last executing test programs: 24.745567159s ago: executing program 3 (id=1051): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000300)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000300), 0x10) sendto$inet6(r0, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) 23.709444218s ago: executing program 3 (id=1061): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) poll(&(0x7f00000003c0)=[{r3, 0x2}], 0x1, 0xfdfd) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000a200)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newspdinfo={0x24, 0x24, 0x203, 0x70bd27, 0x25dfdbff, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x10) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000000)) r10 = dup3(r8, r6, 0x80000) write$FUSE_NOTIFY_INVAL_ENTRY(r10, 0x0, 0x26) 22.377282682s ago: executing program 3 (id=1067): io_uring_setup(0x115c, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$rose(0xb, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.707497025s ago: executing program 0 (id=1078): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000100)={0x60, 0x0, r1, {{0x8000000000000001, 0x2, 0x4, 0x7, 0x7, 0x0, 0x6, 0xd18}}}, 0x60) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x110}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 12.750725466s ago: executing program 3 (id=1079): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x72000, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x140f, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0xc011) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000240)={0x5, 0x0, [{0x80000008, 0x7, 0x2, 0x8, 0x6, 0x2ff, 0x101}, {0x80000008, 0x2, 0xc8b2fde3afc62eff, 0xffffffff, 0x9, 0xfffffffc, 0x20000000}, {0xc0000001, 0x5, 0x0, 0x4, 0x9, 0x2, 0x8}, {0xc, 0x2, 0x2, 0x9, 0xfccb, 0x0, 0x1}, {0x80000007, 0x8, 0x3, 0x4, 0x10000, 0x8, 0xd}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@acquire={0x40046305, 0x3}, @exit_looper], 0x0, 0x0, 0x0}) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x33) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x48) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r13, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x7}) connect$unix(r11, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 11.539861188s ago: executing program 4 (id=1082): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) futex(0x0, 0x10b, 0x0, &(0x7f0000000340)={r0, r1+60000000}, &(0x7f0000000040)=0x1, 0x1) 11.499442555s ago: executing program 1 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x85) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)=ANY=[]) r1 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x14, r3, 0xe1a4cdd49ac64d35, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, &(0x7f0000001840)=0x5d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.487421284s ago: executing program 0 (id=1085): syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e237"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000100005000004855a9ffbf21304000000", @ANYRES32, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e"], 0x84}, 0x1, 0x0, 0x0, 0x20048c00}, 0x20008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="7daa000000000000711019000000000091a3d4ff0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @bcast, @netrom={'nr', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 11.435580563s ago: executing program 3 (id=1086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = dup(r1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008205b54ea7f0285ffd8c6000000b70400000000"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x40, 0x16, 0x2, "28cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.332494297s ago: executing program 0 (id=1088): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c03) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x0, 0x1}, 0x0, 0x0, 0x91, {0x4, 0x1}, 0x3, 0x800}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x80880, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) bind$can_raw(r5, &(0x7f0000000200), 0x10) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010003000000101e044030400001026a0109026000030102003a0904000000010100000a240109e97c000a0002010209040100000102000009040101010102000009050109ff03814003072501000003000904020000010200000904020101010201040400"/114], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x421, 0x0, 0x0, 0x0, 0x18, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x100, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xf, 0x8, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x97, 0x81, 0x46, 0x40, 0xae}, 0x3b, &(0x7f0000000680)=ANY=[@ANYBLOB="050f3b000403100b0b1001084000060b7f004f14100a03c200000000ff03000f000000003f000014100476dc86612621f92eac1411e537a4a4317c7aeb1535aa549163ed3e909d9caef89110ae53f56ef282436ad44e03fe8b80f0fc9bc1c6053bee249cc492013a2229a245f4448811e3400e3c56711eabdafa87d3a4d37fa38cd1ad14039c6fea913fa5158e4103ebd638afcf4df9d5908e679f3ca69a9b1a"], 0x4, [{0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="1803598e9ff8285b093cfbf3f295315d0d4bfd91fe836442"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x98, &(0x7f0000000440)=ANY=[@ANYBLOB="980307b31377d3eb455b31a5b24d0f4dd87b7ffbe3e4e6e234ef7d6c07802edf4e7f6ee75f24cbe3945914a2b3008e171787f46a6004d14d0e08c0f0ca240f7001146e30f79c81d0e105193c8d2019647c3b0e76c733e9121f1c0ecff131c029d78465a34ceabb06a52868a26c691ba48b2eb80d802d894850fa18ae2d28b674e318b88ca47fd48f48d2b003d1b85cc34b8aa1543272f02e"]}, {0x7f, &(0x7f0000000580)=ANY=[@ANYBLOB="7f0307d96d0b63fd426a60085df8140ddefe47d1149689c102e48769ae7f423c7f1865437411e4989d3a77abfc43c33e8079888b87db0dd29aafa710d87ad4aa8b852a5c59380cf14e691a8fd62596481350089f249be3870dad6632b93b8c6accedd49e3e4185f3bcad94b24ea31eb898416d8f71edd76b03dd221b57d2160b302fb97858768198b082c175de9eef365249622e19f6c7262b07df7e80d1f92d3e823f89a5620b1d5fb1b937da917c03c28759833fde7d155db3438a08e6eb630a753ba7db9034b15ab3b17f22cb"]}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x60) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x20004010) socket$inet6_sctp(0xa, 0x1, 0x84) 7.351428175s ago: executing program 4 (id=1090): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x80) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c00, 0x3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048da) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x1000000, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, 0x0, 0x0) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) shutdown(r2, 0x2) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/\\\\o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x91\xef\x8b0x0}, 0x2020) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000100)={0x60, 0x0, r1, {{0x8000000000000001, 0x2, 0x4, 0x7, 0x7, 0x0, 0x6, 0xd18}}}, 0x60) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 6.928750799s ago: executing program 2 (id=1096): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r0, &(0x7f0000000380)={{0x4f, 0x7, 0x1, 0xfc, 0x2d3, 0x1, 0x3b6, 0xd}, "d1f62593e7298393ffd70d8c60772b8f754b4c44cda1f728f2f8beef9ee30657409b630423446b2262f75a348c8a209dfd697f8809d031b5a4021446992477587af76831a120d0df822a374b5a92f36465fc9d3310f83fd808b38d9e5a8527f36194d8576f5cb13352bb7e5799ca129cc1e629c2e77118116452830ae4da9c2e56a4d8c0acaa5e46bfa7d12b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6ac) syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="bb6233c1eb87", @local, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, '\x00', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x5}, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0xd, '\x00', {0x7, 0x6, "4587af", 0x8, 0x2b, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local}}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x12}, {0xffff, 0xffff}, {0x10, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x88000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 6.850856517s ago: executing program 3 (id=1097): msgctl$MSG_INFO(0x0, 0xc, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r1 = epoll_create1(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f0000000080)='GPL\x00'}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0100000000005ffa9cf9ff288a77599fa3dbc4bb"], 0x0, 0x34}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 6.806033182s ago: executing program 2 (id=1098): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="10797fcd6c7704e11e0580000000747ff8cdf6f2a21eb45f", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000700)="af409aca5d404dda73e986cd4a78328b2e6b4c0e5ff987e590b12099e0577d9afb65a964ac2fc63fffffffffffffff7fd18a3d1231be772e1e2d165868a2da86f5311d2b6b1b74056e11b98273", 0x4d}], 0x1) recvmsg(r1, &(0x7f000000b700)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f000000b5c0)=""/70, 0x46}, {&(0x7f000000b640)=""/70, 0x46}], 0x2}, 0x80) 6.52368801s ago: executing program 4 (id=1099): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa"], 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r1, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc088, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x7, "", [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x2, 0xf8, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0xac7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x1, 0x81, 0x8, 0x20, 0xc}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x9, [{0xe2, &(0x7f00000002c0)=@string={0xe2, 0x3, "0839a5c0167c45f3ee5f6316e6b8a0a1ca4ffbe830241357878cc1aa1f702cda41d8f0d7e94a761df4055e00ba8f59b98c7e11cd364cff22ba9ad4a2e6f1f712f2c9b288e4568fa2c5a75675b91caf3322e8ad1366e96fe5087dba9600c41820c3ebbd3b9bb8d2cb9491dc49b22b5654577d1268517c874ddb5f6a5e19bd7355ed192e5111696607f02b097687da01c34ee1a509d461f3f7b08dedc08b0e8910185ac54735526b119007deb9b9261a15edd41f4fb69640113a520441405a24951db4b90685c4e68b85a94f3324edf520ca6dd84f29d785e253cbe8f47482d463"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x77, &(0x7f0000000440)=@string={0x77, 0x3, "fb346a3e219160ce99ba4333f34abf487feba0bd21d5ed76579e45ef765d2d94180205207fc2bfd7267fa3ea0f376212d0cad5e8c953c8345e88db303db0dc9695189ec7d7d951632cb5003b468b61374c6fc1e823068ceb6df5d144bb7db93f9c24b2ca52344d1f7afc5b57a104ccda4baf6be406"}}, {0xc7, &(0x7f00000004c0)=@string={0xc7, 0x3, "1bcdc4c5579489a81bbb9b083826d55b01eb5fe4b3a3b2ef5944f7ae4fc269c8c2b8393a963e00a7079650d1e290be0f98b7bd8a2341e6625f514a56cbcb40f14b0bc1567b83d6cc25f0f913abd712606e01bf0d9ac02d3831702cf24acd3b1e2ab4046f4713827a0ce901431f64a59e5f0316733517918653229a9a83cbabf38e03bd25c63f74e4dddaffdf55feb21752fac39a5b7197b71c1d0fd8034b3d98c81e6b467558a5360ec48383324724a13501b1771b60fa8dde55ed88cef7f3a14c8094cd13"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x704d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42c}}, {0x4b, &(0x7f0000000640)=@string={0x4b, 0x3, "aa8da0a05e2883c003d38cd90e36f6424f450068e2c004500caf55120c68ab6c7254508701b4fad5f5fc74f8101020d11ee06442b35e424913d176c01df8b6c8e473d30e3924f19e19"}}, {0x9, &(0x7f00000006c0)=@string={0x9, 0x3, "159f3b7d64e099"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x429}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept(r7, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYBLOB="c8e74d75f287804379a1cf43f1bb0a1676212b182772ba06e8d80bb340b7019649472d73e08783a14127ef69afffc91ba447785e3af4b1341870084e152adfc083e4b0f55c1b39e371b79d81be8c6eca4374b36cb4ee2f29b1fde4639fab0c2a59540ad36e7e57aafe108a3cde16f0d06e6c32ee6e0758c94d006d5b279bf8bc5bfea4c882cbd95b225b56c873770011610732f53ab1c757e40050d945b4e354e04e16ce121af683e7753b181f66338c181f12d6a5a719a159f8455760703cb1ecbbdf9648edd9dd7cf57790bd864e57823315dcebd87749927de99be777aacd5ecaf6e90b9ae27003937d4c1938ae54fb0ab94f"], 0x0}, 0x0) 6.097152511s ago: executing program 0 (id=1100): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) futex(0x0, 0x10b, 0x0, &(0x7f0000000340)={r0, r1+60000000}, &(0x7f0000000040)=0x1, 0x1) 5.643005238s ago: executing program 2 (id=1101): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x80002, 0x0) pipe(&(0x7f0000000440)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.540943797s ago: executing program 2 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x85) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)=ANY=[]) r1 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x14, r3, 0xe1a4cdd49ac64d35, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, &(0x7f0000001840)=0x5d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.768467636s ago: executing program 0 (id=1103): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c435a3"], 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x100, 0x3, @empty, 0x4}, 0x1c) syz_open_dev$mouse(&(0x7f0000000340), 0x7fffffffffffffff, 0xa02) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xb90, 0x0, &(0x7f0000000680)="b9ff030060be250d698cbe512490", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x8000, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000002c0)=0x7) r4 = socket(0x18, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x5c, 0x4f, 0xe35, 0xe7, 0x7]}, &(0x7f00000000c0)=0x54) 1.166503327s ago: executing program 1 (id=1104): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) 1.161543716s ago: executing program 4 (id=1105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x80) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x4c00, 0x3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048da) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x1000000, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, 0x0, 0x0) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) shutdown(r2, 0x2) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/\\\\o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x91\xef\x8b0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 547.510964ms ago: executing program 1 (id=1107): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009400000000000007868000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1007, &(0x7f0000001400)=""/4103, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000800)=[{0x4, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/164, 0xa4}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000740)=""/2, 0x2}], &(0x7f00000007c0)=[0x4, 0xffffffffffffd798, 0x7ff]}], 0x1) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r6 = dup3(r2, r3, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x401, 0x1000, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) sendfile(r1, r8, 0x0, 0x20000200000006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008087b63428e9", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000008c0)="a0f84c65e822b409d04a7e9b852d817e1012edcccb69cc9fc46f865919ad3636d57d56e399c430a08779a4b8e01908fb26162fe6e81692fb84a89b72f254a90836ca1f3fae6e6f2a4ec991774cae13c15a", 0x51}, {&(0x7f0000000a00)="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", 0x15d}], 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100002002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x4004}}, {{&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001180)="be446703640064ad7533725059377c3b0135a5a93ef64fb7a0cadf6cf1fc23fee92759", 0x23}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0f09000000a4f30321b00e0ebddd4f0a66", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x20}}], 0x2, 0x40040) syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x2001) r11 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x8, 0x40, 0x3, 0x3ba, {{0x31, 0x4, 0x1, 0xf, 0xc4, 0x67, 0x0, 0xba, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4}, @cipso={0x86, 0x62, 0x0, [{0x6, 0x10, "522fa0aadfb73e83b8b56ea5259b"}, {0x1, 0x2}, {0x2, 0xffffffffffffffe1}, {0x0, 0x10, "17eac967ca8430aafc6cec1ff627"}, {0x1, 0x3, "a9"}, {0x0, 0x3, "b6"}, {0x0, 0x11, "7a65f8030a824198c1b59da7220c42"}, {0x6, 0x2}, {0x6, 0xd, "8668f77adae0db922ba1c8"}, {0x5, 0x12, "cdc3bf40a8a3174717506face94e6932"}]}, @noop, @lsrr={0x83, 0x2b, 0x69, [@empty, @remote, @loopback, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @empty, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0xf, [{@multicast2, 0x1}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x7f}]}]}}}}}) setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f0000000500)={@can={0x1d, r12}, {&(0x7f0000000140)=""/149, 0x95}, &(0x7f0000000240), 0xe}, 0xa0) r13 = openat$cgroup_ro(r8, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_misc(r13, &(0x7f0000000040), 0xe09) 498.29415ms ago: executing program 4 (id=1108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="c279c1f793a1"}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}}, 0x0) 196.933585ms ago: executing program 2 (id=1109): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000100)={0x60, 0x0, r1, {{0x8000000000000001, 0x2, 0x4, 0x7, 0x7, 0x0, 0x6, 0xd18}}}, 0x60) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = syz_io_uring_setup(0x110, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 94.390616ms ago: executing program 0 (id=1110): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c03) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x0, 0x1}, 0x0, 0x0, 0x91, {0x4, 0x1}, 0x3, 0x800}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x80880, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) bind$can_raw(r5, &(0x7f0000000200), 0x10) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010003000000101e044030400001026a0109026000030102003a0904000000010100000a240109e97c000a0002010209040100000102000009040101010102000009050109ff03814003072501000003000904020000010200000904020101010201040400"/114], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x421, 0x0, 0x0, 0x0, 0x18, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x100, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xf, 0x8, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x97, 0x81, 0x46, 0x40, 0xae}, 0x3b, &(0x7f0000000680)=ANY=[@ANYBLOB="050f3b000403100b0b1001084000060b7f004f14100a03c200000000ff03000f000000003f000014100476dc86612621f92eac1411e537a4a4317c7aeb1535aa549163ed3e909d9caef89110ae53f56ef282436ad44e03fe8b80f0fc9bc1c6053bee249cc492013a2229a245f4448811e3400e3c56711eabdafa87d3a4d37fa38cd1ad14039c6fea913fa5158e4103ebd638afcf4df9d5908e679f3ca69a9b1a"], 0x4, [{0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="1803598e9ff8285b093cfbf3f295315d0d4bfd91fe836442"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x98, &(0x7f0000000440)=ANY=[@ANYBLOB="980307b31377d3eb455b31a5b24d0f4dd87b7ffbe3e4e6e234ef7d6c07802edf4e7f6ee75f24cbe3945914a2b3008e171787f46a6004d14d0e08c0f0ca240f7001146e30f79c81d0e105193c8d2019647c3b0e76c733e9121f1c0ecff131c029d78465a34ceabb06a52868a26c691ba48b2eb80d802d894850fa18ae2d28b674e318b88ca47fd48f48d2b003d1b85cc34b8aa1543272f02e"]}, {0x7f, &(0x7f0000000580)=ANY=[@ANYBLOB="7f0307d96d0b63fd426a60085df8140ddefe47d1149689c102e48769ae7f423c7f1865437411e4989d3a77abfc43c33e8079888b87db0dd29aafa710d87ad4aa8b852a5c59380cf14e691a8fd62596481350089f249be3870dad6632b93b8c6accedd49e3e4185f3bcad94b24ea31eb898416d8f71edd76b03dd221b57d2160b302fb97858768198b082c175de9eef365249622e19f6c7262b07df7e80d1f92d3e823f89a5620b1d5fb1b937da917c03c28759833fde7d155db3438a08e6eb630a753ba7db9034b15ab3b17f22cb"]}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x20004010) socket$inet6_sctp(0xa, 0x1, 0x84) 69.787354ms ago: executing program 1 (id=1111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000500)) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x13d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 0s ago: executing program 2 (id=1112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) (fail_nth: 1) kernel console output (not intermixed with test programs): LL_64_after_hwframe+0x77/0x7f [ 243.774318][ T7196] ? clear_bhb_loop+0x40/0x90 [ 243.774339][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.774356][ T7196] RIP: 0033:0x7fae9559c799 [ 243.774372][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.774387][ T7196] RSP: 002b:00007fae937cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 243.774407][ T7196] RAX: ffffffffffffffda RBX: 00007fae95816090 RCX: 00007fae9559c799 [ 243.774419][ T7196] RDX: 0000000000000000 RSI: 0000200000001e80 RDI: 0000200000000000 [ 243.774431][ T7196] RBP: 00007fae937cd090 R08: 0000000000000000 R09: 0000000000000000 [ 243.774441][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.774451][ T7196] R13: 00007fae95816128 R14: 00007fae95816090 R15: 00007fffc91e8338 [ 243.774477][ T7196] [ 244.280483][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 244.353354][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 244.504758][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 244.507283][ T5892] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 244.507313][ T5892] usb 4-1: config 179 has no interface number 0 [ 244.507370][ T5892] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.507397][ T5892] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 244.507426][ T5892] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.507453][ T5892] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 244.507481][ T5892] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 244.507524][ T5892] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 244.507547][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.611998][ T7201] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.646137][ T854] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 244.803174][ T854] usb 2-1: Using ep0 maxpacket: 32 [ 244.806027][ T854] usb 2-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 244.806105][ T854] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.806134][ T854] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.806167][ T854] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 244.806194][ T854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.849098][ T854] usb 2-1: config 0 descriptor?? [ 244.929847][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.955336][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.216117][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.217846][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.262776][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 245.262870][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 245.262952][ T5892] usb 4-1: USB disconnect, device number 13 [ 245.394398][ T7212] binder: 7210:7212 ioctl 40046629 2000000006c0 returned -22 [ 245.394747][ T7212] binder: 7210:7212 ioctl 8933 200000000200 returned -22 [ 245.406934][ T854] usbhid 2-1:0.0: can't add hid device: -71 [ 245.407279][ T854] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 245.495348][ T854] usb 2-1: USB disconnect, device number 15 [ 247.499853][ T809] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 247.537954][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.449'. [ 247.707621][ T809] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 247.707654][ T809] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 247.707674][ T809] usb 4-1: config 8 has no interface number 0 [ 247.707729][ T809] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 247.711404][ T809] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 247.711436][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.711458][ T809] usb 4-1: Product: syz [ 247.711472][ T809] usb 4-1: Manufacturer: syz [ 247.711487][ T809] usb 4-1: SerialNumber: syz [ 247.996243][ T7233] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 248.014482][ T7233] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 251.316744][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.453'. [ 251.352784][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.453'. [ 251.427227][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.453'. [ 251.531115][ T809] usb 4-1: USB disconnect, device number 14 [ 251.803214][ T5866] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 251.957098][ T5866] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 251.957179][ T5866] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 251.957203][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.007551][ T5866] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 252.578854][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'. [ 252.794257][ T7265] fuse: Unknown parameter 'group_id0x0000000000000003' [ 252.893325][ T854] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 253.043203][ T854] usb 2-1: Using ep0 maxpacket: 8 [ 253.070820][ T854] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 253.070866][ T854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.070887][ T854] usb 2-1: Product: syz [ 253.070902][ T854] usb 2-1: Manufacturer: syz [ 253.070917][ T854] usb 2-1: SerialNumber: syz [ 253.119997][ T854] usb 2-1: config 0 descriptor?? [ 253.162999][ T854] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 254.574500][ T854] gspca_sonixj: reg_r err -110 [ 254.574621][ T854] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 254.747269][ T809] usb 5-1: USB disconnect, device number 16 [ 254.943299][ T5866] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 255.165569][ T5866] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 255.165600][ T5866] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 255.165628][ T5866] usb 4-1: config 8 has no interface number 0 [ 255.165674][ T5866] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.168908][ T5866] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 255.168939][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.168959][ T5866] usb 4-1: Product: syz [ 255.168973][ T5866] usb 4-1: Manufacturer: syz [ 255.168989][ T5866] usb 4-1: SerialNumber: syz [ 255.263015][ T7289] netlink: 60 bytes leftover after parsing attributes in process `syz.4.469'. [ 256.046684][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046762][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.210684][ T9] usb 2-1: USB disconnect, device number 16 [ 258.175140][ T5866] usb 4-1: USB disconnect, device number 15 [ 258.300723][ T7306] fuse: Bad value for 'user_id' [ 258.300744][ T7306] fuse: Bad value for 'user_id' [ 259.929330][ T854] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 260.275467][ T854] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 260.275530][ T854] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 260.275603][ T854] usb 2-1: config 8 has no interface number 0 [ 260.275898][ T854] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.376817][ T854] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 260.376850][ T854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.376871][ T854] usb 2-1: Product: syz [ 260.376885][ T854] usb 2-1: Manufacturer: syz [ 260.376900][ T854] usb 2-1: SerialNumber: syz [ 260.535762][ T7341] fuse: Bad value for 'user_id' [ 260.535785][ T7341] fuse: Bad value for 'user_id' [ 262.063357][ T1230] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 262.223222][ T1230] usb 4-1: Using ep0 maxpacket: 16 [ 262.226962][ T1230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.227016][ T1230] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 262.227123][ T1230] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.227302][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.295267][ T1230] usb 4-1: config 0 descriptor?? [ 262.328179][ T1230] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 262.560121][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.560682][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.792423][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.792808][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.194442][ T854] usb 2-1: USB disconnect, device number 17 [ 265.709052][ T5971] usb 4-1: USB disconnect, device number 16 [ 266.007602][ T7379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 266.343813][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'. [ 266.343857][ T7389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.500'. [ 266.356279][ T7389] bridge3: entered promiscuous mode [ 266.356303][ T7389] bridge3: entered allmulticast mode [ 266.453565][ T7391] fuse: Bad value for 'user_id' [ 266.453581][ T7391] fuse: Bad value for 'user_id' [ 266.713421][ T5971] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 266.893880][ T5971] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 266.893909][ T5971] usb 2-1: config 0 has an invalid interface number: 255 but max is 1 [ 266.893932][ T5971] usb 2-1: config 0 has no interface number 0 [ 266.893944][ T5971] usb 2-1: config 0 has no interface number 1 [ 266.893974][ T5971] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 266.894002][ T5971] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 266.894021][ T5971] usb 2-1: config 0 interface 255 has no altsetting 0 [ 266.902748][ T5971] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 266.902771][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.902786][ T5971] usb 2-1: Product: syz [ 266.902796][ T5971] usb 2-1: Manufacturer: syz [ 266.902807][ T5971] usb 2-1: SerialNumber: syz [ 267.005934][ T5971] usb 2-1: config 0 descriptor?? [ 267.083015][ T5971] usb 2-1: selecting invalid altsetting 0 [ 267.083033][ T5971] usb 2-1: Could not set interface, error -22 [ 267.169067][ T7400] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 268.979345][ T7424] netlink: 192 bytes leftover after parsing attributes in process `syz.0.510'. [ 269.230886][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 269.662693][ T31] usb 2-1: USB disconnect, device number 18 [ 270.033282][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 270.183242][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 270.205605][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.205664][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 270.205712][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 270.205738][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.212328][ T31] usb 5-1: config 0 descriptor?? [ 270.288907][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 270.363605][ T7442] fuse: Bad value for 'fd' [ 270.506945][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.507550][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.710511][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.710896][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.465957][ T10] usb 5-1: USB disconnect, device number 17 [ 273.863243][ T1230] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 274.038940][ T1230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.038972][ T1230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.047967][ T7467] netlink: 192 bytes leftover after parsing attributes in process `syz.4.521'. [ 274.150224][ T1230] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.151347][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.151372][ T1230] usb 4-1: Product: syz [ 274.153048][ T1230] usb 4-1: Manufacturer: syz [ 274.153159][ T1230] usb 4-1: SerialNumber: syz [ 274.624137][ T1230] usb 4-1: 0:2 : does not exist [ 274.630923][ T1230] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 274.804928][ T1230] usb 4-1: USB disconnect, device number 17 [ 275.020738][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.220665][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.524'. [ 275.370666][ T7479] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 275.603254][ T1230] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 275.757841][ T1230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.757873][ T1230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.760034][ T1230] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.760067][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.760086][ T1230] usb 4-1: SerialNumber: syz [ 275.851820][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 275.851952][ T7496] bond0: Unable to set up delay as MII monitoring is disabled [ 275.963278][ T5971] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 276.026290][ T7476] netlink: 'syz.3.528': attribute type 12 has an invalid length. [ 276.113283][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 276.129226][ T5971] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 276.147512][ T5971] usb 2-1: string descriptor 0 read error: -22 [ 276.147670][ T5971] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.147697][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.565629][ T5971] usb 2-1: can't set config #1, error -71 [ 279.598664][ T5971] usb 2-1: USB disconnect, device number 19 [ 279.790261][ T7508] FAULT_INJECTION: forcing a failure. [ 279.790261][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 279.790298][ T7508] CPU: 0 UID: 0 PID: 7508 Comm: syz.1.537 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.790324][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.790338][ T7508] Call Trace: [ 279.790347][ T7508] [ 279.790356][ T7508] dump_stack_lvl+0xe8/0x150 [ 279.790395][ T7508] should_fail_ex+0x46b/0x600 [ 279.790437][ T7508] should_failslab+0xa8/0x100 [ 279.790472][ T7508] kmem_cache_alloc_noprof+0x87/0x680 [ 279.790507][ T7508] ? do_getname+0x2e/0x250 [ 279.790543][ T7508] do_getname+0x2e/0x250 [ 279.790563][ T7508] ? getname_flags+0x11/0x20 [ 279.790604][ T7508] __se_sys_mq_unlink+0xf7/0x3a0 [ 279.790634][ T7508] ? __pfx___se_sys_mq_unlink+0x10/0x10 [ 279.790669][ T7508] ? __secure_computing+0xe1/0x2a0 [ 279.790706][ T7508] do_syscall_64+0x14d/0xf80 [ 279.790735][ T7508] ? trace_irq_disable+0x3b/0x150 [ 279.790759][ T7508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.790781][ T7508] ? clear_bhb_loop+0x40/0x90 [ 279.790810][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.790834][ T7508] RIP: 0033:0x7fae9559c799 [ 279.790854][ T7508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.790878][ T7508] RSP: 002b:00007fae937ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 279.790901][ T7508] RAX: ffffffffffffffda RBX: 00007fae95815fa0 RCX: 00007fae9559c799 [ 279.790917][ T7508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 279.790931][ T7508] RBP: 00007fae937ee090 R08: 0000000000000000 R09: 0000000000000000 [ 279.790945][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.790958][ T7508] R13: 00007fae95816038 R14: 00007fae95815fa0 R15: 00007fffc91e8338 [ 279.790993][ T7508] [ 280.006738][ T1230] usb 4-1: 0:2 : does not exist [ 280.006824][ T1230] usb 4-1: unit 85 not found! [ 280.075568][ T1230] usb 4-1: USB disconnect, device number 18 [ 280.124387][ T7517] FAULT_INJECTION: forcing a failure. [ 280.124387][ T7517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.124437][ T7517] CPU: 0 UID: 0 PID: 7517 Comm: syz.1.541 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 280.124462][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.124472][ T7517] Call Trace: [ 280.124478][ T7517] [ 280.124485][ T7517] dump_stack_lvl+0xe8/0x150 [ 280.124513][ T7517] should_fail_ex+0x46b/0x600 [ 280.124543][ T7517] _copy_from_user+0x2d/0xb0 [ 280.124563][ T7517] ucma_write+0x166/0x2f0 [ 280.124591][ T7517] ? __pfx_ucma_write+0x10/0x10 [ 280.124618][ T7517] ? rw_verify_area+0x25b/0x4e0 [ 280.124639][ T7517] ? __pfx_ucma_write+0x10/0x10 [ 280.124664][ T7517] vfs_write+0x2a3/0xba0 [ 280.124691][ T7517] ? __pfx_vfs_write+0x10/0x10 [ 280.124714][ T7517] ? __fget_files+0x2a/0x420 [ 280.124734][ T7517] ? __fget_files+0x2a/0x420 [ 280.124751][ T7517] ? __fget_files+0x3a6/0x420 [ 280.124768][ T7517] ? __fget_files+0x2a/0x420 [ 280.124792][ T7517] ksys_write+0x156/0x270 [ 280.124815][ T7517] ? __pfx_ksys_write+0x10/0x10 [ 280.124844][ T7517] do_syscall_64+0x14d/0xf80 [ 280.124865][ T7517] ? trace_irq_disable+0x3b/0x150 [ 280.124884][ T7517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.124900][ T7517] ? clear_bhb_loop+0x40/0x90 [ 280.124921][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.124937][ T7517] RIP: 0033:0x7fae9559c799 [ 280.124951][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.124965][ T7517] RSP: 002b:00007fae937ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.124980][ T7517] RAX: ffffffffffffffda RBX: 00007fae95815fa0 RCX: 00007fae9559c799 [ 280.124992][ T7517] RDX: 0000000000000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 280.125002][ T7517] RBP: 00007fae937ee090 R08: 0000000000000000 R09: 0000000000000000 [ 280.125011][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.125020][ T7517] R13: 00007fae95816038 R14: 00007fae95815fa0 R15: 00007fffc91e8338 [ 280.125043][ T7517] [ 280.537033][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.776121][ T7523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.542'. [ 281.694346][ T7520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.697871][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 282.056160][ T7531] bond0: Unable to set up delay as MII monitoring is disabled [ 282.340540][ T7520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.411050][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 282.437129][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'. [ 282.676503][ T7520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.041588][ T7520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.861515][ T3587] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.942593][ T3587] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.000611][ T7570] FAULT_INJECTION: forcing a failure. [ 285.000611][ T7570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.000659][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.3.560 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 285.000684][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.000697][ T7570] Call Trace: [ 285.000706][ T7570] [ 285.000715][ T7570] dump_stack_lvl+0xe8/0x150 [ 285.000754][ T7570] should_fail_ex+0x46b/0x600 [ 285.000795][ T7570] _copy_from_user+0x2d/0xb0 [ 285.000822][ T7570] ___sys_sendmsg+0x1c6/0x360 [ 285.000858][ T7570] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.000933][ T7570] ? __fget_files+0x2a/0x420 [ 285.000957][ T7570] ? __fget_files+0x3a6/0x420 [ 285.000994][ T7570] __x64_sys_sendmsg+0x1c3/0x2a0 [ 285.001027][ T7570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.001068][ T7570] ? __pfx_ksys_write+0x10/0x10 [ 285.001112][ T7570] do_syscall_64+0x14d/0xf80 [ 285.001142][ T7570] ? trace_irq_disable+0x3b/0x150 [ 285.001167][ T7570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.001189][ T7570] ? clear_bhb_loop+0x40/0x90 [ 285.001217][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.001240][ T7570] RIP: 0033:0x7f0dbf31c799 [ 285.001260][ T7570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.001279][ T7570] RSP: 002b:00007f0dbd576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.001303][ T7570] RAX: ffffffffffffffda RBX: 00007f0dbf595fa0 RCX: 00007f0dbf31c799 [ 285.001319][ T7570] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000005 [ 285.001333][ T7570] RBP: 00007f0dbd576090 R08: 0000000000000000 R09: 0000000000000000 [ 285.001346][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.001359][ T7570] R13: 00007f0dbf596038 R14: 00007f0dbf595fa0 R15: 00007ffcea4ecbb8 [ 285.001393][ T7570] [ 285.323577][ T221] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.424983][ T3587] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.634630][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'. [ 285.820641][ T7580] veth0: entered promiscuous mode [ 285.960536][ T7583] tun0: tun_chr_ioctl cmd 1074025675 [ 285.960557][ T7583] tun0: persist enabled [ 285.961081][ T7583] tun0: tun_chr_ioctl cmd 1074025675 [ 285.961095][ T7583] tun0: persist disabled [ 285.962798][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 286.153257][ T1230] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 286.337237][ T1230] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 286.337280][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.357391][ T1230] usb 4-1: config 0 descriptor?? [ 286.406880][ T1230] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 288.412243][ T7580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.565'. [ 289.059829][ T1230] gspca_stv06xx: I2C: Read error writing address: -71 [ 289.062279][ T1230] usb 4-1: USB disconnect, device number 19 [ 289.755771][ T1230] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 290.049671][ T37] kauditd_printk_skb: 342 callbacks suppressed [ 290.049693][ T37] audit: type=1326 audit(1772340525.153:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbf31c799 code=0x7ffc0000 [ 290.049742][ T37] audit: type=1326 audit(1772340525.153:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7617 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbf31c799 code=0x7ffc0000 [ 290.106639][ T1230] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 290.106673][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.106695][ T1230] usb 5-1: Product: syz [ 290.106710][ T1230] usb 5-1: Manufacturer: syz [ 290.106726][ T1230] usb 5-1: SerialNumber: syz [ 290.185553][ T1230] usb 5-1: config 0 descriptor?? [ 290.779076][ T7627] FAULT_INJECTION: forcing a failure. [ 290.779076][ T7627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.779133][ T7627] CPU: 0 UID: 0 PID: 7627 Comm: syz.3.580 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.779159][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.779172][ T7627] Call Trace: [ 290.779181][ T7627] [ 290.779190][ T7627] dump_stack_lvl+0xe8/0x150 [ 290.779245][ T7627] should_fail_ex+0x46b/0x600 [ 290.779278][ T7627] _copy_to_user+0x31/0xb0 [ 290.779324][ T7627] simple_read_from_buffer+0xe1/0x170 [ 290.779356][ T7627] proc_fail_nth_read+0x1be/0x230 [ 290.779385][ T7627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.779411][ T7627] ? rw_verify_area+0x2ac/0x4e0 [ 290.779441][ T7627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.779460][ T7627] vfs_read+0x212/0xa80 [ 290.779516][ T7627] ? __pfx_vfs_read+0x10/0x10 [ 290.779550][ T7627] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 290.779579][ T7627] ? lockdep_hardirqs_on+0x7a/0x110 [ 290.779613][ T7627] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 290.779635][ T7627] ? mutex_lock_nested+0x152/0x1d0 [ 290.779669][ T7627] ? fdget_pos+0x252/0x320 [ 290.779706][ T7627] ksys_read+0x156/0x270 [ 290.779739][ T7627] ? __pfx_ksys_read+0x10/0x10 [ 290.779779][ T7627] do_syscall_64+0x14d/0xf80 [ 290.779809][ T7627] ? trace_irq_disable+0x3b/0x150 [ 290.779844][ T7627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.779867][ T7627] ? clear_bhb_loop+0x40/0x90 [ 290.779897][ T7627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.779919][ T7627] RIP: 0033:0x7f0dbf2dcfce [ 290.779938][ T7627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.779965][ T7627] RSP: 002b:00007f0dbd575fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.779983][ T7627] RAX: ffffffffffffffda RBX: 00007f0dbd5766c0 RCX: 00007f0dbf2dcfce [ 290.779995][ T7627] RDX: 000000000000000f RSI: 00007f0dbd5760a0 RDI: 0000000000000005 [ 290.780021][ T7627] RBP: 00007f0dbd576090 R08: 0000000000000000 R09: 0000000000000000 [ 290.780036][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.780049][ T7627] R13: 00007f0dbf596038 R14: 00007f0dbf595fa0 R15: 00007ffcea4ecbb8 [ 290.780085][ T7627] [ 290.805252][ T1230] usb 5-1: Firmware version (0.0) predates our first public release. [ 290.805280][ T1230] usb 5-1: Please update to version 0.2 or newer [ 291.035579][ T1230] usb 5-1: Firmware: build  [ 291.279380][ T1230] usb 5-1: USB disconnect, device number 18 [ 291.692414][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'. [ 291.698237][ T7638] netlink: 'syz.0.583': attribute type 5 has an invalid length. [ 292.326292][ T7650] netlink: 192 bytes leftover after parsing attributes in process `syz.0.589'. [ 292.677392][ T7658] dummy0: entered allmulticast mode [ 293.028775][ T7655] dummy0: left allmulticast mode [ 293.557492][ T7668] bond1: entered promiscuous mode [ 294.154969][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 294.155157][ T7685] openvswitch: netlink: Flow actions attr not present in new flow. [ 294.435300][ T1230] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 294.583281][ T1230] usb 4-1: Using ep0 maxpacket: 32 [ 294.610717][ T1230] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 294.610744][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 294.610762][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 294.610779][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 294.610798][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 294.697787][ T1230] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 294.697812][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.697827][ T1230] usb 4-1: Product: syz [ 294.697837][ T1230] usb 4-1: Manufacturer: syz [ 294.697848][ T1230] usb 4-1: SerialNumber: syz [ 294.786301][ T1230] usb 4-1: config 0 descriptor?? [ 294.991690][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 294.994280][ T31] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 294.996741][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 295.017184][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 295.181201][ T7705] overlayfs: failed to resolve './file2': -2 [ 295.407033][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.606334][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 295.606366][ T31] usb 2-1: can't read configurations, error -71 [ 296.137596][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 296.138119][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.138698][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.139350][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.139813][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.140366][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.140824][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.141473][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.141966][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.142470][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.142946][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.143740][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.144212][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.144772][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.145746][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.147174][ T1230] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 296.147515][ T1230] input input7: Timeout waiting for response from device. [ 297.407573][ T10] usb 4-1: USB disconnect, device number 20 [ 297.699565][ T7721] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 297.721693][ T7725] netlink: 'syz.0.617': attribute type 58 has an invalid length. [ 299.517550][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 299.539195][ T7743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.675644][ T7743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.022987][ T7757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.626'. [ 300.136737][ T7752] veth0: entered promiscuous mode [ 300.253431][ C0] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 300.486130][ T7764] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 300.875653][ T7769] netlink: 'syz.2.630': attribute type 58 has an invalid length. [ 300.909498][ T31] kernel read not supported for file [fscontext] (pid: 31 comm: kworker/1:0) [ 304.226794][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.641'. [ 306.054510][ T7825] tipc: Enabling of bearer rejected, failed to enable media [ 306.671232][ T7841] FAULT_INJECTION: forcing a failure. [ 306.671232][ T7841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.671269][ T7841] CPU: 0 UID: 0 PID: 7841 Comm: syz.1.637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 306.671293][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.671308][ T7841] Call Trace: [ 306.671317][ T7841] [ 306.671327][ T7841] dump_stack_lvl+0xe8/0x150 [ 306.671365][ T7841] should_fail_ex+0x46b/0x600 [ 306.671408][ T7841] _copy_to_user+0x31/0xb0 [ 306.671437][ T7841] simple_read_from_buffer+0xe1/0x170 [ 306.671468][ T7841] proc_fail_nth_read+0x1be/0x230 [ 306.671497][ T7841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.671526][ T7841] ? rw_verify_area+0x2ac/0x4e0 [ 306.671555][ T7841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.671582][ T7841] vfs_read+0x212/0xa80 [ 306.671621][ T7841] ? __pfx_vfs_read+0x10/0x10 [ 306.671654][ T7841] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 306.671684][ T7841] ? lockdep_hardirqs_on+0x7a/0x110 [ 306.671714][ T7841] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 306.671744][ T7841] ? mutex_lock_nested+0x152/0x1d0 [ 306.671765][ T7841] ? fdget_pos+0x252/0x320 [ 306.671800][ T7841] ksys_read+0x156/0x270 [ 306.671833][ T7841] ? __pfx_ksys_read+0x10/0x10 [ 306.671877][ T7841] do_syscall_64+0x14d/0xf80 [ 306.671904][ T7841] ? trace_irq_disable+0x3b/0x150 [ 306.671929][ T7841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.671952][ T7841] ? clear_bhb_loop+0x40/0x90 [ 306.671989][ T7841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.672011][ T7841] RIP: 0033:0x7fae9555cfce [ 306.672031][ T7841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.672050][ T7841] RSP: 002b:00007fae937ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.672074][ T7841] RAX: ffffffffffffffda RBX: 00007fae937cd6c0 RCX: 00007fae9555cfce [ 306.672090][ T7841] RDX: 000000000000000f RSI: 00007fae937cd0a0 RDI: 0000000000000004 [ 306.672104][ T7841] RBP: 00007fae937cd090 R08: 0000000000000000 R09: 0000000000000000 [ 306.672118][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.672130][ T7841] R13: 00007fae95816128 R14: 00007fae95816090 R15: 00007fffc91e8338 [ 306.672167][ T7841] [ 307.613377][ T5983] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 307.692894][ T7856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 307.763279][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 307.765883][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.765916][ T5983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.765962][ T5983] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 307.765987][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.772608][ T5983] usb 2-1: config 0 descriptor?? [ 307.848568][ T5983] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 308.255804][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.256184][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.531525][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.531910][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.435140][ T7873] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 310.570398][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 310.570439][ T7876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.670'. [ 310.579821][ T7876] bridge1: entered promiscuous mode [ 310.579841][ T7876] bridge1: entered allmulticast mode [ 310.873273][ T5983] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 311.045761][ T5983] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 311.045793][ T5983] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 311.045815][ T5983] usb 4-1: config 0 has no interface number 0 [ 311.045832][ T5983] usb 4-1: config 0 has no interface number 1 [ 311.045876][ T5983] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 311.045917][ T5983] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 311.045946][ T5983] usb 4-1: config 0 interface 255 has no altsetting 0 [ 311.048820][ T5983] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 311.048844][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.048858][ T5983] usb 4-1: Product: syz [ 311.048869][ T5983] usb 4-1: Manufacturer: syz [ 311.048879][ T5983] usb 4-1: SerialNumber: syz [ 311.167234][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 311.276942][ T5983] usb 4-1: config 0 descriptor?? [ 311.407656][ T5971] usb 2-1: USB disconnect, device number 22 [ 311.413264][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 311.424547][ T10] usb 5-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 311.424604][ T10] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.424635][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.424668][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 311.424692][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.587471][ T10] usb 5-1: config 0 descriptor?? [ 311.624923][ T5983] usb 4-1: selecting invalid altsetting 0 [ 311.624950][ T5983] usb 4-1: Could not set interface, error -22 [ 312.687932][ T7880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.696922][ T7880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.853467][ T7880] binder: 7879:7880 ioctl 40046629 2000000006c0 returned -22 [ 312.855987][ T7880] binder: 7879:7880 ioctl 8933 200000000200 returned -22 [ 312.894935][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 312.895092][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 312.938837][ T10] usb 5-1: USB disconnect, device number 19 [ 313.826821][ T7911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.683'. [ 314.044331][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.684'. [ 314.293929][ T9] usb 4-1: USB disconnect, device number 21 [ 314.753244][ T5983] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 314.903243][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 314.905924][ T5983] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 314.905955][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.905976][ T5983] usb 5-1: config 0 has no interface number 0 [ 314.906023][ T5983] usb 5-1: config 0 interface 196 altsetting 1 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 314.906052][ T5983] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 314.906076][ T5983] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x8E has invalid maxpacket 0 [ 314.906101][ T5983] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.906129][ T5983] usb 5-1: config 0 interface 196 has no altsetting 0 [ 315.064268][ T5983] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 315.064301][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.064323][ T5983] usb 5-1: Product: syz [ 315.064337][ T5983] usb 5-1: Manufacturer: syz [ 315.064352][ T5983] usb 5-1: SerialNumber: syz [ 315.071458][ T5983] usb 5-1: config 0 descriptor?? [ 315.296891][ T7930] netlink: 68 bytes leftover after parsing attributes in process `syz.0.688'. [ 315.848124][ T5983] ipheth 5-1:0.196: Unable to find endpoints [ 315.904489][ T5983] usb 5-1: USB disconnect, device number 20 [ 315.991710][ T7939] fuse: Unknown parameter 'user_i00000000000000000000' [ 316.403183][ T5983] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 316.502720][ T7945] tun0: tun_chr_ioctl cmd 1074025675 [ 316.502745][ T7945] tun0: persist enabled [ 316.502975][ T7945] tun0: tun_chr_ioctl cmd 1074025675 [ 316.502992][ T7945] tun0: persist disabled [ 316.518187][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 316.563203][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 316.579307][ T5983] usb 5-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 316.579367][ T5983] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.579397][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.579433][ T5983] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 316.579457][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.593385][ T7951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.697'. [ 316.654751][ T5983] usb 5-1: config 0 descriptor?? [ 316.901367][ T9] kernel write not supported for file /sequencer (pid: 9 comm: kworker/0:0) [ 317.084816][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.085382][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.123690][ T7941] binder: 7940:7941 ioctl 40046629 2000000006c0 returned -22 [ 317.124886][ T7941] binder: 7940:7941 ioctl 8933 200000000200 returned -22 [ 317.155272][ T5983] usbhid 5-1:0.0: can't add hid device: -71 [ 317.155405][ T5983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 317.161363][ T5983] usb 5-1: USB disconnect, device number 21 [ 317.203267][ T31] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 317.311458][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.311536][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.369242][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 317.369881][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 317.371351][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.371376][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 317.371435][ T31] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.403308][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 317.403338][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.403354][ T31] usb 4-1: Product: syz [ 317.403366][ T31] usb 4-1: Manufacturer: syz [ 317.403378][ T31] usb 4-1: SerialNumber: syz [ 317.669577][ T7961] veth0: entered promiscuous mode [ 317.733400][ T31] usb 4-1: 0:2 : does not exist [ 317.774479][ T7961] netlink: 60 bytes leftover after parsing attributes in process `syz.2.700'. [ 317.864856][ T31] usb 4-1: USB disconnect, device number 22 [ 318.042215][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.299503][ T7969] netlink: 192 bytes leftover after parsing attributes in process `syz.4.702'. [ 319.157762][ T7972] netlink: 'syz.2.704': attribute type 58 has an invalid length. [ 319.217973][ T7973] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.526435][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 319.782428][ T31] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 319.877305][ T1238] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 319.945702][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.945741][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.945765][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.945809][ T31] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 319.945832][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.009930][ T31] usb 5-1: config 0 descriptor?? [ 320.033176][ T1238] usb 4-1: Using ep0 maxpacket: 32 [ 320.040672][ T1238] usb 4-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 320.040732][ T1238] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.040760][ T1238] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.040796][ T1238] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 320.040814][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.143964][ T1238] usb 4-1: config 0 descriptor?? [ 320.173303][ T7009] Bluetooth: hci4: command 0x0406 tx timeout [ 320.464422][ T5983] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 321.003235][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 321.048462][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.048928][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.048955][ T5983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 321.049001][ T5983] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 321.049269][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.122730][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122770][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122801][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122829][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122856][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122885][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122913][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122942][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122972][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.122999][ T31] hid-multitouch 0003:0457:07DA.0005: unknown main item tag 0x0 [ 321.213703][ T5983] usb 2-1: config 0 descriptor?? [ 321.235852][ T31] hid-multitouch 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 321.241992][ T7989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.275155][ T7989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.385576][ T31] usb 5-1: USB disconnect, device number 22 [ 321.464727][ T8014] binder: 7988:8014 ioctl 40046629 2000000006c0 returned -22 [ 321.465242][ T8014] binder: 7988:8014 ioctl 8933 200000000200 returned -22 [ 321.602111][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.612876][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.864890][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.868928][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.992809][ T8015] fido_id[8015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 322.047832][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 322.482532][ T1238] usbhid 4-1:0.0: can't add hid device: -71 [ 322.482670][ T1238] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 322.525641][ T1238] usb 4-1: USB disconnect, device number 23 [ 322.952452][ T8030] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 323.124045][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.205430][ T8030] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 323.291565][ T5983] usbhid 2-1:0.0: can't add hid device: -71 [ 323.291692][ T5983] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 323.330313][ T5983] usb 2-1: USB disconnect, device number 23 [ 325.594222][ T8058] netlink: 192 bytes leftover after parsing attributes in process `syz.3.732'. [ 326.080333][ T8077] fuse: Unknown parameter 'user_id00000000000000000000' [ 326.229880][ T8081] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 326.303175][ T1238] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 326.402713][ T8085] netlink: 'syz.2.745': attribute type 58 has an invalid length. [ 326.473561][ T1238] usb 4-1: Using ep0 maxpacket: 8 [ 326.476221][ T1238] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 326.476251][ T1238] usb 4-1: config 179 has no interface number 0 [ 326.476297][ T1238] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 326.476325][ T1238] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 326.476355][ T1238] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 326.476378][ T1238] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 326.476422][ T1238] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 326.476446][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.509823][ T8086] netlink: 'syz.0.746': attribute type 58 has an invalid length. [ 326.627519][ T8071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.172417][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.200852][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.327071][ T8089] bridge_slave_0: left allmulticast mode [ 327.327095][ T8089] bridge_slave_0: left promiscuous mode [ 327.329800][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.226474][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.750'. [ 328.720233][ T8100] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 329.043265][ T36] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 329.246646][ T8089] bridge_slave_1: left allmulticast mode [ 329.246669][ T8089] bridge_slave_1: left promiscuous mode [ 329.246836][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.317494][ T8089] bond0: (slave bond_slave_0): Releasing backup interface [ 329.356500][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 329.359594][ T36] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 329.359652][ T36] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 329.359680][ T36] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.359708][ T36] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 329.397767][ T36] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 329.397800][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.397821][ T36] usb 5-1: Product: syz [ 329.397836][ T36] usb 5-1: Manufacturer: syz [ 329.397860][ T36] usb 5-1: SerialNumber: syz [ 329.485746][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 329.495260][ T8089] bond0: (slave bond_slave_1): Releasing backup interface [ 329.533361][ T10] usb 4-1: USB disconnect, device number 24 [ 329.561593][ T36] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input8 [ 329.598218][ T8089] team0: Port device team_slave_0 removed [ 329.600140][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 329.669084][ T8089] team0: Port device team_slave_1 removed [ 329.669866][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.669885][ T8089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.715087][ T8089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.715110][ T8089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.773322][ T36] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 329.773343][ T36] (id 0x00) [ 330.645392][ T8089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.713196][ T36] rc_core: IR keymap rc-imon-pad not found [ 330.713224][ T36] Registered IR keymap rc-empty [ 330.713296][ T36] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 330.713310][ T36] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 330.737376][ T36] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 330.786127][ T36] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input9 [ 330.853658][ T36] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:23> initialized [ 330.989162][ T36] usb 5-1: USB disconnect, device number 23 [ 331.268459][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 331.268492][ T8122] bond0: Unable to set down delay as MII monitoring is disabled [ 331.499732][ T8127] FAULT_INJECTION: forcing a failure. [ 331.499732][ T8127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.499769][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.3.757 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.499795][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.499808][ T8127] Call Trace: [ 331.499817][ T8127] [ 331.499837][ T8127] dump_stack_lvl+0xe8/0x150 [ 331.499876][ T8127] should_fail_ex+0x46b/0x600 [ 331.499917][ T8127] _copy_to_user+0x31/0xb0 [ 331.499947][ T8127] simple_read_from_buffer+0xe1/0x170 [ 331.499977][ T8127] proc_fail_nth_read+0x1be/0x230 [ 331.500005][ T8127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.500033][ T8127] ? rw_verify_area+0x2ac/0x4e0 [ 331.500061][ T8127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.500088][ T8127] vfs_read+0x212/0xa80 [ 331.500127][ T8127] ? __pfx_vfs_read+0x10/0x10 [ 331.500160][ T8127] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.500191][ T8127] ? lockdep_hardirqs_on+0x7a/0x110 [ 331.500219][ T8127] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 331.500248][ T8127] ? mutex_lock_nested+0x152/0x1d0 [ 331.500269][ T8127] ? fdget_pos+0x252/0x320 [ 331.500305][ T8127] ksys_read+0x156/0x270 [ 331.500333][ T8127] ? rt_spin_unlock+0x14f/0x200 [ 331.500360][ T8127] ? __pfx_ksys_read+0x10/0x10 [ 331.500404][ T8127] do_syscall_64+0x14d/0xf80 [ 331.500432][ T8127] ? trace_irq_disable+0x3b/0x150 [ 331.500458][ T8127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.500480][ T8127] ? clear_bhb_loop+0x40/0x90 [ 331.500508][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.500531][ T8127] RIP: 0033:0x7f0dbf2dcfce [ 331.500552][ T8127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.500572][ T8127] RSP: 002b:00007f0dbd554fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.500595][ T8127] RAX: ffffffffffffffda RBX: 00007f0dbd5556c0 RCX: 00007f0dbf2dcfce [ 331.500611][ T8127] RDX: 000000000000000f RSI: 00007f0dbd5550a0 RDI: 0000000000000003 [ 331.500625][ T8127] RBP: 00007f0dbd555090 R08: 0000000000000000 R09: 0000000000000000 [ 331.500639][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.500652][ T8127] R13: 00007f0dbf596128 R14: 00007f0dbf596090 R15: 00007ffcea4ecbb8 [ 331.500688][ T8127] [ 331.543219][ T5971] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 331.792536][ T5971] usb 2-1: Using ep0 maxpacket: 32 [ 331.806177][ T5971] usb 2-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 331.806238][ T5971] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.806268][ T5971] usb 2-1: config 0 interface 0 has no altsetting 0 [ 331.806303][ T5971] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 331.806328][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.891046][ T5971] usb 2-1: config 0 descriptor?? [ 332.343370][ T8135] netlink: 'syz.3.764': attribute type 58 has an invalid length. [ 332.347070][ T8124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.371702][ T8124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.413638][ T8124] binder: 8123:8124 ioctl 40046629 2000000006c0 returned -22 [ 332.415574][ T8124] binder: 8123:8124 ioctl 8933 200000000200 returned -22 [ 332.440425][ T5971] usbhid 2-1:0.0: can't add hid device: -71 [ 332.440568][ T5971] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 332.475039][ T5971] usb 2-1: USB disconnect, device number 24 [ 333.092200][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 333.157784][ T8152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.769'. [ 333.163197][ T36] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 333.294390][ T37] audit: type=1326 audit(1772340568.403:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.294787][ T37] audit: type=1326 audit(1772340568.403:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.295112][ T37] audit: type=1326 audit(1772340568.403:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.295379][ T37] audit: type=1326 audit(1772340568.403:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.295676][ T37] audit: type=1326 audit(1772340568.403:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.296681][ T37] audit: type=1326 audit(1772340568.403:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.298173][ T37] audit: type=1326 audit(1772340568.403:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.298461][ T37] audit: type=1326 audit(1772340568.403:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.298806][ T37] audit: type=1326 audit(1772340568.403:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.316935][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 333.357895][ T36] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 333.357927][ T36] usb 5-1: config 179 has no interface number 0 [ 333.357977][ T36] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 333.358005][ T36] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 333.358034][ T36] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 333.358058][ T36] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 333.358103][ T36] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 333.358127][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.432966][ T37] audit: type=1326 audit(1772340568.513:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8157 comm="syz.2.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 333.627330][ T8148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 333.757451][ T8164] fuse: Bad value for 'fd' [ 333.869748][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.870275][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.275446][ T854] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 335.658938][ T854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.658969][ T854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.960782][ T854] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.960815][ T854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.960834][ T854] usb 4-1: Product: syz [ 335.960849][ T854] usb 4-1: Manufacturer: syz [ 335.960863][ T854] usb 4-1: SerialNumber: syz [ 337.231636][ T8174] netlink: 'syz.0.777': attribute type 58 has an invalid length. [ 337.256366][ T854] usb 4-1: 0:2 : does not exist [ 337.684503][ T5971] usb 5-1: USB disconnect, device number 24 [ 337.792923][ T854] usb 4-1: USB disconnect, device number 25 [ 337.998066][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.150328][ T8183] netlink: 68 bytes leftover after parsing attributes in process `syz.0.780'. [ 339.634491][ T8188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.782'. [ 340.074460][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 340.572753][ T5805] Bluetooth: hci4: adv larger than maximum supported [ 340.572790][ T5805] Bluetooth: hci4: Malformed LE Event: 0x0d [ 340.666803][ T8203] FAULT_INJECTION: forcing a failure. [ 340.666803][ T8203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.666832][ T8203] CPU: 0 UID: 0 PID: 8203 Comm: syz.4.788 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 340.666850][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.666859][ T8203] Call Trace: [ 340.666866][ T8203] [ 340.666873][ T8203] dump_stack_lvl+0xe8/0x150 [ 340.666901][ T8203] should_fail_ex+0x46b/0x600 [ 340.666932][ T8203] _copy_from_user+0x2d/0xb0 [ 340.666952][ T8203] ___sys_sendmsg+0x1c6/0x360 [ 340.666979][ T8203] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.667026][ T8203] ? __fget_files+0x2a/0x420 [ 340.667045][ T8203] ? __fget_files+0x3a6/0x420 [ 340.667070][ T8203] __x64_sys_sendmsg+0x1c3/0x2a0 [ 340.667094][ T8203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.667124][ T8203] ? __pfx_ksys_write+0x10/0x10 [ 340.667155][ T8203] do_syscall_64+0x14d/0xf80 [ 340.667186][ T8203] ? trace_irq_disable+0x3b/0x150 [ 340.667205][ T8203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.667221][ T8203] ? clear_bhb_loop+0x40/0x90 [ 340.667241][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.667256][ T8203] RIP: 0033:0x7fd5b161c799 [ 340.667272][ T8203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.667286][ T8203] RSP: 002b:00007fd5af876028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.667302][ T8203] RAX: ffffffffffffffda RBX: 00007fd5b1895fa0 RCX: 00007fd5b161c799 [ 340.667314][ T8203] RDX: 0000000004004044 RSI: 0000200000000100 RDI: 0000000000000003 [ 340.667325][ T8203] RBP: 00007fd5af876090 R08: 0000000000000000 R09: 0000000000000000 [ 340.667334][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.667343][ T8203] R13: 00007fd5b1896038 R14: 00007fd5b1895fa0 R15: 00007ffe7bf5f968 [ 340.667367][ T8203] [ 340.688039][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 340.896116][ T5983] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 341.073278][ T5983] usb 4-1: Using ep0 maxpacket: 16 [ 341.075329][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.075362][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.075386][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 341.075430][ T5983] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 341.075455][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.081603][ T5983] usb 4-1: config 0 descriptor?? [ 341.315339][ T8214] veth0: entered promiscuous mode [ 341.362527][ T8210] veth1_macvtap: mtu greater than device maximum [ 341.509837][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.510455][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.393510][ T5971] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 343.038139][ T5971] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 343.038174][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.082586][ T5971] usb 2-1: config 0 descriptor?? [ 343.122140][ T5971] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 343.419605][ T8223] veth0: entered promiscuous mode [ 343.684196][ T8228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.795'. [ 343.693292][ T1238] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 343.873017][ T1238] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 343.873339][ T1238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.940252][ T5983] usbhid 4-1:0.0: can't add hid device: -71 [ 343.940412][ T5983] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 343.979932][ T5983] usb 4-1: USB disconnect, device number 26 [ 344.112621][ T1238] usb 5-1: config 0 descriptor?? [ 344.139938][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 344.221961][ T1238] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 344.266246][ T8233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.302790][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 344.866648][ T8214] netlink: 60 bytes leftover after parsing attributes in process `syz.1.791'. [ 345.166985][ T5971] gspca_stv06xx: I2C: Read error writing address: -71 [ 345.184977][ T5971] usb 2-1: USB disconnect, device number 25 [ 345.776211][ T8223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.794'. [ 346.415989][ T1238] gspca_stv06xx: I2C: Read error writing address: -71 [ 346.425538][ T1238] usb 5-1: USB disconnect, device number 25 [ 348.593344][ T5983] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 348.768734][ T5983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.769350][ T5983] usb 2-1: not running at top speed; connect to a high speed hub [ 348.770553][ T5983] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 348.770579][ T5983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.818406][ T5983] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 348.818439][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=106 [ 348.818461][ T5983] usb 2-1: Product: syz [ 348.818476][ T5983] usb 2-1: Manufacturer: syz [ 348.818491][ T5983] usb 2-1: SerialNumber: syz [ 350.516052][ T8286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.812'. [ 351.617862][ T5983] usb 2-1: invalid UAC_HEADER (v1) [ 351.772837][ T5983] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 351.796359][ T5983] usb 2-1: USB disconnect, device number 26 [ 351.907426][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.073881][ T8291] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 352.174136][ T5983] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 352.333152][ T5983] usb 2-1: Using ep0 maxpacket: 8 [ 352.338263][ T5983] usb 2-1: unable to get BOS descriptor or descriptor too short [ 352.338384][ T5983] usb 2-1: too many configurations: 22, using maximum allowed: 8 [ 352.341110][ T5983] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 352.341130][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 352.342311][ T5983] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 352.342329][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 352.404962][ T5983] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 352.404982][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 352.409273][ T5983] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 352.409294][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 352.410605][ T5983] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 352.410838][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 352.417490][ T5983] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 352.417517][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 352.442798][ T5983] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 352.442832][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 352.491197][ T5983] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 352.491228][ T5983] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 352.551809][ T5983] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=33.c7 [ 352.551844][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 352.551866][ T5983] usb 2-1: Product: syz [ 352.551881][ T5983] usb 2-1: Manufacturer: syz [ 352.551897][ T5983] usb 2-1: SerialNumber: syz [ 352.604841][ T5983] usb 2-1: config 0 descriptor?? [ 352.807995][ T8302] netlink: 64 bytes leftover after parsing attributes in process `syz.4.820'. [ 352.827791][ T5983] usb 2-1: USB disconnect, device number 27 [ 353.336754][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 354.383277][ T36] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 354.548068][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.548107][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.548156][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 354.548228][ T36] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 354.548246][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.825438][ T36] usb 2-1: config 0 descriptor?? [ 356.170783][ T8334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.830'. [ 357.427287][ T8343] netlink: 'syz.0.835': attribute type 58 has an invalid length. [ 357.524325][ T8345] FAULT_INJECTION: forcing a failure. [ 357.524325][ T8345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.524364][ T8345] CPU: 0 UID: 0 PID: 8345 Comm: syz.3.836 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.524388][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.524401][ T8345] Call Trace: [ 357.524411][ T8345] [ 357.524420][ T8345] dump_stack_lvl+0xe8/0x150 [ 357.524580][ T8345] should_fail_ex+0x46b/0x600 [ 357.524709][ T8345] _copy_from_user+0x2d/0xb0 [ 357.524765][ T8345] ___sys_sendmsg+0x1c6/0x360 [ 357.524871][ T8345] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.525031][ T8345] ? __fget_files+0x2a/0x420 [ 357.525125][ T8345] ? __fget_files+0x3a6/0x420 [ 357.525161][ T8345] __x64_sys_sendmsg+0x1c3/0x2a0 [ 357.525194][ T8345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.525234][ T8345] ? __pfx_ksys_write+0x10/0x10 [ 357.525333][ T8345] do_syscall_64+0x14d/0xf80 [ 357.525453][ T8345] ? trace_irq_disable+0x3b/0x150 [ 357.525503][ T8345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.525546][ T8345] ? clear_bhb_loop+0x40/0x90 [ 357.525574][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.525596][ T8345] RIP: 0033:0x7f0dbf31c799 [ 357.525645][ T8345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.525665][ T8345] RSP: 002b:00007f0dbd555028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.525730][ T8345] RAX: ffffffffffffffda RBX: 00007f0dbf596090 RCX: 00007f0dbf31c799 [ 357.525746][ T8345] RDX: 0000000000000000 RSI: 0000200000001980 RDI: 0000000000000003 [ 357.525760][ T8345] RBP: 00007f0dbd555090 R08: 0000000000000000 R09: 0000000000000000 [ 357.525773][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.525785][ T8345] R13: 00007f0dbf596128 R14: 00007f0dbf596090 R15: 00007ffcea4ecbb8 [ 357.525821][ T8345] [ 357.879067][ T8347] syz_tun: entered allmulticast mode [ 357.911077][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911111][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911148][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911176][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911212][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911241][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911277][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911306][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911333][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 357.911360][ T36] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 358.000720][ T36] hid-multitouch 0003:0457:07DA.0006: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 358.038282][ T36] usb 2-1: USB disconnect, device number 28 [ 358.649913][ T8351] fido_id[8351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 359.974932][ T1238] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 360.515706][ T1238] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 360.515740][ T1238] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 360.515762][ T1238] usb 4-1: config 8 has no interface number 0 [ 360.515903][ T1238] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 360.519194][ T1238] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 360.519230][ T1238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.519252][ T1238] usb 4-1: Product: syz [ 360.519268][ T1238] usb 4-1: Manufacturer: syz [ 360.519283][ T1238] usb 4-1: SerialNumber: syz [ 361.131838][ T1238] usb 4-1: USB disconnect, device number 27 [ 361.291948][ T8374] netlink: 'syz.4.847': attribute type 7 has an invalid length. [ 361.362123][ T8376] netlink: 'syz.0.849': attribute type 58 has an invalid length. [ 361.376229][ T8379] lo: entered allmulticast mode [ 361.497029][ T8374] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 361.578850][ T8377] 9pnet_fd: Insufficient options for proto=fd [ 362.311891][ T8402] ODEBUG: Out of memory. ODEBUG disabled [ 363.455861][ T8412] FAULT_INJECTION: forcing a failure. [ 363.455861][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.455903][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.3.860 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 363.455928][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.455946][ T8412] Call Trace: [ 363.455959][ T8412] [ 363.455970][ T8412] dump_stack_lvl+0xe8/0x150 [ 363.456010][ T8412] should_fail_ex+0x46b/0x600 [ 363.456054][ T8412] _copy_from_user+0x2d/0xb0 [ 363.456083][ T8412] ucma_write+0x166/0x2f0 [ 363.456231][ T8412] ? __pfx_ucma_write+0x10/0x10 [ 363.456269][ T8412] ? rw_verify_area+0x25b/0x4e0 [ 363.456305][ T8412] vfs_writev+0x4c6/0x9a0 [ 363.456330][ T8412] ? __pfx_ucma_write+0x10/0x10 [ 363.456368][ T8412] ? __pfx_vfs_writev+0x10/0x10 [ 363.456407][ T8412] ? __fget_files+0x2a/0x420 [ 363.456437][ T8412] ? __fget_files+0x3a6/0x420 [ 363.456463][ T8412] ? __fget_files+0x2a/0x420 [ 363.456498][ T8412] do_writev+0x15a/0x2e0 [ 363.456524][ T8412] ? __pfx_do_writev+0x10/0x10 [ 363.456560][ T8412] do_syscall_64+0x14d/0xf80 [ 363.456590][ T8412] ? trace_irq_disable+0x3b/0x150 [ 363.456616][ T8412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.456639][ T8412] ? clear_bhb_loop+0x40/0x90 [ 363.456676][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.456698][ T8412] RIP: 0033:0x7f0dbf31c799 [ 363.456720][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.456738][ T8412] RSP: 002b:00007f0dbd576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 363.456762][ T8412] RAX: ffffffffffffffda RBX: 00007f0dbf595fa0 RCX: 00007f0dbf31c799 [ 363.456777][ T8412] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 363.456791][ T8412] RBP: 00007f0dbd576090 R08: 0000000000000000 R09: 0000000000000000 [ 363.456804][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.456817][ T8412] R13: 00007f0dbf596038 R14: 00007f0dbf595fa0 R15: 00007ffcea4ecbb8 [ 363.456852][ T8412] [ 363.772590][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 363.772632][ T8414] bond0: Unable to set down delay as MII monitoring is disabled [ 363.914872][ T8422] netlink: 'syz.0.865': attribute type 58 has an invalid length. [ 364.153234][ T5983] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 364.323187][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 364.334047][ T5983] usb 4-1: Using ep0 maxpacket: 16 [ 364.337326][ T5983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.337384][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.337413][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 364.337436][ T5983] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 364.337460][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.339794][ T5983] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 364.339823][ T5983] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 364.339844][ T5983] usb 4-1: Manufacturer: syz [ 364.361846][ T5983] usb 4-1: config 0 descriptor?? [ 364.530325][ T9] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 364.530356][ T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 364.530383][ T9] usb 2-1: config 8 has no interface number 0 [ 364.530430][ T9] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 364.563274][ T9] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 364.563306][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.563327][ T9] usb 2-1: Product: syz [ 364.563348][ T9] usb 2-1: Manufacturer: syz [ 364.563359][ T9] usb 2-1: SerialNumber: syz [ 364.873252][ T5983] rc_core: IR keymap rc-hauppauge not found [ 364.873275][ T5983] Registered IR keymap rc-empty [ 364.873433][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.893948][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.924694][ T5983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 364.940607][ T5983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 364.979172][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.993284][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.013286][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.015241][ T9] usb 2-1: USB disconnect, device number 29 [ 365.033366][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.053402][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.081330][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.093246][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.113382][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.133216][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.134506][ T8451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.875'. [ 365.163311][ T5983] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.185991][ T5983] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 365.186014][ T5983] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 365.221893][ T5983] usb 4-1: USB disconnect, device number 28 [ 365.248062][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 365.248095][ T8455] bond0: Unable to set down delay as MII monitoring is disabled [ 365.331265][ T8457] netlink: 'syz.3.878': attribute type 58 has an invalid length. [ 365.961254][ T5983] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 366.123251][ T5983] usb 4-1: Using ep0 maxpacket: 8 [ 366.125460][ T5983] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 366.125489][ T5983] usb 4-1: config 179 has no interface number 0 [ 366.125528][ T5983] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 366.125551][ T5983] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 366.125582][ T5983] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 366.125601][ T5983] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 366.125637][ T5983] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 366.125658][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.193228][ T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 366.255156][ T8466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.366818][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.366848][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.372313][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.372345][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.372365][ T9] usb 2-1: Product: syz [ 366.372379][ T9] usb 2-1: Manufacturer: syz [ 366.372399][ T9] usb 2-1: SerialNumber: syz [ 366.463597][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.463967][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.676855][ T9] usb 2-1: 0:2 : does not exist [ 366.677150][ T9] usb 2-1: unit 6 not found! [ 368.874926][ T9] usb 2-1: USB disconnect, device number 30 [ 369.232549][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 369.274401][ T5971] usb 4-1: USB disconnect, device number 29 [ 369.441934][ T8490] bridge4: entered allmulticast mode [ 369.442987][ T8494] bond0: Unable to set down delay as MII monitoring is disabled [ 369.498235][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.567450][ T8497] overlayfs: failed to clone upperpath [ 369.926745][ T8503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.892'. [ 371.320888][ T8505] FAULT_INJECTION: forcing a failure. [ 371.320888][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 371.320921][ T8505] CPU: 0 UID: 0 PID: 8505 Comm: syz.1.894 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 371.320952][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.320963][ T8505] Call Trace: [ 371.320971][ T8505] [ 371.320978][ T8505] dump_stack_lvl+0xe8/0x150 [ 371.321012][ T8505] should_fail_ex+0x46b/0x600 [ 371.321046][ T8505] should_failslab+0xa8/0x100 [ 371.321185][ T8505] __kmalloc_noprof+0xdf/0x7b0 [ 371.321245][ T8505] ? kfree+0x4d/0x6c0 [ 371.321266][ T8505] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 371.321360][ T8505] tomoyo_realpath_from_path+0xe3/0x5d0 [ 371.321397][ T8505] ? tomoyo_path_number_perm+0x219/0x630 [ 371.321420][ T8505] tomoyo_path_number_perm+0x246/0x630 [ 371.321447][ T8505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 371.321472][ T8505] ? __lock_acquire+0x6b5/0x2cf0 [ 371.321532][ T8505] ? __fget_files+0x2a/0x420 [ 371.321556][ T8505] ? __fget_files+0x2a/0x420 [ 371.321575][ T8505] ? __fget_files+0x3a6/0x420 [ 371.321594][ T8505] ? __fget_files+0x2a/0x420 [ 371.321618][ T8505] security_file_ioctl+0xc3/0x2a0 [ 371.321691][ T8505] __se_sys_ioctl+0x47/0x170 [ 371.321767][ T8505] do_syscall_64+0x14d/0xf80 [ 371.321792][ T8505] ? trace_irq_disable+0x3b/0x150 [ 371.321812][ T8505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.321830][ T8505] ? clear_bhb_loop+0x40/0x90 [ 371.321852][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.321870][ T8505] RIP: 0033:0x7fae9559c799 [ 371.321888][ T8505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.321904][ T8505] RSP: 002b:00007fae937ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.321923][ T8505] RAX: ffffffffffffffda RBX: 00007fae95815fa0 RCX: 00007fae9559c799 [ 371.321944][ T8505] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 371.321954][ T8505] RBP: 00007fae937ee090 R08: 0000000000000000 R09: 0000000000000000 [ 371.321965][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.321975][ T8505] R13: 00007fae95816038 R14: 00007fae95815fa0 R15: 00007fffc91e8338 [ 371.322003][ T8505] [ 371.322893][ T8505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 371.633376][ T8514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.897'. [ 372.096359][ T8524] FAULT_INJECTION: forcing a failure. [ 372.096359][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.096387][ T8524] CPU: 1 UID: 0 PID: 8524 Comm: syz.3.900 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.096411][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.096422][ T8524] Call Trace: [ 372.096428][ T8524] [ 372.096434][ T8524] dump_stack_lvl+0xe8/0x150 [ 372.096464][ T8524] should_fail_ex+0x46b/0x600 [ 372.096495][ T8524] _copy_from_user+0x2d/0xb0 [ 372.096516][ T8524] do_sys_poll+0x2a0/0xfa0 [ 372.096545][ T8524] ? __pfx_do_sys_poll+0x10/0x10 [ 372.096562][ T8524] ? __lock_acquire+0x6b5/0x2cf0 [ 372.096579][ T8524] ? is_bpf_text_address+0x26/0x2b0 [ 372.096698][ T8524] ? set_user_sigmask+0xcd/0x1c0 [ 372.096729][ T8524] ? __pfx_set_user_sigmask+0x10/0x10 [ 372.096750][ T8524] ? rt_mutex_slowunlock+0x1cb/0x300 [ 372.096827][ T8524] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 372.096850][ T8524] __se_sys_ppoll+0x209/0x2b0 [ 372.096866][ T8524] ? fput+0xa0/0xd0 [ 372.096913][ T8524] ? __pfx___se_sys_ppoll+0x10/0x10 [ 372.096930][ T8524] ? __pfx_ksys_write+0x10/0x10 [ 372.096956][ T8524] ? __x64_sys_ppoll+0x20/0xc0 [ 372.096975][ T8524] do_syscall_64+0x14d/0xf80 [ 372.096996][ T8524] ? trace_irq_disable+0x3b/0x150 [ 372.097015][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.097032][ T8524] ? clear_bhb_loop+0x40/0x90 [ 372.097052][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.097096][ T8524] RIP: 0033:0x7f0dbf31c799 [ 372.097117][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.097137][ T8524] RSP: 002b:00007f0dbd555028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 372.097160][ T8524] RAX: ffffffffffffffda RBX: 00007f0dbf596090 RCX: 00007f0dbf31c799 [ 372.097175][ T8524] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 372.097189][ T8524] RBP: 00007f0dbd555090 R08: 0000000000000000 R09: 0000000000000000 [ 372.097201][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.097213][ T8524] R13: 00007f0dbf596128 R14: 00007f0dbf596090 R15: 00007ffcea4ecbb8 [ 372.097245][ T8524] [ 373.637409][ T8536] FAULT_INJECTION: forcing a failure. [ 373.637409][ T8536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.637453][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.3.902 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 373.637472][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.637483][ T8536] Call Trace: [ 373.637489][ T8536] [ 373.637498][ T8536] dump_stack_lvl+0xe8/0x150 [ 373.637528][ T8536] should_fail_ex+0x46b/0x600 [ 373.637559][ T8536] _copy_to_user+0x31/0xb0 [ 373.637580][ T8536] simple_read_from_buffer+0xe1/0x170 [ 373.637662][ T8536] proc_fail_nth_read+0x1be/0x230 [ 373.637735][ T8536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.637755][ T8536] ? rw_verify_area+0x2ac/0x4e0 [ 373.637784][ T8536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.637802][ T8536] vfs_read+0x212/0xa80 [ 373.637830][ T8536] ? __pfx_vfs_read+0x10/0x10 [ 373.637854][ T8536] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 373.637878][ T8536] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.637900][ T8536] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 373.637921][ T8536] ? mutex_lock_nested+0x152/0x1d0 [ 373.637936][ T8536] ? fdget_pos+0x252/0x320 [ 373.637962][ T8536] ksys_read+0x156/0x270 [ 373.637986][ T8536] ? __pfx_ksys_read+0x10/0x10 [ 373.638017][ T8536] do_syscall_64+0x14d/0xf80 [ 373.638039][ T8536] ? trace_irq_disable+0x3b/0x150 [ 373.638058][ T8536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.638074][ T8536] ? clear_bhb_loop+0x40/0x90 [ 373.638094][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.638110][ T8536] RIP: 0033:0x7f0dbf2dcfce [ 373.638125][ T8536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 373.638140][ T8536] RSP: 002b:00007f0dbd554fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.638156][ T8536] RAX: ffffffffffffffda RBX: 00007f0dbd5556c0 RCX: 00007f0dbf2dcfce [ 373.638168][ T8536] RDX: 000000000000000f RSI: 00007f0dbd5550a0 RDI: 0000000000000003 [ 373.638178][ T8536] RBP: 00007f0dbd555090 R08: 0000000000000000 R09: 0000000000000000 [ 373.638188][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.638197][ T8536] R13: 00007f0dbf596128 R14: 00007f0dbf596090 R15: 00007ffcea4ecbb8 [ 373.638224][ T8536] [ 374.053888][ T8542] overlayfs: failed to clone upperpath [ 374.727648][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 374.833173][ T8559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.914'. [ 375.019790][ T8564] Bluetooth: MGMT ver 1.23 [ 375.019898][ T8564] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 375.318357][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 375.318437][ T8569] bond0: Unable to set down delay as MII monitoring is disabled [ 376.324611][ T8579] FAULT_INJECTION: forcing a failure. [ 376.324611][ T8579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.324640][ T8579] CPU: 1 UID: 0 PID: 8579 Comm: syz.3.921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.324658][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.324681][ T8579] Call Trace: [ 376.324687][ T8579] [ 376.324695][ T8579] dump_stack_lvl+0xe8/0x150 [ 376.324724][ T8579] should_fail_ex+0x46b/0x600 [ 376.324755][ T8579] _copy_from_user+0x2d/0xb0 [ 376.324776][ T8579] __sys_bpf+0x229/0x950 [ 376.324798][ T8579] ? __pfx___sys_bpf+0x10/0x10 [ 376.324816][ T8579] ? rt_mutex_slowunlock+0x1cb/0x300 [ 376.324845][ T8579] ? ksys_write+0x248/0x270 [ 376.324871][ T8579] ? __pfx_ksys_write+0x10/0x10 [ 376.324898][ T8579] __x64_sys_bpf+0x7c/0x90 [ 376.324916][ T8579] do_syscall_64+0x14d/0xf80 [ 376.324937][ T8579] ? trace_irq_disable+0x3b/0x150 [ 376.324955][ T8579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.324971][ T8579] ? clear_bhb_loop+0x40/0x90 [ 376.324991][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.325007][ T8579] RIP: 0033:0x7f0dbf31c799 [ 376.325021][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.325036][ T8579] RSP: 002b:00007f0dbd576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.325052][ T8579] RAX: ffffffffffffffda RBX: 00007f0dbf595fa0 RCX: 00007f0dbf31c799 [ 376.325064][ T8579] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 376.325073][ T8579] RBP: 00007f0dbd576090 R08: 0000000000000000 R09: 0000000000000000 [ 376.325083][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.325093][ T8579] R13: 00007f0dbf596038 R14: 00007f0dbf595fa0 R15: 00007ffcea4ecbb8 [ 376.325118][ T8579] [ 377.113740][ T854] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 377.296849][ T854] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 377.296879][ T854] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 377.296904][ T854] usb 4-1: config 8 has no interface number 0 [ 377.296937][ T854] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 377.299815][ T854] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 377.299847][ T854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.299867][ T854] usb 4-1: Product: syz [ 377.299881][ T854] usb 4-1: Manufacturer: syz [ 377.299902][ T854] usb 4-1: SerialNumber: syz [ 378.833191][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.834286][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.709956][ T854] usb 4-1: USB disconnect, device number 30 [ 382.139231][ T8606] netlink: 52 bytes leftover after parsing attributes in process `syz.3.928'. [ 382.265120][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 382.319547][ T8614] bond0: Unable to set down delay as MII monitoring is disabled [ 382.351130][ T8615] netlink: 60 bytes leftover after parsing attributes in process `syz.2.929'. [ 383.053898][ T8631] FAULT_INJECTION: forcing a failure. [ 383.053898][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 383.053935][ T8631] CPU: 1 UID: 0 PID: 8631 Comm: syz.1.934 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 383.053959][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.053972][ T8631] Call Trace: [ 383.053980][ T8631] [ 383.053990][ T8631] dump_stack_lvl+0xe8/0x150 [ 383.054029][ T8631] should_fail_ex+0x46b/0x600 [ 383.054070][ T8631] should_failslab+0xa8/0x100 [ 383.054107][ T8631] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 383.054138][ T8631] ? __alloc_skb+0x1d0/0x7d0 [ 383.054251][ T8631] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.054288][ T8631] __alloc_skb+0x1d0/0x7d0 [ 383.054319][ T8631] alloc_skb_with_frags+0xca/0x890 [ 383.054379][ T8631] ? __lock_acquire+0x6b5/0x2cf0 [ 383.054406][ T8631] sock_alloc_send_pskb+0x884/0x9a0 [ 383.054459][ T8631] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 383.054497][ T8631] ? packet_cached_dev_get+0x1c/0x2b0 [ 383.054604][ T8631] ? packet_cached_dev_get+0x1c/0x2b0 [ 383.054650][ T8631] packet_sendmsg+0x33e5/0x50f0 [ 383.054680][ T8631] ? try_to_take_rt_mutex+0x840/0xb00 [ 383.054716][ T8631] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 383.054745][ T8631] ? __lock_acquire+0x6b5/0x2cf0 [ 383.054771][ T8631] ? __lock_acquire+0x6b5/0x2cf0 [ 383.054793][ T8631] ? smack_socket_sendmsg+0x1a9/0x590 [ 383.054862][ T8631] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 383.054893][ T8631] ? __lock_acquire+0x6b5/0x2cf0 [ 383.054916][ T8631] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.054945][ T8631] ? __pfx_packet_sendmsg+0x10/0x10 [ 383.054980][ T8631] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 383.055020][ T8631] ? __lock_acquire+0x6b5/0x2cf0 [ 383.055044][ T8631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.055139][ T8631] ? __pfx_packet_sendmsg+0x10/0x10 [ 383.055168][ T8631] sock_sendmsg+0x4a4/0x500 [ 383.055198][ T8631] ? __pfx_sock_sendmsg+0x10/0x10 [ 383.055234][ T8631] ? __asan_memset+0x22/0x50 [ 383.055262][ T8631] ? iov_iter_bvec+0xb8/0x180 [ 383.055325][ T8631] splice_to_socket+0xae5/0x11f0 [ 383.055407][ T8631] ? __pfx_splice_to_socket+0x10/0x10 [ 383.055459][ T8631] ? get_pid_task+0x20/0x1f0 [ 383.055513][ T8631] ? rw_verify_area+0x25b/0x4e0 [ 383.055545][ T8631] ? __pfx_splice_to_socket+0x10/0x10 [ 383.055570][ T8631] do_splice+0xef8/0x1940 [ 383.055632][ T8631] ? __pfx_do_splice+0x10/0x10 [ 383.055667][ T8631] __se_sys_splice+0x353/0x490 [ 383.055702][ T8631] ? __pfx___se_sys_splice+0x10/0x10 [ 383.055736][ T8631] ? __x64_sys_splice+0x21/0xf0 [ 383.055767][ T8631] do_syscall_64+0x14d/0xf80 [ 383.055796][ T8631] ? trace_irq_disable+0x3b/0x150 [ 383.055820][ T8631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.055842][ T8631] ? clear_bhb_loop+0x40/0x90 [ 383.055869][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.055891][ T8631] RIP: 0033:0x7fae9559c799 [ 383.055912][ T8631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.055931][ T8631] RSP: 002b:00007fae937ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 383.055954][ T8631] RAX: ffffffffffffffda RBX: 00007fae95815fa0 RCX: 00007fae9559c799 [ 383.055970][ T8631] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 383.055982][ T8631] RBP: 00007fae937ee090 R08: 0000000000010500 R09: 0000000000000000 [ 383.055995][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.056008][ T8631] R13: 00007fae95816038 R14: 00007fae95815fa0 R15: 00007fffc91e8338 [ 383.056044][ T8631] [ 386.103164][ T854] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 386.258003][ T854] usb 2-1: unable to get BOS descriptor or descriptor too short [ 386.261738][ T854] usb 2-1: not running at top speed; connect to a high speed hub [ 386.262928][ T854] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 386.262955][ T854] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.266913][ T854] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 386.267015][ T854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=106 [ 386.267071][ T854] usb 2-1: Product: syz [ 386.267114][ T854] usb 2-1: Manufacturer: syz [ 386.267157][ T854] usb 2-1: SerialNumber: syz [ 386.412316][ T8649] netlink: 'syz.3.942': attribute type 6 has an invalid length. [ 386.412333][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 387.761438][ T8663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.946'. [ 388.933149][ T854] usb 2-1: invalid UAC_HEADER (v1) [ 389.102822][ T8665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.948'. [ 389.279148][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 389.305672][ T854] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 389.327827][ T854] usb 2-1: USB disconnect, device number 31 [ 389.411828][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.915741][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 389.915780][ T8686] bond0: Unable to set down delay as MII monitoring is disabled [ 393.345460][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 393.345498][ T8715] bond0: Unable to set down delay as MII monitoring is disabled [ 393.737233][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.967'. [ 395.742707][ T8734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.973'. [ 397.600637][ T8734] netlink: 'syz.4.973': attribute type 9 has an invalid length. [ 397.600663][ T8734] netlink: 'syz.4.973': attribute type 11 has an invalid length. [ 397.600678][ T8734] netlink: 'syz.4.973': attribute type 12 has an invalid length. [ 397.600697][ T8734] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.973'. [ 397.601039][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.973'. [ 397.733226][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 399.562672][ T10] usb 4-1: device descriptor read/all, error -71 [ 400.551482][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.551888][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.683260][ T36] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 400.838121][ T36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 400.838749][ T36] usb 2-1: not running at top speed; connect to a high speed hub [ 400.840014][ T36] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 400.840038][ T36] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.842625][ T36] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 400.842655][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=106 [ 400.842677][ T36] usb 2-1: Product: syz [ 400.842693][ T36] usb 2-1: Manufacturer: syz [ 400.842708][ T36] usb 2-1: SerialNumber: syz [ 401.127383][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.135400][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.173307][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 401.315214][ T10] usb 4-1: device descriptor read/64, error -71 [ 401.426886][ T10] usb usb4-port1: attempt power cycle [ 401.667521][ T73] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.672969][ T3587] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.674302][ T3587] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.674399][ T3587] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.767636][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 401.786749][ T10] usb 4-1: device descriptor read/8, error -71 [ 402.023573][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 402.044612][ T10] usb 4-1: device descriptor read/8, error -71 [ 402.153538][ T10] usb usb4-port1: unable to enumerate USB device [ 403.635848][ T36] usb 2-1: invalid UAC_HEADER (v1) [ 403.886039][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 403.968730][ T36] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 403.975010][ T36] usb 2-1: USB disconnect, device number 32 [ 404.033738][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 404.036825][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.038298][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 404.038327][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 404.038347][ T10] usb 5-1: SerialNumber: syz [ 404.070683][ T10] usb 5-1: config 0 descriptor?? [ 404.138116][ T8746] udevd[8746]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.171388][ T10] uvcvideo 5-1:0.0: Found UVC 0.00 device (05ac:8501) [ 404.172085][ T10] uvcvideo 5-1:0.0: Failed to create links for entity 33023 [ 404.172101][ T10] uvcvideo 5-1:0.0: Failed to register entities (-22). [ 404.307516][ T8761] mac80211_hwsim hwsim11 : renamed from wlan1 [ 405.991231][ T1230] usb 5-1: USB disconnect, device number 26 [ 407.895052][ T8785] netlink: 60 bytes leftover after parsing attributes in process `syz.4.989'. [ 410.413151][ T1238] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 410.505471][ T37] kauditd_printk_skb: 77 callbacks suppressed [ 410.505492][ T37] audit: type=1326 audit(1772340645.613:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541631][ T37] audit: type=1326 audit(1772340645.613:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541690][ T37] audit: type=1326 audit(1772340645.613:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541733][ T37] audit: type=1326 audit(1772340645.613:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541775][ T37] audit: type=1326 audit(1772340645.613:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541812][ T37] audit: type=1326 audit(1772340645.613:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541847][ T37] audit: type=1326 audit(1772340645.613:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541880][ T37] audit: type=1326 audit(1772340645.613:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541915][ T37] audit: type=1326 audit(1772340645.613:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.541949][ T37] audit: type=1326 audit(1772340645.613:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.2.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6fac9c799 code=0x50000 [ 410.543315][ T1238] usb 4-1: device descriptor read/64, error -71 [ 410.853172][ T1238] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 410.983188][ T1238] usb 4-1: device descriptor read/64, error -71 [ 411.094763][ T1238] usb usb4-port1: attempt power cycle [ 411.466076][ T1238] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 411.490964][ T1238] usb 4-1: device descriptor read/8, error -71 [ 411.537158][ T8832] FAULT_INJECTION: forcing a failure. [ 411.537158][ T8832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.537195][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.4.1005 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.537220][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.537233][ T8832] Call Trace: [ 411.537242][ T8832] [ 411.537251][ T8832] dump_stack_lvl+0xe8/0x150 [ 411.537293][ T8832] should_fail_ex+0x46b/0x600 [ 411.537335][ T8832] _copy_from_user+0x2d/0xb0 [ 411.537363][ T8832] ___sys_recvmsg+0x175/0x590 [ 411.537402][ T8832] ? __pfx____sys_recvmsg+0x10/0x10 [ 411.537460][ T8832] ? __fget_files+0x3a6/0x420 [ 411.537499][ T8832] do_recvmmsg+0x33a/0x800 [ 411.537540][ T8832] ? __pfx_do_recvmmsg+0x10/0x10 [ 411.537587][ T8832] ? rt_mutex_slowunlock+0x1cb/0x300 [ 411.537628][ T8832] __x64_sys_recvmmsg+0x198/0x250 [ 411.537664][ T8832] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 411.537710][ T8832] do_syscall_64+0x14d/0xf80 [ 411.537740][ T8832] ? trace_irq_disable+0x3b/0x150 [ 411.537774][ T8832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.537797][ T8832] ? clear_bhb_loop+0x40/0x90 [ 411.537824][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.537847][ T8832] RIP: 0033:0x7fd5b161c799 [ 411.537868][ T8832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.537886][ T8832] RSP: 002b:00007fd5af876028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 411.537909][ T8832] RAX: ffffffffffffffda RBX: 00007fd5b1895fa0 RCX: 00007fd5b161c799 [ 411.537925][ T8832] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 411.537940][ T8832] RBP: 00007fd5af876090 R08: 0000000000000000 R09: 0000000000000000 [ 411.537954][ T8832] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 411.537966][ T8832] R13: 00007fd5b1896038 R14: 00007fd5b1895fa0 R15: 00007ffe7bf5f968 [ 411.538001][ T8832] [ 411.735140][ T1238] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 411.756827][ T1238] usb 4-1: device descriptor read/8, error -71 [ 411.866411][ T1238] usb usb4-port1: unable to enumerate USB device [ 413.579402][ T8853] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 413.622145][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1011'. [ 413.622252][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1011'. [ 413.714433][ T8855] 9p: Bad value for 'wfdno' [ 414.018578][ T8864] syz_tun: entered allmulticast mode [ 414.272624][ T8869] FAULT_INJECTION: forcing a failure. [ 414.272624][ T8869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.272653][ T8869] CPU: 0 UID: 0 PID: 8869 Comm: syz.4.1016 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 414.272672][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.272682][ T8869] Call Trace: [ 414.272687][ T8869] [ 414.272694][ T8869] dump_stack_lvl+0xe8/0x150 [ 414.272724][ T8869] should_fail_ex+0x46b/0x600 [ 414.272754][ T8869] _copy_from_user+0x2d/0xb0 [ 414.272775][ T8869] do_sock_getsockopt+0x165/0x3f0 [ 414.272800][ T8869] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 414.272822][ T8869] ? __fget_files+0x3a6/0x420 [ 414.272840][ T8869] ? __fget_files+0x2a/0x420 [ 414.272864][ T8869] __x64_sys_getsockopt+0x1aa/0x250 [ 414.272892][ T8869] do_syscall_64+0x14d/0xf80 [ 414.272913][ T8869] ? trace_irq_disable+0x3b/0x150 [ 414.272932][ T8869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.272948][ T8869] ? clear_bhb_loop+0x40/0x90 [ 414.272968][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.272984][ T8869] RIP: 0033:0x7fd5b161c799 [ 414.273027][ T8869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.273046][ T8869] RSP: 002b:00007fd5af876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 414.273078][ T8869] RAX: ffffffffffffffda RBX: 00007fd5b1895fa0 RCX: 00007fd5b161c799 [ 414.273093][ T8869] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000003 [ 414.273106][ T8869] RBP: 00007fd5af876090 R08: 0000200000000040 R09: 0000000000000000 [ 414.273119][ T8869] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 414.273132][ T8869] R13: 00007fd5b1896038 R14: 00007fd5b1895fa0 R15: 00007ffe7bf5f968 [ 414.273168][ T8869] [ 414.705925][ T8866] 9p: Bad value for 'rfdno' [ 415.335501][ T8879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1020'. [ 416.652730][ T8889] netlink: 'syz.4.1023': attribute type 58 has an invalid length. [ 418.543148][ T854] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 418.903757][ T8909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1031'. [ 418.965495][ T8911] netlink: 'syz.3.1024': attribute type 2 has an invalid length. [ 418.965520][ T8911] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 418.965919][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 419.216064][ T854] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.216639][ T854] usb 5-1: not running at top speed; connect to a high speed hub [ 419.217817][ T854] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 419.217842][ T854] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.220260][ T854] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 419.220289][ T854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=106 [ 419.220309][ T854] usb 5-1: Product: syz [ 419.220324][ T854] usb 5-1: Manufacturer: syz [ 419.220338][ T854] usb 5-1: SerialNumber: syz [ 420.316072][ T8926] netlink: 'syz.0.1035': attribute type 58 has an invalid length. [ 420.572479][ T854] usb 5-1: invalid UAC_HEADER (v1) [ 420.867066][ T854] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 421.082528][ T854] usb 5-1: USB disconnect, device number 27 [ 421.490922][ T1238] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 422.191301][ T8805] udevd[8805]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.293156][ T1238] usb 4-1: Using ep0 maxpacket: 16 [ 422.299506][ T1238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.299542][ T1238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.299567][ T1238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 422.299612][ T1238] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 422.299637][ T1238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.370172][ T1238] usb 4-1: config 0 descriptor?? [ 422.383171][ T854] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 422.541395][ T854] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.542026][ T854] usb 5-1: not running at top speed; connect to a high speed hub [ 422.548725][ T854] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 422.548757][ T854] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.566180][ T854] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 422.566259][ T854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=106 [ 422.566311][ T854] usb 5-1: Product: syz [ 422.566326][ T854] usb 5-1: Manufacturer: syz [ 422.566342][ T854] usb 5-1: SerialNumber: syz [ 422.638454][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.639515][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.864010][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.864508][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.462217][ T854] usb 5-1: invalid UAC_HEADER (v1) [ 424.698189][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1044'. [ 424.901017][ T854] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 424.940358][ T854] usb 5-1: USB disconnect, device number 28 [ 425.348062][ T8805] udevd[8805]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.569466][ T1238] usbhid 4-1:0.0: can't add hid device: -71 [ 426.570786][ T1238] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 427.090087][ T1238] usb 4-1: USB disconnect, device number 39 [ 427.253232][ T854] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 427.429229][ T854] usb 2-1: unable to get BOS descriptor or descriptor too short [ 427.429873][ T854] usb 2-1: not running at top speed; connect to a high speed hub [ 427.431240][ T854] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 427.431266][ T854] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.441633][ T854] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 427.441687][ T854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=106 [ 427.441708][ T854] usb 2-1: Product: syz [ 427.441723][ T854] usb 2-1: Manufacturer: syz [ 427.441904][ T854] usb 2-1: SerialNumber: syz [ 427.915826][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 428.820929][ T854] usb 2-1: invalid UAC_HEADER (v1) [ 429.098875][ T854] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 429.134587][ T854] usb 2-1: USB disconnect, device number 33 [ 429.176013][ T8805] udevd[8805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.004483][ T9015] 9p: Bad value for 'wfdno' [ 431.718760][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'. [ 438.998510][ T9045] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 438.998748][ T9045] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 439.006688][ T9045] overlayfs: failed to set uuid (179/file0, err=-13); falling back to uuid=null. [ 439.409913][ T9053] binder: 9049:9053 ioctl 4018620d 0 returned -22 [ 439.423571][ T9051] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1077'. [ 440.179161][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.179246][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.308706][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1081'. [ 440.723138][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 442.471961][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 442.471994][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.509313][ T10] usb 4-1: config 0 descriptor?? [ 442.527450][ T10] cp210x 4-1:0.0: cp210x converter detected [ 444.171514][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 444.381114][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 444.381146][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 444.441401][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 444.466031][ T10] usb 4-1: USB disconnect, device number 40 [ 444.495164][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 444.496152][ T10] cp210x 4-1:0.0: device disconnected [ 445.054298][ T31] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 445.205614][ T31] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 445.205645][ T31] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 445.205666][ T31] usb 2-1: config 8 has no interface number 0 [ 445.205715][ T31] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 445.246191][ T31] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 445.246227][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.246249][ T31] usb 2-1: Product: syz [ 445.246264][ T31] usb 2-1: Manufacturer: syz [ 445.246279][ T31] usb 2-1: SerialNumber: syz [ 447.146679][ T1238] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 447.363490][ T1238] usb 5-1: Using ep0 maxpacket: 16 [ 447.444328][ T1238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.445095][ T1238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.445164][ T1238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.446427][ T1238] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 447.446459][ T1238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.611628][ T1238] usb 5-1: config 0 descriptor?? [ 448.090787][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.091335][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.327641][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.328174][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.432543][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 450.552742][ T31] usb 2-1: USB disconnect, device number 34 [ 450.625750][ T1238] usbhid 5-1:0.0: can't add hid device: -71 [ 450.625872][ T1238] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 450.701034][ T1238] usb 5-1: USB disconnect, device number 29 [ 450.729272][ T9129] overlayfs: failed to clone upperpath [ 451.016858][ T9134] No source specified [ 451.738202][ T1238] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 451.905375][ T1238] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 451.905397][ T1238] usb 5-1: config 0 has no interface number 0 [ 451.905427][ T1238] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 451.905445][ T1238] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 451.905465][ T1238] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 451.907443][ T1238] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 451.907466][ T1238] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 451.907481][ T1238] usb 5-1: Product: syz [ 451.907491][ T1238] usb 5-1: SerialNumber: syz [ 451.911529][ T1238] usb 5-1: config 0 descriptor?? [ 452.019050][ T1238] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 452.031914][ T1238] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input11 [ 452.122413][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 454.720649][ T1238] ------------[ cut here ]------------ [ 454.720676][ T1238] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 454.720716][ T1238] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:3/1238 [ 454.720888][ T1238] Modules linked in: [ 454.720910][ T1238] CPU: 0 UID: 0 PID: 1238 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.720933][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.720948][ T1238] Workqueue: events drm_fb_helper_damage_work [ 454.721071][ T1238] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 454.721105][ T1238] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 aa b9 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 454.721124][ T1238] RSP: 0018:ffffc90005b6f8e0 EFLAGS: 00010246 [ 454.721142][ T1238] RAX: 1ffff11004a73800 RBX: ffffffff8f751030 RCX: 0000000000000000 [ 454.721158][ T1238] RDX: ffffffff8bbf30c0 RSI: ffffffff8bc0efc0 RDI: ffffffff8f751030 [ 454.721173][ T1238] RBP: ffffc90005b6f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 454.721187][ T1238] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: ffffffff8bc0efc0 [ 454.721202][ T1238] R13: ffff88802539c000 R14: 0000000000000000 R15: ffffffff8bbf30c0 [ 454.721216][ T1238] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 454.721232][ T1238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.721245][ T1238] CR2: 00007f593d1e7b1b CR3: 00000000390de000 CR4: 00000000003526f0 [ 454.721264][ T1238] Call Trace: [ 454.721274][ T1238] [ 454.721290][ T1238] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 454.721321][ T1238] ? rt_spin_unlock+0x14f/0x200 [ 454.721347][ T1238] ? __pfx_autoremove_wake_function+0x10/0x10 [ 454.721393][ T1238] ? rt_spin_unlock+0x160/0x200 [ 454.721417][ T1238] ? drm_vblank_get+0x147/0x260 [ 454.721449][ T1238] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 454.721480][ T1238] drm_fb_helper_damage_work+0x131/0x6f0 [ 454.721522][ T1238] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 454.721558][ T1238] ? process_scheduled_works+0xa25/0x1830 [ 454.721585][ T1238] ? process_scheduled_works+0xa25/0x1830 [ 454.721614][ T1238] process_scheduled_works+0xb02/0x1830 [ 454.721678][ T1238] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.721713][ T1238] ? assign_work+0x3d5/0x5e0 [ 454.721745][ T1238] worker_thread+0xa50/0xfc0 [ 454.721803][ T1238] kthread+0x388/0x470 [ 454.721825][ T1238] ? __pfx_worker_thread+0x10/0x10 [ 454.721851][ T1238] ? __pfx_kthread+0x10/0x10 [ 454.721873][ T1238] ret_from_fork+0x51e/0xb90 [ 454.721917][ T1238] ? __pfx_ret_from_fork+0x10/0x10 [ 454.721943][ T1238] ? __switch_to+0xc7d/0x1450 [ 454.721984][ T1238] ? __pfx_kthread+0x10/0x10 [ 454.722006][ T1238] ret_from_fork_asm+0x1a/0x30 [ 454.722044][ T1238] [ 454.722063][ T1238] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 454.722079][ T1238] CPU: 0 UID: 0 PID: 1238 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.722102][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.722115][ T1238] Workqueue: events drm_fb_helper_damage_work [ 454.722146][ T1238] Call Trace: [ 454.722154][ T1238] [ 454.722162][ T1238] vpanic+0x56c/0xa60 [ 454.722204][ T1238] ? __pfx__printk+0x10/0x10 [ 454.722227][ T1238] ? __pfx_vpanic+0x10/0x10 [ 454.722254][ T1238] ? is_bpf_text_address+0x292/0x2b0 [ 454.722283][ T1238] ? is_bpf_text_address+0x26/0x2b0 [ 454.722318][ T1238] panic+0xc5/0xd0 [ 454.722348][ T1238] ? __pfx_panic+0x10/0x10 [ 454.722386][ T1238] ? ret_from_fork_asm+0x1a/0x30 [ 454.722411][ T1238] __warn+0x315/0x4f0 [ 454.722438][ T1238] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 454.722471][ T1238] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 454.722503][ T1238] __report_bug+0x29a/0x540 [ 454.722582][ T1238] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 454.722613][ T1238] ? __pfx___report_bug+0x10/0x10 [ 454.722668][ T1238] report_bug_entry+0x19a/0x290 [ 454.722695][ T1238] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 454.722724][ T1238] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 454.722754][ T1238] handle_bug+0xca/0x200 [ 454.722785][ T1238] exc_invalid_op+0x1a/0x50 [ 454.722815][ T1238] asm_exc_invalid_op+0x1a/0x20 [ 454.722836][ T1238] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 454.722867][ T1238] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 aa b9 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 454.722885][ T1238] RSP: 0018:ffffc90005b6f8e0 EFLAGS: 00010246 [ 454.722902][ T1238] RAX: 1ffff11004a73800 RBX: ffffffff8f751030 RCX: 0000000000000000 [ 454.722918][ T1238] RDX: ffffffff8bbf30c0 RSI: ffffffff8bc0efc0 RDI: ffffffff8f751030 [ 454.722933][ T1238] RBP: ffffc90005b6f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 454.722946][ T1238] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: ffffffff8bc0efc0 [ 454.722961][ T1238] R13: ffff88802539c000 R14: 0000000000000000 R15: ffffffff8bbf30c0 [ 454.723000][ T1238] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 454.723032][ T1238] ? rt_spin_unlock+0x14f/0x200 [ 454.723053][ T1238] ? __pfx_autoremove_wake_function+0x10/0x10 [ 454.723086][ T1238] ? rt_spin_unlock+0x160/0x200 [ 454.723110][ T1238] ? drm_vblank_get+0x147/0x260 [ 454.723142][ T1238] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 454.723173][ T1238] drm_fb_helper_damage_work+0x131/0x6f0 [ 454.723214][ T1238] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 454.723250][ T1238] ? process_scheduled_works+0xa25/0x1830 [ 454.723277][ T1238] ? process_scheduled_works+0xa25/0x1830 [ 454.723306][ T1238] process_scheduled_works+0xb02/0x1830 [ 454.723361][ T1238] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.723396][ T1238] ? assign_work+0x3d5/0x5e0 [ 454.723428][ T1238] worker_thread+0xa50/0xfc0 [ 454.723484][ T1238] kthread+0x388/0x470 [ 454.723505][ T1238] ? __pfx_worker_thread+0x10/0x10 [ 454.723531][ T1238] ? __pfx_kthread+0x10/0x10 [ 454.723553][ T1238] ret_from_fork+0x51e/0xb90 [ 454.723584][ T1238] ? __pfx_ret_from_fork+0x10/0x10 [ 454.723610][ T1238] ? __switch_to+0xc7d/0x1450 [ 454.723638][ T1238] ? __pfx_kthread+0x10/0x10 [ 454.723669][ T1238] ret_from_fork_asm+0x1a/0x30 [ 454.723705][ T1238] [ 454.724318][ T1238] Kernel Offset: disabled