 [ 159.679463][ C1] cpu_startup_entry+0x44/0x60 [ 159.684239][ C1] start_secondary+0x101/0x110 [ 159.689008][ C1] common_startup_64+0x13e/0x147 [ 159.693943][ C1] [ 159.696955][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.704246][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 159.713184][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.723231][ C1] Call Trace: [ 159.726517][ C1] [ 159.729346][ C1] dump_stack_lvl+0x99/0x250 [ 159.733936][ C1] ? __asan_memcpy+0x40/0x70 [ 159.738545][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.743766][ C1] ? __pfx__printk+0x10/0x10 [ 159.748380][ C1] vpanic+0x237/0x6d0 [ 159.752368][ C1] ? __pfx_vpanic+0x10/0x10 [ 159.756882][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 159.762192][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 159.767429][ C1] panic+0xb9/0xc0 [ 159.771157][ C1] ? __pfx_panic+0x10/0x10 [ 159.775575][ C1] ? common_startup_64+0x13e/0x147 [ 159.780689][ C1] __warn+0x317/0x4b0 [ 159.784677][ C1] __report_bug+0x22e/0x4b0 [ 159.789198][ C1] ? __pfx___report_bug+0x10/0x10 [ 159.794234][ C1] ? dev_printk_emit+0xe0/0x130 [ 159.799094][ C1] report_bug_entry+0x16a/0x220 [ 159.803956][ C1] ? usb_submit_urb+0x7e/0x18d0 [ 159.808854][ C1] ? usb_submit_urb+0x83/0x18d0 [ 159.813712][ C1] handle_bug+0xca/0x200 [ 159.817968][ C1] exc_invalid_op+0x1a/0x50 [ 159.822468][ C1] asm_exc_invalid_op+0x1a/0x20 [ 159.827323][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 159.832778][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 67 4e 21 fb 49 83 3e 00 74 40 e8 bc fe ba fa 48 8d 3d 75 5b c5 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 fe ba fa eb 05 e8 9a fe [ 159.852379][ C1] RSP: 0018:ffffc90000a08878 EFLAGS: 00010087 [ 159.858462][ C1] RAX: ffffffff8706e144 RBX: ffff888028e6cc00 RCX: 0000000000040000 [ 159.866443][ C1] RDX: ffffc90002392000 RSI: ffff888028e6cc00 RDI: ffffffff8fcc3cc0 [ 159.874411][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 159.882370][ C1] R10: dffffc0000000000 R11: fffff52000141100 R12: 0000000000000820 [ 159.890329][ C1] R13: ffff888031c36830 R14: ffff888028e6cc08 R15: dffffc0000000000 [ 159.898315][ C1] ? usb_submit_urb+0x74/0x18d0 [ 159.903168][ C1] ? usb_submit_urb+0x74/0x18d0 [ 159.908011][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 159.913398][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 159.919291][ C1] ? kcov_remote_start+0x97/0x7f0 [ 159.924326][ C1] cm109_urb_irq_callback+0x709/0xcd0 [ 159.929702][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 159.935075][ C1] dummy_timer+0x85f/0x45b0 [ 159.939614][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 159.945023][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 159.949971][ C1] ? debug_object_deactivate+0x6d/0x360 [ 159.955513][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 159.960472][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 159.965419][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 159.970636][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 159.976634][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 159.982368][ C1] ? read_tsc+0x9/0x20 [ 159.986441][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 159.992252][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 159.997375][ C1] handle_softirqs+0x27d/0x850 [ 160.002147][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 160.006909][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 160.012196][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 160.017407][ C1] __irq_exit_rcu+0xca/0x1f0 [ 160.022013][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 160.027233][ C1] irq_exit_rcu+0x9/0x30 [ 160.031479][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 160.037128][ C1] [ 160.040059][ C1] [ 160.042990][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 160.048984][ C1] RIP: 0010:finish_task_switch+0x242/0x940 [ 160.054791][ C1] Code: 0f 84 c2 01 00 00 48 85 db 0f 85 e9 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 38 79 d2 09 e8 03 71 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 48 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 160.074481][ C1] RSP: 0018:ffffc90000197b58 EFLAGS: 00000282 [ 160.080556][ C1] RAX: 4773e47fdb3c8800 RBX: 0000000000000000 RCX: 4773e47fdb3c8800 [ 160.088525][ C1] RDX: 0000000000000000 RSI: ffffffff8da6f16a RDI: ffffffff8be146e0 [ 160.096498][ C1] RBP: ffffc90000197bb0 R08: ffffffff8fbf8277 R09: 1ffffffff1f7f04e [ 160.104464][ C1] R10: dffffc0000000000 R11: fffffbfff1f7f04f R12: ffff88801dac5b80 [ 160.112428][ C1] R13: dffffc0000000000 R14: ffff88802c008000 R15: ffff8880b873b498 [ 160.120408][ C1] ? finish_task_switch+0x23d/0x940 [ 160.125704][ C1] __schedule+0x14c4/0x5000 [ 160.130210][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 160.136449][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 160.142709][ C1] ? ct_nmi_exit+0xf1/0x1d0 [ 160.147204][ C1] ? irqentry_exit+0x5ba/0x660 [ 160.151966][ C1] ? __pfx___schedule+0x10/0x10 [ 160.156825][ C1] ? flush_smp_call_function_queue+0x116/0x250 [ 160.162983][ C1] ? __pfx_flush_smp_call_function_queue+0x10/0x10 [ 160.169488][ C1] ? tick_nohz_idle_exit+0x362/0x470 [ 160.174783][ C1] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 160.180425][ C1] schedule_idle+0x52/0x90 [ 160.184882][ C1] do_idle+0x4a7/0x510 [ 160.188955][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 160.193544][ C1] ? __pfx_do_idle+0x10/0x10 [ 160.198141][ C1] cpu_startup_entry+0x44/0x60 [ 160.202904][ C1] start_secondary+0x101/0x110 [ 160.207663][ C1] common_startup_64+0x13e/0x147 [ 160.212610][ C1] [ 160.216038][ C1] Kernel Offset: disabled [ 160.220356][ C1] Rebooting in 86400 seconds..