last executing test programs: 17.718049565s ago: executing program 0 (id=1373): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0598000000200000140012800800"], 0x34}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000440)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="9f4b01"], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b14, 0x0) 15.164060866s ago: executing program 0 (id=1383): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) shutdown(r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000740)=[{{}, 0x821e10d87a0be452, 0xc5, 0xffff4e0a}, {{}, 0x15, 0x7, 0x6}, {{r2, r3/1000+10000}, 0x3, 0xd2a, 0x9}, {{r4, r5/1000+10000}, 0x1f, 0x0, 0x8}, {{}, 0x0, 0x271c, 0xfff}, {{0x0, 0xea60}, 0x0, 0x0, 0x2}], 0x60) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x67}, 0x18) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)="defd861b5fcb457dc50e86d7d3aaf9d31eb34ab3e31e82d9da4f988ee7239144c4022f68cb92f34faba80917945114f7f3ac0ab863a4839097eb1f6ef4072b89587b338d5ba025e6b867f987e95b799adf395218a232f450460cc1c5d715120da32ae072c022776e4a7941e192385bcf1c3493331b8e77686c75f5ca3301446865e77a81317626c55d938172ab52b9dc07345ec0837e644011bd08af774a0a99febaa3c709c0de1b517c5c8b2f7de604c0a0ef9a858e3412bedf8589610ee6971f26e0a01e7067afe7f7d859322752", 0xcf) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) syz_open_pts(r8, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r7, 0x540b, 0x1) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000a440)=ANY=[@ANYBLOB="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"], 0x548c}}, 0x0) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000240)={0x15, 0xfffffffffffffec9, 0x0}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x3) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) syz_open_pts(r13, 0x200000) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x128, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe220}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffff80}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000000) syz_usb_control_io$hid(r11, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) pread64(r0, &(0x7f00000001c0)=""/188, 0xbc, 0x0) 11.057711825s ago: executing program 0 (id=1397): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xe89, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085504, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r5, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) 10.620105774s ago: executing program 2 (id=1398): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x9000, 0x0, 0x0}, {0x1, 0xfff5, 0x1, &(0x7f0000000880)="d4"}], 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10.211338936s ago: executing program 2 (id=1400): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xffffffffffffffff) request_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)='*]\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000010180c200000008004500001c000000"], 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000000000010000004000000000180500002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008060000850000009b000000850000000e0000007c00000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000840)={0x0, 0xffffffffffffffff, 0x23, 0x6, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000700)="0b74abe3fe0bc72235149cdb4a5f9b9ea624b7679bf36fcde7d8123f3735d64c77d78b", &(0x7f0000000740)=""/184, 0x7, 0x10028, 0x3, &(0x7f0000000800)}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x4fb, 0x7, {{0x28, 0x4, 0x2, 0x4, 0xa0, 0x6b, 0x0, 0xc0, 0x4, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x2c, 0x7, 0x1, 0x0, [{@empty, 0x63e}, {@remote, 0x9}, {@empty, 0x3ff}, {@broadcast, 0xffffffff}, {@rand_addr=0x64010101, 0x7f}]}, @ssrr={0x89, 0x13, 0xc4, [@rand_addr=0x64010100, @local, @broadcast, @private=0xa010100]}, @noop, @timestamp_prespec={0x44, 0x34, 0xe7, 0x3, 0x4, [{@private=0xa010101, 0x5}, {@private=0xa010102, 0x44}, {@empty, 0x6}, {@rand_addr=0x64010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x100}, {@loopback, 0x2}]}, @timestamp={0x44, 0xc, 0xf9, 0x0, 0x5, [0x3, 0x40002]}, @timestamp_addr={0x44, 0xc, 0x59, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0xc048aec8, &(0x7f0000000080)={0x500, 0x12c, @ioapic={0xe6ef0000, 0x3, 0x2, 0x0, 0x0, [{0x5, 0x3, 0x9, '\x00', 0x9}, {0x3, 0x5, 0xd1, '\x00', 0x3}, {0x0, 0x5, 0x0, '\x00', 0x69}, {0x0, 0x4, 0x19, '\x00', 0x2}, {0x81, 0x6, 0x2, '\x00', 0x5}, {0x1, 0x27, 0x3, '\x00', 0x7}, {0xc, 0x9, 0x5, '\x00', 0x4}, {0x5, 0x1, 0x6, '\x00', 0x4}, {0xa, 0x9, 0x8, '\x00', 0x6}, {0x0, 0x4, 0xd, '\x00', 0x5}, {0xff, 0xb6, 0x3, '\x00', 0x80}, {0x7, 0x8, 0x81, '\x00', 0x3}, {0x8, 0xff, 0x4, '\x00', 0x2}, {0x9, 0xfe, 0x60, '\x00', 0xbe}, {0x5, 0x3, 0x3, '\x00', 0x10}, {0x9, 0x9, 0x4, '\x00', 0x2}, {0x8, 0x0, 0xec, '\x00', 0x4}, {0x8, 0x8}, {0x8, 0x8, 0x5, '\x00', 0x1}, {0x3, 0xfd, 0x6, '\x00', 0x4}, {0x7, 0x3, 0xb, '\x00', 0x9}, {0x2, 0x0, 0xf1, '\x00', 0xcf}, {0x2, 0x19, 0x5, '\x00', 0x7}, {0x2, 0x0, 0x9, '\x00', 0x7}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRESHEX, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', r7, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x280) 9.183738789s ago: executing program 4 (id=1401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c01000010000100feffffff002601a92488290bdf37ce2c010000fe880000000000000000000000000001fc010000000000000000000000000001000107146e230005000035003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25080000000000020000000000000002000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0003"], 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='%', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000240)=0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0xfff0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c6174650000000000000000000000000000000000e1ffffffffffffff00"/229], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8.880592127s ago: executing program 2 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000180)=0xd, 0x4) unshare(0x2a020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) listen(0xffffffffffffffff, 0xa) landlock_restrict_self(0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x0, &(0x7f0000000040)=0x1) 8.147789196s ago: executing program 4 (id=1404): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b15, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x2e, 0x5f, 0x30, 0x0, 0x2e]}}, &(0x7f0000000080)=""/95, 0x30, 0x5f, 0x0, 0x40, 0x10000, @value=r0}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r3, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10060, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 8.106507695s ago: executing program 2 (id=1406): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x2024, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000500), 0x0, 0x400c0d4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0x6000000}, 0xffffffff}, 0x1c) r3 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 7.130445588s ago: executing program 1 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x200004, 0x0, 0x0, 0xfffffffd, 0x8003}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x8000000000000002, 0x8000, 0x8, 0x0, 0x7fffffffffffffff}}]}}}]}, 0x78}}, 0x90) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0xb00) 6.848103087s ago: executing program 0 (id=1409): syz_open_dev$sg(&(0x7f0000000180), 0x40f, 0x143002) r0 = dup(0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f4e230003a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0x8000}) epoll_create1(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x6) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, 0xfffffffffffffffe, 0x63) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x40400}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.338807965s ago: executing program 1 (id=1412): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="a8", 0x0, 0x8, 0x0, 0x1, 0x0}) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd, 0x5, 0x0, 0xb, 0x7}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000500)=""/94, 0x5e}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$isdn(0x22, 0x3, 0x23) accept4(r6, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x80, 0x800) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x3c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) 5.719607128s ago: executing program 0 (id=1413): unshare(0x6060000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) syz_open_dev$midi(0x0, 0x3, 0x4a243) r3 = socket(0x10, 0x803, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000040)={0x80, 0x1, 0x7, 0xcb25, 0x0, 0x3}) sendmmsg$inet(r2, 0x0, 0x0, 0xf00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 5.684324435s ago: executing program 1 (id=1414): socket$packet(0x11, 0x3, 0x300) (async) unshare(0x40020200) (async) r0 = socket$kcm(0x1e, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1dc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800010200000000000000000a800000ff030006"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = openat$kvm(0x0, &(0x7f0000000440), 0x240c2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r4]) (async) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f00000003c0)) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x46, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESHEX=r6, @ANYRESHEX=r6, @ANYRES32=r5], 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xffffff87, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x35, 0x0, 0x0, 0x0, 0xfffffffffffffdb1, 0xf0, 0x8, 0x0, 0x0}}, 0x10) r7 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) (async) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r7, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r8 = openat$tun(0xffffff9c, &(0x7f0000000400), 0x30000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5a}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x27}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000000}, 0x10001) (async) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) (async) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000100)={@host}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r10, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x80006, 0x347, 0x80000004, 0x24b, 0x10001, 0x9}) 5.610893456s ago: executing program 2 (id=1415): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000007c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600012504e743ff781a700004c5af7b984eac120f309ef02bec22a3a1cb2ced5e07c3fdc6dc0f3f8c409067a5171d7ad66a8badb88dd0bf8fdea92163b6adf4e5676a931be042d6e4da1ce55f6fa3318e747576353a203bc3741c6e929a2889c4029ac9d9e93e4de53b2147392b1def7b6763c2937313590b08ce72dfbb28c86d0c1bb28fef9b0362b9a382467fcf0241ee06742", @ANYRES64=r3, @ANYBLOB="01002abd7000fedbdf253100000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000104376e986da5b5b2190000e8b1af551275", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00f0da553a5c", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r5, @ANYBLOB='\b\x00R\x00', @ANYRES32=r6, @ANYBLOB="080001003f000000"], 0x60}}, 0x4000000) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)}}, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x64, 0x21c) r10 = dup(r0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/93, 0xffffffffffffffa7}], 0x1, 0x2f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r10, 0x0) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 5.114604509s ago: executing program 4 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000180)=0xd, 0x4) unshare(0x2a020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) listen(0xffffffffffffffff, 0xa) landlock_restrict_self(0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x0, &(0x7f0000000040)=0x1) 3.169213612s ago: executing program 3 (id=1419): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002400)=[{{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000600)=""/238, 0xee}, {&(0x7f0000000700)=""/91, 0x5b}], 0x4, &(0x7f0000000780)=""/67, 0x43}, 0x9}, {{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/72, 0x48}, {&(0x7f0000002480)=""/71, 0x47}, {&(0x7f0000000880)=""/60, 0x3c}, {&(0x7f0000001a00)=""/171, 0xab}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/216, 0xd8}, {&(0x7f0000001c00)=""/112, 0xfffffffffffffe23}], 0x7, &(0x7f0000001cc0)=""/237, 0xed}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001dc0)=""/239, 0xef}, {&(0x7f0000001ec0)=""/69, 0x45}, {&(0x7f0000001980)=""/85, 0x4a}, {&(0x7f0000001fc0)=""/223, 0xdf}], 0x4}, 0xc68}, {{&(0x7f0000002100)=@isdn, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/216, 0xd8}, {&(0x7f0000002280)=""/202, 0xca}], 0x1, &(0x7f00000023c0)}, 0x1}], 0x4, 0x2101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xbb7, 0x480009, 0x8, 0x7b5, 0xfffffff9}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000340), 0x40, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r2, 0x0, 0x0, 0x800) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/36, 0x24}, {0x0}], 0x2}, 0x7}], 0x1, 0x10000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600655800004c15028008"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x20, 0x8, 0x1, 0x2, {{0x2d, 0x4, 0x1, 0x29, 0xb4, 0x64, 0x0, 0xc1, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0x1d, 0x0, 0x0, [0x0]}, @rr={0x7, 0x2b, 0x5, [@broadcast, @private=0xa010101, @local, @broadcast, @local, @private=0xa010101, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp_addr={0x44, 0x44, 0x49, 0x1, 0x8, [{@local, 0x4}, {@remote, 0x9}, {@multicast2, 0x101}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff7fff}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xc}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x401}, {@rand_addr=0x64010100, 0x63}]}, @timestamp_prespec={0x44, 0x24, 0x86, 0x3, 0xb, [{@loopback, 0x5}, {@local, 0x401}, {@remote, 0x9}, {@multicast2, 0x420d}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x10, 0xb}, {0x6, 0x6}, {0xffe0, 0xe}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x80c0) 3.123985855s ago: executing program 1 (id=1420): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x20, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) 3.032182682s ago: executing program 4 (id=1421): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(0x3) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x7}) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x10001, 0x5, &(0x7f0000000000)=[0x1, 0x7, 0x1, 0xe988, 0x1ed], &(0x7f0000000040)=[0x9], &(0x7f0000000080)=[0x7, 0x99f1], &(0x7f0000000100)=[0xb, 0x5, 0x1545, 0x6, 0x8, 0x6, 0x5, 0x3e06, 0x7]}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) accept4$alg(r5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0xfffffffd, "eea2ce15f073cfc7b867a8f1eae374992b05d96de4fee8723648ec884824c0fa", "dad132180b5c87e3c4ce5aace7bd878f", {"bfb382e7c4f35588608b6b77d4179781", "5c1ef82da223af7e119100d169d1153d"}}}}}}}, 0x0) r7 = openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) getsockopt$packet_int(r2, 0x107, 0x18, 0x0, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)={0x7}) r9 = eventfd2(0x0, 0x80001) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r9}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r10, 0x3, {0x2, 0x1, 0x3}, 0x1}, 0x18) 2.813529085s ago: executing program 1 (id=1422): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0x16, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002100)=""/4051, &(0x7f00000010c0)=0xfd3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x3, 0xff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10000, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000f40)={0x4, 0x2, '\x00', [@ra={0x5, 0x2, 0xa}, @ra={0x5, 0x2, 0x5000}, @pad1, @pad1, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r6, 0x0, 0x3, 0x1}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.092095238s ago: executing program 3 (id=1423): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) epoll_create1(0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0xe0}}, 0x1c, 0x0}}], 0x1, 0x0) 1.896052565s ago: executing program 4 (id=1424): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x2024, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000500), 0x0, 0x400c0d4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0x6000000}, 0xffffffff}, 0x1c) r3 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 1.70483294s ago: executing program 1 (id=1425): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff1, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x80, 0x2, 0x2}, 0x18, 0x2) getsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f00000001c0)=""/2, &(0x7f0000000340)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.561666786s ago: executing program 0 (id=1426): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x59616d61, 0xe, 0x0, 0x0) unshare(0x66000080) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x5dc, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffb, 0x0, 0x9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000540), 0x0, 0x79ad, 0x32, 0xffffffffffffffff, 0x0}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000005c0)=ANY=[@ANYRES8=r3], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r6 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x9, 0x3, 0x26, 0x1}, 0xe) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f0020000000040035"], 0xe8}}, 0xc000) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xd80}}, 0xc000) accept4$tipc(r10, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r11, 0x9, 0x7}, 0xc) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000140)=[{0x6, 0x1, 0x0, 0x0}, {0xffff, 0xa01, 0x0, 0x0}, {0x9, 0x8001, 0x0, 0x0}], 0x3}) 1.326139768s ago: executing program 2 (id=1427): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="55dad4c8040b", @broadcast}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x0, &(0x7f0000000200)={0x6d, 0x0, 0x20}, 0x20, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000c5285796fdabfd530a3281ceaa00056910367f1eebe60eac1fbe5af86707955c7b4cd289b4456594df44fa7a182702d7303ada7d09a404867ee13a9439b3063e8c9b", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10008104}, 0xc010) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 1.001967893s ago: executing program 3 (id=1428): syz_open_dev$usbmon(0x0, 0x6a2, 0x20000) syz_io_uring_setup(0x10a, 0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0xc1040000, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 555.998747ms ago: executing program 3 (id=1429): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 489.334482ms ago: executing program 3 (id=1430): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xff, 0x4, 0x1d, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x10, 0x80, 0x0, 0x2}}) 292.640475ms ago: executing program 4 (id=1431): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000180)=0xd, 0x4) unshare(0x2a020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) listen(0xffffffffffffffff, 0xa) landlock_restrict_self(0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x0, &(0x7f0000000040)=0x1) 0s ago: executing program 3 (id=1432): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) signalfd4(r2, &(0x7f0000000140)={[0x7, 0x800]}, 0x8, 0x80800) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x40000008, 0x100}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): g+0x505/0x830 [ 394.142394][ T9895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.142451][ T9895] ___sys_sendmsg+0x21f/0x2a0 [ 394.142492][ T9895] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.142527][ T9895] ? kasan_quarantine_put+0xdd/0x220 [ 394.142552][ T9895] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.142631][ T9895] ? __fget_files+0x2a/0x420 [ 394.142661][ T9895] ? __fget_files+0x3a0/0x420 [ 394.142703][ T9895] __sys_sendmsg+0x164/0x220 [ 394.142743][ T9895] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.142791][ T9895] ? rcu_is_watching+0x15/0xb0 [ 394.142827][ T9895] ? __secure_computing+0xe2/0x2a0 [ 394.142874][ T9895] __do_fast_syscall_32+0xb6/0x2b0 [ 394.142902][ T9895] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.142930][ T9895] do_fast_syscall_32+0x34/0x80 [ 394.142956][ T9895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 394.142984][ T9895] RIP: 0023:0xf705d539 [ 394.143006][ T9895] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 394.143026][ T9895] RSP: 002b:00000000f540b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 394.143051][ T9895] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 394.143067][ T9895] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.143081][ T9895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 394.143095][ T9895] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 394.143109][ T9895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 394.143145][ T9895] [ 394.608012][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.624064][ T30] audit: type=1326 audit(1760303692.412:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.003994][ T30] audit: type=1326 audit(1760303692.412:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.025993][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.032507][ T30] audit: type=1326 audit(1760303692.412:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.054483][ T30] audit: type=1326 audit(1760303692.412:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.076378][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.082581][ T30] audit: type=1326 audit(1760303692.412:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.104884][ T30] audit: type=1326 audit(1760303692.412:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.130042][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.276777][ T30] audit: type=1326 audit(1760303692.422:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.636598][ T9] usb 1-1: USB disconnect, device number 53 [ 395.655200][ T30] audit: type=1326 audit(1760303692.422:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.693204][ T30] audit: type=1326 audit(1760303692.422:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 395.763795][ T30] audit: type=1326 audit(1760303693.572:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9891 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 396.308408][ T5934] IPVS: starting estimator thread 0... [ 396.364014][ T8051] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 396.404003][ T9914] IPVS: using max 27 ests per chain, 64800 per kthread [ 396.543909][ T9] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 396.594198][ T8051] usb 3-1: Using ep0 maxpacket: 32 [ 396.601652][ T8051] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 396.614806][ T8051] usb 3-1: config 0 has no interface number 0 [ 396.632127][ T8051] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 396.641552][ T8051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.663845][ T8051] usb 3-1: Product: syz [ 396.675865][ T8051] usb 3-1: Manufacturer: syz [ 396.691561][ T8051] usb 3-1: SerialNumber: syz [ 396.711858][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 396.719897][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.721968][ T8051] usb 3-1: config 0 descriptor?? [ 396.738481][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.767022][ T8051] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 396.774788][ T8051] dvb-usb: bulk message failed: -22 (2/0) [ 396.799668][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 396.828235][ T8051] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.848484][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 396.883161][ T8051] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 396.900411][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 396.909640][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 396.930701][ T8051] usb 3-1: media controller created [ 396.943488][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.968331][ T9907] cxusb: i2c wr: len=89 is too big! [ 396.968331][ T9907] [ 397.005990][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.036249][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 397.082168][ T8051] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.096459][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 397.105549][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 397.157203][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.211465][ T8051] cxusb: set interface failed [ 397.228044][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.247433][ T8051] dvb-usb: bulk message failed: -22 (1/0) [ 397.267949][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 397.416689][ T9] usb 1-1: string descriptor 0 read error: -22 [ 397.425172][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 397.445922][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.467144][ T8051] DVB: Unable to find symbol lgdt330x_attach() [ 397.480595][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 397.483131][ T8051] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 397.668461][ T9] usb 4-1: USB disconnect, device number 45 [ 398.043859][ T8051] rc_core: IR keymap rc-dvico-portable not found [ 398.050238][ T8051] Registered IR keymap rc-empty [ 398.110667][ T8051] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 398.138963][ T8051] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input22 [ 398.195900][ T8051] dvb-usb: schedule remote query interval to 100 msecs. [ 398.203153][ T8051] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 398.312897][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 398.324444][ T8051] usb 3-1: USB disconnect, device number 46 [ 398.361950][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 398.484148][ T5836] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 398.902112][ T8051] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 399.368781][ T5836] usb 4-1: config 0 has no interfaces? [ 399.394246][ T9] usb 1-1: USB disconnect, device number 54 [ 399.588089][ T5836] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 399.640054][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.700622][ T5836] usb 4-1: Product: syz [ 399.711151][ T5836] usb 4-1: Manufacturer: syz [ 399.754709][ T5836] usb 4-1: SerialNumber: syz [ 399.786818][ T5836] usb 4-1: config 0 descriptor?? [ 400.172311][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.208851][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.385320][ T5836] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 400.393962][ T5934] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 400.543898][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 400.550051][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 400.558003][ T5934] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.568087][ T5836] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 400.579674][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.590022][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0 [ 400.599257][ T5836] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 400.610376][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.622943][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.631122][ T5934] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.650157][ T5836] usb 1-1: config 0 descriptor?? [ 400.661787][ T5934] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 400.756833][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.949237][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.981540][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.007750][ T5934] usb 5-1: GET_CAPABILITIES returned 0 [ 401.015652][ T5934] usbtmc 5-1:16.0: can't read capabilities [ 401.170345][ T5836] usbhid 1-1:0.0: can't add hid device: -71 [ 401.176839][ T5836] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 401.194367][ T5836] usb 1-1: USB disconnect, device number 55 [ 401.212132][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.221247][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.230342][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.239461][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.285228][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.294409][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.320757][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.329931][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.341669][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.350816][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.367503][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.376661][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.385795][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.475378][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.484578][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.493741][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 401.616536][ T9] usb 5-1: USB disconnect, device number 32 [ 401.658517][ T9488] usb 4-1: USB disconnect, device number 46 [ 401.813928][ T5836] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 401.979449][ T5836] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 401.988804][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.996938][ T5836] usb 2-1: Product: syz [ 402.001141][ T5836] usb 2-1: Manufacturer: syz [ 402.005835][ T5836] usb 2-1: SerialNumber: syz [ 402.013430][ T5836] usb 2-1: config 0 descriptor?? [ 402.027982][ T5836] hub 2-1:0.0: bad descriptor, ignoring hub [ 402.034414][ T5836] hub 2-1:0.0: probe with driver hub failed with error -5 [ 402.154447][ T9488] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 402.229596][ T5836] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 402.255717][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.287368][ T5836] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 402.296732][ T5836] usb 2-1: media controller created [ 402.325958][ T9488] usb 4-1: config 0 has no interfaces? [ 402.334688][ T9488] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 402.349517][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.349517][ T9488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.349545][ T9488] usb 4-1: Product: syz [ 402.375691][ T9488] usb 4-1: Manufacturer: syz [ 402.380690][ T9488] usb 4-1: SerialNumber: syz [ 402.395996][ T9488] usb 4-1: config 0 descriptor?? [ 402.456010][ T5836] DVB: Unable to find symbol dib7000p_attach() [ 402.472703][ T5836] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 402.508884][ T9985] binder: 9984:9985 ioctl c0306201 0 returned -14 [ 402.563888][ T5836] rc_core: IR keymap rc-dib0700-rc5 not found [ 402.570066][ T5836] Registered IR keymap rc-empty [ 402.575448][ T5836] dvb-usb: could not initialize remote control. [ 402.581730][ T5836] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 402.606342][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 402.629945][ T9962] fuse: Bad value for 'fd' [ 402.727365][ T9970] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1103'. [ 402.748653][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 402.763903][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 402.776252][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 402.789114][ T9] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 402.800750][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.808965][ T9] usb 5-1: Product: syz [ 402.817811][ T9] usb 5-1: Manufacturer: syz [ 402.822575][ T9] usb 5-1: SerialNumber: syz [ 402.836318][ T9] usb 5-1: config 0 descriptor?? [ 403.042994][ T9] usb 4-1: USB disconnect, device number 47 [ 403.119343][ T9980] fuse: Invalid uid '00000000000000000005' [ 403.128996][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.138046][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.168085][ T9488] usb 5-1: USB disconnect, device number 33 [ 404.414316][ T5935] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 404.606200][ T5935] usb 5-1: config 0 has no interfaces? [ 404.629405][T10009] vhci_hcd vhci_hcd.0: port 0 already used [ 404.671214][ T5935] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 404.682897][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.691429][ T5935] usb 5-1: Product: syz [ 404.697032][ T5935] usb 5-1: Manufacturer: syz [ 404.705968][ T5935] usb 5-1: SerialNumber: syz [ 404.720104][ T5935] usb 5-1: config 0 descriptor?? [ 404.990891][T10002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.031632][T10002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.062965][ T5935] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 405.274053][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 405.328295][ T5935] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.342439][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.428329][ T5935] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.509445][ T5935] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.556758][ T5935] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.639566][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.728269][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 405.728290][ T30] audit: type=1326 audit(1760303704.022:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 406.012874][ T5935] usb 1-1: GET_CAPABILITIES returned 0 [ 406.050442][ T5935] usbtmc 1-1:16.0: can't read capabilities [ 406.059063][ T30] audit: type=1326 audit(1760303704.052:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 406.503245][ T30] audit: type=1326 audit(1760303704.052:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 406.614448][ T30] audit: type=1326 audit(1760303704.052:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 406.701272][ T30] audit: type=1326 audit(1760303704.062:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 406.772838][ T30] audit: type=1326 audit(1760303704.062:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 406.890759][ T5935] usb 1-1: USB disconnect, device number 56 [ 406.913657][ T30] audit: type=1326 audit(1760303704.072:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 407.047833][ T30] audit: type=1326 audit(1760303704.082:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10016 comm="syz.2.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 407.336808][ T5935] usb 5-1: USB disconnect, device number 34 [ 407.387843][T10027] netlink: 'syz.2.1119': attribute type 58 has an invalid length. [ 407.396222][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1119'. [ 407.759701][T10035] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 407.989297][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 408.029770][T10035] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1121'. [ 408.313880][ T5836] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 408.407132][T10048] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 408.489041][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 408.501721][ T5836] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 408.513360][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.572596][ T5836] usb 4-1: Product: syz [ 408.594101][ T5836] usb 4-1: Manufacturer: syz [ 408.602780][ T5836] usb 4-1: SerialNumber: syz [ 408.647250][ T5836] usb 4-1: config 0 descriptor?? [ 408.681132][ T5836] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 408.943376][ T5836] usb 4-1: USB disconnect, device number 48 [ 409.043920][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 409.214089][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 409.222717][ T9] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 409.235177][ T9] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 409.267291][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 409.282508][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.292667][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.305341][ T9] usb 1-1: Product: syz [ 409.313963][ T9] usb 1-1: Manufacturer: ࡃ [ 409.323857][ T9] usb 1-1: SerialNumber: syz [ 409.341146][T10053] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 409.349976][T10053] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 409.808973][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 409.849797][ T9] usb 1-1: USB disconnect, device number 57 [ 410.253929][ T5934] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 410.424978][ T5934] usb 4-1: config 0 has no interfaces? [ 410.439483][T10077] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1132'. [ 410.561948][ T5934] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 410.587819][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.608450][ T5934] usb 4-1: Product: syz [ 410.612675][ T5934] usb 4-1: Manufacturer: syz [ 410.634479][ T5934] usb 4-1: SerialNumber: syz [ 410.661125][ T5934] usb 4-1: config 0 descriptor?? [ 410.709809][T10083] loop2: detected capacity change from 0 to 7 [ 410.722489][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.731764][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.762052][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.771294][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.779684][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.788881][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.803772][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.813018][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.823344][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.832586][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.843861][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.853119][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.862508][T10083] ldm_validate_partition_table(): Disk read failed. [ 410.864090][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.878671][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.910547][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.919913][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.937550][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.946842][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.957524][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.966767][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.977906][T10083] Dev loop2: unable to read RDB block 0 [ 410.984698][T10083] loop2: unable to read partition table [ 410.992603][T10083] loop2: partition table beyond EOD, truncated [ 411.460397][T10083] loop_reread_partitions: partition scan of loop2 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 411.506133][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.574609][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.707957][ T5202] ldm_validate_partition_table(): Disk read failed. [ 411.715366][ T5202] Dev loop2: unable to read RDB block 0 [ 411.737296][ T5202] loop2: unable to read partition table [ 411.743220][ T5202] loop2: partition table beyond EOD, truncated [ 411.795245][ T9488] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 411.969110][ T9488] usb 3-1: config 0 has no interfaces? [ 411.979560][ T9488] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 411.999319][ T9488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.209801][ T9488] usb 3-1: Product: syz [ 412.224452][ T9488] usb 3-1: Manufacturer: syz [ 412.364565][ T9488] usb 3-1: SerialNumber: syz [ 412.374883][ T9488] usb 3-1: config 0 descriptor?? [ 413.022428][ T9488] usb 4-1: USB disconnect, device number 49 [ 413.065121][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.153507][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.634423][ T5836] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 413.887229][ T5836] usb 4-1: config 0 has an invalid interface number: 72 but max is 0 [ 413.900933][ T5836] usb 4-1: config 0 has no interface number 0 [ 413.932752][ T5836] usb 4-1: New USB device found, idVendor=ce9e, idProduct=d4fc, bcdDevice=7c.43 [ 413.983693][ T5934] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 414.027213][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.174637][ T5836] usb 4-1: Product: syz [ 414.178946][ T5836] usb 4-1: Manufacturer: syz [ 414.188281][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.236579][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.274223][ T5836] usb 4-1: SerialNumber: syz [ 414.288936][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.307871][ T5836] usb 4-1: config 0 descriptor?? [ 414.347031][ T5934] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.364528][ T5836] usb 4-1: bad CDC descriptors [ 414.376606][ T8051] usb 3-1: USB disconnect, device number 47 [ 414.447609][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.477683][ T5934] usb 5-1: config 0 descriptor?? [ 414.682129][T10136] FAULT_INJECTION: forcing a failure. [ 414.682129][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 414.741307][T10136] CPU: 1 UID: 0 PID: 10136 Comm: syz.2.1146 Not tainted syzkaller #0 PREEMPT(full) [ 414.741342][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.741356][T10136] Call Trace: [ 414.741365][T10136] [ 414.741376][T10136] dump_stack_lvl+0x189/0x250 [ 414.741405][T10136] ? __pfx____ratelimit+0x10/0x10 [ 414.741430][T10136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.741447][T10136] ? __pfx__printk+0x10/0x10 [ 414.741479][T10136] ? __pfx___might_resched+0x10/0x10 [ 414.741516][T10136] should_fail_ex+0x414/0x560 [ 414.741554][T10136] should_failslab+0xa8/0x100 [ 414.741577][T10136] kmem_cache_alloc_node_noprof+0x77/0x710 [ 414.741602][T10136] ? __alloc_skb+0x112/0x2d0 [ 414.741642][T10136] __alloc_skb+0x112/0x2d0 [ 414.741677][T10136] netlink_ack+0x146/0xa50 [ 414.741707][T10136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.741723][T10136] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 414.741744][T10136] ? __pfx_nl80211_post_doit+0x10/0x10 [ 414.741772][T10136] ? __asan_memcpy+0x40/0x70 [ 414.741794][T10136] ? __pfx_ref_tracker_free+0x10/0x10 [ 414.741825][T10136] netlink_rcv_skb+0x28c/0x470 [ 414.741853][T10136] ? __lock_acquire+0xab9/0xd20 [ 414.741877][T10136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.741895][T10136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.741941][T10136] ? down_read+0x1ad/0x2e0 [ 414.741972][T10136] genl_rcv+0x28/0x40 [ 414.741992][T10136] netlink_unicast+0x82f/0x9e0 [ 414.742026][T10136] ? __pfx_netlink_unicast+0x10/0x10 [ 414.742047][T10136] ? netlink_sendmsg+0x642/0xb30 [ 414.742068][T10136] ? skb_put+0x11b/0x210 [ 414.742107][T10136] netlink_sendmsg+0x805/0xb30 [ 414.742148][T10136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.742179][T10136] ? __import_iovec+0x5d4/0x7f0 [ 414.742199][T10136] ? aa_sock_msg_perm+0xf1/0x1d0 [ 414.742218][T10136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.742248][T10136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.742281][T10136] __sock_sendmsg+0x21c/0x270 [ 414.742310][T10136] ____sys_sendmsg+0x505/0x830 [ 414.742349][T10136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.742393][T10136] ___sys_sendmsg+0x21f/0x2a0 [ 414.742431][T10136] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.742498][T10136] ? __fget_files+0x2a/0x420 [ 414.742518][T10136] ? __fget_files+0x3a0/0x420 [ 414.742554][T10136] __sys_sendmsg+0x164/0x220 [ 414.742598][T10136] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.742639][T10136] ? __pfx_ksys_write+0x10/0x10 [ 414.742659][T10136] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 414.742677][T10136] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.742701][T10136] __do_fast_syscall_32+0xb6/0x2b0 [ 414.742727][T10136] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.742752][T10136] do_fast_syscall_32+0x34/0x80 [ 414.742775][T10136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.742798][T10136] RIP: 0023:0xf703d539 [ 414.742812][T10136] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 414.742826][T10136] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 414.742844][T10136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 414.742861][T10136] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.742875][T10136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.742888][T10136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 414.742900][T10136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.742931][T10136] [ 415.361627][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.370722][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.612572][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.632988][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.656111][ T5934] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 415.715478][ T5934] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 415.806333][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 415.832643][T10143] vlan0: entered promiscuous mode [ 415.863617][T10143] bridge0: entered promiscuous mode [ 416.347797][T10154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.358414][T10154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.453053][ T9488] usb 5-1: USB disconnect, device number 35 [ 416.718320][ T8051] usb 4-1: USB disconnect, device number 50 [ 417.003857][ T9488] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 417.333940][ T9488] usb 5-1: Using ep0 maxpacket: 16 [ 417.361402][ T9488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 417.382515][ T9488] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 417.395667][ T9488] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 417.397958][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1157'. [ 417.412968][ T9488] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 417.424269][ T9488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.432274][ T9488] usb 5-1: Product: syz [ 417.436578][ T9488] usb 5-1: Manufacturer: syz [ 417.442250][ T9488] usb 5-1: SerialNumber: syz [ 417.544095][ T9488] usb 5-1: config 0 descriptor?? [ 417.550303][T10158] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 417.577562][ T9488] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 417.583637][ T9488] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 417.599782][ T9488] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 417.609440][ T9488] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 417.616376][ T9488] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 417.870985][ T5934] usb 5-1: USB disconnect, device number 36 [ 417.946160][ T5934] mcba_usb 5-1:0.0 can0: device disconnected [ 418.214381][ T8967] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 418.524413][ T8967] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 418.613875][ T8967] usb 1-1: config 179 has no interface number 0 [ 418.644806][ T8967] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 64 [ 418.663909][ T8967] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 418.678688][ T8967] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 418.702852][ T8967] usb 1-1: config 179 interface 65 has no altsetting 0 [ 418.713783][ T8967] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 418.790735][ T8967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.847271][T10180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 419.414141][ T5934] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 419.981318][ T5934] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 420.023903][ T5934] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 420.040902][ T5934] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.050334][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.484911][ T8051] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 420.683964][ T8051] usb 3-1: Using ep0 maxpacket: 8 [ 420.701544][ T8051] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 420.714639][ T8051] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.734863][ T8051] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.745283][ T8051] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.755828][ T8051] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.769479][ T8051] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 420.779517][ T8051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.037016][ T5934] usb 1-1: USB disconnect, device number 58 [ 421.753019][T10252] FAULT_INJECTION: forcing a failure. [ 421.753019][T10252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.776952][T10252] CPU: 0 UID: 0 PID: 10252 Comm: syz.3.1171 Not tainted syzkaller #0 PREEMPT(full) [ 421.776983][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.776998][T10252] Call Trace: [ 421.777007][T10252] [ 421.777017][T10252] dump_stack_lvl+0x189/0x250 [ 421.777051][T10252] ? __pfx____ratelimit+0x10/0x10 [ 421.777084][T10252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.777107][T10252] ? __pfx__printk+0x10/0x10 [ 421.777130][T10252] ? __might_fault+0xb0/0x130 [ 421.777165][T10252] should_fail_ex+0x414/0x560 [ 421.777204][T10252] _copy_from_iter+0x1de/0x1790 [ 421.777237][T10252] ? rcu_is_watching+0x15/0xb0 [ 421.777274][T10252] ? kmalloc_reserve+0xbd/0x290 [ 421.777306][T10252] ? __pfx__copy_from_iter+0x10/0x10 [ 421.777333][T10252] ? __build_skb_around+0x262/0x3f0 [ 421.777368][T10252] ? netlink_sendmsg+0x642/0xb30 [ 421.777398][T10252] ? skb_put+0x11b/0x210 [ 421.777433][T10252] netlink_sendmsg+0x6b2/0xb30 [ 421.777476][T10252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.777511][T10252] ? __import_iovec+0x5d4/0x7f0 [ 421.777537][T10252] ? aa_sock_msg_perm+0xf1/0x1d0 [ 421.777564][T10252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.777591][T10252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.777625][T10252] __sock_sendmsg+0x21c/0x270 [ 421.777653][T10252] ____sys_sendmsg+0x505/0x830 [ 421.777694][T10252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.777747][T10252] ___sys_sendmsg+0x21f/0x2a0 [ 421.777784][T10252] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.777858][T10252] ? __fget_files+0x2a/0x420 [ 421.777893][T10252] ? __fget_files+0x3a0/0x420 [ 421.777932][T10252] __sys_sendmsg+0x164/0x220 [ 421.777969][T10252] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.778013][T10252] ? __pfx_ksys_write+0x10/0x10 [ 421.778041][T10252] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 421.778067][T10252] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.778093][T10252] __do_fast_syscall_32+0xb6/0x2b0 [ 421.778117][T10252] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.778143][T10252] do_fast_syscall_32+0x34/0x80 [ 421.778167][T10252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.778194][T10252] RIP: 0023:0xf70bd539 [ 421.778214][T10252] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 421.778233][T10252] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 421.778256][T10252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 421.778271][T10252] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.778285][T10252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.778298][T10252] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.778311][T10252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.778343][T10252] [ 422.059836][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.100291][ T8051] usb 5-1: USB disconnect, device number 37 [ 422.748368][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 422.776251][T10276] [U]  [ 423.104653][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 423.225285][T10288] FAULT_INJECTION: forcing a failure. [ 423.225285][T10288] name failslab, interval 1, probability 0, space 0, times 0 [ 423.259418][T10288] CPU: 0 UID: 0 PID: 10288 Comm: syz.4.1181 Not tainted syzkaller #0 PREEMPT(full) [ 423.259451][T10288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.259465][T10288] Call Trace: [ 423.259475][T10288] [ 423.259486][T10288] dump_stack_lvl+0x189/0x250 [ 423.259516][T10288] ? __pfx____ratelimit+0x10/0x10 [ 423.259552][T10288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.259575][T10288] ? __pfx__printk+0x10/0x10 [ 423.259602][T10288] ? __pfx___might_resched+0x10/0x10 [ 423.259633][T10288] ? fs_reclaim_acquire+0x7d/0x100 [ 423.259665][T10288] should_fail_ex+0x414/0x560 [ 423.259705][T10288] should_failslab+0xa8/0x100 [ 423.259736][T10288] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 423.259762][T10288] ? ovs_nla_get_match+0x3b5/0x18c0 [ 423.259796][T10288] ? __parse_flow_nlattrs+0x3e7/0x5d0 [ 423.259819][T10288] ? __parse_vlan_from_nlattrs+0x1dc/0x12e0 [ 423.259852][T10288] kmemdup_noprof+0x2b/0x70 [ 423.259886][T10288] ovs_nla_get_match+0x3b5/0x18c0 [ 423.259910][T10288] ? __do_fast_syscall_32+0xb6/0x2b0 [ 423.259932][T10288] ? do_fast_syscall_32+0x34/0x80 [ 423.259970][T10288] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 423.260031][T10288] ? __kasan_kmalloc+0x93/0xb0 [ 423.260063][T10288] ? __asan_memset+0x22/0x50 [ 423.260090][T10288] ovs_flow_cmd_new+0x324/0xd80 [ 423.260122][T10288] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 423.260200][T10288] ? rcu_is_watching+0x15/0xb0 [ 423.260238][T10288] ? __nla_parse+0x40/0x60 [ 423.260268][T10288] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 423.260304][T10288] genl_family_rcv_msg_doit+0x215/0x300 [ 423.260337][T10288] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 423.260376][T10288] ? bpf_lsm_capable+0x9/0x20 [ 423.260396][T10288] ? security_capable+0x7e/0x2e0 [ 423.260424][T10288] genl_rcv_msg+0x60e/0x790 [ 423.260456][T10288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.260479][T10288] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 423.260517][T10288] netlink_rcv_skb+0x208/0x470 [ 423.260547][T10288] ? __lock_acquire+0xab9/0xd20 [ 423.260575][T10288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.260602][T10288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.260654][T10288] ? down_read+0x1ad/0x2e0 [ 423.260683][T10288] genl_rcv+0x28/0x40 [ 423.260705][T10288] netlink_unicast+0x82f/0x9e0 [ 423.260743][T10288] ? __pfx_netlink_unicast+0x10/0x10 [ 423.260781][T10288] ? netlink_sendmsg+0x642/0xb30 [ 423.260812][T10288] ? skb_put+0x11b/0x210 [ 423.260848][T10288] netlink_sendmsg+0x805/0xb30 [ 423.260891][T10288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.260927][T10288] ? __import_iovec+0x5d4/0x7f0 [ 423.260954][T10288] ? aa_sock_msg_perm+0xf1/0x1d0 [ 423.260981][T10288] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.261009][T10288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.261043][T10288] __sock_sendmsg+0x21c/0x270 [ 423.261074][T10288] ____sys_sendmsg+0x505/0x830 [ 423.261114][T10288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.261169][T10288] ___sys_sendmsg+0x21f/0x2a0 [ 423.261207][T10288] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.261280][T10288] ? __fget_files+0x2a/0x420 [ 423.261307][T10288] ? __fget_files+0x3a0/0x420 [ 423.261345][T10288] __sys_sendmsg+0x164/0x220 [ 423.261381][T10288] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.261425][T10288] ? __pfx_ksys_write+0x10/0x10 [ 423.261453][T10288] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 423.261479][T10288] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.261505][T10288] __do_fast_syscall_32+0xb6/0x2b0 [ 423.261529][T10288] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.261555][T10288] do_fast_syscall_32+0x34/0x80 [ 423.261579][T10288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.261606][T10288] RIP: 0023:0xf7f14539 [ 423.261626][T10288] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 423.261647][T10288] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 423.261672][T10288] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 423.261688][T10288] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.261702][T10288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.261715][T10288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 423.261728][T10288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.261761][T10288] [ 423.683487][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.845705][ T8967] usb 3-1: USB disconnect, device number 48 [ 424.663888][ T5934] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 425.078693][ T5934] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 425.122820][ T5934] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 425.134129][ T8967] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 425.147589][ T5934] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.167467][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.307755][ T8967] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 425.523954][ T8967] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 425.550686][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.561263][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.620633][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 425.871642][ T8967] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.065464][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 426.077874][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 426.109057][ T8967] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 426.151999][ T8967] usb 1-1: config 168 interface 0 has no altsetting 0 [ 426.163004][ T8967] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 426.171403][ T8967] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 426.182997][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 426.194268][ T8967] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.240299][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 426.253904][ T5934] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 426.276943][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 426.300474][ T8967] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 426.330458][ T8967] usb 1-1: config 168 interface 0 has no altsetting 0 [ 426.352420][ T8967] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 426.373292][ T8967] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 426.398795][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 426.410798][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 426.418145][ T5934] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 426.426900][ T5934] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.437800][ T5934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.470481][ T5934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.491520][ T8967] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.509186][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 426.524597][ T5934] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.538647][ T8967] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 426.550539][ T8967] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 426.550551][ T5934] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 426.550579][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.584628][ T8967] usb 1-1: config 168 interface 0 has no altsetting 0 [ 426.599274][ T8967] usb 1-1: string descriptor 0 read error: -22 [ 426.606242][ T8967] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 426.618768][ T8967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.660712][ T8967] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 427.309518][ T8967] usb 3-1: USB disconnect, device number 49 [ 427.722016][T10356] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1201'. [ 427.857464][T10363] tipc: Enabled bearer , priority 0 [ 427.865703][T10363] syzkaller0: entered promiscuous mode [ 427.871388][T10363] syzkaller0: entered allmulticast mode [ 427.896425][T10363] tipc: Resetting bearer [ 427.958784][T10366] loop5: detected capacity change from 0 to 16384 [ 427.994979][T10366] loop5: detected capacity change from 16384 to 16383 [ 428.013141][T10362] tipc: Resetting bearer [ 428.034593][T10362] tipc: Disabling bearer [ 428.371998][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.381190][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.929147][ T8967] usb 1-1: USB disconnect, device number 59 [ 429.644537][T10393] @: renamed from vlan0 (while UP) [ 430.030230][ T9488] usb 4-1: USB disconnect, device number 51 [ 430.665372][ T8967] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 430.826866][ T8967] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 430.914262][ T8967] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 430.965739][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.009775][ T8967] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.037176][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.144975][T10418] pim6reg: entered allmulticast mode [ 431.154264][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 431.173986][T10418] pim6reg: left allmulticast mode [ 431.188551][ T8967] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 431.205748][ T8967] usb 5-1: config 168 interface 0 has no altsetting 0 [ 431.215306][ T8967] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 431.223026][ T8967] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 431.238335][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.252327][ T8967] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.283886][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.296235][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 431.311786][ T8967] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 431.329222][ T8967] usb 5-1: config 168 interface 0 has no altsetting 0 [ 431.341348][ T8967] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 431.350999][ T8967] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 431.366383][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.441224][ T8967] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.603915][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.633935][T10424] input: syz0 as /devices/virtual/input/input26 [ 431.757848][ T8967] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 431.908470][T10429] FAULT_INJECTION: forcing a failure. [ 431.908470][T10429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.918401][ T8967] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 431.922020][T10429] CPU: 0 UID: 0 PID: 10429 Comm: syz.1.1222 Not tainted syzkaller #0 PREEMPT(full) [ 431.922051][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.922068][T10429] Call Trace: [ 431.922078][T10429] [ 431.922089][T10429] dump_stack_lvl+0x189/0x250 [ 431.922124][T10429] ? __pfx____ratelimit+0x10/0x10 [ 431.922165][T10429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.922200][T10429] ? __pfx__printk+0x10/0x10 [ 431.922226][T10429] ? __might_fault+0xb0/0x130 [ 431.922267][T10429] should_fail_ex+0x414/0x560 [ 431.922312][T10429] _copy_from_iter+0x1de/0x1790 [ 431.922350][T10429] ? rcu_is_watching+0x15/0xb0 [ 431.922392][T10429] ? kmalloc_reserve+0xbd/0x290 [ 431.922427][T10429] ? __pfx__copy_from_iter+0x10/0x10 [ 431.922458][T10429] ? __build_skb_around+0x262/0x3f0 [ 431.922498][T10429] ? netlink_sendmsg+0x642/0xb30 [ 431.922533][T10429] ? skb_put+0x11b/0x210 [ 431.922572][T10429] netlink_sendmsg+0x6b2/0xb30 [ 431.922619][T10429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.922660][T10429] ? __import_iovec+0x5d4/0x7f0 [ 431.922690][T10429] ? aa_sock_msg_perm+0xf1/0x1d0 [ 431.922720][T10429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.922753][T10429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.922791][T10429] __sock_sendmsg+0x21c/0x270 [ 431.922825][T10429] ____sys_sendmsg+0x505/0x830 [ 431.922870][T10429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.922929][T10429] ___sys_sendmsg+0x21f/0x2a0 [ 431.922970][T10429] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.923059][T10429] ? __fget_files+0x2a/0x420 [ 431.923091][T10429] ? __fget_files+0x3a0/0x420 [ 431.923135][T10429] __sys_sendmsg+0x164/0x220 [ 431.923183][T10429] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.923233][T10429] ? __pfx_ksys_write+0x10/0x10 [ 431.923263][T10429] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 431.923292][T10429] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.923320][T10429] __do_fast_syscall_32+0xb6/0x2b0 [ 431.923349][T10429] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.923378][T10429] do_fast_syscall_32+0x34/0x80 [ 431.923405][T10429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.923434][T10429] RIP: 0023:0xf705d539 [ 431.923455][T10429] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 431.923478][T10429] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 431.923503][T10429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001340 [ 431.923520][T10429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.923535][T10429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.923551][T10429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 431.923565][T10429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.923601][T10429] [ 432.413912][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 432.660697][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.676997][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 432.723866][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.753919][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.777330][T10433] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 432.828212][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1224'. [ 432.829647][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.883685][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.973869][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.061822][ T8967] usb 5-1: config 168 interface 0 has no altsetting 0 [ 433.078805][ T8967] usb 5-1: string descriptor 0 read error: -22 [ 433.100267][ T8967] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 433.129332][ T8967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.203996][ T8967] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 433.634084][ T8967] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 433.804124][ T8967] usb 4-1: device descriptor read/64, error -71 [ 433.986483][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.999972][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.094024][ T8967] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 434.303816][ T8967] usb 4-1: device descriptor read/64, error -71 [ 434.448901][ T8967] usb usb4-port1: attempt power cycle [ 434.856187][ T9] usb 1-1: USB disconnect, device number 60 [ 434.864315][ T8967] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 434.895344][ T8967] usb 4-1: device descriptor read/8, error -71 [ 434.905720][T10440] syz.2.1226 (10440): drop_caches: 2 [ 435.144112][ T8967] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 435.169442][ T8967] usb 4-1: device descriptor read/8, error -71 [ 435.284633][ T8967] usb usb4-port1: unable to enumerate USB device [ 435.308870][ T30] audit: type=1326 audit(1760303733.602:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.357922][ T30] audit: type=1326 audit(1760303733.602:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.453845][ T30] audit: type=1326 audit(1760303733.742:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.484583][ T9] usb 5-1: USB disconnect, device number 38 [ 435.582821][ T30] audit: type=1326 audit(1760303733.742:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.684361][ T30] audit: type=1326 audit(1760303733.752:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.723962][ T30] audit: type=1326 audit(1760303733.772:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.746854][ T30] audit: type=1326 audit(1760303733.772:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.775475][ T30] audit: type=1326 audit(1760303733.772:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.800692][ T30] audit: type=1326 audit(1760303733.772:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 435.824976][ T30] audit: type=1326 audit(1760303733.822:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.2.1229" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 437.021918][T10481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.650581][T10489] vhci_hcd vhci_hcd.0: port 0 already used [ 437.677151][T10489] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 437.687253][T10489] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 437.947851][ T5152] Bluetooth: unknown link type 128 [ 438.524911][T10494] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 438.535980][T10494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 438.542789][T10494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 438.567718][T10494] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 438.600904][T10494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 439.063937][ T9] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 439.269288][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 439.294607][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 439.373789][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 439.467038][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.507636][T10511] No such timeout policy "syz1" [ 439.512592][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 439.535896][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 439.633049][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 439.680092][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 439.754561][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 439.763259][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 440.100045][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 440.114337][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.191984][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 440.240398][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 440.301766][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 440.351698][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 440.406404][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 440.445164][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 440.504133][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 440.568443][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 440.594026][ T5152] Bluetooth: hci4: command 0x0c1a tx timeout [ 440.600254][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 440.600268][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 440.600357][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 440.665830][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1248'. [ 440.674535][ T5152] Bluetooth: hci2: command 0x0405 tx timeout [ 440.681076][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 440.686001][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.705791][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.731885][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 440.743806][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 440.773044][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 440.925737][ T9] usb 5-1: string descriptor 0 read error: -22 [ 440.945113][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 440.983949][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.054470][ T8967] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 441.115974][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 441.193942][ T8967] usb 4-1: device descriptor read/64, error -71 [ 441.452469][ T8967] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 441.645017][ T8967] usb 4-1: device descriptor read/64, error -71 [ 441.764285][ T8967] usb usb4-port1: attempt power cycle [ 442.233928][ T8967] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 442.251818][ C1] Unknown status report in ack skb [ 442.268230][ T8967] usb 4-1: device descriptor read/8, error -71 [ 442.467256][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 442.513978][ T8967] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 442.556453][ T8967] usb 4-1: device descriptor read/8, error -71 [ 442.635980][ T9] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 442.645264][ T9] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 442.653356][ T9] usb 3-1: config 0 has no interface number 0 [ 442.664800][ T8967] usb usb4-port1: unable to enumerate USB device [ 442.705493][ T9] usb 3-1: config 0 has no interface number 1 [ 442.717669][ T9] usb 3-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30 [ 442.740881][ T9] usb 3-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 442.755258][ T9] usb 3-1: config 0 interface 9 has no altsetting 0 [ 442.761929][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 442.771309][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.794566][ T9] usb 3-1: config 0 descriptor?? [ 442.820309][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.850429][T10561] vhci_hcd vhci_hcd.0: port 0 already used [ 442.861762][T10561] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 442.871590][T10561] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 442.899327][ T9] snd-usb-audio 3-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 442.971237][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.565547][ T9488] usb 5-1: USB disconnect, device number 39 [ 443.650168][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.9/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.777161][ T9] snd-usb-audio 3-1:0.9: probe with driver snd-usb-audio failed with error -2 [ 443.842222][ T9] usb 3-1: USB disconnect, device number 50 [ 444.212639][T10587] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 444.220591][T10587] netlink: 'syz.2.1267': attribute type 2 has an invalid length. [ 444.380835][T10591] FAULT_INJECTION: forcing a failure. [ 444.380835][T10591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.413995][T10591] CPU: 0 UID: 0 PID: 10591 Comm: syz.3.1269 Not tainted syzkaller #0 PREEMPT(full) [ 444.414027][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 444.414041][T10591] Call Trace: [ 444.414051][T10591] [ 444.414062][T10591] dump_stack_lvl+0x189/0x250 [ 444.414091][T10591] ? __pfx____ratelimit+0x10/0x10 [ 444.414125][T10591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.414149][T10591] ? __pfx__printk+0x10/0x10 [ 444.414172][T10591] ? __might_fault+0xb0/0x130 [ 444.414207][T10591] should_fail_ex+0x414/0x560 [ 444.414248][T10591] _copy_from_user+0x2d/0xb0 [ 444.414278][T10591] cmsghdr_from_user_compat_to_kern+0x394/0x800 [ 444.414332][T10591] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 444.414379][T10591] ____sys_sendmsg+0x20f/0x830 [ 444.414420][T10591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.414471][T10591] ___sys_sendmsg+0x21f/0x2a0 [ 444.414508][T10591] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.414544][T10591] ? __lock_acquire+0xab9/0xd20 [ 444.414614][T10591] ? __fget_files+0x2a/0x420 [ 444.414641][T10591] ? __fget_files+0x3a0/0x420 [ 444.414679][T10591] __sys_sendmmsg+0x28e/0x430 [ 444.414706][T10591] ? __pfx___sys_sendmmsg+0x10/0x10 [ 444.414725][T10591] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 444.414777][T10591] ? ksys_write+0x22a/0x250 [ 444.414799][T10591] ? exc_page_fault+0x82/0x100 [ 444.414820][T10591] ? __pfx_ksys_write+0x10/0x10 [ 444.414851][T10591] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 444.414888][T10591] __do_fast_syscall_32+0xb6/0x2b0 [ 444.414913][T10591] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.414939][T10591] do_fast_syscall_32+0x34/0x80 [ 444.414963][T10591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.414989][T10591] RIP: 0023:0xf70bd539 [ 444.415010][T10591] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 444.415030][T10591] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 444.415055][T10591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002680 [ 444.415071][T10591] RDX: 0000000000000011 RSI: 0000000020000000 RDI: 0000000000000000 [ 444.415085][T10591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.415099][T10591] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 444.415112][T10591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.415145][T10591] [ 444.703437][T10593] loop6: detected capacity change from 0 to 524287999 [ 445.485200][ T9488] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 445.644576][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.663923][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.740533][ T9488] usb 4-1: Using ep0 maxpacket: 32 [ 445.758274][ T9488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.800805][ T9488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.840969][ T9488] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 445.900186][ T9488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.065410][ T9488] usb 4-1: config 0 descriptor?? [ 446.101513][ T9488] hub 4-1:0.0: USB hub found [ 447.543849][ T5934] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 447.706425][ T5934] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 447.742227][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.786424][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 447.804503][ T5934] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 447.815312][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.834053][ T5934] usb 5-1: config 0 descriptor?? [ 448.805138][ T5934] holtek_kbd 0003:04D9:A055.0008: bogus close delimiter [ 448.812297][ T5934] holtek_kbd 0003:04D9:A055.0008: item 0 4 2 10 parsing failed [ 448.823211][ T5934] holtek_kbd 0003:04D9:A055.0008: probe with driver holtek_kbd failed with error -22 [ 448.937854][ T5934] usb 5-1: USB disconnect, device number 40 [ 449.185939][ T9488] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 449.231632][ T9488] usbhid 4-1:0.0: can't add hid device: -71 [ 449.243646][ T9488] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 449.288160][ T9488] usb 4-1: USB disconnect, device number 60 [ 449.573063][T10659] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 449.581196][T10659] netlink: 'syz.2.1285': attribute type 2 has an invalid length. [ 449.869159][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.941322][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.895598][ T9488] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 451.218857][ T9488] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.242783][ T9488] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.317673][ T9488] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 451.429997][ T9488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.527370][ T9488] usb 4-1: config 0 descriptor?? [ 451.789222][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.824360][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.874814][ T5934] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 451.917870][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 452.033844][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 452.041371][ T5934] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 452.078516][ T5934] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 452.097385][ T5934] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 452.129670][ T5934] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 452.156911][ T5934] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 452.176245][ T5934] usb 5-1: config 0 has no interface number 0 [ 452.190327][ T5934] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 452.239313][ T5934] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 452.276050][ T5934] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 452.304736][ T5934] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.320742][ T5934] usb 5-1: config 0 interface 125 has no altsetting 0 [ 452.328103][ T5934] usb 5-1: config 0 interface 125 has no altsetting 2 [ 452.348407][ T5934] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 452.366494][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.392266][ T5934] usb 5-1: Product: syz [ 452.403793][ T5934] usb 5-1: Manufacturer: syz [ 452.416076][ T5934] usb 5-1: SerialNumber: syz [ 452.427425][ T9488] usb 4-1: string descriptor 0 read error: -71 [ 452.441378][ T9488] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 452.445926][ T5934] usb 5-1: config 0 descriptor?? [ 452.479022][ T5934] usb 5-1: selecting invalid altsetting 2 [ 452.487542][ T9488] usb 4-1: USB disconnect, device number 61 [ 452.639699][T10715] FAULT_INJECTION: forcing a failure. [ 452.639699][T10715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.653180][T10715] CPU: 1 UID: 0 PID: 10715 Comm: syz.2.1304 Not tainted syzkaller #0 PREEMPT(full) [ 452.653212][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.653227][T10715] Call Trace: [ 452.653238][T10715] [ 452.653248][T10715] dump_stack_lvl+0x189/0x250 [ 452.653279][T10715] ? __pfx____ratelimit+0x10/0x10 [ 452.653314][T10715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.653466][T10715] ? __pfx__printk+0x10/0x10 [ 452.653492][T10715] ? __might_fault+0xb0/0x130 [ 452.653526][T10715] should_fail_ex+0x414/0x560 [ 452.653560][T10715] _copy_from_user+0x2d/0xb0 [ 452.653589][T10715] memdup_user+0x5e/0xd0 [ 452.653623][T10715] strndup_user+0x68/0xd0 [ 452.653653][T10715] __se_sys_request_key+0x12b/0x340 [ 452.653686][T10715] ? ksys_write+0x22a/0x250 [ 452.653713][T10715] ? __pfx___se_sys_request_key+0x10/0x10 [ 452.653750][T10715] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 452.653776][T10715] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.653800][T10715] __do_fast_syscall_32+0xb6/0x2b0 [ 452.653825][T10715] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.653847][T10715] do_fast_syscall_32+0x34/0x80 [ 452.653868][T10715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.653892][T10715] RIP: 0023:0xf703d539 [ 452.653912][T10715] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 452.653932][T10715] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 000000000000011f [ 452.653955][T10715] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080001e80 [ 452.653970][T10715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.653982][T10715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.653995][T10715] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 452.654008][T10715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.654040][T10715] [ 452.846019][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.891609][ C0] usb 5-1: async_complete: urb error -71 [ 452.897433][ C0] usb 5-1: async_complete: urb error -71 [ 452.903307][ C0] usb 5-1: async_complete: urb error -71 [ 452.910901][ T5934] get_1284_register: usb error -71 [ 452.916801][ T5934] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 452.942275][ T5934] usb 5-1: USB disconnect, device number 41 [ 453.246516][ T9488] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 453.365882][ T5934] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 453.504436][ T9488] usb 4-1: Using ep0 maxpacket: 32 [ 453.560280][ T5934] usb 5-1: device descriptor read/64, error -71 [ 453.702313][ T9488] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 453.733089][ T9488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.767206][ T9488] usb 4-1: Product: syz [ 453.774139][ T9488] usb 4-1: Manufacturer: syz [ 453.789814][ T9488] usb 4-1: SerialNumber: syz [ 453.804217][ T5934] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 453.817994][ T9488] usb 4-1: config 0 descriptor?? [ 453.835996][ T9488] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 453.934128][ T5934] usb 5-1: device descriptor read/64, error -71 [ 454.118832][ T5934] usb usb5-port1: attempt power cycle [ 454.419309][T10741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.434995][T10741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.564097][ T5934] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 454.585511][ T5934] usb 5-1: device descriptor read/8, error -71 [ 454.824067][ T5934] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 454.844963][ T5934] usb 5-1: device descriptor read/8, error -71 [ 454.954410][ T5934] usb usb5-port1: unable to enumerate USB device [ 455.073832][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 455.174126][ T5935] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 455.253172][T10757] FAULT_INJECTION: forcing a failure. [ 455.253172][T10757] name failslab, interval 1, probability 0, space 0, times 0 [ 455.272009][T10757] CPU: 0 UID: 0 PID: 10757 Comm: syz.1.1315 Not tainted syzkaller #0 PREEMPT(full) [ 455.272043][T10757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.272058][T10757] Call Trace: [ 455.272068][T10757] [ 455.272079][T10757] dump_stack_lvl+0x189/0x250 [ 455.272110][T10757] ? __pfx____ratelimit+0x10/0x10 [ 455.272146][T10757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.272171][T10757] ? __pfx__printk+0x10/0x10 [ 455.272205][T10757] ? __lock_acquire+0xab9/0xd20 [ 455.272243][T10757] should_fail_ex+0x414/0x560 [ 455.272283][T10757] should_failslab+0xa8/0x100 [ 455.272315][T10757] kmem_cache_alloc_noprof+0x74/0x6e0 [ 455.272339][T10757] ? skb_clone+0x212/0x3a0 [ 455.272365][T10757] skb_clone+0x212/0x3a0 [ 455.272391][T10757] __netlink_deliver_tap+0x404/0x850 [ 455.272437][T10757] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.272472][T10757] netlink_deliver_tap+0x19c/0x1b0 [ 455.272506][T10757] netlink_unicast+0x7fa/0x9e0 [ 455.272545][T10757] ? __pfx_netlink_unicast+0x10/0x10 [ 455.272577][T10757] ? netlink_sendmsg+0x642/0xb30 [ 455.272608][T10757] ? skb_put+0x11b/0x210 [ 455.272645][T10757] netlink_sendmsg+0x805/0xb30 [ 455.272689][T10757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.272725][T10757] ? __import_iovec+0x5d4/0x7f0 [ 455.272753][T10757] ? aa_sock_msg_perm+0xf1/0x1d0 [ 455.272781][T10757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.272810][T10757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.272844][T10757] __sock_sendmsg+0x21c/0x270 [ 455.272876][T10757] ____sys_sendmsg+0x505/0x830 [ 455.272918][T10757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.272979][T10757] ___sys_sendmsg+0x21f/0x2a0 [ 455.273017][T10757] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.273091][T10757] ? __fget_files+0x2a/0x420 [ 455.273119][T10757] ? __fget_files+0x3a0/0x420 [ 455.273159][T10757] __sys_sendmsg+0x164/0x220 [ 455.273197][T10757] ? __pfx___sys_sendmsg+0x10/0x10 [ 455.273243][T10757] ? __pfx_ksys_write+0x10/0x10 [ 455.273271][T10757] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 455.273304][T10757] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.273330][T10757] __do_fast_syscall_32+0xb6/0x2b0 [ 455.273356][T10757] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.273382][T10757] do_fast_syscall_32+0x34/0x80 [ 455.273407][T10757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.273435][T10757] RIP: 0023:0xf705d539 [ 455.273455][T10757] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 455.273476][T10757] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 455.273499][T10757] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 455.273516][T10757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.273529][T10757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.273543][T10757] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.273557][T10757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.273591][T10757] [ 455.434614][ T9488] gspca_ov534_9: reg_w failed -110 [ 455.620300][ T5935] usb 1-1: config 0 has no interfaces? [ 455.629614][ T5935] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 455.645914][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.660033][ T5935] usb 1-1: Product: syz [ 455.670068][ T5935] usb 1-1: Manufacturer: syz [ 455.676059][ T24] usb 3-1: config 0 has no interfaces? [ 455.682265][ T5935] usb 1-1: SerialNumber: syz [ 455.774186][ T5935] usb 1-1: config 0 descriptor?? [ 455.839239][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 455.858483][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.882867][ T24] usb 3-1: Product: syz [ 455.891799][ T24] usb 3-1: Manufacturer: syz [ 455.909202][ T24] usb 3-1: SerialNumber: syz [ 455.930565][ T24] usb 3-1: config 0 descriptor?? [ 456.111091][T10755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.121722][T10755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.173411][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.185032][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.304382][ T9488] gspca_ov534_9: Unknown sensor 0000 [ 456.304470][ T9488] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 456.800937][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.816342][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.831014][T10774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.896789][T10774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.014082][ T9488] usb 4-1: USB disconnect, device number 62 [ 457.747683][ T9] usb 1-1: USB disconnect, device number 61 [ 457.806393][ T24] usb 3-1: USB disconnect, device number 51 [ 457.814038][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 457.814057][ T30] audit: type=1326 audit(1760303756.102:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 457.967324][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 457.994168][ T9488] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 458.034357][ T30] audit: type=1326 audit(1760303756.102:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 458.261902][ T30] audit: type=1326 audit(1760303756.102:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 458.305412][ T30] audit: type=1326 audit(1760303756.102:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 458.328076][ T30] audit: type=1326 audit(1760303756.102:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 458.411643][ T30] audit: type=1326 audit(1760303756.102:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 458.412374][ T9488] usb 4-1: config 0 has no interfaces? [ 458.498752][ T9488] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 458.508992][ T9488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.523818][ T9488] usb 4-1: Product: syz [ 458.625210][ T30] audit: type=1326 audit(1760303756.682:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 458.653976][ T9488] usb 4-1: Manufacturer: syz [ 458.659156][ T9488] usb 4-1: SerialNumber: syz [ 458.728761][ T30] audit: type=1326 audit(1760303756.682:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10783 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 458.750895][ T9488] usb 4-1: config 0 descriptor?? [ 459.168165][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1328'. [ 459.289520][T10807] FAULT_INJECTION: forcing a failure. [ 459.289520][T10807] name failslab, interval 1, probability 0, space 0, times 0 [ 459.363494][T10807] CPU: 1 UID: 0 PID: 10807 Comm: syz.1.1328 Not tainted syzkaller #0 PREEMPT(full) [ 459.363526][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.363540][T10807] Call Trace: [ 459.363551][T10807] [ 459.363561][T10807] dump_stack_lvl+0x189/0x250 [ 459.363591][T10807] ? __pfx____ratelimit+0x10/0x10 [ 459.363626][T10807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.363654][T10807] ? __pfx__printk+0x10/0x10 [ 459.363674][T10807] ? netlink_sendmsg+0x805/0xb30 [ 459.363707][T10807] ? __sys_sendmsg+0x164/0x220 [ 459.363739][T10807] ? do_fast_syscall_32+0x34/0x80 [ 459.363771][T10807] should_fail_ex+0x414/0x560 [ 459.363813][T10807] should_failslab+0xa8/0x100 [ 459.363844][T10807] kmem_cache_alloc_noprof+0x74/0x6e0 [ 459.363869][T10807] ? skb_clone+0x212/0x3a0 [ 459.363897][T10807] skb_clone+0x212/0x3a0 [ 459.363923][T10807] __netlink_deliver_tap+0x404/0x850 [ 459.363969][T10807] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.364003][T10807] netlink_deliver_tap+0x19c/0x1b0 [ 459.364037][T10807] netlink_sendskb+0x68/0x140 [ 459.364068][T10807] netlink_unicast+0x397/0x9e0 [ 459.364095][T10807] ? __asan_memcpy+0x40/0x70 [ 459.364126][T10807] ? __pfx_netlink_unicast+0x10/0x10 [ 459.364166][T10807] netlink_rcv_skb+0x28c/0x470 [ 459.364195][T10807] ? __lock_acquire+0xab9/0xd20 [ 459.364224][T10807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.364251][T10807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.364303][T10807] ? down_read+0x1ad/0x2e0 [ 459.364332][T10807] genl_rcv+0x28/0x40 [ 459.364354][T10807] netlink_unicast+0x82f/0x9e0 [ 459.364392][T10807] ? __pfx_netlink_unicast+0x10/0x10 [ 459.364423][T10807] ? netlink_sendmsg+0x642/0xb30 [ 459.364460][T10807] ? skb_put+0x11b/0x210 [ 459.364497][T10807] netlink_sendmsg+0x805/0xb30 [ 459.364540][T10807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.364576][T10807] ? __import_iovec+0x5d4/0x7f0 [ 459.364603][T10807] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.364631][T10807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.364660][T10807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.364694][T10807] __sock_sendmsg+0x21c/0x270 [ 459.364724][T10807] ____sys_sendmsg+0x505/0x830 [ 459.364767][T10807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.364821][T10807] ___sys_sendmsg+0x21f/0x2a0 [ 459.364858][T10807] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.364935][T10807] ? __fget_files+0x2a/0x420 [ 459.364962][T10807] ? __fget_files+0x3a0/0x420 [ 459.365001][T10807] __sys_sendmsg+0x164/0x220 [ 459.365038][T10807] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.365084][T10807] ? __pfx_ksys_write+0x10/0x10 [ 459.365111][T10807] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 459.365137][T10807] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.365163][T10807] __do_fast_syscall_32+0xb6/0x2b0 [ 459.365188][T10807] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.365214][T10807] do_fast_syscall_32+0x34/0x80 [ 459.365262][T10807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.365289][T10807] RIP: 0023:0xf705d539 [ 459.365308][T10807] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 459.365328][T10807] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 459.365352][T10807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000bc0 [ 459.365368][T10807] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.365382][T10807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.365395][T10807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 459.365408][T10807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.365450][T10807] [ 459.788659][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.857311][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.933832][ T9488] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 459.964008][T10815] netlink: 122 bytes leftover after parsing attributes in process `syz.2.1331'. [ 460.079891][T10821] ip6tnl1: entered promiscuous mode [ 460.106101][ T9488] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 460.116904][ T9488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.130045][ T9488] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.140144][ T9488] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 460.147714][T10819] dummy0: left promiscuous mode [ 460.150323][ T9488] usb 5-1: Product: syz [ 460.158706][ T9488] usb 5-1: Manufacturer: syz [ 460.163427][ T9488] usb 5-1: SerialNumber: syz [ 460.186960][ T9488] usb 5-1: config 0 descriptor?? [ 460.197993][ T9488] usb 5-1: selecting invalid altsetting 0 [ 460.223913][T10819] team0: Port device dummy0 removed [ 460.248764][T10819] batman_adv: batadv0: Adding interface: dummy0 [ 460.260175][T10819] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 460.275281][ C0] Unknown status report in ack skb [ 460.659004][ T9488] usb 5-1: USB disconnect, device number 46 [ 460.908694][ T5935] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 461.094083][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 461.104109][ T9488] usb 4-1: USB disconnect, device number 63 [ 461.150083][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 461.195157][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 461.212200][ T5935] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 461.229344][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.268059][ T5935] usb 1-1: Product: syz [ 461.284689][ T5935] usb 1-1: Manufacturer: syz [ 461.292717][ T5935] usb 1-1: SerialNumber: syz [ 461.310482][ T5935] usb 1-1: config 0 descriptor?? [ 461.332450][ T5935] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 461.503294][ T5152] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 461.633296][ T5935] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 461.659152][T10851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.669510][T10851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.732631][ T5935] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 461.810011][ T5935] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 462.893822][ T5934] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 462.986755][T10861] binder: 10857:10861 ioctl c0306201 0 returned -14 [ 463.147460][ T5934] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 463.158015][ T5934] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 463.191588][ T5934] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 463.230804][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.260325][ T30] audit: type=1326 audit(1760303761.552:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.2.1345" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x0 [ 463.332764][ T5935] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 463.695048][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 463.724604][ T5935] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 463.755729][ T5935] usb 5-1: config 0 has no interface number 0 [ 463.818548][ T5935] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 463.833817][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.855736][ T5935] usb 5-1: Product: syz [ 463.861931][ T5935] usb 5-1: Manufacturer: syz [ 463.923395][ T5935] usb 5-1: SerialNumber: syz [ 463.979636][ T5935] usb 5-1: config 0 descriptor?? [ 464.233385][ T5935] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 464.356798][ T5935] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 464.358401][ C1] Unknown status report in ack skb [ 464.382954][ T5935] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 464.948630][ T9] usb 1-1: USB disconnect, device number 62 [ 465.534745][T10880] netlink: 'syz.0.1349': attribute type 1 has an invalid length. [ 465.542696][T10880] netlink: 'syz.0.1349': attribute type 2 has an invalid length. [ 465.652851][ T24] usb 4-1: USB disconnect, device number 64 [ 466.100873][T10887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.126428][T10887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.145830][T10889] binder: BINDER_SET_CONTEXT_MGR already set [ 466.152004][T10889] binder: 10888:10889 ioctl 4018620d 800002c0 returned -16 [ 466.582070][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 466.582763][ T9488] usb 5-1: USB disconnect, device number 47 [ 467.063055][ T9488] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 467.141942][ T9488] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 467.193682][ T9488] quatech2 5-1:0.51: device disconnected [ 467.389292][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 467.653818][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 467.813848][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 467.828827][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 467.875054][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.886345][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 467.897258][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 467.908847][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.923652][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 467.933806][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.720055][T10921] usbtmc 1-1:16.0: simple control status returned 0 [ 468.922615][ T9] usb 1-1: USB disconnect, device number 63 [ 469.973986][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 470.028102][T10931] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 470.044099][T10931] netlink: 'syz.1.1363': attribute type 2 has an invalid length. [ 470.283798][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 470.299854][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.320160][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.401083][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.439136][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.527030][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.554818][ T9] usb 3-1: invalid MIDI out EP 0 [ 470.816756][T10941] binder: 10937:10941 ioctl c0306201 0 returned -14 [ 471.083800][ T9488] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 471.124259][T10945] tipc: Enabled bearer , priority 0 [ 471.146556][T10945] tipc: Resetting bearer [ 471.333099][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 471.443786][ T9488] usb 5-1: Using ep0 maxpacket: 32 [ 471.470981][ T9488] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 471.482216][ T9488] usb 5-1: config 0 has no interface number 0 [ 471.506515][ T9488] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 471.516605][ T9488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.526852][ T9488] usb 5-1: Product: syz [ 471.559846][ T9488] usb 5-1: Manufacturer: syz [ 471.585888][ T9488] usb 5-1: SerialNumber: syz [ 471.607489][ T9488] usb 5-1: config 0 descriptor?? [ 471.656624][ T9488] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 471.804046][T10942] tipc: Disabling bearer [ 471.856814][ T9488] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 471.882836][ T9488] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 472.107850][T10949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1369'. [ 472.170431][ T30] audit: type=1326 audit(1760303770.432:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 472.409163][ T30] audit: type=1326 audit(1760303770.432:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 472.648740][ T30] audit: type=1326 audit(1760303770.432:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 472.735701][ T30] audit: type=1326 audit(1760303770.432:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 472.897156][ T30] audit: type=1326 audit(1760303770.432:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 472.994475][ T30] audit: type=1326 audit(1760303770.432:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 473.025554][ T30] audit: type=1326 audit(1760303770.432:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 473.117124][ T8967] usb 3-1: USB disconnect, device number 52 [ 473.146049][T10925] delete_channel: no stack [ 473.293808][ T30] audit: type=1326 audit(1760303770.432:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 473.417335][ T30] audit: type=1326 audit(1760303770.452:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 473.548690][ T30] audit: type=1326 audit(1760303770.452:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1369" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x7ffc0000 [ 473.816592][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 473.928729][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 473.936737][ T8967] usb 5-1: USB disconnect, device number 48 [ 473.943813][ T9488] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 473.957073][ T8967] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 473.978640][ T8967] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 473.993540][ T8967] quatech2 5-1:0.51: device disconnected [ 474.074060][ T5934] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 474.095135][ T9488] usb 4-1: Using ep0 maxpacket: 8 [ 474.107313][ T9488] usb 4-1: config 165 has an invalid interface number: 233 but max is 1 [ 474.116902][ T9488] usb 4-1: config 165 has an invalid interface number: 29 but max is 1 [ 474.126955][ T9488] usb 4-1: config 165 has an invalid interface association descriptor of length 6, skipping [ 474.144050][ T9488] usb 4-1: config 165 contains an unexpected descriptor of type 0x2, skipping [ 474.163234][ T9488] usb 4-1: config 165 has no interface number 0 [ 474.178936][ T9488] usb 4-1: config 165 has no interface number 1 [ 474.187212][ T9488] usb 4-1: config 165 interface 233 altsetting 7 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 474.199645][ T9488] usb 4-1: config 165 interface 233 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 474.212493][ T9488] usb 4-1: config 165 interface 29 altsetting 11 bulk endpoint 0xA has invalid maxpacket 1023 [ 474.223935][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 474.231027][ T5934] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 474.232078][ T9488] usb 4-1: config 165 interface 29 altsetting 11 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 474.249939][ T5934] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.254367][ T9488] usb 4-1: config 165 interface 29 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 474.315228][ T9488] usb 4-1: config 165 interface 29 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 474.323852][ T5934] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.337774][ T9488] usb 4-1: config 165 interface 29 altsetting 11 endpoint 0x3 has an invalid bInterval 251, changing to 7 [ 474.349556][ T9488] usb 4-1: config 165 interface 29 altsetting 11 bulk endpoint 0x7 has invalid maxpacket 1024 [ 474.360137][ T5934] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.360171][ T5934] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.360218][ T5934] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 474.360245][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.474680][T10971] netlink: 'syz.4.1377': attribute type 21 has an invalid length. [ 474.523100][T10971] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1377'. [ 474.532808][ T9488] usb 4-1: config 165 interface 29 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 474.544796][ T9488] usb 4-1: config 165 interface 233 has no altsetting 0 [ 474.551947][ T9488] usb 4-1: config 165 interface 29 has no altsetting 0 [ 474.562763][ T9488] usb 4-1: New USB device found, idVendor=0403, idProduct=ebe0, bcdDevice=3b.ec [ 474.572231][ T9488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.596379][ T9488] usb 4-1: Product: ဉ [ 474.616555][T10976] FAULT_INJECTION: forcing a failure. [ 474.616555][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 474.623098][ T9488] usb 4-1: Manufacturer: 鷘⍩逫ᣮ刡맄뮎Ꮏ퍍癓㶟䩷䟾訡ꨉ웠对ꑍॕ诈ᾗ宐網ᗂ뀻댜걒劁꼃蛱綿ₑ﮳胎龹酄︽翢肾妖膼㾚夗쀫ᛏᗣ⠁䢞倒欲䃠罛둱䶋햤ꋳﰲ鸙奥맕ẝ谌囻斶땙척踣㕙꼲薅㋌湡ጴ㜙﫨괼敕ϧ벺◹㊮ⅴ◲磐⊍諒柪葡꟢ [ 474.661838][T10977] netlink: 'syz.4.1377': attribute type 27 has an invalid length. [ 474.682407][T10977] sit0: left promiscuous mode [ 474.696111][T10976] CPU: 0 UID: 0 PID: 10976 Comm: syz.2.1378 Not tainted syzkaller #0 PREEMPT(full) [ 474.696141][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 474.696156][T10976] Call Trace: [ 474.696164][T10976] [ 474.696174][T10976] dump_stack_lvl+0x189/0x250 [ 474.696204][T10976] ? __pfx____ratelimit+0x10/0x10 [ 474.696239][T10976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.696263][T10976] ? __pfx__printk+0x10/0x10 [ 474.696289][T10976] ? __pfx___might_resched+0x10/0x10 [ 474.696319][T10976] ? fs_reclaim_acquire+0x7d/0x100 [ 474.696352][T10976] should_fail_ex+0x414/0x560 [ 474.696401][T10976] should_failslab+0xa8/0x100 [ 474.696432][T10976] __kmalloc_cache_noprof+0x6f/0x6f0 [ 474.696457][T10976] ? ip_set_pernet+0x23/0x240 [ 474.696490][T10976] ? ip_set_create+0x348/0x1940 [ 474.696524][T10976] ip_set_create+0x348/0x1940 [ 474.696562][T10976] ? __mutex_lock+0x335/0x1350 [ 474.696589][T10976] ? __pfx_ip_set_create+0x10/0x10 [ 474.696656][T10976] nfnetlink_rcv_msg+0xb4d/0x1130 [ 474.696686][T10976] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 474.696735][T10976] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 474.696761][T10976] ? kasan_save_track+0x4f/0x80 [ 474.696839][T10976] netlink_rcv_skb+0x208/0x470 [ 474.696869][T10976] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.696898][T10976] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 474.696929][T10976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.696973][T10976] ? bpf_lsm_capable+0x9/0x20 [ 474.696992][T10976] ? security_capable+0x7e/0x2e0 [ 474.697022][T10976] nfnetlink_rcv+0x282/0x2590 [ 474.697053][T10976] ? __dev_queue_xmit+0x27b/0x3b50 [ 474.697079][T10976] ? __dev_queue_xmit+0x1d79/0x3b50 [ 474.697099][T10976] ? kasan_save_track+0x3e/0x80 [ 474.697131][T10976] ? __kasan_slab_alloc+0x6c/0x80 [ 474.697165][T10976] ? __dev_queue_xmit+0x27b/0x3b50 [ 474.697202][T10976] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 474.697228][T10976] ? __pfx___dev_queue_xmit+0x10/0x10 [ 474.697266][T10976] ? ref_tracker_free+0x63a/0x7d0 [ 474.697290][T10976] ? __asan_memcpy+0x40/0x70 [ 474.697310][T10976] ? __pfx_ref_tracker_free+0x10/0x10 [ 474.697331][T10976] ? __skb_clone+0x63/0x7a0 [ 474.697364][T10976] ? __skb_clone+0x483/0x7a0 [ 474.697402][T10976] ? skb_clone+0x246/0x3a0 [ 474.697427][T10976] ? __netlink_deliver_tap+0x807/0x850 [ 474.697458][T10976] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.697497][T10976] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.697537][T10976] netlink_unicast+0x82f/0x9e0 [ 474.697575][T10976] ? __pfx_netlink_unicast+0x10/0x10 [ 474.697606][T10976] ? netlink_sendmsg+0x642/0xb30 [ 474.697635][T10976] ? skb_put+0x11b/0x210 [ 474.697671][T10976] netlink_sendmsg+0x805/0xb30 [ 474.697727][T10976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.697761][T10976] ? __import_iovec+0x5d4/0x7f0 [ 474.697786][T10976] ? aa_sock_msg_perm+0xf1/0x1d0 [ 474.697813][T10976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.697848][T10976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.697881][T10976] __sock_sendmsg+0x21c/0x270 [ 474.697909][T10976] ____sys_sendmsg+0x505/0x830 [ 474.697949][T10976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.698000][T10976] ___sys_sendmsg+0x21f/0x2a0 [ 474.698037][T10976] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.698117][T10976] ? __fget_files+0x2a/0x420 [ 474.698143][T10976] ? __fget_files+0x3a0/0x420 [ 474.698180][T10976] __sys_sendmsg+0x164/0x220 [ 474.698216][T10976] ? __pfx___sys_sendmsg+0x10/0x10 [ 474.698261][T10976] ? __pfx_ksys_write+0x10/0x10 [ 474.698288][T10976] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 474.698313][T10976] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.698337][T10976] __do_fast_syscall_32+0xb6/0x2b0 [ 474.698362][T10976] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.698399][T10976] do_fast_syscall_32+0x34/0x80 [ 474.698422][T10976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.698455][T10976] RIP: 0023:0xf703d539 [ 474.698474][T10976] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 474.698492][T10976] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 474.698515][T10976] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 474.698530][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.698543][T10976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.698555][T10976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 474.698567][T10976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.698598][T10976] [ 475.413916][ T9488] ftdi_sio 4-1:165.233: FTDI USB Serial Device converter detected [ 475.444863][ T9488] ftdi_sio ttyUSB0: unknown device type: 0x3bec [ 475.462213][T10980] vhci_hcd vhci_hcd.0: port 0 already used [ 475.472057][ T9488] ftdi_sio 4-1:165.29: FTDI USB Serial Device converter detected [ 475.510281][T10963] usbtmc 1-1:16.0: simple control status returned 0 [ 475.524750][ T9488] ftdi_sio ttyUSB1: unknown device type: 0x3bec [ 475.537556][T10980] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 475.550942][T10980] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 475.645963][ T9488] usb 4-1: USB disconnect, device number 65 [ 475.684996][ T9488] ftdi_sio 4-1:165.233: device disconnected [ 475.731783][ T9488] ftdi_sio 4-1:165.29: device disconnected [ 475.738933][ T24] usb 1-1: USB disconnect, device number 64 [ 476.197988][T10999] input: syz0 as /devices/virtual/input/input29 [ 476.803210][T11003] netlink: 436 bytes leftover after parsing attributes in process `syz.0.1383'. [ 476.812353][T11003] netlink: 254 bytes leftover after parsing attributes in process `syz.0.1383'. [ 476.874069][T11003] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1383'. [ 477.059959][T11009] loop9: detected capacity change from 0 to 7 [ 477.090517][T11009] Dev loop9: unable to read RDB block 7 [ 477.251766][T11012] binder: 11004:11012 ioctl c0306201 0 returned -14 [ 477.280222][T11009] loop9: unable to read partition table [ 477.314356][T11009] loop9: partition table beyond EOD, truncated [ 477.417981][T11009] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 477.503839][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 477.680158][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 477.693226][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 477.733940][ T5935] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 477.743270][ T9] usb 3-1: config 0 has no interface number 0 [ 477.778659][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 477.795483][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.834294][ T9] usb 3-1: Product: syz [ 477.851419][ T9] usb 3-1: Manufacturer: syz [ 477.863598][ T9] usb 3-1: SerialNumber: syz [ 477.871038][ T9] usb 3-1: config 0 descriptor?? [ 477.892061][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 477.903870][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 477.926867][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.938437][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.019731][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 478.030863][ T5935] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 478.042846][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.109751][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 478.167631][ T5935] usb 1-1: config 0 descriptor?? [ 478.175275][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 478.684311][T11030] veth0_to_team: entered promiscuous mode [ 478.690873][T11031] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 478.702931][T11030] veth0_to_team: entered allmulticast mode [ 478.783612][ T5935] hid (null): unknown global tag 0xd [ 478.862752][ T5935] hid (null): unknown global tag 0xc [ 478.881140][T11031] bond2: entered promiscuous mode [ 478.890354][T11031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.918054][ T5935] hid (null): invalid report_size 50470 [ 478.957280][ T5935] cougar 0003:060B:500A.0009: unexpected long global item [ 478.987594][ T5935] cougar 0003:060B:500A.0009: parse failed [ 478.993637][ T5935] cougar 0003:060B:500A.0009: probe with driver cougar failed with error -22 [ 479.212280][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1393'. [ 479.221617][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1393'. [ 479.683189][ T5935] usb 1-1: USB disconnect, device number 65 [ 479.723871][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 479.905841][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 479.908549][ T8051] usb 3-1: USB disconnect, device number 53 [ 479.923843][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 479.947865][ T8051] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 479.984155][ T9488] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 480.012172][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 480.023053][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.045952][ T8051] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 480.059776][ T9] usb 5-1: Product: syz [ 480.072659][ T9] usb 5-1: Manufacturer: syz [ 480.082695][ T9] usb 5-1: SerialNumber: syz [ 480.131677][ T9] usb 5-1: config 0 descriptor?? [ 480.181957][ T9488] usb 4-1: config 0 has no interfaces? [ 480.188774][ T8051] quatech2 3-1:0.51: device disconnected [ 480.244342][ T9488] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 480.277994][ T9488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.287111][ T9488] usb 4-1: Product: syz [ 480.291321][ T9488] usb 4-1: Manufacturer: syz [ 480.296352][ T9488] usb 4-1: SerialNumber: syz [ 480.304265][ T9488] usb 4-1: config 0 descriptor?? [ 480.580675][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.598937][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.100211][T11062] openvswitch: netlink: Missing valid actions attribute. [ 481.113920][T11062] openvswitch: netlink: Actions may not be safe on all matching packets [ 481.165526][T11060] pim6reg: entered allmulticast mode [ 481.307309][ T9] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 481.329124][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 481.409466][T11065] trusted_key: syz.1.1399 sent an empty control message without MSG_MORE. [ 481.772846][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'. [ 481.785608][T11065] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1399'. [ 482.212452][ T9] usb 5-1: USB disconnect, device number 49 [ 482.338030][T11071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1401'. [ 482.829813][T11072] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1401'. [ 483.090801][ T9] usb 4-1: USB disconnect, device number 66 [ 483.523901][ T5935] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 484.059910][T11091] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 484.067935][T11091] netlink: 'syz.3.1407': attribute type 2 has an invalid length. [ 484.333981][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 484.359026][ T5935] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 484.389584][ T5935] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.450994][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.537626][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.573795][ T5935] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.691288][ T5935] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 484.792186][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.328853][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 485.668436][T11106] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 486.276074][ T8051] usb 5-1: USB disconnect, device number 50 [ 486.374140][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 487.302307][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 487.317896][ T9] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 487.329341][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 487.338935][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.511233][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 488.511255][ T30] audit: type=1326 audit(1760303786.802:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 488.620009][ T30] audit: type=1326 audit(1760303786.802:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 488.654614][ T30] audit: type=1326 audit(1760303786.802:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 488.759379][ T30] audit: type=1326 audit(1760303786.802:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 488.781379][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.793495][ T30] audit: type=1326 audit(1760303786.802:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 488.815526][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.874765][ T30] audit: type=1326 audit(1760303786.802:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 488.971855][ T30] audit: type=1326 audit(1760303786.802:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 489.064588][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.072202][ T30] audit: type=1326 audit(1760303786.802:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 489.094249][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.101133][ T30] audit: type=1326 audit(1760303786.802:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 489.143465][T11145] syzkaller0: entered promiscuous mode [ 489.183511][ T30] audit: type=1326 audit(1760303786.802:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11134 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 489.297330][T11145] syzkaller0: entered allmulticast mode [ 489.603218][T11120] syz.2.1415 (11120): drop_caches: 2 [ 489.811181][ T9] usb 1-1: USB disconnect, device number 66 [ 490.394508][ T9488] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 490.694335][ T9488] usb 1-1: Using ep0 maxpacket: 8 [ 490.701537][ T9488] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 490.731401][ T9488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.740149][ T8051] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 490.787372][ T9488] pvrusb2: Hardware description: Terratec Grabster AV400 [ 490.834629][ T9488] pvrusb2: ********** [ 490.838771][ T9488] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 490.863763][ T9488] pvrusb2: Important functionality might not be entirely working. [ 490.892622][T11167] fuse: Bad value for 'fd' [ 490.896238][ T8051] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 490.926652][ T9488] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 490.939076][ T8051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.974832][ T8051] usb 3-1: config 0 descriptor?? [ 490.980093][ T9488] pvrusb2: ********** [ 491.003832][ T2345] pvrusb2: Invalid write control endpoint [ 491.194358][T11162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1427'. [ 491.224034][T11162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1427'. [ 491.257973][T11162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1427'. [ 491.278183][T11176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.295360][T11176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.337066][T11162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1427'. [ 491.374809][ T2345] pvrusb2: Invalid write control endpoint [ 491.399746][T11176] ------------[ cut here ]------------ [ 491.405397][T11176] usb 2-1: BOGUS control dir, pipe 80003080 doesn't match bRequestType c0 [ 491.450263][T11176] WARNING: CPU: 0 PID: 11176 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 491.460214][T11176] Modules linked in: [ 491.464740][T11176] CPU: 0 UID: 0 PID: 11176 Comm: syz.0.1426 Not tainted syzkaller #0 PREEMPT(full) [ 491.475085][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.486010][T11176] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 491.491717][T11176] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 491.511398][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.517584][T11176] RSP: 0018:ffffc90003397660 EFLAGS: 00010246 [ 491.523789][T11176] RAX: 27130fc1761a6400 RBX: ffff88814cc9d300 RCX: 0000000000080000 [ 491.531841][T11176] RDX: ffffc9000e121000 RSI: 000000000000360a RDI: 000000000000360b [ 491.539887][T11176] RBP: 1ffff1100f1c6294 R08: ffffc90003397387 R09: 1ffff92000672e70 [ 491.548000][T11176] R10: dffffc0000000000 R11: fffff52000672e71 R12: ffff888024b11100 [ 491.556249][T11176] R13: ffff888078e314a0 R14: 0000000080003080 R15: ffff8880311fe9c0 [ 491.564451][T11176] FS: 0000000000000000(0000) GS:ffff888125d0c000(0063) knlGS:00000000f5465b40 [ 491.573431][T11176] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 491.581017][T11176] CR2: 00000000f5127973 CR3: 00000000528ec000 CR4: 00000000003526f0 [ 491.589857][T11176] Call Trace: [ 491.593178][T11176] [ 491.596240][T11176] usb_start_wait_urb+0x114/0x4c0 [ 491.601339][T11176] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 491.607028][T11176] usb_control_msg+0x232/0x3e0 [ 491.611870][T11176] dib0700_i2c_xfer+0xba7/0xf70 [ 491.616825][T11176] __i2c_transfer+0x874/0x2170 [ 491.621645][T11176] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.626966][T11176] ? __pfx___i2c_transfer+0x10/0x10 [ 491.632252][T11176] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 491.637707][T11176] ? i2c_transfer+0x120/0x3a0 [ 491.642437][T11176] i2c_transfer+0x25b/0x3a0 [ 491.647063][T11176] ? __pfx_i2c_transfer+0x10/0x10 [ 491.652154][T11176] ? _copy_from_user+0x94/0xb0 [ 491.657011][T11176] i2cdev_ioctl_rdwr+0x460/0x740 [ 491.662067][T11176] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 491.667429][T11176] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 491.673145][T11176] ? __fget_files+0x3a0/0x420 [ 491.677980][T11176] ? __fget_files+0x2a/0x420 [ 491.680713][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 491.683557][T11176] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 491.698718][T11176] __ia32_compat_sys_ioctl+0x543/0x840 [ 491.704083][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 491.704280][T11176] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 491.717904][T11176] ? __se_sys_futex_time32+0x360/0x3e0 [ 491.718137][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 491.723406][T11176] ? do_sock_setsockopt+0x185/0x1b0 [ 491.723448][T11176] ? kfree+0x4d/0x6d0 [ 491.742812][T11176] ? rcu_is_watching+0x15/0xb0 [ 491.747993][T11176] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 491.754860][T11176] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.760200][T11176] __do_fast_syscall_32+0xb6/0x2b0 [ 491.765490][T11176] do_fast_syscall_32+0x34/0x80 [ 491.770451][T11176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.776891][T11176] RIP: 0023:0xf7f93539 [ 491.781875][T11176] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 491.791097][ T2345] pvrusb2: Device being rendered inoperable [ 491.802573][T11176] RSP: 002b:00000000f546555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 491.816266][T11176] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 491.821101][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 491.824316][T11176] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.824338][T11176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.824355][T11176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 491.824372][T11176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.824410][T11176] [ 491.824424][T11176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 491.824440][T11176] CPU: 0 UID: 0 PID: 11176 Comm: syz.0.1426 Not tainted syzkaller #0 PREEMPT(full) [ 491.824464][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.824482][T11176] Call Trace: [ 491.824494][T11176] [ 491.824505][T11176] dump_stack_lvl+0x99/0x250 [ 491.824543][T11176] ? __asan_memcpy+0x40/0x70 [ 491.824572][T11176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.824618][T11176] ? __pfx__printk+0x10/0x10 [ 491.824664][T11176] vpanic+0x237/0x6d0 [ 491.824702][T11176] ? __pfx_vpanic+0x10/0x10 [ 491.824754][T11176] panic+0xb9/0xc0 [ 491.824791][T11176] ? __pfx_panic+0x10/0x10 [ 491.824847][T11176] __warn+0x31b/0x4b0 [ 491.824883][T11176] ? usb_submit_urb+0x114d/0x18b0 [ 491.824923][T11176] ? usb_submit_urb+0x114d/0x18b0 [ 491.824959][T11176] report_bug+0x2be/0x4f0 [ 491.824985][T11176] ? usb_submit_urb+0x114d/0x18b0 [ 491.825022][T11176] ? usb_submit_urb+0x114d/0x18b0 [ 491.825057][T11176] ? usb_submit_urb+0x114f/0x18b0 [ 491.825093][T11176] handle_bug+0x84/0x160 [ 491.825125][T11176] exc_invalid_op+0x1a/0x50 [ 491.825158][T11176] asm_exc_invalid_op+0x1a/0x20 [ 491.825182][T11176] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 491.825222][T11176] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 491.825246][T11176] RSP: 0018:ffffc90003397660 EFLAGS: 00010246 [ 491.825271][T11176] RAX: 27130fc1761a6400 RBX: ffff88814cc9d300 RCX: 0000000000080000 [ 491.825292][T11176] RDX: ffffc9000e121000 RSI: 000000000000360a RDI: 000000000000360b [ 491.825311][T11176] RBP: 1ffff1100f1c6294 R08: ffffc90003397387 R09: 1ffff92000672e70 [ 491.825333][T11176] R10: dffffc0000000000 R11: fffff52000672e71 R12: ffff888024b11100 [ 491.825354][T11176] R13: ffff888078e314a0 R14: 0000000080003080 R15: ffff8880311fe9c0 [ 491.825415][T11176] usb_start_wait_urb+0x114/0x4c0 [ 491.825465][T11176] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 491.825529][T11176] usb_control_msg+0x232/0x3e0 [ 491.825577][T11176] dib0700_i2c_xfer+0xba7/0xf70 [ 491.825650][T11176] __i2c_transfer+0x874/0x2170 [ 491.825688][T11176] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.825729][T11176] ? __pfx___i2c_transfer+0x10/0x10 [ 491.825765][T11176] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 491.825798][T11176] ? i2c_transfer+0x120/0x3a0 [ 491.825834][T11176] i2c_transfer+0x25b/0x3a0 [ 491.825869][T11176] ? __pfx_i2c_transfer+0x10/0x10 [ 491.825908][T11176] ? _copy_from_user+0x94/0xb0 [ 491.825951][T11176] i2cdev_ioctl_rdwr+0x460/0x740 [ 491.826000][T11176] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 491.826044][T11176] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 491.826082][T11176] ? __fget_files+0x3a0/0x420 [ 491.826113][T11176] ? __fget_files+0x2a/0x420 [ 491.826151][T11176] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 491.826197][T11176] __ia32_compat_sys_ioctl+0x543/0x840 [ 491.826229][T11176] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 491.826263][T11176] ? __se_sys_futex_time32+0x360/0x3e0 [ 491.826297][T11176] ? do_sock_setsockopt+0x185/0x1b0 [ 491.826336][T11176] ? kfree+0x4d/0x6d0 [ 491.826369][T11176] ? rcu_is_watching+0x15/0xb0 [ 491.826413][T11176] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 491.826443][T11176] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.826475][T11176] __do_fast_syscall_32+0xb6/0x2b0 [ 491.826514][T11176] do_fast_syscall_32+0x34/0x80 [ 491.826543][T11176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.826576][T11176] RIP: 0023:0xf7f93539 [ 491.826606][T11176] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 491.826630][T11176] RSP: 002b:00000000f546555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 491.826657][T11176] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 491.826675][T11176] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.826693][T11176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.826708][T11176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 491.826725][T11176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.826766][T11176] [ 491.831878][T11176] Kernel Offset: disabled