last executing test programs: 11.070777919s ago: executing program 3 (id=416): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) socket$inet6(0xa, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103900000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@ng={0x4, 0xb, "b175562e5673"}, 0x8, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) close(r7) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$dsp(r0, &(0x7f00000012c0), 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) 11.008934252s ago: executing program 0 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000110001030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) 10.804521947s ago: executing program 0 (id=419): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe80000000000000000000000000008a3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0x1}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.778162948s ago: executing program 3 (id=423): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe800000000000002f000000000000aa"], 0x0) 8.453860695s ago: executing program 3 (id=426): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120301c8f01b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_clone(0x8000000, &(0x7f0000000240), 0x0, 0x0, 0x0, &(0x7f00000003c0)="85f815a8") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="4005dd00000072"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="4005dd00000072"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)={0x0, 0xa, 0x1, "a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.167027433s ago: executing program 4 (id=431): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x40, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newrule={0x5c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x10001}]}, 0x5c}}, 0x48850) 6.57481499s ago: executing program 4 (id=436): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = getpid() r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000600)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_pidfd_open(r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/protocols\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000600)=""/68, 0x44}], 0x2, 0x9, 0x0) 6.39433742s ago: executing program 0 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a003f040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) 6.108818456s ago: executing program 0 (id=438): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x5c, 0x140f, 0x20, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0x40, &(0x7f0000000980)={0x0, 0x6b71, 0x80, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40000036, r5, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000200)="e5000a03d847879268683cf525db15416a954cb1d7e22717396355a22ca2a25b914f8bf220d27f18a620c5d9c70716b98d2b7f5d069ee36231bd5567ec77bc0e087bdd9a6c16a09b5d65a0cdcf67b76659", 0x51}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.225205117s ago: executing program 3 (id=441): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="000b8e0000008e099fee84b64bde36f9962690cf88fe409431d4430ba51d8505c0df1160dc9c1b557cc3839ffd4a0f9c80df570811284d5698f1995b95d4dd344113dd197bc2aabb2c9fbcb8f8a205f638267cc662da98571239aee6e40894b0bde0db41224002f6f79222d0c2660f8d619cb556c4e9b4483b193de415c39c663fd08361b7ab60abd7cc254f04bbca9853709f06d4"], &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000a40)=""/4112, 0x1010}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) brk(0x0) 4.719670607s ago: executing program 0 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x4040, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000200)=0x9, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r5) truncate(0x0, 0x9) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYRES32=r4]) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r6, 0x4018aee2, &(0x7f0000000100)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000140)={0x9, 0xaa}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f0000000040)={0x43, 0x359f35d7abcd234}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r8, @ANYRES32, @ANYRES8=r3], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001cfffe0000006791ffffff100090786764000f"], 0x0) 4.404828134s ago: executing program 1 (id=446): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x700, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 3.940800985s ago: executing program 1 (id=447): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r3) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0xdb, 0xc}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x46, 0xcf, 0x10, 0x4dd, 0x8002, 0xfcb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000010000000900010073797a3000cbe0003c000000090a010400000000000000000100000508001440000000000900020073797a0300000000054000000010300000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000040003801400000010000100000000000000000000f8000a"], 0xb4}}, 0x20000080) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2281, 0x8000}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x400}, @IFLA_GROUP={0x8, 0x1b, 0x7017}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4cc4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 3.88499457s ago: executing program 4 (id=448): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x40, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x4c}}, 0x48850) 2.809736334s ago: executing program 0 (id=449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') r3 = syz_open_dev$loop(&(0x7f0000000040), 0xf5d, 0x44801) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x2, 0x4}) mlock2(&(0x7f0000a32000/0xe000)=nil, 0xe000, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x80000008, 0x0, 0x0, 0x5}, {0x76b48f433226e54c, 0x5, 0xe, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0xc, 0x0, 0xa, 0x7fe}]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000060010000000000000000010203010902120001000000000904f80000a93bae00"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x308, 0x0, 0x3}, 0x18, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[]) 2.749025749s ago: executing program 2 (id=450): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400014002020a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6", 0xd1}], 0x1}, 0x0) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r3, &(0x7f0000000000), 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r4, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 2.164894258s ago: executing program 1 (id=453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x144}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000020000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 1.950321349s ago: executing program 4 (id=454): syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r5, r3) epoll_create(0x80) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) 1.843393984s ago: executing program 1 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000001000000000000", @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.621076972s ago: executing program 3 (id=456): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed60205000000000007000000604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c", 0x6f, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000800)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa", 0x6f, 0x940, 0x0, 0x4c1d) 1.303796169s ago: executing program 3 (id=457): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$swradio(&(0x7f0000000ac0), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0cc5604, &(0x7f0000000c00)={0x2, @win={{0x7fff, 0x0, 0xb, 0x96}, 0x0, 0x31b, 0x0, 0x5, 0x0, 0xbc}}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r4 = open_tree(0xffffffffffffffff, 0x0, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) splice(r5, 0x0, r6, 0x0, 0x6, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0xc2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_wolinfo={0x6, 0x3ff, 0x1, "1969751cd090"}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) 1.097728265s ago: executing program 1 (id=458): r0 = socket(0x2c, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="92a4309972d856495396e00a8f87e76178656c3971d5dbae69bfaabcc331bb7bcea57270b6726eaa988d6f6480c75a80d9b57282d4d1035c929e46b5614969bef021e40d06f421026ded24ea433e31fa2aa7a27ffeaf1b72fb18745cb5ed36ecc6a7e92b1641ea3c"], 0x30}}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xcb}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 644.391884ms ago: executing program 2 (id=459): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000033000000000000aa"], 0x0) 588.446073ms ago: executing program 4 (id=460): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) sendto$inet(r0, &(0x7f0000000000)="dcc6", 0x2, 0x0, &(0x7f0000001100)={0x2, 0x0, @private=0x60000000}, 0x10) 517.020315ms ago: executing program 2 (id=461): r0 = socket$inet6(0xa, 0x6, 0x10000b) r1 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r1, 0x200004) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000140)={0x0, 0xf88, 0x7, r1, 0x0, &(0x7f0000000100)={0x9909db, 0xd, '\x00', @p_u8=&(0x7f00000000c0)=0x2}}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x13) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) read(r2, &(0x7f0000000000)=""/3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 409.249949ms ago: executing program 4 (id=462): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='{{^-6{[@\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES32=r2]) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589", @ANYRES16=r4, @ANYRESOCT=r3, @ANYRES32=r2, @ANYRESHEX=r4], 0x0) 398.228712ms ago: executing program 2 (id=463): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) getsockname$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/4096, 0x1000}, 0x6}], 0x1, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000600)=@x86={0x7, 0x0, 0x8, 0x0, 0x8, 0x8, 0x4, 0xb, 0x3, 0xf, 0x5, 0x70, 0x0, 0x9, 0x2b, 0x0, 0x0, 0x8, 0x8, '\x00', 0x4, 0xd}) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 2 (id=464): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x40, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x40}}, 0x48850) kernel console output (not intermixed with test programs): R{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.756131][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 86.840744][ T24] cfg80211: failed to load regulatory.db [ 86.927685][ T5926] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.145087][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 87.146447][ T6064] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (2) [ 87.181390][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 87.188875][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 87.207226][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.257212][ T6068] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 87.292069][ T5926] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 87.369754][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.470527][ T5926] usb 1-1: Product: syz [ 87.515503][ T5926] usb 1-1: Manufacturer: syz [ 87.551186][ T5926] usb 1-1: SerialNumber: syz [ 87.564709][ T5926] usb 1-1: config 0 descriptor?? [ 87.593586][ T5926] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 87.616101][ T5926] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 88.209250][ T5926] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 88.231214][ T5926] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 88.351526][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 88.536701][ T6088] syz.4.40 uses obsolete (PF_INET,SOCK_PACKET) [ 88.714959][ T6079] program syz.3.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.749144][ T5945] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 88.852356][ T5926] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 88.860746][ T5926] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 88.869844][ T5926] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 88.879768][ T5926] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 88.886884][ T5945] usb 3-1: device descriptor read/64, error -71 [ 89.158932][ T5945] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.265538][ T6099] sg_write: process 28 (syz.1.38) changed security contexts after opening file descriptor, this is not allowed. [ 89.475511][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.526792][ T5945] usb 3-1: device descriptor read/64, error -71 [ 89.567396][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.754566][ T5945] usb usb3-port1: attempt power cycle [ 89.826416][ T5926] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 89.852578][ T5926] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 89.910472][ T5926] usb 1-1: USB disconnect, device number 3 [ 90.044332][ T6079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36'. [ 90.118793][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 90.206927][ T5945] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 90.237678][ T5945] usb 3-1: device descriptor read/8, error -71 [ 90.436742][ T5868] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.527185][ T5945] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 90.596888][ T5945] usb 3-1: device descriptor read/8, error -71 [ 90.648933][ T6108] bridge0: entered promiscuous mode [ 90.656457][ T6108] vlan2: entered promiscuous mode [ 90.667722][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 90.684522][ T6110] FAULT_INJECTION: forcing a failure. [ 90.684522][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 90.697894][ T5868] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.702125][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) [ 90.702150][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.702160][ T6110] Call Trace: [ 90.702168][ T6110] [ 90.702176][ T6110] dump_stack_lvl+0x189/0x250 [ 90.702204][ T6110] ? __pfx____ratelimit+0x10/0x10 [ 90.702231][ T6110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.702253][ T6110] ? __pfx__printk+0x10/0x10 [ 90.702294][ T6110] should_fail_ex+0x414/0x560 [ 90.702324][ T6110] should_failslab+0xa8/0x100 [ 90.702352][ T6110] __kmalloc_cache_noprof+0x70/0x3d0 [ 90.702377][ T6110] ? sctp_add_bind_addr+0x8c/0x370 [ 90.702407][ T6110] sctp_add_bind_addr+0x8c/0x370 [ 90.702436][ T6110] sctp_copy_local_addr_list+0x30b/0x4e0 [ 90.702465][ T6110] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 90.702490][ T6110] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 90.702523][ T6110] ? sctp_v6_is_any+0x64/0x80 [ 90.702551][ T6110] ? sctp_copy_one_addr+0x93/0x360 [ 90.702580][ T6110] sctp_bind_addr_copy+0xb3/0x3c0 [ 90.702605][ T6110] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 90.702631][ T6110] sctp_connect_new_asoc+0x2e0/0x690 [ 90.702653][ T6110] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 90.702670][ T6110] ? __local_bh_enable_ip+0x12d/0x1c0 [ 90.702696][ T6110] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 90.702719][ T6110] ? security_sctp_bind_connect+0x7e/0x2e0 [ 90.702746][ T6110] sctp_sendmsg+0x155c/0x2810 [ 90.702787][ T6110] ? __pfx_sctp_sendmsg+0x10/0x10 [ 90.702819][ T6110] ? aa_sk_perm+0x81e/0x950 [ 90.702851][ T6110] ? __pfx_aa_sk_perm+0x10/0x10 [ 90.702881][ T6110] ? sock_rps_record_flow+0x19/0x410 [ 90.702908][ T6110] ? inet_sendmsg+0x2f4/0x370 [ 90.702935][ T6110] __sock_sendmsg+0x19c/0x270 [ 90.702963][ T6110] __sys_sendto+0x3bd/0x520 [ 90.702983][ T6110] ? __pfx___sys_sendto+0x10/0x10 [ 90.702997][ T6110] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 90.703038][ T6110] ? __fget_files+0x3a0/0x420 [ 90.703077][ T6110] ? ksys_write+0x22a/0x250 [ 90.703114][ T6110] __ia32_sys_sendto+0xdd/0x100 [ 90.703135][ T6110] __do_fast_syscall_32+0xb6/0x2b0 [ 90.703164][ T6110] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.703194][ T6110] do_fast_syscall_32+0x34/0x80 [ 90.703222][ T6110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.703244][ T6110] RIP: 0023:0xf7fc5539 [ 90.703260][ T6110] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 90.703276][ T6110] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 90.703295][ T6110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 90.703308][ T6110] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080 [ 90.703319][ T6110] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 90.703329][ T6110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 90.703339][ T6110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.703367][ T6110] [ 90.737634][ T5945] usb usb3-port1: unable to enumerate USB device [ 90.763893][ T5868] usb 5-1: config 0 interface 0 has no altsetting 0 [ 91.043304][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 91.053544][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.123077][ T5868] usb 5-1: config 0 descriptor?? [ 91.185452][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 91.356435][ T5868] usbhid 5-1:0.0: can't add hid device: -71 [ 91.363239][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 91.427053][ T5868] usb 5-1: USB disconnect, device number 2 [ 91.529362][ T30] audit: type=1326 audit(1756049279.945:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.51" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe539 code=0x0 [ 91.715554][ T6123] pim6reg: entered allmulticast mode [ 91.725282][ T6123] pim6reg: left allmulticast mode [ 92.008840][ T6130] FAULT_INJECTION: forcing a failure. [ 92.008840][ T6130] name failslab, interval 1, probability 0, space 0, times 0 [ 92.047100][ T5945] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.056234][ T6130] CPU: 0 UID: 0 PID: 6130 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(full) [ 92.056254][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.056260][ T6130] Call Trace: [ 92.056265][ T6130] [ 92.056270][ T6130] dump_stack_lvl+0x189/0x250 [ 92.056288][ T6130] ? __pfx____ratelimit+0x10/0x10 [ 92.056304][ T6130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.056315][ T6130] ? __pfx__printk+0x10/0x10 [ 92.056330][ T6130] ? __pfx___might_resched+0x10/0x10 [ 92.056340][ T6130] ? fs_reclaim_acquire+0x7d/0x100 [ 92.056361][ T6130] should_fail_ex+0x414/0x560 [ 92.056378][ T6130] should_failslab+0xa8/0x100 [ 92.056393][ T6130] kmem_cache_alloc_noprof+0x73/0x3c0 [ 92.056406][ T6130] ? security_file_alloc+0x34/0x330 [ 92.056421][ T6130] security_file_alloc+0x34/0x330 [ 92.056435][ T6130] init_file+0x93/0x2f0 [ 92.056447][ T6130] alloc_empty_file+0x6e/0x1d0 [ 92.056458][ T6130] path_openat+0x107/0x3830 [ 92.056469][ T6130] ? arch_stack_walk+0xfc/0x150 [ 92.056487][ T6130] ? stack_trace_save+0x9c/0xe0 [ 92.056501][ T6130] ? stack_depot_save_flags+0x40/0x860 [ 92.056514][ T6130] ? __lock_acquire+0xaa1/0xd20 [ 92.056536][ T6130] ? kasan_save_track+0x4f/0x80 [ 92.056555][ T6130] ? kasan_save_track+0x3e/0x80 [ 92.056573][ T6130] ? __kasan_slab_alloc+0x6c/0x80 [ 92.056595][ T6130] ? getname_flags+0xb8/0x540 [ 92.056606][ T6130] ? __pfx_path_openat+0x10/0x10 [ 92.056616][ T6130] ? do_fast_syscall_32+0x34/0x80 [ 92.056630][ T6130] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.056652][ T6130] do_filp_open+0x1fa/0x410 [ 92.056663][ T6130] ? __lock_acquire+0xab9/0xd20 [ 92.056678][ T6130] ? __pfx_do_filp_open+0x10/0x10 [ 92.056701][ T6130] ? _raw_spin_unlock+0x28/0x50 [ 92.056713][ T6130] ? alloc_fd+0x64c/0x6c0 [ 92.056733][ T6130] do_sys_openat2+0x121/0x1c0 [ 92.056746][ T6130] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.056758][ T6130] ? ksys_write+0x22a/0x250 [ 92.056775][ T6130] __ia32_compat_sys_openat+0x131/0x160 [ 92.056789][ T6130] __do_fast_syscall_32+0xb6/0x2b0 [ 92.056804][ T6130] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.056820][ T6130] do_fast_syscall_32+0x34/0x80 [ 92.056835][ T6130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.056846][ T6130] RIP: 0023:0xf7fc5539 [ 92.056857][ T6130] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 92.056865][ T6130] RSP: 002b:00000000f54c5100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 92.056877][ T6130] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54c5150 [ 92.056884][ T6130] RDX: 0000000000000802 RSI: 0000000000000000 RDI: 00000000f7454ff4 [ 92.056890][ T6130] RBP: 0000000000000802 R08: 0000000000000000 R09: 0000000000000000 [ 92.056896][ T6130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.056901][ T6130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.056915][ T6130] [ 92.555430][ T6132] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 92.609208][ T5945] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.621346][ T5945] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.632836][ T5945] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.656102][ T5945] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 92.665622][ T30] audit: type=1326 audit(1756049281.025:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 92.687235][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.687250][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 92.687273][ T5945] usb 3-1: Product: syz [ 92.687287][ T5945] usb 3-1: Manufacturer: syz [ 92.687300][ T5945] usb 3-1: SerialNumber: syz [ 92.799501][ T30] audit: type=1326 audit(1756049281.035:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 92.821082][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.837001][ T6133] loop8: detected capacity change from 0 to 8 [ 92.847622][ T6133] Dev loop8: unable to read RDB block 8 [ 92.855099][ T6133] loop8: unable to read partition table [ 92.861533][ T30] audit: type=1326 audit(1756049281.175:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 92.910135][ T6133] loop8: partition table beyond EOD, truncated [ 92.919431][ T6132] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.936915][ T30] audit: type=1326 audit(1756049281.175:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 92.938121][ T5945] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 92.990431][ T6133] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 93.083438][ T30] audit: type=1326 audit(1756049281.205:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 93.122382][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 93.162015][ T6143] FAULT_INJECTION: forcing a failure. [ 93.162015][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 93.267138][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(full) [ 93.267163][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.267174][ T6143] Call Trace: [ 93.267181][ T6143] [ 93.267189][ T6143] dump_stack_lvl+0x189/0x250 [ 93.267218][ T6143] ? __pfx____ratelimit+0x10/0x10 [ 93.267245][ T6143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.267277][ T6143] ? __pfx__printk+0x10/0x10 [ 93.267310][ T6143] ? __pfx___might_resched+0x10/0x10 [ 93.267333][ T6143] should_fail_ex+0x414/0x560 [ 93.267364][ T6143] should_failslab+0xa8/0x100 [ 93.267393][ T6143] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 93.267420][ T6143] ? bprm_change_interp+0x82/0xc0 [ 93.267449][ T6143] kstrdup+0x42/0x100 [ 93.267472][ T6143] bprm_change_interp+0x82/0xc0 [ 93.267499][ T6143] load_misc_binary+0x856/0xc40 [ 93.267538][ T6143] bprm_execve+0x999/0x1450 [ 93.267582][ T6143] ? __pfx_bprm_execve+0x10/0x10 [ 93.267607][ T6143] ? copy_string_kernel+0x25f/0x2a0 [ 93.267636][ T6143] do_execveat_common+0x510/0x6a0 [ 93.267674][ T6143] __ia32_compat_sys_execveat+0xca/0xe0 [ 93.267705][ T6143] __do_fast_syscall_32+0xb6/0x2b0 [ 93.267734][ T6143] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.267765][ T6143] do_fast_syscall_32+0x34/0x80 [ 93.267794][ T6143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.267817][ T6143] RIP: 0023:0xf7f66539 [ 93.267833][ T6143] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 93.267849][ T6143] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 93.267869][ T6143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 93.267881][ T6143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 93.267893][ T6143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.267903][ T6143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.267915][ T6143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.267943][ T6143] [ 93.269441][ T30] audit: type=1326 audit(1756049281.205:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 93.573248][ T30] audit: type=1326 audit(1756049281.205:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 93.597890][ T30] audit: type=1326 audit(1756049281.245:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 93.630786][ T30] audit: type=1326 audit(1756049281.245:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 93.674368][ T6147] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.696482][ T6147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.798427][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 93.813365][ T6150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.57'. [ 93.831734][ T6150] IPv6: syztnl0: Disabled Multicast RS [ 93.872663][ T5945] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.966213][ T6152] binder_alloc: 6151: pid 6151 spamming oneway? 1 buffers allocated for a total size of 4096 [ 93.978459][ T6152] binder_alloc: 6151: pid 6151 spamming oneway? 2 buffers allocated for a total size of 5120 [ 94.027848][ T5945] usb 2-1: Using ep0 maxpacket: 8 [ 94.040853][ T5945] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 94.060034][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.074438][ T5945] usb 2-1: Product: syz [ 94.084407][ T6154] kvm: kvm [6153]: vcpu0, guest rIP: 0x8000000 Unhandled WRMSR(0x4000006f) = 0x6 [ 94.090170][ T5945] usb 2-1: Manufacturer: syz [ 94.120127][ T5945] usb 2-1: SerialNumber: syz [ 94.130552][ T5945] usb 2-1: config 0 descriptor?? [ 94.144974][ T5945] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 94.436632][ T5868] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.457333][ T5925] usb 3-1: USB disconnect, device number 6 [ 94.481953][ T5925] usblp0: removed [ 94.527749][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 94.553302][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 94.564374][ T6163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.63'. [ 94.593613][ T6163] netlink: 104 bytes leftover after parsing attributes in process `syz.2.63'. [ 94.609890][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.635200][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.660304][ T5868] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.687254][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.695282][ T5868] usb 4-1: Product: syz [ 94.702219][ T5868] usb 4-1: Manufacturer: syz [ 94.710592][ T5868] usb 4-1: SerialNumber: syz [ 94.888915][ T6171] input: syz0 as /devices/virtual/input/input5 [ 94.939372][ T6169] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (2) [ 95.003974][ T5868] usb 4-1: 0:2 : does not exist [ 95.033921][ T5868] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 95.094461][ T5868] usb 4-1: USB disconnect, device number 3 [ 95.157753][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.445820][ T6185] pim6reg: entered allmulticast mode [ 96.470313][ T6185] pim6reg: left allmulticast mode [ 96.728806][ T5945] gspca_sonixj: reg_w1 err -71 [ 96.783107][ T5945] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 96.826837][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.846242][ T5945] usb 2-1: USB disconnect, device number 4 [ 97.028579][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.124172][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.156218][ T6199] input: syz1 as /devices/virtual/input/input6 [ 97.163807][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.202510][ T10] usb 3-1: config 0 descriptor?? [ 97.252149][ T6201] fuse: Bad value for 'fd' [ 97.260664][ T6201] fuse: Unknown parameter '0xffffffffffffffff‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 97.494108][ T6203] program syz.1.74 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.566793][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 97.572846][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.591573][ T5945] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.704887][ T10] usb 3-1: USB disconnect, device number 7 [ 97.848921][ T6209] binder: BINDER_SET_CONTEXT_MGR already set [ 97.855129][ T6209] binder: 6208:6209 ioctl 4018620d 80000040 returned -16 [ 97.947872][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 97.972867][ T5945] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.993365][ T5945] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.010628][ T5945] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.038325][ T5945] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 98.216704][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 98.338709][ T5945] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 98.350602][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.364111][ T5945] usb 1-1: SerialNumber: syz [ 98.375444][ T5945] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 98.446181][ T5945] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 98.454505][ T5945] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 98.516641][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 98.524223][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.551686][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 98.584174][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.626035][ T10] usb 3-1: config 0 descriptor?? [ 99.058710][ T10] kye 0003:0458:5016.0002: control desc unexpectedly large [ 99.076439][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0002/input/input7 [ 99.107908][ T5945] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.149520][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0002/input/input8 [ 99.247043][ T10] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 99.287566][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 99.300934][ T5945] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 99.310774][ T5945] usb 2-1: config 0 has no interface number 0 [ 99.329396][ T5945] usb 2-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 99.347202][ T5945] usb 2-1: config 0 interface 244 has no altsetting 0 [ 99.370623][ T5945] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 99.395492][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.414849][ T5945] usb 2-1: Product: syz [ 99.419427][ T5945] usb 2-1: Manufacturer: syz [ 99.424097][ T5945] usb 2-1: SerialNumber: syz [ 99.439642][ T5945] usb 2-1: config 0 descriptor?? [ 99.463528][ T5945] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found [ 99.586321][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 99.600199][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 99.662182][ T5945] snd_usb_toneport 2-1:0.244: cannot get proper max packet size [ 99.690345][ T5945] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected [ 99.710413][ T5945] snd_usb_toneport 2-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 99.797178][ T5945] usb 3-1: USB disconnect, device number 8 [ 99.897452][ T10] usb 2-1: USB disconnect, device number 5 [ 100.090814][ T10] usb 1-1: USB disconnect, device number 4 [ 100.175744][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 100.185625][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 100.827024][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 100.988818][ T6252] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 101.025306][ T6252] gretap1: entered allmulticast mode [ 101.359239][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 101.867802][ T5925] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.131190][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 102.160011][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 102.216665][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 102.243786][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.289793][ T5925] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 102.299344][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.307008][ T6284] netlink: 'syz.4.97': attribute type 1 has an invalid length. [ 102.338736][ T6283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.382296][ T6284] gretap1: entered allmulticast mode [ 102.395306][ T5925] usb 4-1: Product: syz [ 102.412453][ T5925] usb 4-1: Manufacturer: syz [ 102.420361][ T5925] usb 4-1: SerialNumber: syz [ 102.676392][ T6284] bond1: (slave gretap1): making interface the new active one [ 102.685027][ T5925] usb 4-1: config 0 descriptor?? [ 102.762896][ T6284] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 102.765986][ T5925] usb 4-1: no audio or video endpoints found [ 102.874758][ T6284] syz.4.97 (6284) used greatest stack depth: 18232 bytes left [ 102.972017][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.981494][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.116516][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.141690][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.296675][ T5925] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.437644][ T5925] usb 5-1: device descriptor read/64, error -71 [ 103.686852][ T5925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.827100][ T5925] usb 5-1: device descriptor read/64, error -71 [ 103.963842][ T5925] usb usb5-port1: attempt power cycle [ 104.306829][ T5925] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.327635][ T5925] usb 5-1: device descriptor read/8, error -71 [ 104.423245][ T5945] usb 4-1: USB disconnect, device number 4 [ 104.916700][ T5925] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.924781][ T6322] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 105.000889][ T5925] usb 5-1: device descriptor read/8, error -71 [ 105.214872][ T5925] usb usb5-port1: unable to enumerate USB device [ 105.346914][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 105.505080][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 105.528151][ T6335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.112'. [ 105.533254][ T6336] netlink: 48 bytes leftover after parsing attributes in process `syz.3.112'. [ 105.577430][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 105.585529][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.596313][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.608370][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.618449][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.629653][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.645336][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.654518][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.662934][ T10] usb 3-1: Manufacturer: syz [ 105.670213][ T10] usb 3-1: config 0 descriptor?? [ 105.678171][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.816901][ T5925] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.857441][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 105.872577][ T5926] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.892633][ T5926] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.917177][ T5926] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 105.937263][ T5926] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 105.945663][ T5926] usb 1-1: Product: syz [ 105.962345][ T5926] usb 1-1: Manufacturer: syz [ 105.980381][ T5926] hub 1-1:4.0: USB hub found [ 105.993625][ T5925] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 106.005030][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.017707][ T10] rc_core: IR keymap rc-hauppauge not found [ 106.018935][ T5925] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 106.043948][ T10] Registered IR keymap rc-empty [ 106.046752][ T5925] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 106.049748][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.071840][ T5925] usb 4-1: Manufacturer: syz [ 106.089437][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.090172][ T5925] usb 4-1: config 0 descriptor?? [ 106.131957][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 106.179621][ T5926] hub 1-1:4.0: 2 ports detected [ 106.197024][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 106.241551][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.252509][ C0] mceusb 3-1:0.0: long-range (0x14) receiver active [ 106.276808][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.299237][ T5925] rc_core: IR keymap rc-hauppauge not found [ 106.310947][ T5925] Registered IR keymap rc-empty [ 106.314932][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.325205][ T5925] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 106.342555][ T6351] delete_channel: no stack [ 106.345591][ T5925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input10 [ 106.431453][ T5926] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 106.448777][ T5926] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 106.448841][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.592731][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.619521][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.650843][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.726763][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.809606][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.848019][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.912425][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 106.970715][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 107.134830][ T10] usb 3-1: USB disconnect, device number 9 [ 107.241603][ T5926] usb 4-1: USB disconnect, device number 5 [ 107.380282][ T6362] input: syz1 as /devices/virtual/input/input12 [ 107.728876][ T5925] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 107.732589][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 107.775018][ T6372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.819902][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.883356][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.038501][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 108.052262][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 108.121222][ T6375] macvlan2: entered promiscuous mode [ 108.129085][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 108.148339][ T6375] macvlan2: entered allmulticast mode [ 108.156444][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 108.160119][ T6375] bond2: entered promiscuous mode [ 108.179029][ T6375] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.185376][ T5925] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 108.198152][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.220886][ T6375] bond2: left promiscuous mode [ 108.224121][ T5925] usb 3-1: Product: syz [ 108.242424][ T5925] usb 3-1: Manufacturer: syz [ 108.255112][ T5925] usb 3-1: SerialNumber: syz [ 108.322091][ T5925] usb 3-1: config 0 descriptor?? [ 108.359958][ T5925] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 108.686116][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 108.737537][ T5926] usb 3-1: USB disconnect, device number 10 [ 108.852700][ T5925] usb 1-1: USB disconnect, device number 5 [ 109.156511][ T6395] loop2: detected capacity change from 0 to 7 [ 109.165244][ T6395] Dev loop2: unable to read RDB block 7 [ 109.171438][ T6395] loop2: AHDI p1 p2 p3 [ 109.176140][ T6395] loop2: partition table partially beyond EOD, truncated [ 109.185717][ T6395] loop2: p1 start 1601398130 is beyond EOD, truncated [ 109.201980][ T6395] loop2: p2 start 1702059890 is beyond EOD, truncated [ 109.667898][ T6409] fuse: Bad value for 'fd' [ 109.674879][ T6409] fuse: Unknown parameter '0xffffffffffffffff‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 110.297294][ T5945] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.786641][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 110.857898][ T5945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.898709][ T5945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.944923][ T5945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.999457][ T5945] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 111.048998][ T5945] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 111.082783][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.136826][ T5945] usb 4-1: SerialNumber: syz [ 111.196970][ T5945] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 111.215879][ T5945] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 111.224039][ T5945] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 112.393039][ T5868] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 112.686819][ T6447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.698702][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 113.038329][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.063266][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.191829][ T5925] usb 4-1: USB disconnect, device number 6 [ 114.036926][ T5925] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.207834][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 114.236014][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 114.254148][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 114.294007][ T5925] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 114.305528][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.315465][ T5925] usb 4-1: Product: syz [ 114.322061][ T5925] usb 4-1: Manufacturer: syz [ 114.338877][ T5925] usb 4-1: SerialNumber: syz [ 114.351317][ T5925] usb 4-1: config 0 descriptor?? [ 114.428269][ T5925] usb 4-1: no audio or video endpoints found [ 114.882517][ T6458] syz.4.144: vmalloc error: size 536875008, failed to allocated page array size 1048584, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 114.957817][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 114.973973][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.4.144 Not tainted syzkaller #0 PREEMPT(full) [ 114.973990][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.973997][ T6458] Call Trace: [ 114.974001][ T6458] [ 114.974007][ T6458] dump_stack_lvl+0x189/0x250 [ 114.974024][ T6458] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 114.974043][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.974055][ T6458] ? __pfx__printk+0x10/0x10 [ 114.974069][ T6458] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 114.974081][ T6458] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 114.974097][ T6458] warn_alloc+0x214/0x310 [ 114.974116][ T6458] ? __pfx_warn_alloc+0x10/0x10 [ 114.974135][ T6458] ? __get_vm_area_node+0x28f/0x300 [ 114.974149][ T6458] ? xskq_create+0xbf/0x170 [ 114.974171][ T6458] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 114.974201][ T6458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.974219][ T6458] ? __kasan_kmalloc+0x93/0xb0 [ 114.974234][ T6458] vmalloc_user_noprof+0xad/0xf0 [ 114.974248][ T6458] ? xskq_create+0xbf/0x170 [ 114.974262][ T6458] xskq_create+0xbf/0x170 [ 114.974277][ T6458] xsk_init_queue+0xb0/0x110 [ 114.974291][ T6458] xsk_setsockopt+0x57b/0x8d0 [ 114.974305][ T6458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.974319][ T6458] ? __pfx_aa_sk_perm+0x10/0x10 [ 114.974336][ T6458] ? aa_sock_opt_perm+0xff/0x1b0 [ 114.974347][ T6458] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 114.974358][ T6458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.974371][ T6458] do_sock_setsockopt+0x17c/0x1b0 [ 114.974385][ T6458] __ia32_sys_setsockopt+0x13f/0x1b0 [ 114.974398][ T6458] __do_fast_syscall_32+0xb6/0x2b0 [ 114.974417][ T6458] do_fast_syscall_32+0x34/0x80 [ 114.974432][ T6458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.974445][ T6458] RIP: 0023:0xf706e539 [ 114.974454][ T6458] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 114.974463][ T6458] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 114.974475][ T6458] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 114.974481][ T6458] RDX: 0000000000000002 RSI: 0000000080003b00 RDI: 0000000000000004 [ 114.974487][ T6458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.974493][ T6458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.974499][ T6458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.974513][ T6458] [ 114.974540][ T6458] Mem-Info: [ 115.296682][ T6458] active_anon:6147 inactive_anon:0 isolated_anon:0 [ 115.296682][ T6458] active_file:3345 inactive_file:39821 isolated_file:0 [ 115.296682][ T6458] unevictable:768 dirty:166 writeback:0 [ 115.296682][ T6458] slab_reclaimable:10617 slab_unreclaimable:96231 [ 115.296682][ T6458] mapped:32107 shmem:1357 pagetables:1198 [ 115.296682][ T6458] sec_pagetables:0 bounce:0 [ 115.296682][ T6458] kernel_misc_reclaimable:0 [ 115.296682][ T6458] free:1308650 free_pcp:18696 free_cma:0 [ 115.427091][ T6458] Node 0 active_anon:24788kB inactive_anon:0kB active_file:13380kB inactive_file:159084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128628kB dirty:664kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12076kB pagetables:4724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.490284][ T6458] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.551834][ T6458] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.631988][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.680882][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 115.681256][ T6458] lowmem_reserve[]: [ 115.688771][ T5868] usb 3-1: can't read configurations, error -71 [ 115.723635][ T6479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.742211][ T6458] 0 2497 2499 2499 2499 [ 115.748307][ T6458] Node 0 DMA32 free:1327956kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22736kB inactive_anon:0kB active_file:13380kB inactive_file:157512kB unevictable:1536kB writepending:664kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:59600kB local_pcp:36976kB free_cma:0kB [ 115.794004][ T6482] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 115.825801][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.149'. [ 115.852261][ T6483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'. [ 115.865224][ T6458] lowmem_reserve[]: 0 0 1 1 1 [ 115.881510][ T6458] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 115.953664][ T6487] IPv6: syztnl0: Disabled Multicast RS [ 116.008609][ T6458] lowmem_reserve[]: 0 0 0 0 0 [ 116.013332][ T6458] Node 1 Normal free:3891072kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17088kB local_pcp:9216kB free_cma:0kB [ 116.104788][ T6490] input: syz1 as /devices/virtual/input/input14 [ 116.136153][ T6458] lowmem_reserve[]: 0 0 0 0 0 [ 116.181807][ T6458] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.198655][ T6458] Node 0 DMA32: 166*4kB (UME) 91*8kB (UM) 95*16kB (UME) 38*32kB (ME) 18*64kB (UME) 7*128kB (ME) 3*256kB (UM) 3*512kB (UM) 7*1024kB (ME) 3*2048kB (UM) 319*4096kB (M) = 1328416kB [ 116.260346][ T6458] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 116.302066][ T6458] Node 1 Normal: 210*4kB (UE) 53*8kB (UME) 43*16kB (UME) 53*32kB (UME) 27*64kB (UME) 11*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891072kB [ 116.325291][ T6458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.335406][ T6458] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.346679][ T6458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.347491][ T6493] FAULT_INJECTION: forcing a failure. [ 116.347491][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 116.370898][ T6458] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.384945][ T6458] 47351 total pagecache pages [ 116.390810][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) [ 116.390835][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.390847][ T6493] Call Trace: [ 116.390855][ T6493] [ 116.390863][ T6493] dump_stack_lvl+0x189/0x250 [ 116.390891][ T6493] ? __pfx____ratelimit+0x10/0x10 [ 116.390919][ T6493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.390942][ T6493] ? __pfx__printk+0x10/0x10 [ 116.390975][ T6493] ? __pfx___might_resched+0x10/0x10 [ 116.390993][ T6493] ? fs_reclaim_acquire+0x7d/0x100 [ 116.391027][ T6493] should_fail_ex+0x414/0x560 [ 116.391058][ T6493] should_failslab+0xa8/0x100 [ 116.391088][ T6493] __kmalloc_noprof+0xcb/0x4f0 [ 116.391112][ T6493] ? memcg_list_lru_alloc+0x261/0x7e0 [ 116.391138][ T6493] memcg_list_lru_alloc+0x261/0x7e0 [ 116.391168][ T6493] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 116.391193][ T6493] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 116.391222][ T6493] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 116.391244][ T6493] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 116.391271][ T6493] __memcg_slab_post_alloc_hook+0x13c/0x7f0 [ 116.391314][ T6493] kmem_cache_alloc_lru_noprof+0x2c7/0x3d0 [ 116.391339][ T6493] ? __d_alloc+0x36/0x7a0 [ 116.391364][ T6493] __d_alloc+0x36/0x7a0 [ 116.391390][ T6493] d_alloc_parallel+0xe5/0x15e0 [ 116.391429][ T6493] ? __d_lookup+0x66/0x780 [ 116.391455][ T6493] ? __pfx_d_alloc_parallel+0x10/0x10 [ 116.391493][ T6493] path_openat+0xa3b/0x3830 [ 116.391514][ T6493] ? arch_stack_walk+0xfc/0x150 [ 116.391570][ T6493] ? __pfx_path_openat+0x10/0x10 [ 116.391589][ T6493] ? do_fast_syscall_32+0x34/0x80 [ 116.391637][ T6493] do_filp_open+0x1fa/0x410 [ 116.391656][ T6493] ? __lock_acquire+0xab9/0xd20 [ 116.391698][ T6493] ? __pfx_do_filp_open+0x10/0x10 [ 116.391740][ T6493] ? _raw_spin_unlock+0x28/0x50 [ 116.391762][ T6493] ? alloc_fd+0x64c/0x6c0 [ 116.391801][ T6493] do_sys_openat2+0x121/0x1c0 [ 116.391825][ T6493] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.391849][ T6493] ? ksys_write+0x22a/0x250 [ 116.391879][ T6493] __ia32_compat_sys_openat+0x131/0x160 [ 116.391905][ T6493] __do_fast_syscall_32+0xb6/0x2b0 [ 116.391933][ T6493] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.391962][ T6493] do_fast_syscall_32+0x34/0x80 [ 116.391991][ T6493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.392012][ T6493] RIP: 0023:0xf7f66539 [ 116.392028][ T6493] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 116.392043][ T6493] RSP: 002b:00000000f5465100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 116.392062][ T6493] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5465150 [ 116.392074][ T6493] RDX: 0000000000000802 RSI: 0000000000000000 RDI: 00000000f73f4ff4 [ 116.392085][ T6493] RBP: 0000000000000802 R08: 0000000000000000 R09: 0000000000000000 [ 116.392095][ T6493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 116.392104][ T6493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.392131][ T6493] [ 116.409968][ T6458] 0 pages in swap cache [ 116.712214][ T6458] Free swap = 124996kB [ 116.724991][ T6458] Total swap = 124996kB [ 116.737885][ T6458] 2097051 pages RAM [ 116.755492][ T6458] 0 pages HighMem/MovableOnly [ 116.764879][ T6458] 425662 pages reserved [ 116.815228][ T6458] 0 pages cma reserved [ 116.846740][ T6498] trusted_key: syz.2.155 sent an empty control message without MSG_MORE. [ 117.091412][ T10] usb 4-1: USB disconnect, device number 7 [ 117.191978][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 117.546796][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 118.245933][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'. [ 118.340419][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 118.433387][ T6547] netlink: 'syz.3.171': attribute type 11 has an invalid length. [ 118.457009][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.555782][ T6543] bond1: (slave wlan0): Enslaving as an active interface with an up link [ 118.573884][ T6547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 118.605062][ T6548] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 118.630193][ T6548] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 118.937031][ T6559] fuse: Unknown parameter '0x0000000000000007‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 119.226777][ T5926] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.388941][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 119.409188][ T5926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.421057][ T5926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.471450][ T5926] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 119.471683][ T5926] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 119.471743][ T5926] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 119.475153][ T5926] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 119.475182][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.475202][ T5926] usb 1-1: SerialNumber: syz [ 119.482067][ T6559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.483854][ T6577] bridge0: entered promiscuous mode [ 119.483968][ T6577] vlan2: entered promiscuous mode [ 119.484091][ T5926] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 119.485688][ T5926] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 119.684934][ T6570] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (2) [ 120.287919][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 120.288813][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 120.290929][ T6592] netlink: 104 bytes leftover after parsing attributes in process `syz.3.183'. [ 120.290947][ T6592] netlink: 104 bytes leftover after parsing attributes in process `syz.3.183'. [ 120.909118][ T6598] fuse: Unknown parameter '' [ 121.688226][ T5868] usb 1-1: USB disconnect, device number 6 [ 121.749266][ T5918] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 121.896720][ T5918] usb 2-1: device descriptor read/64, error -71 [ 122.030932][ T6619] input: syz0 as /devices/virtual/input/input15 [ 122.096648][ T5868] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.136805][ T5918] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 122.246677][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 122.254635][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.266668][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 122.277957][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.289452][ T5918] usb 2-1: device descriptor read/64, error -71 [ 122.289461][ T5868] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.289484][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.317195][ T5868] usb 1-1: config 0 descriptor?? [ 122.322965][ T6615] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.332223][ T5868] hub 1-1:0.0: USB hub found [ 122.399373][ T5918] usb usb2-port1: attempt power cycle [ 122.534809][ T5868] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 122.746850][ T5918] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 122.777245][ T5918] usb 2-1: device descriptor read/8, error -71 [ 122.965335][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.195'. [ 123.022714][ T5918] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 123.054347][ T5868] hid-generic 0003:046D:C314.0003: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.0-1/input0 [ 123.068246][ T5918] usb 2-1: device descriptor read/8, error -71 [ 123.188157][ T5918] usb usb2-port1: unable to enumerate USB device [ 124.106680][ T5918] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.277104][ T5868] usb 1-1: USB disconnect, device number 7 [ 125.783651][ T6658] random: crng reseeded on system resumption [ 126.792573][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 126.958505][ T6670] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (2) [ 127.068268][ T6672] input: syz1 as /devices/virtual/input/input16 [ 127.514364][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.205'. [ 127.541691][ T6682] vlan0: entered promiscuous mode [ 127.988901][ T5918] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 128.028890][ T6690] netlink: 'syz.2.207': attribute type 10 has an invalid length. [ 128.059879][ T6690] syz_tun: entered promiscuous mode [ 128.157945][ T6690] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.196174][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.205341][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 128.216740][ T5918] usb 4-1: no configurations [ 128.221556][ T5918] usb 4-1: can't read configurations, error -22 [ 128.386965][ T5918] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 128.539025][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.547827][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 128.555618][ T5918] usb 4-1: no configurations [ 128.561227][ T5918] usb 4-1: can't read configurations, error -22 [ 128.568472][ T5918] usb usb4-port1: attempt power cycle [ 128.802882][ T6689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.817803][ T6689] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.841640][ T6689] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.884609][ T6689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.890884][ T6689] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.906249][ T6689] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.906763][ T5918] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 128.924502][ T6689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.930965][ T6689] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.941119][ T6689] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.950147][ T6689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.951889][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.958105][ T6689] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.973428][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 128.984685][ T6689] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.993021][ T6689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.999461][ T6689] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.024096][ T6689] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.032586][ T6706] mmap: syz.2.212 (6706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.065458][ T5918] usb 4-1: no configurations [ 129.077248][ T6691] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 129.078547][ T6697] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 129.234423][ T5918] usb 4-1: can't read configurations, error -22 [ 129.416840][ T5918] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 129.439175][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.447895][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 129.455681][ T5918] usb 4-1: no configurations [ 129.460448][ T5945] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.468500][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 129.476252][ T5918] usb 4-1: can't read configurations, error -22 [ 129.494677][ T5918] usb usb4-port1: unable to enumerate USB device [ 129.608330][ T5945] usb 5-1: device descriptor read/64, error -71 [ 129.626600][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 129.645117][ T10] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 129.654381][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.664082][ T10] usb 3-1: Product: syz [ 129.668464][ T10] usb 3-1: Manufacturer: syz [ 129.673804][ T10] usb 3-1: SerialNumber: syz [ 129.694237][ T10] usb 3-1: config 0 descriptor?? [ 129.781686][ T10] gspca_main: spca501-2.14.0 probing 0497:c001 [ 129.956796][ T5945] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.977849][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 129.977866][ T30] audit: type=1326 audit(1756049318.355:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.013631][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 130.119024][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.139123][ T5945] usb 5-1: device descriptor read/64, error -71 [ 130.156745][ T30] audit: type=1326 audit(1756049318.495:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.215764][ T6722] bond_slave_0: entered promiscuous mode [ 130.221696][ T6722] bond_slave_1: entered promiscuous mode [ 130.231654][ T6722] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 130.292997][ T5945] usb usb5-port1: attempt power cycle [ 130.311508][ T6715] pim6reg: entered allmulticast mode [ 130.327484][ T10] gspca_spca501: reg write: error -110 [ 130.327927][ T30] audit: type=1326 audit(1756049318.605:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.333030][ T10] spca501 3-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 130.397437][ T30] audit: type=1326 audit(1756049318.605:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.404974][ T6715] pim6reg: left allmulticast mode [ 130.419794][ T30] audit: type=1326 audit(1756049318.605:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.446430][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.456187][ T30] audit: type=1326 audit(1756049318.605:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.478252][ T30] audit: type=1326 audit(1756049318.605:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.499965][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.507200][ T30] audit: type=1326 audit(1756049318.605:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.528907][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.535924][ T30] audit: type=1326 audit(1756049318.605:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.655841][ T10] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 130.656224][ T30] audit: type=1326 audit(1756049318.605:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.0.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 130.932633][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.946684][ T5945] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.978361][ T5945] usb 5-1: device descriptor read/8, error -71 [ 131.001083][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.001258][ T5871] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.186682][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 131.343056][ T6695] delete_channel: no stack [ 131.591007][ T5945] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.826643][ T5945] usb 5-1: device not accepting address 10, error -71 [ 131.896285][ T5945] usb usb5-port1: unable to enumerate USB device [ 131.971021][ T6731] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 132.093427][ T6731] gretap1: entered allmulticast mode [ 132.105508][ T6731] bond1: (slave gretap1): making interface the new active one [ 132.115969][ T6731] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 132.186653][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.257956][ T5945] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.508971][ T6706] syz.2.212 (6706): drop_caches: 1 [ 132.543094][ T5945] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 132.552830][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.596642][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.605102][ T5925] usb 3-1: USB disconnect, device number 13 [ 132.635505][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.684073][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.714772][ T5945] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.730692][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.775865][ T5945] usb 5-1: config 0 descriptor?? [ 132.782383][ T6746] FAULT_INJECTION: forcing a failure. [ 132.782383][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 132.794199][ T6729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.814229][ T6746] CPU: 1 UID: 0 PID: 6746 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) [ 132.814257][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.814269][ T6746] Call Trace: [ 132.814277][ T6746] [ 132.814285][ T6746] dump_stack_lvl+0x189/0x250 [ 132.814321][ T6746] ? __pfx____ratelimit+0x10/0x10 [ 132.814348][ T6746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.814371][ T6746] ? __pfx__printk+0x10/0x10 [ 132.814404][ T6746] ? __pfx___might_resched+0x10/0x10 [ 132.814423][ T6746] ? fs_reclaim_acquire+0x7d/0x100 [ 132.814457][ T6746] should_fail_ex+0x414/0x560 [ 132.814488][ T6746] should_failslab+0xa8/0x100 [ 132.814518][ T6746] __kmalloc_noprof+0xcb/0x4f0 [ 132.814542][ T6746] ? tomoyo_domain_quota_is_ok+0x42b/0x570 [ 132.814567][ T6746] ? tomoyo_supervisor+0xbd5/0x1480 [ 132.814592][ T6746] tomoyo_supervisor+0xbd5/0x1480 [ 132.814625][ T6746] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 132.814656][ T6746] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.814691][ T6746] ? tomoyo_check_path_acl+0x137/0x1d0 [ 132.814720][ T6746] ? tomoyo_check_acl+0x386/0x400 [ 132.814745][ T6746] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 132.814775][ T6746] tomoyo_path_permission+0x25a/0x380 [ 132.814806][ T6746] tomoyo_check_open_permission+0x24d/0x3b0 [ 132.814833][ T6746] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 132.814860][ T6746] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 132.814885][ T6746] ? __asan_memset+0x22/0x50 [ 132.814949][ T6746] ? tomoyo_bprm_check_security+0x7c/0x180 [ 132.814974][ T6746] security_bprm_check+0x89/0x270 [ 132.815004][ T6746] bprm_execve+0x8ee/0x1450 [ 132.815047][ T6746] ? __pfx_bprm_execve+0x10/0x10 [ 132.815073][ T6746] ? copy_string_kernel+0x25f/0x2a0 [ 132.815108][ T6746] do_execveat_common+0x510/0x6a0 [ 132.815147][ T6746] __ia32_compat_sys_execveat+0xca/0xe0 [ 132.815177][ T6746] __do_fast_syscall_32+0xb6/0x2b0 [ 132.815208][ T6746] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.815239][ T6746] do_fast_syscall_32+0x34/0x80 [ 132.815268][ T6746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.815291][ T6746] RIP: 0023:0xf70fe539 [ 132.815312][ T6746] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 132.815329][ T6746] RSP: 002b:00000000f54ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 132.815353][ T6746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 132.815367][ T6746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 132.815378][ T6746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.815389][ T6746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.815400][ T6746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.815429][ T6746] [ 133.088910][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.108550][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.114657][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.122259][ T5871] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.154891][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.161394][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.228005][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 133.322261][ T5945] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 133.377315][ T5945] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 133.556143][ T6744] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.565283][ T6744] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.572848][ T6744] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.584661][ T6744] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.607424][ T6744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.626322][ T6747] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 133.627800][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.755967][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.884149][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.118723][ T5925] usb 1-1: device descriptor read/64, error -71 [ 134.356937][ T5925] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.507107][ T5925] usb 1-1: device descriptor read/64, error -71 [ 134.627051][ T5925] usb usb1-port1: attempt power cycle [ 134.638791][ T6780] input: syz0 as /devices/virtual/input/input18 [ 134.664406][ T5918] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 134.966678][ T5925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.997628][ T5925] usb 1-1: device descriptor read/8, error -71 [ 135.227826][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.237030][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.277937][ T5926] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.293068][ T5925] usb 1-1: device descriptor read/8, error -71 [ 135.407245][ T5925] usb usb1-port1: unable to enumerate USB device [ 135.451618][ T5926] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 135.453209][ T6797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.461765][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.494876][ T5926] usb 2-1: Product: syz [ 135.499508][ T5926] usb 2-1: Manufacturer: syz [ 135.504123][ T5926] usb 2-1: SerialNumber: syz [ 135.513982][ T5926] usb 2-1: config 0 descriptor?? [ 135.524561][ T5926] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 135.549972][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 135.559866][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.239'. [ 135.577329][ T6798] IPv6: syztnl0: Disabled Multicast RS [ 135.628667][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 135.629267][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.634776][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.640952][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.723481][ T5926] gspca_sn9c2028: read1 error -71 [ 135.730800][ T5926] gspca_sn9c2028: read1 error -71 [ 135.736165][ T5926] gspca_sn9c2028: read1 error -71 [ 135.742326][ T5926] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 135.757724][ T5926] usb 2-1: USB disconnect, device number 10 [ 135.982701][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 136.380191][ T6813] fuse: Unknown parameter 'grod' [ 136.573156][ T5945] usb 5-1: USB disconnect, device number 11 [ 136.660688][ T6800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.711721][ T6800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.747355][ T6800] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.792532][ T6800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.811015][ T6800] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.832794][ T6801] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 136.913850][ T6828] input: syz1 as /devices/virtual/input/input19 [ 137.166960][ T5926] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.316632][ T5945] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 137.336689][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 137.344334][ T5926] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 137.364880][ T5926] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 137.442393][ T5925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 137.565441][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.606263][ T5926] usb 2-1: Product: syz [ 137.634413][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 137.650037][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.681802][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.774205][ T5926] usb 2-1: Manufacturer: syz [ 137.779214][ T5926] usb 2-1: SerialNumber: syz [ 137.786129][ T5945] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.798711][ T5925] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 137.807917][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.824660][ T5926] usb 2-1: config 0 descriptor?? [ 137.839165][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.865790][ T5926] usb 2-1: bad CDC descriptors [ 137.880526][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.903293][ T5926] usb 2-1: unsupported MDLM descriptors [ 137.942616][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.944429][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.965065][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.001645][ T5925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.016672][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.033626][ T5925] usb 1-1: config 0 descriptor?? [ 138.039691][ T6834] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 138.044825][ T5945] usb 5-1: config 0 descriptor?? [ 138.415712][ T5945] hub 5-1:0.0: USB hub found [ 138.567610][ T6840] raw_sendmsg: syz.3.252 forgot to set AF_INET. Fix it! [ 138.601150][ T5925] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 138.650960][ T5945] hub 5-1:0.0: 1 port detected [ 138.661708][ T5925] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 138.746662][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.827504][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 138.833640][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.833686][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.888213][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.903103][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.966643][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 139.127227][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 139.139889][ T5925] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 139.155745][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.174953][ T5925] usb 3-1: config 0 descriptor?? [ 139.338662][ T5918] hub 5-1:0.0: activate --> -90 [ 139.396888][ T5945] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 139.406498][ T5925] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 139.545831][ T5918] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 139.566631][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 139.574006][ T5945] usb 4-1: config 7 has an invalid interface number: 11 but max is 1 [ 139.582211][ T5945] usb 4-1: config 7 has an invalid interface number: 17 but max is 1 [ 139.590591][ T5945] usb 4-1: config 7 has no interface number 0 [ 139.596784][ T5945] usb 4-1: config 7 has no interface number 1 [ 139.603661][ T5945] usb 4-1: config 7 interface 17 has no altsetting 0 [ 139.613178][ T5945] usb 4-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=e2.09 [ 139.623157][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.632502][ T5945] usb 4-1: Product: syz [ 139.637550][ T5945] usb 4-1: Manufacturer: syz [ 139.642189][ T5945] usb 4-1: SerialNumber: syz [ 139.749592][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.764059][ T5926] usb 2-1: USB disconnect, device number 11 [ 139.765657][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.829531][ T5925] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 139.857361][ T5925] asix 3-1:0.0: probe with driver asix failed with error -61 [ 139.907242][ T5945] usb 4-1: USB disconnect, device number 13 [ 139.996903][ T5868] usb 5-1: USB disconnect, device number 12 [ 140.066669][ T5925] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 140.125790][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 140.135356][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 140.610921][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 141.930382][ T24] usb 1-1: USB disconnect, device number 12 [ 141.936659][ T6860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.962009][ T6860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.013756][ T6860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.043347][ T5868] usb 3-1: USB disconnect, device number 14 [ 142.066284][ T6860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.087109][ T6860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.137969][ T6864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 142.341094][ T6892] ERROR: Out of memory at tomoyo_memory_ok. [ 142.604302][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.621793][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 144.029575][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.029598][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.110397][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 144.116431][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.196697][ T5918] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 144.265006][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 144.278660][ T6919] vlan0: entered promiscuous mode [ 144.358436][ T5918] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 144.382185][ T5918] usb 3-1: config 0 has no interface number 0 [ 144.413301][ T5918] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 144.452984][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.482673][ T5918] usb 3-1: Product: syz [ 144.494011][ T5918] usb 3-1: Manufacturer: syz [ 144.507492][ T5918] usb 3-1: SerialNumber: syz [ 144.531616][ T5918] usb 3-1: config 0 descriptor?? [ 144.624162][ T6930] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 144.772882][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 144.783927][ T5945] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.956690][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 144.966827][ T5945] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 144.980770][ T5945] usb 4-1: config 0 has no interface number 0 [ 144.987450][ T5918] usb 3-1: Firmware version (0.0) predates our first public release. [ 144.997192][ T6941] netlink: 'syz.1.279': attribute type 10 has an invalid length. [ 145.005104][ T5918] usb 3-1: Please update to version 0.2 or newer [ 145.013748][ T5945] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=f5.41 [ 145.024801][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.034444][ T6941] syz_tun: entered promiscuous mode [ 145.040114][ T5945] usb 4-1: Product: syz [ 145.045038][ T5945] usb 4-1: Manufacturer: syz [ 145.055365][ T5945] usb 4-1: SerialNumber: syz [ 145.067642][ T5945] usb 4-1: config 0 descriptor?? [ 145.083037][ T6941] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 145.280185][ T5918] usb 3-1: USB disconnect, device number 15 [ 145.281062][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.333943][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.032274][ T6953] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.282'. [ 146.123637][ T6956] misc userio: No port type given on /dev/userio [ 146.144549][ T6956] trusted_key: encrypted_key: insufficient parameters specified [ 146.592537][ T5945] usb 4-1: MBOX3: Invalid descriptor size=18. [ 146.615590][ T5945] usb 4-1: USB disconnect, device number 14 [ 147.271733][ T6965] loop2: detected capacity change from 0 to 7 [ 147.289273][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 147.313879][ T6968] netlink: 53 bytes leftover after parsing attributes in process `syz.2.284'. [ 147.419473][ T5879] Dev loop2: unable to read RDB block 7 [ 147.632126][ T5879] loop2: AHDI p1 p2 p3 [ 147.636351][ T5879] loop2: partition table partially beyond EOD, truncated [ 147.696730][ T5879] loop2: p1 start 1601398130 is beyond EOD, truncated [ 147.731319][ T5879] loop2: p2 start 1702059890 is beyond EOD, truncated [ 147.767550][ T6965] Dev loop2: unable to read RDB block 7 [ 147.782791][ T6965] loop2: AHDI p1 p2 p3 [ 147.803648][ T6965] loop2: partition table partially beyond EOD, truncated [ 147.824090][ T6965] loop2: p1 start 1601398130 is beyond EOD, truncated [ 147.854390][ T6965] loop2: p2 start 1702059890 is beyond EOD, truncated [ 148.037326][ T6977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.051219][ T6977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.288'. [ 148.589947][ T5945] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 148.727183][ T5918] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 148.755635][ T5945] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 148.768588][ T5945] usb 5-1: config 0 has no interface number 0 [ 148.782006][ T5945] usb 5-1: too many endpoints for config 0 interface 110 altsetting 99: 40, using maximum allowed: 30 [ 148.805545][ T5945] usb 5-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 40 [ 148.865104][ T5945] usb 5-1: config 0 interface 110 has no altsetting 0 [ 148.891513][ T5945] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 148.900908][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.909528][ T5945] usb 5-1: Product: syz [ 148.914823][ T5945] usb 5-1: Manufacturer: syz [ 148.926190][ T5945] usb 5-1: SerialNumber: syz [ 148.931153][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 148.938357][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 148.951315][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 148.976601][ T5945] usb 5-1: config 0 descriptor?? [ 148.987708][ T5918] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 148.997089][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.005088][ T5918] usb 4-1: Product: syz [ 149.044725][ T5918] usb 4-1: Manufacturer: syz [ 149.102873][ T5918] usb 4-1: SerialNumber: syz [ 149.147508][ T5918] usb 4-1: config 0 descriptor?? [ 149.209845][ T5918] usb 4-1: no audio or video endpoints found [ 149.420097][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 149.420117][ T30] audit: type=1326 audit(1756049337.825:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6985 comm="syz.3.292" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 149.893116][ T5945] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 149.963207][ T5945] pctv452e: pctv452e_power_ctrl: 1 [ 149.963207][ T5945] [ 149.996892][ T5945] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 149.996892][ T5945] [ 150.026431][ T5945] dvb-usb: bulk message failed: -22 (5/0) [ 150.104289][ T5945] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 150.245637][ T5945] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 150.295094][ T7012] netlink: 'syz.4.301': attribute type 1 has an invalid length. [ 150.324134][ T5945] usb 5-1: USB disconnect, device number 13 [ 151.454235][ T5868] usb 4-1: USB disconnect, device number 15 [ 151.617462][ T5918] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 151.639831][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 151.846615][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 151.881217][ T5918] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.910275][ T5918] usb 1-1: config 0 has no interface number 0 [ 151.922686][ T5918] usb 1-1: config 0 interface 184 has no altsetting 0 [ 151.936365][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 151.961223][ T5918] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.004099][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 152.014425][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.054319][ T5918] usb 1-1: Product: syz [ 152.081376][ T5918] usb 1-1: Manufacturer: syz [ 152.103374][ T5918] usb 1-1: SerialNumber: syz [ 152.127100][ T5918] usb 1-1: config 0 descriptor?? [ 152.157850][ T5918] smsc75xx v1.0.0 [ 152.251004][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 152.256072][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 152.341282][ T5868] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 152.456152][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 152.483110][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 152.634651][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 152.661874][ T5868] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 152.685960][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 152.687407][ T5868] usb 2-1: config 0 has no interface number 0 [ 152.708347][ T5868] usb 2-1: New USB device found, idVendor=12ef, idProduct=0100, bcdDevice=f0.7a [ 152.721356][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.733430][ T5868] usb 2-1: Product: syz [ 152.745284][ T5868] usb 2-1: Manufacturer: syz [ 152.754167][ T5868] usb 2-1: SerialNumber: syz [ 152.774514][ T5868] usb 2-1: config 0 descriptor?? [ 152.797700][ T5868] usb 2-1: active config #0 != 1 ?? [ 152.823447][ T5918] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 152.933062][ T7067] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 152.950646][ T5918] usb 1-1: USB disconnect, device number 13 [ 153.125707][ T5868] usb 2-1: USB disconnect, device number 12 [ 153.777795][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 153.809079][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 154.152728][ T7095] fuse: Unknown parameter '0x0000000000000007‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 154.427368][ T5918] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.557727][ T5945] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.726647][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 154.783577][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.801042][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 154.926667][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.977645][ T5945] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.996462][ T5918] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.036976][ T5945] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.046932][ T5918] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 155.066651][ T5945] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.076449][ T5945] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 155.086365][ T5918] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 155.226506][ T5918] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 155.245712][ T5945] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 155.296646][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.329711][ T5945] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 155.356679][ T5918] usb 3-1: SerialNumber: syz [ 155.371035][ T7095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.381280][ T5918] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 155.392770][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.411618][ T5918] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 155.428016][ T5945] usb 2-1: SerialNumber: syz [ 155.463021][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 155.476182][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 155.493609][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 155.534182][ T7096] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.561081][ T5945] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 155.587046][ T5945] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 156.093054][ T7121] loop2: detected capacity change from 0 to 7 [ 156.107192][ T5925] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 156.119672][ T7121] Dev loop2: unable to read RDB block 7 [ 156.125549][ T7121] loop2: AHDI p1 p2 p3 [ 156.134019][ T7121] loop2: partition table partially beyond EOD, truncated [ 156.144151][ T7121] loop2: p1 start 1601398130 is beyond EOD, truncated [ 156.155350][ T7121] loop2: p2 start 1702059890 is beyond EOD, truncated [ 156.296783][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 156.317927][ T5925] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 156.332742][ T5925] usb 5-1: can't read configurations, error -22 [ 156.402229][ T7127] loop2: detected capacity change from 0 to 7 [ 156.414051][ T7127] Dev loop2: unable to read RDB block 7 [ 156.420817][ T7127] loop2: AHDI p1 p2 p3 [ 156.425296][ T7127] loop2: partition table partially beyond EOD, truncated [ 156.464498][ T7127] loop2: p1 start 1601398130 is beyond EOD, truncated [ 156.480760][ T7127] loop2: p2 start 1702059890 is beyond EOD, truncated [ 156.505327][ T5925] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.676802][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 156.685492][ T5925] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 156.696768][ T5925] usb 5-1: can't read configurations, error -22 [ 156.705976][ T5925] usb usb5-port1: attempt power cycle [ 157.060634][ T5925] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.087541][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 157.111410][ T5925] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 157.123023][ T5925] usb 5-1: can't read configurations, error -22 [ 157.311088][ T5918] usb 3-1: USB disconnect, device number 16 [ 157.311140][ T5925] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 157.340920][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 157.346382][ T5925] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 157.346425][ T5925] usb 5-1: can't read configurations, error -22 [ 157.347227][ T5925] usb usb5-port1: unable to enumerate USB device [ 158.031548][ T5918] usb 2-1: USB disconnect, device number 13 [ 158.107187][ T5925] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 158.266819][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 158.275198][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 158.286937][ T5925] usb 1-1: can't read configurations, error -61 [ 158.436940][ T5925] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 158.601960][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 158.611852][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 158.620038][ T7163] batadv0: entered promiscuous mode [ 158.625480][ T5925] usb 1-1: can't read configurations, error -61 [ 158.635415][ T5925] usb usb1-port1: attempt power cycle [ 158.678561][ T7163] batadv0: left promiscuous mode [ 158.996635][ T5925] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 159.027325][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 159.050541][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 159.109274][ T5925] usb 1-1: can't read configurations, error -61 [ 159.276701][ T5925] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 159.337688][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 159.353590][ T5925] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 159.378421][ T5925] usb 1-1: can't read configurations, error -61 [ 159.407768][ T5925] usb usb1-port1: unable to enumerate USB device [ 160.220071][ T5868] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 161.096746][ T5945] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 161.170106][ T7207] __nla_validate_parse: 1 callbacks suppressed [ 161.170127][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 161.270716][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 161.297426][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 122, changing to 10 [ 161.340227][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25140, setting to 1024 [ 161.383064][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.434685][ T5945] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.465104][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.561982][ T5945] usb 3-1: config 0 descriptor?? [ 162.253152][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.253456][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.253751][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.253896][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.254029][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.254135][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.254270][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.254408][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.254551][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.254695][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.254856][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.255000][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.255905][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.256106][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.256260][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.256396][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.304331][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.304502][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.304605][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.304694][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.304803][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.304904][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.304988][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305086][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305192][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305292][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305379][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305476][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305591][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305692][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305776][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.305898][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.306000][ T7217] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 162.586874][ T5918] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.799999][ T5945] microsoft 0003:045E:07DA.0006: item fetching failed at offset 14/34 [ 162.817586][ T5945] microsoft 0003:045E:07DA.0006: parse failed [ 162.834733][ T5945] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 162.921392][ T5868] usb 2-1: device descriptor read/all, error -71 [ 162.988201][ T5945] usb 3-1: USB disconnect, device number 17 [ 163.030629][ T5918] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 163.039077][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.054283][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.081518][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.111369][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.206332][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.258798][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.279680][ T5918] usb 5-1: config 0 descriptor?? [ 163.292358][ T7219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.731946][ T5918] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 163.789346][ T5918] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 164.104565][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.127395][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.502180][ T7247] input: syz0 as /devices/virtual/input/input23 [ 165.080258][ T5918] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 165.113125][ T7256] tipc: Started in network mode [ 165.135684][ T7256] tipc: Node identity f28653cb4565, cluster identity 4711 [ 165.143474][ T7256] tipc: Enabled bearer , priority 0 [ 165.170509][ T7255] tipc: Disabling bearer [ 165.187134][ T5945] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 165.269622][ T5918] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 165.289530][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.328783][ T5918] usb 1-1: config 1 has no interface number 0 [ 165.341631][ T5918] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.374704][ T5918] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.384419][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.424732][ T5918] usb 1-1: Product: syz [ 165.440357][ T5918] usb 1-1: Manufacturer: syz [ 165.459513][ T5918] usb 1-1: SerialNumber: syz [ 165.502959][ T5918] usb 1-1: selecting invalid altsetting 1 [ 165.992220][ T5918] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 166.001959][ T5918] cdc_ncm 1-1:1.1: bind() failure [ 166.034420][ T5918] usb 1-1: USB disconnect, device number 18 [ 166.266398][ T7281] input: syz1 as /devices/virtual/input/input24 [ 166.337168][ T5868] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 166.473049][ T7283] veth0_to_team: entered promiscuous mode [ 166.487120][ T5868] usb 2-1: device descriptor read/64, error -71 [ 166.726865][ T5868] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 166.900079][ T5868] usb 2-1: device descriptor read/64, error -71 [ 167.079197][ T5868] usb usb2-port1: attempt power cycle [ 167.555255][ T5868] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 167.577411][ T5868] usb 2-1: device descriptor read/8, error -71 [ 167.618909][ T56] usb 5-1: USB disconnect, device number 18 [ 167.672759][ T7299] program syz.0.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.806731][ T56] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 167.860562][ T5868] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 167.889375][ T7299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'. [ 167.899943][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 167.929337][ T5868] usb 2-1: device descriptor read/8, error -71 [ 167.991257][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.000672][ T56] usb 5-1: not running at top speed; connect to a high speed hub [ 168.057033][ T5868] usb usb2-port1: unable to enumerate USB device [ 168.060490][ T56] usb 5-1: config 14 has an invalid interface number: 16 but max is 0 [ 168.086620][ T56] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 168.146361][ T56] usb 5-1: config 14 has no interface number 0 [ 168.183551][ T56] usb 5-1: config 14 interface 16 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.196974][ T1332] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.230494][ T1332] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.259757][ T1332] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.267015][ T56] usb 5-1: config 14 interface 16 has no altsetting 0 [ 168.296292][ T1332] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.298597][ T56] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=51.5b [ 168.374438][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.396632][ T56] usb 5-1: Product: syz [ 168.400834][ T56] usb 5-1: Manufacturer: syz [ 168.415819][ T56] usb 5-1: SerialNumber: syz [ 168.435822][ T7310] bridge0: entered promiscuous mode [ 168.450764][ T7310] vlan2: entered promiscuous mode [ 168.721203][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 168.773591][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.796899][ T5925] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 168.824807][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.937042][ T56] usb 5-1: unknown interface protocol 0x18, assuming v1 [ 168.944038][ T56] usb 5-1: 16:2 : does not exist [ 168.948289][ T5925] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.975695][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.985421][ T5925] usb 3-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 169.009084][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.026616][ T5925] usb 3-1: Product: syz [ 169.030943][ T5925] usb 3-1: Manufacturer: syz [ 169.035548][ T5925] usb 3-1: SerialNumber: syz [ 169.055168][ T5925] usb 3-1: config 0 descriptor?? [ 169.065498][ T5925] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 169.103356][ T56] usb 5-1: USB disconnect, device number 19 [ 169.185405][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:14.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.487137][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 169.576471][ T5925] gspca_sn9c20x: Write register 1001 failed -71 [ 169.583220][ T5925] gspca_sn9c20x: Device initialization failed [ 169.592446][ T5925] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 169.616967][ T5925] usb 3-1: USB disconnect, device number 18 [ 169.658729][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 169.667457][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.682369][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.818359][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 169.876230][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.920924][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.018278][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.037741][ T10] usb 2-1: config 0 descriptor?? [ 170.045177][ T7328] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.470596][ T10] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 170.537022][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 170.754920][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.803977][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.514413][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 171.747294][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.756228][ T10] usb 1-1: config 0 has no interface number 0 [ 171.777493][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 171.800426][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 171.826666][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.836821][ T5945] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 171.868853][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.891842][ T10] usb 1-1: config 0 descriptor?? [ 171.908858][ T7356] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 171.937199][ T10] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 172.183486][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.197233][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.229091][ T7356] kAFS: unable to lookup cell '' [ 172.329723][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.340831][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.888323][ T5946] usb 1-1: USB disconnect, device number 19 [ 173.464177][ T5925] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 173.679079][ T5918] usb 2-1: USB disconnect, device number 20 [ 173.696672][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 174.026176][ T5925] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 174.050726][ T5925] usb 5-1: config 0 has no interface number 0 [ 174.079088][ T5925] usb 5-1: config 0 interface 184 has no altsetting 0 [ 174.127967][ T5925] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 174.150296][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.280350][ T5925] usb 5-1: Product: syz [ 174.316672][ T5925] usb 5-1: Manufacturer: syz [ 174.350375][ T5925] usb 5-1: SerialNumber: syz [ 174.377915][ T5925] usb 5-1: config 0 descriptor?? [ 174.421149][ T5925] smsc75xx v1.0.0 [ 174.802794][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 175.015869][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 175.393954][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 175.884639][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 175.906766][ T5868] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 175.933757][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 175.996514][ T5925] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 176.069165][ T7416] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.206997][ T5925] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 176.246895][ T5925] usb 5-1: USB disconnect, device number 20 [ 176.349910][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 176.430343][ T5868] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 176.445562][ T7418] bond4: (slave wlan0): Enslaving as an active interface with an up link [ 176.622249][ T5868] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 176.632449][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.642052][ T5868] usb 1-1: Product: syz [ 176.646292][ T5868] usb 1-1: Manufacturer: syz [ 176.690943][ T5868] usb 1-1: SerialNumber: syz [ 176.725559][ T5868] usb 1-1: config 0 descriptor?? [ 176.826493][ T5868] usb 1-1: bad CDC descriptors [ 176.836901][ T5868] usb 1-1: unsupported MDLM descriptors [ 177.336718][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 177.486737][ T24] usb 4-1: device descriptor read/64, error -71 [ 177.728595][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 177.776651][ T5868] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 177.867836][ T24] usb 4-1: device descriptor read/64, error -71 [ 177.916647][ T5868] usb 2-1: device descriptor read/64, error -71 [ 177.978151][ T24] usb usb4-port1: attempt power cycle [ 178.157854][ T5868] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 178.288045][ T5868] usb 2-1: device descriptor read/64, error -71 [ 178.316839][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 178.349962][ T24] usb 4-1: device descriptor read/8, error -71 [ 178.369663][ T7453] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.432'. [ 178.407028][ T5868] usb usb2-port1: attempt power cycle [ 178.604699][ T7459] binder: 7457:7459 ioctl 400c620e 80000140 returned -22 [ 178.612664][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 178.622426][ T7458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.650830][ T24] usb 4-1: device descriptor read/8, error -71 [ 178.804638][ T5868] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 178.816488][ T24] usb usb4-port1: unable to enumerate USB device [ 178.845990][ T5918] usb 1-1: USB disconnect, device number 20 [ 178.882428][ T5868] usb 2-1: device descriptor read/8, error -71 [ 179.136774][ T5868] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 179.146846][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 179.198680][ T5868] usb 2-1: device descriptor read/8, error -71 [ 179.328832][ T5868] usb usb2-port1: unable to enumerate USB device [ 179.341154][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 179.362173][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 179.391254][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 179.406739][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.414929][ T24] usb 5-1: Product: syz [ 179.422533][ T24] usb 5-1: Manufacturer: syz [ 179.427549][ T24] usb 5-1: SerialNumber: syz [ 179.435000][ T24] usb 5-1: config 0 descriptor?? [ 179.459226][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 179.483499][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 179.546824][ T5925] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 179.734721][ T5925] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 179.747773][ T5925] usb 1-1: config 0 has no interface number 0 [ 179.753938][ T5925] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.765093][ T5925] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 179.776142][ T5925] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 179.788060][ T5925] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 179.808484][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 179.872814][ T5925] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 179.904829][ T5925] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.977949][ T5925] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 180.062495][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.085851][ T5925] usb 1-1: config 0 descriptor?? [ 180.102849][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 180.121618][ T7473] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 180.246859][ T7473] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 180.257955][ T5925] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 180.347093][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 180.361473][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 180.494693][ T7473] ldusb 1-1:0.55: Write buffer overflow, 1 bytes dropped [ 180.608856][ T5918] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 180.661349][ T10] usb 1-1: USB disconnect, device number 21 [ 180.711498][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 180.796645][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 180.800466][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 180.820079][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.867589][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.876781][ T24] em28xx 5-1:0.0: board has no eeprom [ 180.899185][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.980095][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 180.992027][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 181.006106][ T5970] em28xx 5-1:0.0: Binding DVB extension [ 181.085075][ T24] usb 5-1: USB disconnect, device number 21 [ 181.100040][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 181.126610][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.156946][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.162008][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 181.166836][ T5918] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.180462][ T5918] usb 4-1: Manufacturer: syz [ 181.224493][ T5918] usb 4-1: config 0 descriptor?? [ 181.244734][ T5970] em28xx 5-1:0.0: Registering input extension [ 181.305689][ T24] em28xx 5-1:0.0: Closing input extension [ 181.454351][ T24] em28xx 5-1:0.0: Freeing device [ 182.675548][ T7520] FAULT_INJECTION: forcing a failure. [ 182.675548][ T7520] name failslab, interval 1, probability 0, space 0, times 0 [ 182.693347][ T7520] CPU: 1 UID: 0 PID: 7520 Comm: syz.2.450 Not tainted syzkaller #0 PREEMPT(full) [ 182.693375][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.693388][ T7520] Call Trace: [ 182.693396][ T7520] [ 182.693404][ T7520] dump_stack_lvl+0x189/0x250 [ 182.693441][ T7520] ? __pfx____ratelimit+0x10/0x10 [ 182.693470][ T7520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.693494][ T7520] ? __pfx__printk+0x10/0x10 [ 182.693526][ T7520] ? __pfx___might_resched+0x10/0x10 [ 182.693551][ T7520] should_fail_ex+0x414/0x560 [ 182.693583][ T7520] should_failslab+0xa8/0x100 [ 182.693613][ T7520] __kmalloc_noprof+0xcb/0x4f0 [ 182.693638][ T7520] ? ima_alloc_init_template+0x93/0x6f0 [ 182.693661][ T7520] ? __asan_memcpy+0x40/0x70 [ 182.693686][ T7520] ima_alloc_init_template+0x93/0x6f0 [ 182.693709][ T7520] ? prepend_path+0x4d/0x830 [ 182.693739][ T7520] ima_store_measurement+0x1b7/0x640 [ 182.693774][ T7520] ? __pfx_ima_store_measurement+0x10/0x10 [ 182.693797][ T7520] ? ima_d_path+0x189/0x250 [ 182.693830][ T7520] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 182.693859][ T7520] process_measurement+0x11eb/0x1a40 [ 182.693902][ T7520] ? __pfx_process_measurement+0x10/0x10 [ 182.693925][ T7520] ? kasan_quarantine_put+0xdd/0x220 [ 182.693999][ T7520] ima_bprm_check+0xfd/0x200 [ 182.694025][ T7520] ? __pfx_ima_bprm_check+0x10/0x10 [ 182.694051][ T7520] ? tomoyo_bprm_check_security+0x7c/0x180 [ 182.694075][ T7520] security_bprm_check+0xd9/0x270 [ 182.694105][ T7520] bprm_execve+0x8ee/0x1450 [ 182.694147][ T7520] ? __pfx_bprm_execve+0x10/0x10 [ 182.694172][ T7520] ? copy_string_kernel+0x25f/0x2a0 [ 182.694201][ T7520] do_execveat_common+0x510/0x6a0 [ 182.694238][ T7520] __ia32_compat_sys_execveat+0xca/0xe0 [ 182.694269][ T7520] __do_fast_syscall_32+0xb6/0x2b0 [ 182.694300][ T7520] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.694333][ T7520] do_fast_syscall_32+0x34/0x80 [ 182.694361][ T7520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.694385][ T7520] RIP: 0023:0xf70fe539 [ 182.694420][ T7520] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 182.694438][ T7520] RSP: 002b:00000000f54ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 182.694458][ T7520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 182.694471][ T7520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 182.694482][ T7520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.694493][ T7520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.694504][ T7520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.694534][ T7520] [ 182.695779][ T30] audit: type=1804 audit(1756049371.105:50): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.450" name="/newroot/106/file0" dev="tmpfs" ino=568 res=0 errno=0 [ 182.953434][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 183.053887][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 183.307777][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 183.660747][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 183.906868][ T5918] rc_core: IR keymap rc-hauppauge not found [ 183.934476][ T5918] Registered IR keymap rc-empty [ 183.959951][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 183.967351][ T7540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.146801][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.167881][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 184.190264][ T7540] bond1: (slave wlan0): Enslaving as an active interface with an up link [ 184.243885][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 184.331776][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.356777][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.377196][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.405075][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 184.597116][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.629359][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.677490][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.696630][ T10] usb 1-1: device descriptor read/64, error -71 [ 184.696680][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 184.737329][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.777008][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.807589][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.826734][ T5918] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.864304][ T5918] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 184.878170][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 184.882719][ T5918] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 184.894925][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.913792][ T5918] usb 4-1: USB disconnect, device number 20 [ 184.914689][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.936701][ T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 184.945136][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.998739][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.038498][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 185.057206][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 185.086918][ T10] usb 1-1: device descriptor read/64, error -71 [ 185.093771][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 185.104598][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.110976][ T7565] syzkaller0: entered allmulticast mode [ 185.124109][ T24] usb 2-1: config 0 descriptor?? [ 185.135398][ T7565] syzkaller0: entered promiscuous mode [ 185.207323][ T10] usb usb1-port1: attempt power cycle [ 185.224695][ T7565] syzkaller0 (unregistering): left allmulticast mode [ 185.232198][ T7565] syzkaller0 (unregistering): left promiscuous mode [ 185.276789][ T5918] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 185.341538][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.364773][ T24] usb 2-1: USB disconnect, device number 25 [ 185.374202][ T24] usblp0: removed [ 185.386914][ T5926] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 185.439086][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 185.448998][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 185.465137][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 185.493643][ T5918] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 185.503067][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.511542][ T5918] usb 4-1: Product: syz [ 185.515936][ T5918] usb 4-1: Manufacturer: syz [ 185.520651][ T5918] usb 4-1: SerialNumber: syz [ 185.534659][ T5918] usb 4-1: config 0 descriptor?? [ 185.549682][ T5918] usb 4-1: no audio or video endpoints found [ 185.556721][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 185.564300][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 185.582834][ T5926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 185.601099][ T10] usb 1-1: device descriptor read/8, error -71 [ 185.613172][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 48, changing to 9 [ 185.633550][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8192, setting to 1024 [ 185.653721][ T5926] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 185.663013][ T5926] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 185.673145][ T5926] usb 5-1: Manufacturer: syz [ 185.695245][ T5926] usb 5-1: config 0 descriptor?? [ 185.742254][ T5926] smsusb:smsusb_probe: board id=9, interface number 0 [ 185.777583][ T5926] smsusb:siano_media_device_register: media controller created [ 185.820106][ T5926] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 185.837986][ T5926] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 185.856656][ T5926] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 185.857445][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 185.866741][ T5970] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 185.899849][ T5926] ------------[ cut here ]------------ [ 185.905401][ T5926] WARNING: CPU: 1 PID: 5926 at mm/slub.c:4790 free_large_kmalloc+0x15c/0x1f0 [ 185.914314][ T5926] Modules linked in: [ 185.918621][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 185.928172][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.939538][ T5926] Workqueue: usb_hub_wq hub_event [ 185.944616][ T5926] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 185.949305][ T7574] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 185.950702][ T5926] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 de fd 87 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 c6 38 64 09 cc 90 <0f> 0b 90 65 48 8b 05 b9 fd 87 10 48 3b 44 24 08 75 32 48 89 df 48 [ 185.985886][ T5926] RSP: 0018:ffffc9000480eb00 EFLAGS: 00010206 [ 185.993081][ T5926] RAX: 00000000ff000000 RBX: ffffea0000ced880 RCX: 0000000000000000 [ 186.001813][ T5926] RDX: ffffc90017d61000 RSI: ffff888033b62000 RDI: ffffea0000ced880 [ 186.010088][ T5926] RBP: 0000000000000100 R08: ffff88804f55d603 R09: 1ffff11009eabac0 [ 186.018147][ T5926] R10: dffffc0000000000 R11: ffffed1009eabac1 R12: 1ffff1100f0d9a82 [ 186.026147][ T5926] R13: 0000000000000000 R14: ffff88804f55d660 R15: dffffc0000000000 [ 186.034408][ T5926] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 186.043421][ T5926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.050097][ T5926] CR2: 0000000033122ffc CR3: 000000007ead4000 CR4: 00000000003526f0 [ 186.058134][ T5926] Call Trace: [ 186.061426][ T5926] [ 186.064377][ T5926] usb_free_urb+0xd0/0x120 [ 186.068869][ T5926] smsusb_term_device+0x1d6/0x3b0 [ 186.073929][ T5926] smsusb_probe+0x1a04/0x2060 [ 186.078712][ T5926] ? __pfx_smsusb_probe+0x10/0x10 [ 186.083797][ T5926] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 186.089459][ T5926] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 186.096315][ T5926] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 186.097353][ T10] usb 1-1: device not accepting address 25, error -71 [ 186.103505][ T5926] ? __pm_runtime_set_status+0x785/0xa50 [ 186.110199][ T10] usb usb1-port1: unable to enumerate USB device [ 186.115421][ T5926] usb_probe_interface+0x668/0xc30 [ 186.127183][ T5926] ? __pfx_usb_probe_interface+0x10/0x10 [ 186.132846][ T5926] really_probe+0x26d/0x9e0 [ 186.137511][ T5926] __driver_probe_device+0x18c/0x2f0 [ 186.142821][ T5926] driver_probe_device+0x4f/0x430 [ 186.147946][ T5926] __device_attach_driver+0x2ce/0x530 [ 186.153340][ T5926] bus_for_each_drv+0x24e/0x2e0 [ 186.158312][ T5926] ? __pfx___device_attach_driver+0x10/0x10 [ 186.164308][ T5926] ? __pfx_bus_for_each_drv+0x10/0x10 [ 186.169765][ T5926] __device_attach+0x2b8/0x400 [ 186.174546][ T5926] ? __pfx___device_attach+0x10/0x10 [ 186.180296][ T5926] ? do_raw_spin_unlock+0x122/0x240 [ 186.185486][ T5926] bus_probe_device+0x185/0x260 [ 186.190433][ T5926] device_add+0x7b6/0xb50 [ 186.195706][ T5926] usb_set_configuration+0x1a87/0x20e0 [ 186.201948][ T5926] usb_generic_driver_probe+0x8d/0x150 [ 186.207530][ T5926] usb_probe_device+0x1c4/0x390 [ 186.212410][ T5926] ? __pfx_usb_probe_device+0x10/0x10 [ 186.217877][ T5926] really_probe+0x26d/0x9e0 [ 186.222410][ T5926] __driver_probe_device+0x18c/0x2f0 [ 186.227799][ T5926] driver_probe_device+0x4f/0x430 [ 186.232845][ T5926] __device_attach_driver+0x2ce/0x530 [ 186.238297][ T5926] bus_for_each_drv+0x24e/0x2e0 [ 186.243165][ T5926] ? __pfx___device_attach_driver+0x10/0x10 [ 186.249147][ T5926] ? __pfx_bus_for_each_drv+0x10/0x10 [ 186.254553][ T5926] __device_attach+0x2b8/0x400 [ 186.259389][ T5926] ? __pfx___device_attach+0x10/0x10 [ 186.264698][ T5926] ? do_raw_spin_unlock+0x122/0x240 [ 186.270621][ T5926] bus_probe_device+0x185/0x260 [ 186.275507][ T5926] device_add+0x7b6/0xb50 [ 186.280008][ T5926] usb_new_device+0xa39/0x16f0 [ 186.284808][ T5926] ? __pfx_usb_new_device+0x10/0x10 [ 186.290085][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.295301][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.301523][ T5926] hub_event+0x2958/0x4a20 [ 186.306706][ T5926] ? __pfx_hub_event+0x10/0x10 [ 186.311502][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 186.317356][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.322572][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 186.328360][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 186.334088][ T5926] process_scheduled_works+0xae1/0x17b0 [ 186.339735][ T5926] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.345739][ T5926] worker_thread+0x8a0/0xda0 [ 186.350438][ T5926] kthread+0x70e/0x8a0 [ 186.354535][ T5926] ? __pfx_worker_thread+0x10/0x10 [ 186.359714][ T5926] ? __pfx_kthread+0x10/0x10 [ 186.364328][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.369564][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.375381][ T5926] ? __pfx_kthread+0x10/0x10 [ 186.380067][ T5926] ret_from_fork+0x3f9/0x770 [ 186.384668][ T5926] ? __pfx_ret_from_fork+0x10/0x10 [ 186.389858][ T5926] ? __switch_to_asm+0x39/0x70 [ 186.394631][ T5926] ? __switch_to_asm+0x33/0x70 [ 186.399952][ T5926] ? __pfx_kthread+0x10/0x10 [ 186.404541][ T5926] ret_from_fork_asm+0x1a/0x30 [ 186.409727][ T5926] [ 186.412768][ T5926] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.420040][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 186.429390][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.439428][ T5926] Workqueue: usb_hub_wq hub_event [ 186.444445][ T5926] Call Trace: [ 186.447725][ T5926] [ 186.450642][ T5926] dump_stack_lvl+0x99/0x250 [ 186.455224][ T5926] ? __asan_memcpy+0x40/0x70 [ 186.459799][ T5926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.464995][ T5926] ? __pfx__printk+0x10/0x10 [ 186.469605][ T5926] vpanic+0x281/0x750 [ 186.473633][ T5926] ? __pfx__printk+0x10/0x10 [ 186.478233][ T5926] ? __pfx_vpanic+0x10/0x10 [ 186.482737][ T5926] ? is_bpf_text_address+0x26/0x2b0 [ 186.487949][ T5926] panic+0xb9/0xc0 [ 186.491668][ T5926] ? __pfx_panic+0x10/0x10 [ 186.496102][ T5926] __warn+0x31b/0x4b0 [ 186.500080][ T5926] ? free_large_kmalloc+0x15c/0x1f0 [ 186.505300][ T5926] ? free_large_kmalloc+0x15c/0x1f0 [ 186.510514][ T5926] report_bug+0x2be/0x4f0 [ 186.514852][ T5926] ? free_large_kmalloc+0x15c/0x1f0 [ 186.520052][ T5926] ? free_large_kmalloc+0x15c/0x1f0 [ 186.525386][ T5926] ? free_large_kmalloc+0x15e/0x1f0 [ 186.530621][ T5926] handle_bug+0x84/0x160 [ 186.534859][ T5926] exc_invalid_op+0x1a/0x50 [ 186.539354][ T5926] asm_exc_invalid_op+0x1a/0x20 [ 186.544206][ T5926] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 186.550007][ T5926] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 de fd 87 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 c6 38 64 09 cc 90 <0f> 0b 90 65 48 8b 05 b9 fd 87 10 48 3b 44 24 08 75 32 48 89 df 48 [ 186.569605][ T5926] RSP: 0018:ffffc9000480eb00 EFLAGS: 00010206 [ 186.575666][ T5926] RAX: 00000000ff000000 RBX: ffffea0000ced880 RCX: 0000000000000000 [ 186.583626][ T5926] RDX: ffffc90017d61000 RSI: ffff888033b62000 RDI: ffffea0000ced880 [ 186.591590][ T5926] RBP: 0000000000000100 R08: ffff88804f55d603 R09: 1ffff11009eabac0 [ 186.599574][ T5926] R10: dffffc0000000000 R11: ffffed1009eabac1 R12: 1ffff1100f0d9a82 [ 186.607539][ T5926] R13: 0000000000000000 R14: ffff88804f55d660 R15: dffffc0000000000 [ 186.615524][ T5926] usb_free_urb+0xd0/0x120 [ 186.619937][ T5926] smsusb_term_device+0x1d6/0x3b0 [ 186.625000][ T5926] smsusb_probe+0x1a04/0x2060 [ 186.629690][ T5926] ? __pfx_smsusb_probe+0x10/0x10 [ 186.634717][ T5926] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 186.640254][ T5926] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 186.646145][ T5926] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 186.652484][ T5926] ? __pm_runtime_set_status+0x785/0xa50 [ 186.658122][ T5926] usb_probe_interface+0x668/0xc30 [ 186.663241][ T5926] ? __pfx_usb_probe_interface+0x10/0x10 [ 186.668867][ T5926] really_probe+0x26d/0x9e0 [ 186.673371][ T5926] __driver_probe_device+0x18c/0x2f0 [ 186.678662][ T5926] driver_probe_device+0x4f/0x430 [ 186.683785][ T5926] __device_attach_driver+0x2ce/0x530 [ 186.689167][ T5926] bus_for_each_drv+0x24e/0x2e0 [ 186.694027][ T5926] ? __pfx___device_attach_driver+0x10/0x10 [ 186.699916][ T5926] ? __pfx_bus_for_each_drv+0x10/0x10 [ 186.705302][ T5926] __device_attach+0x2b8/0x400 [ 186.710063][ T5926] ? __pfx___device_attach+0x10/0x10 [ 186.715348][ T5926] ? do_raw_spin_unlock+0x122/0x240 [ 186.720547][ T5926] bus_probe_device+0x185/0x260 [ 186.725405][ T5926] device_add+0x7b6/0xb50 [ 186.729740][ T5926] usb_set_configuration+0x1a87/0x20e0 [ 186.735398][ T5926] usb_generic_driver_probe+0x8d/0x150 [ 186.740857][ T5926] usb_probe_device+0x1c4/0x390 [ 186.745710][ T5926] ? __pfx_usb_probe_device+0x10/0x10 [ 186.751073][ T5926] really_probe+0x26d/0x9e0 [ 186.755753][ T5926] __driver_probe_device+0x18c/0x2f0 [ 186.761044][ T5926] driver_probe_device+0x4f/0x430 [ 186.766069][ T5926] __device_attach_driver+0x2ce/0x530 [ 186.771439][ T5926] bus_for_each_drv+0x24e/0x2e0 [ 186.776295][ T5926] ? __pfx___device_attach_driver+0x10/0x10 [ 186.782183][ T5926] ? __pfx_bus_for_each_drv+0x10/0x10 [ 186.787564][ T5926] __device_attach+0x2b8/0x400 [ 186.792322][ T5926] ? __pfx___device_attach+0x10/0x10 [ 186.797605][ T5926] ? do_raw_spin_unlock+0x122/0x240 [ 186.802803][ T5926] bus_probe_device+0x185/0x260 [ 186.807653][ T5926] device_add+0x7b6/0xb50 [ 186.811981][ T5926] usb_new_device+0xa39/0x16f0 [ 186.816764][ T5926] ? __pfx_usb_new_device+0x10/0x10 [ 186.821980][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.827186][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.832393][ T5926] hub_event+0x2958/0x4a20 [ 186.836863][ T5926] ? __pfx_hub_event+0x10/0x10 [ 186.841625][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 186.847345][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.852538][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 186.858247][ T5926] ? process_scheduled_works+0x9ef/0x17b0 [ 186.863961][ T5926] process_scheduled_works+0xae1/0x17b0 [ 186.869523][ T5926] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.875510][ T5926] worker_thread+0x8a0/0xda0 [ 186.880206][ T5926] kthread+0x70e/0x8a0 [ 186.884274][ T5926] ? __pfx_worker_thread+0x10/0x10 [ 186.889465][ T5926] ? __pfx_kthread+0x10/0x10 [ 186.894051][ T5926] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.899243][ T5926] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.904437][ T5926] ? __pfx_kthread+0x10/0x10 [ 186.909020][ T5926] ret_from_fork+0x3f9/0x770 [ 186.913609][ T5926] ? __pfx_ret_from_fork+0x10/0x10 [ 186.918719][ T5926] ? __switch_to_asm+0x39/0x70 [ 186.923481][ T5926] ? __switch_to_asm+0x33/0x70 [ 186.928238][ T5926] ? __pfx_kthread+0x10/0x10 [ 186.932843][ T5926] ret_from_fork_asm+0x1a/0x30 [ 186.937619][ T5926] [ 186.940879][ T5926] Kernel Offset: disabled [ 186.945218][ T5926] Rebooting in 86400 seconds..