last executing test programs: 12.697152353s ago: executing program 0 (id=1019): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = fsopen(&(0x7f0000000140)='jfs\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='usrquota', 0x0, r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000003240)) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0xfffffea7) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0xc4b7381e80598cba, r5, {0x7, 0x27, 0xd9, 0x1dd880, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x10, 0x3}}, 0x50) close(r0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000049c0), 0x801, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306010083000000002a90a02700100000b381"], 0x0}, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000004a40)="b758", 0x2}, {0x0}], 0x2) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000080)=0x1) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@any, 0x5}, 0x400, "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"}, 0x418}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="1dfe00b923b74e2c3c220332d42cf1f8a6e5cf15d68ea5436320380a", @ANYRESDEC], 0x24, 0x3) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r10 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x40000) 10.216720884s ago: executing program 0 (id=1028): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x140) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x7f, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0xb9f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8c, 0x2, 0xf5}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x9, 0x8, 0x7}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x0, 0x40, 0xfc, 0x40, 0x3}, 0x82, &(0x7f00000003c0)={0x5, 0xf, 0x82, 0x3, [@generic={0x69, 0x10, 0x4, "a6688ebd38d0ea2bf4c0420079373e6c347080efaf50f1d8f3d8d661a9d08e6e3ceb2906112f15b21c3bfe74d8035fb04cfca30843bb10429b005f439e329723d62f94eced21307f379f16e191cbabe5d2fa2ee36cfbe67a860c56272dfa9579e8c17dcab046"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xf4, 0xe8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x5, 0xff}]}, 0x4, [{0xbf, &(0x7f0000000480)=@string={0xbf, 0x3, "97a9889de25041be141adf6dfe27aab7eb9b34d8f16c4adefa81c502e5844855fdf871c143451330ebb3455c6229782b2e13d15c406b41d201fc39bafedfaf2c62f450869f1f37e1d7dd7f47ea51216324aacc0d6808360680abcf489643631a2b2ce30e0d9d1cf0bc9071ecff82bc779fd8e9b4db65d823875339fb2aba92f4c8869119baa4bb1da40c1261d90d24c0fcdb8307dfb9a93d9c1379bc2fec02d160fce79f844089e31496bf75dbfb4cd6e9fc0ffa56243a62090245439d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x459}}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x9, 0x5, 0x8, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4000000}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r3, &(0x7f0000000100)=""/177, 0x39) pread64(r3, &(0x7f0000000280)=""/125, 0x7d, 0x5) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) 8.742031979s ago: executing program 0 (id=1031): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000, 0x600}, 0x10) 8.500281553s ago: executing program 0 (id=1033): sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317"], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000640)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, &(0x7f0000000040)={0x3, 0x200, 0xfffffffc}) r8 = dup(r4) read$FUSE(r8, &(0x7f00000018c0)={0x2020}, 0x2020) 8.146140733s ago: executing program 4 (id=1036): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r1) 8.052208691s ago: executing program 4 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async) syz_pidfd_open(0x0, 0x0) 7.868807516s ago: executing program 4 (id=1038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) rt_sigqueueinfo(0x0, 0x35, &(0x7f0000000280)={0x1, 0x1, 0xbe59}) sendmmsg$unix(r8, &(0x7f0000008500)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100040001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r8], 0x40, 0x8000}}, {{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{0x0, 0x20}, {0x0}, {&(0x7f00000015c0)="05b0d5ca512d4f9687e5be2a48b8c4f0f3a798135f1c4d4d24a30d4f78b992308fda8aaf1abf1fd2db8e64434a27d574714812204b0bf53dec0392", 0x3b}, {0x0}, {0x0}, {&(0x7f00000017c0)="9ecbb9c92843ca6cb2d08a0eec2328b672728f64c9b8e45e7b721be73a178acc589d1114372d6189f5f9c2babfb238ad99e8baac8956", 0x36}], 0x6, 0x0, 0x0, 0x84}}, {{0x0, 0x0, &(0x7f0000006200)=[{0x0}, {&(0x7f00000040c0)="5dea5e633e64a024e3c16527d5aa12b938851595e28c889dc2b565498487f5856998685e58f2c7e51374ed206bbf629a610d6cdfe5acff153bcb5c54932698e5e561402bce53bf0e67f81aa7fd34a95f7acd252b4ddd22ca680af2881ffd363d9b3d9c963bdac4881e67caf5e56b26e26468e9f754a26d1ad314604921e6d9532f43ded6b822cf3fe2e1604669052af76eb898b2e3681793f43852dad8f9a8901055a30238e9531ec4b02115da49793525716ffe", 0xb4}, {&(0x7f0000004180)="dd86b64cce41dff46648a0ca28f6381176fb373182c6aa25b98d741a7631603b561a7534a1b366ee6154eda4eb2c54a9f517dd2c378e9641acad9b961f18077ded14c705596d28e4f5", 0x49}, {&(0x7f0000004200)}, {0x0}], 0x5, &(0x7f0000008440), 0x0, 0x4000}}], 0x3, 0x4000804) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r1, 0x0, 0x0, 0x0, 0xb}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0x2000, 0x8000}) 6.659926787s ago: executing program 2 (id=1040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000040a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0) 6.480224018s ago: executing program 2 (id=1041): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001"], 0x148}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}, 0x40002002) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.184168023s ago: executing program 1 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000"/37], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x400, 0x4, 0x6, 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) unshare(0x20060400) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180080021000000000020000a80050008"], 0x68}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x4, 0x0) r7 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0) fsopen(0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 5.600326797s ago: executing program 4 (id=1043): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000647f215f4557e01c504e629500080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100400000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000200), 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 5.530107598s ago: executing program 3 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x700, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 5.401042356s ago: executing program 0 (id=1045): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x5a, "02e0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x8, 0x400, 0x5, 0x4}}}}]}, 0x48}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910", @ANYRES64=r0, @ANYRESOCT=r0], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.060217383s ago: executing program 3 (id=1046): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x294, 0x24, 0x3fe3aa0262d8c583, 0xfff1, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x264, 0x2, [@TCA_GRED_LIMIT={0x4, 0x5, 0xb96}, @TCA_GRED_PARMS={0x0, 0x1, {0x1, 0x0, 0xfffffff9, 0x5, 0x3ff, 0x8, 0x148, 0x8, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x3, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x40, 0x5, 0x8, 0x5, 0x1005, 0x7, 0x9, 0x3d, 0xc88a, 0x20, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0xfffffffffffffe93, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x294}}, 0x0) 4.577220038s ago: executing program 1 (id=1047): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r1) 4.403302531s ago: executing program 1 (id=1048): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 4.298794702s ago: executing program 2 (id=1049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0xc3ff, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.44033487s ago: executing program 3 (id=1050): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) 3.210772957s ago: executing program 1 (id=1051): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) (fail_nth: 1) 3.14045069s ago: executing program 3 (id=1052): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000680)=0xf000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1000, 0x8202) getpgrp(0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001040)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000001b80)={0x0, @aes128, 0x0, @desc4}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xd, 0x6, 0x601, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg(r4, 0x0, 0x8080) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x4, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 3.040070702s ago: executing program 2 (id=1053): socket$kcm(0x10, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x2, 0xfffffffe}}, 0x120) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000000)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="24005a80200001801400030000000200fd030800090007000d00050005000400"], 0x40}}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r12, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000380)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x18, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0xb, 0x0, [@empty, @local]}, @timestamp_prespec={0x44, 0x3c, 0x2, 0x3, 0x0, [{@private=0xa010132}, {@local, 0x4000}, {@empty}, {@remote}, {@private}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@private}]}]}}}}}}}, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x118) 2.915167925s ago: executing program 1 (id=1054): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX], 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) r1 = io_uring_setup(0x4adc, &(0x7f0000000140)={0x0, 0x91f3, 0x40, 0x3, 0x19e}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr\x00') getdents64(r2, 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={0x2}) io_uring_setup(0x5c9d, &(0x7f0000000240)={0x0, 0x47fc, 0x80, 0x3, 0x140, 0x0, r1}) (async) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x1c, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.487995799s ago: executing program 1 (id=1055): sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317"], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000640)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, 0x0) r8 = dup(r4) read$FUSE(r8, &(0x7f00000018c0)={0x2020}, 0x2020) 1.640088952s ago: executing program 4 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000580)={0x2000, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e00010000000000000000030006000000000002000000000000000000000000000000080012"], 0x80}}, 0x4008844) (async, rerun: 64) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000580)={0x1f, 0x5, 0x1}) (rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40086602, &(0x7f0000000140)={0x2000000, 0x1, 0x0, 0x1000}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) (async) lgetxattr(0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x5, 0x8, 0xfe, 0x0, 0x8, 0x2, 0x8, 0x72, 0x5, 0xfa, '\x00', 0x3}) (async) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x220242, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r10, 0x2000003, 0x11, r7, 0x0) 1.222552943s ago: executing program 4 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000"/37], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x400, 0x4, 0x6, 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) unshare(0x20060400) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180080021000000000020000a80050008"], 0x68}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x4, 0x0) r7 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0) fsopen(0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.201850417s ago: executing program 3 (id=1058): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r1) 975.0735ms ago: executing program 3 (id=1059): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001"], 0x148}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}, 0x40002002) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 972.763768ms ago: executing program 2 (id=1060): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty, 0xfffffffa}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x6, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0xff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast, 0x10001}, {@empty}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0xfe, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}}) r3 = syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001300), 0x201, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f00000000c0)='_', 0x1}], 0x1) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x11, r4, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x5}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 60.757632ms ago: executing program 0 (id=1061): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=r1}, &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x210080, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="02090000020000000000000001000000e543dc159f28458492cf54cba781"], 0x10}}, 0x0) 0s ago: executing program 2 (id=1062): syz_open_procfs$namespace(0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00') syz_emit_ethernet(0x15, &(0x7f0000000300)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$incfs(0xffffffffffffffff, 0x0, 0x452a00, 0x77) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x0, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) kernel console output (not intermixed with test programs): 211.953782][ T43] usb 5-1: USB disconnect, device number 25 [ 212.325409][ T8010] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=896 (1792 ns) > initial count (1408 ns). Using initial count to start timer. [ 212.328818][ T8008] [U] V3Fپ"S/4:XTZWTLW= [ 212.387944][ T8008] [U] J"E:" [ 212.392845][ T8013] kvm: pic: non byte write [ 212.685408][ T5858] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 212.825427][ T5858] usb 4-1: device descriptor read/64, error -71 [ 213.085622][ T5858] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 213.145603][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 213.223353][ T8037] netlink: zone id is out of range [ 213.228706][ T8037] netlink: zone id is out of range [ 213.234034][ T8037] netlink: zone id is out of range [ 213.239268][ T8037] netlink: zone id is out of range [ 213.272301][ T5858] usb 4-1: device descriptor read/64, error -71 [ 213.325369][ T43] usb 5-1: device descriptor read/64, error -71 [ 213.351368][ T8039] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.559'. [ 213.396562][ T5858] usb usb4-port1: attempt power cycle [ 213.565465][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 213.695390][ T43] usb 5-1: device descriptor read/64, error -71 [ 213.715503][ T5975] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 213.885183][ T5858] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 213.885436][ T43] usb usb5-port1: attempt power cycle [ 213.906160][ T5858] usb 4-1: device descriptor read/8, error -71 [ 214.142347][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 214.154070][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.165655][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.176298][ T5975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.197701][ T5975] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.216747][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.257981][ T5975] usb 1-1: config 0 descriptor?? [ 214.285381][ T5858] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 214.340470][ T5858] usb 4-1: device descriptor read/8, error -71 [ 214.475474][ T5858] usb usb4-port1: unable to enumerate USB device [ 214.525385][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 214.546033][ T43] usb 5-1: device descriptor read/8, error -71 [ 214.834752][ T5975] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 214.857676][ T5975] hid_parser_main: 5 callbacks suppressed [ 214.857696][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 214.875868][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 214.883318][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 214.893429][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 214.901017][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 214.911494][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 214.962156][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 215.011109][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 215.018627][ T43] usb 5-1: device descriptor read/8, error -71 [ 215.043379][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 215.050802][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 215.073878][ T5975] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 215.096784][ T5975] microsoft 0003:045E:07DA.000C: unsupported Resolution Multiplier 0 [ 215.115546][ T5975] microsoft 0003:045E:07DA.000C: unsupported Resolution Multiplier 0 [ 215.126636][ T43] usb usb5-port1: unable to enumerate USB device [ 215.160031][ T5975] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 215.185481][ T5975] microsoft 0003:045E:07DA.000C: no inputs found [ 215.217737][ T5975] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 215.229559][ T5975] usb 1-1: USB disconnect, device number 25 [ 215.258465][ T8055] fido_id[8055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/report_descriptor': No such file or directory [ 215.495443][ T1226] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 215.574569][ T8061] netlink: 'syz.0.566': attribute type 5 has an invalid length. [ 215.667195][ T1226] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 215.667226][ T1226] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 215.667258][ T1226] usb 3-1: config 220 interface 0 has no altsetting 0 [ 215.669359][ T1226] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 215.704207][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.704236][ T1226] usb 3-1: Product: syz [ 215.704253][ T1226] usb 3-1: Manufacturer: syz [ 215.704269][ T1226] usb 3-1: SerialNumber: syz [ 215.835483][ T5942] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 215.895470][ T5975] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 216.036797][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 216.036848][ T5942] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 216.036874][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.038557][ T5942] usb 4-1: config 0 descriptor?? [ 216.060045][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.146998][ T5975] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 216.259787][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.270828][ T5975] usb 2-1: config 0 descriptor?? [ 216.498180][ T5942] aquacomputer_d5next 0003:0C70:F011.000D: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 216.597352][ T1226] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 216.603846][ T1226] usb 3-1: No valid video chain found. [ 216.614198][ T1226] usb 3-1: USB disconnect, device number 19 [ 218.273994][ T8099] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 218.274026][ T8099] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 218.384699][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 218.384718][ T30] audit: type=1800 audit(1755753343.773:352): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.576" name="file1" dev="tmpfs" ino=594 res=0 errno=0 [ 218.522109][ T5858] usb 4-1: USB disconnect, device number 33 [ 218.671607][ T5975] usbhid 2-1:0.0: can't add hid device: -71 [ 218.679352][ T5975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 218.699202][ T5975] usb 2-1: USB disconnect, device number 15 [ 218.735407][ T8111] usb usb8: usbfs: process 8111 (syz.4.577) did not claim interface 0 before use [ 218.761017][ T8111] netlink: 'syz.4.577': attribute type 3 has an invalid length. [ 218.769471][ T8111] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.577'. [ 218.905555][ C1] syz_tun: tun_net_xmit 54 [ 218.965442][ C1] syz_tun: tun_net_xmit 54 [ 219.256823][ T5858] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 219.462535][ T5858] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 219.480996][ T5858] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 219.735167][ T5975] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 219.770089][ T5858] usb 4-1: config 220 interface 0 has no altsetting 0 [ 219.790966][ T5858] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 219.801002][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.849034][ T5858] usb 4-1: Product: syz [ 220.061593][ T5975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.072763][ T5975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 220.095397][ T5858] usb 4-1: Manufacturer: syz [ 220.154449][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 220.190430][ T5975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 220.312188][ T5975] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 220.313448][ T5858] usb 4-1: SerialNumber: syz [ 220.446352][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 220.463999][ T5975] usb 2-1: Product: syz [ 220.470556][ T5975] usb 2-1: Manufacturer: syz [ 220.482318][ T5975] usb 2-1: SerialNumber: syz [ 220.509665][ T5975] usb 2-1: config 0 descriptor?? [ 220.555592][ T5975] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 220.672253][ T5975] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 220.703012][ T5975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 221.402903][ T5858] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 221.420620][ T5858] usb 4-1: No valid video chain found. [ 221.484019][ T5858] usb 4-1: USB disconnect, device number 34 [ 221.795881][ T8162] netlink: 'syz.2.598': attribute type 5 has an invalid length. [ 221.845051][ T8162] FAULT_INJECTION: forcing a failure. [ 221.845051][ T8162] name failslab, interval 1, probability 0, space 0, times 0 [ 221.881980][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 221.885206][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.2.598 Not tainted syzkaller #0 PREEMPT(full) [ 221.885237][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.885253][ T8162] Call Trace: [ 221.885267][ T8162] [ 221.885277][ T8162] dump_stack_lvl+0x189/0x250 [ 221.885313][ T8162] ? __pfx____ratelimit+0x10/0x10 [ 221.885346][ T8162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.885374][ T8162] ? __pfx__printk+0x10/0x10 [ 221.885410][ T8162] ? __pfx___might_resched+0x10/0x10 [ 221.885432][ T8162] ? lock_acquire+0x5f/0x360 [ 221.885468][ T8162] should_fail_ex+0x414/0x560 [ 221.885503][ T8162] should_failslab+0xa8/0x100 [ 221.885539][ T8162] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 221.885572][ T8162] ? __alloc_skb+0x112/0x2d0 [ 221.885611][ T8162] __alloc_skb+0x112/0x2d0 [ 221.885648][ T8162] netlink_ack+0x146/0xa50 [ 221.885680][ T8162] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.885715][ T8162] ? ref_tracker_free+0x63a/0x7d0 [ 221.885747][ T8162] ? __asan_memcpy+0x40/0x70 [ 221.885773][ T8162] ? __pfx_ref_tracker_free+0x10/0x10 [ 221.885814][ T8162] netlink_rcv_skb+0x28c/0x470 [ 221.885847][ T8162] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.885882][ T8162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.885928][ T8162] netlink_unicast+0x82c/0x9e0 [ 221.885963][ T8162] ? __pfx_netlink_unicast+0x10/0x10 [ 221.885995][ T8162] ? netlink_sendmsg+0x642/0xb30 [ 221.886029][ T8162] ? skb_put+0x11b/0x210 [ 221.886051][ T8162] netlink_sendmsg+0x805/0xb30 [ 221.886090][ T8162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.886127][ T8162] ? aa_sock_msg_perm+0xf1/0x1d0 [ 221.886150][ T8162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.886184][ T8162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.886219][ T8162] __sock_sendmsg+0x219/0x270 [ 221.886251][ T8162] ____sys_sendmsg+0x505/0x830 [ 221.886278][ T8162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.886308][ T8162] ? import_iovec+0x74/0xa0 [ 221.886338][ T8162] ___sys_sendmsg+0x21f/0x2a0 [ 221.886363][ T8162] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.886408][ T8162] ? __fget_files+0x2a/0x420 [ 221.886443][ T8162] ? __fget_files+0x3a0/0x420 [ 221.886485][ T8162] __x64_sys_sendmsg+0x19b/0x260 [ 221.886509][ T8162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.886540][ T8162] ? __pfx_ksys_write+0x10/0x10 [ 221.886569][ T8162] ? rcu_is_watching+0x15/0xb0 [ 221.886595][ T8162] ? rcu_is_watching+0x15/0xb0 [ 221.886618][ T8162] do_syscall_64+0xfa/0x3b0 [ 221.886654][ T8162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.886678][ T8162] ? clear_bhb_loop+0x60/0xb0 [ 221.886705][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.886728][ T8162] RIP: 0033:0x7fb52778ebe9 [ 221.886749][ T8162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.886770][ T8162] RSP: 002b:00007fb5285e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.886796][ T8162] RAX: ffffffffffffffda RBX: 00007fb5279b5fa0 RCX: 00007fb52778ebe9 [ 221.886815][ T8162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 221.886831][ T8162] RBP: 00007fb5285e2090 R08: 0000000000000000 R09: 0000000000000000 [ 221.886846][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.886860][ T8162] R13: 00007fb5279b6038 R14: 00007fb5279b5fa0 R15: 00007fb527adfa28 [ 221.886887][ T8162] [ 222.036398][ T8165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.599'. [ 222.252596][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 222.507528][ T5954] usb 2-1: USB disconnect, device number 16 [ 222.589756][ T8130] delete_channel: no stack [ 222.704087][ T8183] random: crng reseeded on system resumption [ 223.551937][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.607'. [ 223.925183][ T8202] input: syz0 as /devices/virtual/input/input23 [ 223.955367][ T5858] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 224.058946][ T8210] FAULT_INJECTION: forcing a failure. [ 224.058946][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 224.073374][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.1.614 Not tainted syzkaller #0 PREEMPT(full) [ 224.073406][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.073419][ T8210] Call Trace: [ 224.073427][ T8210] [ 224.073436][ T8210] dump_stack_lvl+0x189/0x250 [ 224.073465][ T8210] ? __pfx____ratelimit+0x10/0x10 [ 224.073494][ T8210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.073519][ T8210] ? __pfx__printk+0x10/0x10 [ 224.073548][ T8210] ? fs_reclaim_acquire+0x7d/0x100 [ 224.073580][ T8210] ? rcu_is_watching+0x15/0xb0 [ 224.073601][ T8210] ? __pfx___might_resched+0x10/0x10 [ 224.073620][ T8210] ? lock_acquire+0x5f/0x360 [ 224.073651][ T8210] should_fail_ex+0x414/0x560 [ 224.073680][ T8210] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 224.073705][ T8210] should_failslab+0xa8/0x100 [ 224.073737][ T8210] __kvmalloc_node_noprof+0x161/0x5f0 [ 224.073766][ T8210] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 224.073790][ T8210] ? alloc_netdev_mqs+0xbf1/0x11b0 [ 224.073816][ T8210] alloc_netdev_mqs+0xc7c/0x11b0 [ 224.073844][ T8210] register_vlan_device+0x24f/0x4c0 [ 224.073877][ T8210] ? __pfx_register_vlan_device+0x10/0x10 [ 224.073908][ T8210] ? security_capable+0x7e/0x2e0 [ 224.073941][ T8210] vlan_ioctl_handler+0x281/0x650 [ 224.073970][ T8210] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 224.074002][ T8210] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 224.074050][ T8210] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 224.074081][ T8210] sock_ioctl+0x60d/0x790 [ 224.074105][ T8210] ? lock_release+0x4b/0x3e0 [ 224.074136][ T8210] ? __pfx_sock_ioctl+0x10/0x10 [ 224.074161][ T8210] ? __fget_files+0x2a/0x420 [ 224.074193][ T8210] ? __fget_files+0x3a0/0x420 [ 224.074224][ T8210] ? __fget_files+0x2a/0x420 [ 224.074258][ T8210] ? bpf_lsm_file_ioctl+0x9/0x20 [ 224.074284][ T8210] ? __pfx_sock_ioctl+0x10/0x10 [ 224.074308][ T8210] __se_sys_ioctl+0xfc/0x170 [ 224.074335][ T8210] do_syscall_64+0xfa/0x3b0 [ 224.074366][ T8210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.074387][ T8210] ? clear_bhb_loop+0x60/0xb0 [ 224.074410][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.074431][ T8210] RIP: 0033:0x7fd55038ebe9 [ 224.074449][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.074468][ T8210] RSP: 002b:00007fd5512de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.074491][ T8210] RAX: ffffffffffffffda RBX: 00007fd5505b5fa0 RCX: 00007fd55038ebe9 [ 224.074506][ T8210] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000003 [ 224.074520][ T8210] RBP: 00007fd5512de090 R08: 0000000000000000 R09: 0000000000000000 [ 224.074534][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.074546][ T8210] R13: 00007fd5505b6038 R14: 00007fd5505b5fa0 R15: 00007fd5506dfa28 [ 224.074570][ T8210] [ 224.383414][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 224.392706][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.403732][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.413618][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.426485][ T5858] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 224.437009][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.447480][ T5858] usb 3-1: config 0 descriptor?? [ 224.505577][ T5942] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 224.655364][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 224.662762][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.671823][ T5942] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.683201][ T5942] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 224.696664][ T5942] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.712902][ T5942] usb 4-1: config 1 interface 0 has no altsetting 0 [ 224.851800][ T5942] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 224.861651][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.872962][ T5858] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 224.890877][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 224.899037][ T5942] usb 4-1: Product: syz [ 224.904719][ T5942] usb 4-1: Manufacturer: syz [ 224.912770][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 224.920256][ T5942] usb 4-1: SerialNumber: syz [ 224.925107][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 224.930468][ T8227] netlink: 'syz.0.620': attribute type 21 has an invalid length. [ 224.943001][ T8227] netlink: 128 bytes leftover after parsing attributes in process `syz.0.620'. [ 224.946517][ T8206] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 224.965720][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 224.973261][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 224.973267][ T8227] netlink: 'syz.0.620': attribute type 5 has an invalid length. [ 224.973285][ T8227] netlink: 'syz.0.620': attribute type 6 has an invalid length. [ 224.980959][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 225.003620][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 225.005225][ T8227] netlink: 3 bytes leftover after parsing attributes in process `syz.0.620'. [ 225.011396][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 225.027988][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 225.068582][ T5858] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 225.133961][ T5858] microsoft 0003:045E:07DA.000E: unsupported Resolution Multiplier 0 [ 225.165972][ T5858] microsoft 0003:045E:07DA.000E: unsupported Resolution Multiplier 0 [ 225.310926][ T5858] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 225.335657][ T5942] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input24 [ 225.345128][ T5858] microsoft 0003:045E:07DA.000E: no inputs found [ 225.355464][ T5858] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 225.369928][ T5858] usb 3-1: USB disconnect, device number 20 [ 225.609797][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.618971][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.649577][ T8237] delete_channel: no stack [ 225.693450][ T8238] random: crng reseeded on system resumption [ 225.702823][ T5217] bcm5974 4-1:1.0: could not read from device [ 225.743927][ T5217] bcm5974 4-1:1.0: could not read from device [ 225.768388][ T5217] bcm5974 4-1:1.0: could not read from device [ 225.799257][ T8234] fido_id[8234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 225.876628][ T5217] bcm5974 4-1:1.0: could not read from device [ 225.884078][ T5942] usb 4-1: USB disconnect, device number 35 [ 226.362516][ T8247] usb usb8: usbfs: process 8247 (syz.0.625) did not claim interface 0 before use [ 226.375459][ T8247] netlink: 'syz.0.625': attribute type 3 has an invalid length. [ 226.383990][ T8247] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.625'. [ 226.853350][ T8256] usb usb8: usbfs: process 8256 (syz.2.626) did not claim interface 0 before use [ 226.870498][ T8256] netlink: 'syz.2.626': attribute type 3 has an invalid length. [ 226.914107][ T8256] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.626'. [ 228.184332][ T8266] mmap: syz.1.631 (8266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 228.224070][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 228.773989][ T8283] usb usb8: usbfs: process 8283 (syz.4.633) did not claim interface 0 before use [ 229.339477][ T8292] bridge0: entered promiscuous mode [ 229.345064][ T8292] macsec1: entered promiscuous mode [ 229.378718][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 229.455711][ T5858] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 229.490837][ T8299] trusted_key: encrypted_key: master key parameter is missing [ 229.654454][ T5858] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 229.680724][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.717111][ T5858] usb 1-1: config 0 descriptor?? [ 229.731561][ T30] audit: type=1800 audit(1755753355.123:353): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.641" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 229.758989][ T5858] cp210x 1-1:0.0: cp210x converter detected [ 230.241475][ T8318] fuse: Bad value for 'group_id' [ 230.256066][ T8318] fuse: Bad value for 'group_id' [ 230.674159][ T5858] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 230.705689][ T5858] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 230.736652][ T5858] usb 1-1: cp210x converter now attached to ttyUSB0 [ 230.757442][ T5858] usb 1-1: USB disconnect, device number 26 [ 230.911208][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 230.931437][ T5858] cp210x 1-1:0.0: device disconnected [ 231.274670][ T8321] FAULT_INJECTION: forcing a failure. [ 231.274670][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 231.346801][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.0.643 Not tainted syzkaller #0 PREEMPT(full) [ 231.346831][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.346844][ T8321] Call Trace: [ 231.346851][ T8321] [ 231.346861][ T8321] dump_stack_lvl+0x189/0x250 [ 231.346890][ T8321] ? __pfx____ratelimit+0x10/0x10 [ 231.346919][ T8321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.346943][ T8321] ? __pfx__printk+0x10/0x10 [ 231.346971][ T8321] ? idr_alloc_u32+0x1b7/0x2d0 [ 231.346999][ T8321] ? __pfx___might_resched+0x10/0x10 [ 231.347019][ T8321] ? lock_acquire+0x5f/0x360 [ 231.347050][ T8321] should_fail_ex+0x414/0x560 [ 231.347080][ T8321] should_failslab+0xa8/0x100 [ 231.347113][ T8321] kmem_cache_alloc_noprof+0x73/0x3c0 [ 231.347141][ T8321] ? __kernfs_new_node+0xd7/0x7e0 [ 231.347164][ T8321] ? lock_acquire+0x5f/0x360 [ 231.347195][ T8321] __kernfs_new_node+0xd7/0x7e0 [ 231.347220][ T8321] ? lock_acquire+0x5f/0x360 [ 231.347249][ T8321] ? __pfx___kernfs_new_node+0x10/0x10 [ 231.347270][ T8321] ? rcu_is_watching+0x15/0xb0 [ 231.347300][ T8321] ? kernfs_root+0x1c/0x230 [ 231.347321][ T8321] ? rcu_is_watching+0x15/0xb0 [ 231.347338][ T8321] ? kernfs_root+0x1c/0x230 [ 231.347358][ T8321] ? lock_release+0x4b/0x3e0 [ 231.347379][ T8321] ? kernfs_root+0x1c/0x230 [ 231.347393][ T8321] ? kernfs_root+0x1c/0x230 [ 231.347409][ T8321] kernfs_new_node+0x102/0x210 [ 231.347427][ T8321] __kernfs_create_file+0x4b/0x2e0 [ 231.347448][ T8321] sysfs_add_file_mode_ns+0x238/0x300 [ 231.347474][ T8321] internal_create_group+0x66d/0x1110 [ 231.347496][ T8321] ? __pfx_internal_create_group+0x10/0x10 [ 231.347512][ T8321] ? down_write+0x162/0x1f0 [ 231.347527][ T8321] sysfs_create_groups+0x59/0x120 [ 231.347543][ T8321] device_add_attrs+0x13f/0x5a0 [ 231.347560][ T8321] ? __pfx_device_add_attrs+0x10/0x10 [ 231.347573][ T8321] ? kobject_put+0x43f/0x480 [ 231.347596][ T8321] ? device_add_class_symlinks+0x21f/0x240 [ 231.347612][ T8321] device_add+0x496/0xb50 [ 231.347635][ T8321] input_register_device+0x9d3/0x1140 [ 231.347659][ T8321] uinput_create_device+0x422/0x670 [ 231.347674][ T8321] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 231.347697][ T8321] uinput_ioctl_handler+0x3f0/0x1570 [ 231.347714][ T8321] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 231.347733][ T8321] ? __fget_files+0x2a/0x420 [ 231.347754][ T8321] ? __fget_files+0x3a0/0x420 [ 231.347777][ T8321] ? bpf_lsm_file_ioctl+0x9/0x20 [ 231.347795][ T8321] ? __pfx_uinput_ioctl+0x10/0x10 [ 231.347810][ T8321] __se_sys_ioctl+0xfc/0x170 [ 231.347831][ T8321] do_syscall_64+0xfa/0x3b0 [ 231.347852][ T8321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.347867][ T8321] ? clear_bhb_loop+0x60/0xb0 [ 231.347882][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.347896][ T8321] RIP: 0033:0x7f89a5f8ebe9 [ 231.347909][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.347922][ T8321] RSP: 002b:00007f89a6eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.347938][ T8321] RAX: ffffffffffffffda RBX: 00007f89a61b5fa0 RCX: 00007f89a5f8ebe9 [ 231.347949][ T8321] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 231.347957][ T8321] RBP: 00007f89a6eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 231.347966][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.347975][ T8321] R13: 00007f89a61b6038 R14: 00007f89a61b5fa0 R15: 00007f89a62dfa28 [ 231.347990][ T8321] [ 231.875019][ T8330] loop8: detected capacity change from 0 to 8 [ 231.886676][ T8330] Dev loop8: unable to read RDB block 8 [ 231.892327][ T8330] loop8: unable to read partition table [ 231.905857][ T8330] loop8: partition table beyond EOD, truncated [ 231.912894][ T8330] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 231.987143][ T8333] syz_tun: entered allmulticast mode [ 232.005515][ C0] syz_tun: tun_net_xmit 54 [ 232.075433][ T5954] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 232.100360][ T8332] syz_tun: left allmulticast mode [ 232.105861][ T1226] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 232.155408][ C0] syz_tun: tun_net_xmit 54 [ 232.205389][ T5954] usb 1-1: device descriptor read/64, error -71 [ 232.275382][ T1226] usb 5-1: Using ep0 maxpacket: 16 [ 232.281881][ T1226] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 232.291617][ T1226] usb 5-1: config 0 has no interface number 0 [ 232.297902][ T1226] usb 5-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 232.311718][ T1226] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 232.335732][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.343802][ T1226] usb 5-1: Product: syz [ 232.345465][ T5858] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 232.348334][ T1226] usb 5-1: Manufacturer: syz [ 232.365363][ T1226] usb 5-1: SerialNumber: syz [ 232.448358][ T1226] usb 5-1: config 0 descriptor?? [ 232.481505][ T8326] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 232.562552][ T5954] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 232.575114][ T1226] kvaser_usb 5-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 232.645466][ C0] syz_tun: tun_net_xmit 54 [ 232.651811][ T5858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.664714][ T5858] usb 2-1: not running at top speed; connect to a high speed hub [ 232.678161][ T5858] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 232.686951][ T5858] usb 2-1: config 3 has no interface number 0 [ 232.693198][ T5858] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 232.704795][ T5858] usb 2-1: config 3 interface 106 has no altsetting 0 [ 232.705395][ T5954] usb 1-1: device descriptor read/64, error -71 [ 232.721509][ T5858] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 232.731553][ T5942] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 232.741298][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.749951][ T5858] usb 2-1: Product: syz [ 232.754466][ T5858] usb 2-1: Manufacturer: syz [ 232.759551][ T5858] usb 2-1: SerialNumber: syz [ 232.768800][ T8335] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 232.790861][ T3798] usb 5-1: USB disconnect, device number 30 [ 232.835705][ T5954] usb usb1-port1: attempt power cycle [ 232.875461][ T5942] usb 3-1: device descriptor read/64, error -71 [ 233.068192][ T5858] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 233.082407][ T5858] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 233.100540][ T5858] usb 2-1: USB disconnect, device number 17 [ 233.109102][ T5858] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 233.127602][ T5942] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 233.138309][ T5858] kobil_sct 2-1:3.106: device disconnected [ 233.195771][ T5954] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 233.216700][ T5954] usb 1-1: device descriptor read/8, error -71 [ 233.265380][ T5942] usb 3-1: device descriptor read/64, error -71 [ 233.376361][ T5942] usb usb3-port1: attempt power cycle [ 233.465398][ T5954] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 233.496428][ T5954] usb 1-1: device descriptor read/8, error -71 [ 233.548087][ T5962] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 233.572117][ T8358] tipc: Started in network mode [ 233.577921][ T8358] tipc: Node identity 1acf68b78b04, cluster identity 4711 [ 233.585690][ T8358] tipc: Enabled bearer , priority 0 [ 233.593057][ T8358] syzkaller0: entered promiscuous mode [ 233.599062][ T8358] syzkaller0: entered allmulticast mode [ 233.608611][ T5954] usb usb1-port1: unable to enumerate USB device [ 233.633792][ T8360] fuse: Bad value for 'fd' [ 233.640603][ T8358] tipc: Resetting bearer [ 233.651207][ T8358] tipc: Disabling bearer [ 233.711475][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.723513][ T5942] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 233.733087][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.746916][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.757612][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.771757][ T5942] usb 3-1: device descriptor read/8, error -71 [ 233.778195][ T5962] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.787317][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.825830][ T5962] usb 4-1: config 0 descriptor?? [ 233.860424][ T8364] random: crng reseeded on system resumption [ 234.095449][ T5942] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 234.116999][ T5942] usb 3-1: device descriptor read/8, error -71 [ 234.240658][ T5962] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 234.256102][ T5942] usb usb3-port1: unable to enumerate USB device [ 234.315359][ T3798] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 234.485363][ T3798] usb 2-1: Using ep0 maxpacket: 8 [ 234.492331][ T3798] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 234.499868][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 234.509939][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.513694][ T3798] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.532695][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.548541][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.559447][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.561527][ T3798] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 234.579806][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 234.591227][ T3798] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.606359][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.620038][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.631391][ T3798] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 234.631415][ T5954] usb 4-1: USB disconnect, device number 36 [ 234.683963][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 234.725418][ T3798] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.757608][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.769999][ T3798] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.785584][ T3798] usb 2-1: string descriptor 0 read error: -22 [ 234.791869][ T3798] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 234.802071][ T3798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.816220][ T3798] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 235.092198][ T5962] usb 2-1: USB disconnect, device number 18 [ 235.245399][ T3798] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 235.406756][ T3798] usb 1-1: Using ep0 maxpacket: 16 [ 235.414818][ T3798] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 235.425181][ T3798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.443022][ T3798] usb 1-1: config 0 descriptor?? [ 235.454052][ T3798] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 235.653593][ T3798] usb 1-1: Detected FT232A [ 235.659552][ T3798] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 235.682516][ T3798] usb 1-1: USB disconnect, device number 31 [ 235.707563][ T3798] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 235.740331][ T3798] ftdi_sio 1-1:0.0: device disconnected [ 236.463795][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 236.476280][ T8435] input: syz0 as /devices/virtual/input/input27 [ 236.560954][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'. [ 236.855410][ T5975] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 236.897878][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 236.906982][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 237.025358][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 237.099659][ T5975] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 237.122350][ T5975] usb 3-1: config 0 has no interface number 0 [ 237.222304][ T5975] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 237.232516][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.242542][ T5975] usb 3-1: Product: syz [ 237.291017][ T5975] usb 3-1: Manufacturer: syz [ 237.323475][ T5975] usb 3-1: SerialNumber: syz [ 237.347661][ T5975] usb 3-1: config 0 descriptor?? [ 237.364531][ T5975] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 237.568202][ T5975] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 237.915989][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.955713][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.970099][ T5975] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 238.258957][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 238.266879][ T5975] usb 3-1: USB disconnect, device number 25 [ 238.275771][ T5975] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 238.300856][ T5975] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 238.334797][ T5975] quatech2 3-1:0.51: device disconnected [ 238.369993][ T8463] random: crng reseeded on system resumption [ 238.466225][ T30] audit: type=1326 audit(1755753363.853:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 238.491103][ T30] audit: type=1326 audit(1755753363.853:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 238.530588][ T30] audit: type=1326 audit(1755753363.853:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 238.821431][ T30] audit: type=1326 audit(1755753363.853:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 239.187408][ T30] audit: type=1326 audit(1755753363.853:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 239.217190][ T8483] random: crng reseeded on system resumption [ 239.270524][ T30] audit: type=1326 audit(1755753363.853:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 239.560676][ T30] audit: type=1326 audit(1755753363.853:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 239.638419][ T30] audit: type=1326 audit(1755753363.853:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 239.683644][ T30] audit: type=1326 audit(1755753363.853:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 239.975751][ T30] audit: type=1326 audit(1755753363.853:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc0cb8ebe9 code=0x7ffc0000 [ 241.199936][ T8506] netlink: 92 bytes leftover after parsing attributes in process `syz.1.685'. [ 241.220944][ T8506] netlink: 92 bytes leftover after parsing attributes in process `syz.1.685'. [ 241.276812][ T5858] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 241.465638][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 241.575417][ T3798] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 241.711168][ T8515] usb usb8: usbfs: process 8515 (syz.1.688) did not claim interface 0 before use [ 241.722293][ T8515] netlink: 'syz.1.688': attribute type 3 has an invalid length. [ 241.730029][ T8515] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.688'. [ 241.784015][ T3798] usb 3-1: Using ep0 maxpacket: 16 [ 241.793667][ T3798] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 241.813031][ T3798] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 241.821119][ T3798] usb 3-1: can't read configurations, error -61 [ 241.997391][ T3798] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 242.020589][ T8523] netlink: 56 bytes leftover after parsing attributes in process `syz.0.693'. [ 242.228745][ T3798] usb 3-1: Using ep0 maxpacket: 16 [ 242.280275][ T3798] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 242.317372][ T3798] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 242.336718][ T3798] usb 3-1: can't read configurations, error -61 [ 242.382264][ T3798] usb usb3-port1: attempt power cycle [ 242.575338][ T1226] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 242.726581][ T1226] usb 5-1: Using ep0 maxpacket: 16 [ 242.753102][ T1226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.766018][ T3798] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 242.775421][ T1226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.792993][ T1226] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.813138][ T1226] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.826344][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.848837][ T1226] usb 5-1: config 0 descriptor?? [ 242.849544][ T3798] usb 3-1: Using ep0 maxpacket: 16 [ 242.878682][ T3798] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 242.893281][ T3798] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 242.901388][ T3798] usb 3-1: can't read configurations, error -61 [ 243.036755][ T3798] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 243.067498][ T3798] usb 3-1: Using ep0 maxpacket: 16 [ 243.074985][ T3798] usb 3-1: too many configurations: 212, using maximum allowed: 8 [ 243.084665][ T3798] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 243.098610][ T3798] usb 3-1: can't read configurations, error -61 [ 243.120728][ T3798] usb usb3-port1: unable to enumerate USB device [ 243.308495][ T1226] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 243.393324][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.411992][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.420481][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.428202][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.436982][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.457237][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.467597][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.475094][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.486341][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.493982][ T1226] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 243.507455][ T1226] microsoft 0003:045E:07DA.0010: unsupported Resolution Multiplier 0 [ 243.681474][ T8548] random: crng reseeded on system resumption [ 243.696944][ T1226] microsoft 0003:045E:07DA.0010: unsupported Resolution Multiplier 0 [ 243.725543][ T1226] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 243.748312][ T1226] microsoft 0003:045E:07DA.0010: no inputs found [ 243.762456][ T1226] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 243.911525][ T1226] usb 5-1: USB disconnect, device number 31 [ 244.151580][ T5858] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.189740][ T5858] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 244.202179][ T5858] usb 4-1: can't read configurations, error -71 [ 244.322004][ T8559] random: crng reseeded on system resumption [ 245.246066][ T1226] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 245.253833][ T5942] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 245.395578][ T1226] usb 3-1: Using ep0 maxpacket: 32 [ 245.419322][ T1226] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.428603][ T1226] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 245.440314][ T1226] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.449832][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.465642][ T1226] usb 3-1: Product: syz [ 245.471196][ T5942] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 245.480253][ T5942] usb 1-1: config 0 has no interface number 0 [ 245.490505][ T1226] usb 3-1: Manufacturer: syz [ 245.495138][ T1226] usb 3-1: SerialNumber: syz [ 245.520715][ T5942] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 245.532778][ T8568] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.596716][ T5942] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 245.652736][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.672983][ T5942] usb 1-1: Product: syz [ 245.693583][ T5942] usb 1-1: Manufacturer: syz [ 245.721932][ T5942] usb 1-1: SerialNumber: syz [ 245.738533][ T5942] usb 1-1: config 0 descriptor?? [ 245.750852][ T1226] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 245.786664][ T8567] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 245.843697][ T5942] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 245.861580][ T1226] usb 3-1: USB disconnect, device number 30 [ 246.134678][ T5942] ums-sddr09 1-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 246.606519][ T5954] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 246.787607][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 246.796688][ T5954] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 246.818302][ T5954] usb 2-1: config 0 has no interface number 0 [ 246.839654][ T5954] usb 2-1: config 0 interface 230 has no altsetting 0 [ 246.845409][ T5942] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 246.856559][ T5954] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 246.874257][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.897276][ T5954] usb 2-1: Product: syz [ 246.904197][ T5954] usb 2-1: Manufacturer: syz [ 246.909102][ T5954] usb 2-1: SerialNumber: syz [ 246.917284][ T5954] usb 2-1: config 0 descriptor?? [ 246.933081][ T5954] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 246.944165][ T5954] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 247.045448][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 247.053240][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.112310][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.132179][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.190259][ T5942] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 247.208762][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.236097][ T5942] usb 3-1: config 0 descriptor?? [ 247.408564][ T8599] QAT: Invalid ioctl 21531 [ 247.423024][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 247.452944][ T8599] team0 (unregistering): Port device team_slave_0 removed [ 247.464769][ T8599] team0 (unregistering): Port device team_slave_1 removed [ 247.667289][ T5942] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 247.717829][ T5942] microsoft 0003:045E:07DA.0011: unsupported Resolution Multiplier 0 [ 247.746183][ T5942] microsoft 0003:045E:07DA.0011: unsupported Resolution Multiplier 0 [ 247.759589][ T5942] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 247.790012][ T5942] microsoft 0003:045E:07DA.0011: no inputs found [ 247.798397][ T5942] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 247.858306][ T5942] usb 3-1: USB disconnect, device number 31 [ 247.888482][ T8608] usb usb8: usbfs: process 8608 (syz.4.717) did not claim interface 0 before use [ 247.978226][ T1226] usb 1-1: USB disconnect, device number 32 [ 248.072051][ T8606] fido_id[8606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 248.232618][ T8614] random: crng reseeded on system resumption [ 248.827532][ T8624] netlink: 104 bytes leftover after parsing attributes in process `syz.2.721'. [ 248.899949][ T8626] libceph: resolve ' [ 248.899949][ T8626] -'fYǝa2i [ 248.899949][ T8626] .?&*&' (ret=-3): failed [ 249.032612][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 249.216515][ T5954] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 249.435511][ T5962] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 249.497760][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.723'. [ 249.506996][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.723'. [ 249.641269][ T5962] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.649682][ T5962] usb 4-1: config 0 has no interface number 0 [ 249.656267][ T5962] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.679679][ T5962] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.811011][ T5962] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 249.837912][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.860699][ T5962] usb 4-1: config 0 descriptor?? [ 250.273903][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 250.445018][ T1226] usb 2-1: USB disconnect, device number 19 [ 250.541384][ T8654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.726'. [ 250.565379][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.587658][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.647846][ T5962] usbhid 4-1:0.1: can't add hid device: -71 [ 250.649902][ T8655] macsec2: entered promiscuous mode [ 250.665845][ T5962] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 250.673929][ T8655] macsec2: entered allmulticast mode [ 250.751710][ T8655] team0: entered allmulticast mode [ 250.805812][ T5962] usb 4-1: USB disconnect, device number 39 [ 250.825240][ T8655] team_slave_0: entered allmulticast mode [ 250.955941][ T8655] team_slave_1: entered allmulticast mode [ 251.628280][ T8667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 251.637349][ T8667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.731'. [ 251.812807][ T8673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.733'. [ 253.189322][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 253.218334][ T8701] bridge0: port 3(batadv1) entered blocking state [ 253.224981][ T8701] bridge0: port 3(batadv1) entered disabled state [ 253.231646][ T8701] batadv1: entered allmulticast mode [ 253.258584][ T8701] batadv1: entered promiscuous mode [ 253.731962][ T1158] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 253.741299][ T1158] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 253.789350][ T8712] bridge0: port 3(hsr_slave_1) entered blocking state [ 253.796442][ T8712] bridge0: port 3(hsr_slave_1) entered disabled state [ 253.803559][ T8712] hsr_slave_1: entered allmulticast mode [ 253.861520][ T8712] hsr_slave_1: left allmulticast mode [ 254.416804][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'. [ 254.445602][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'. [ 256.315951][ T8744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 256.322529][ T8744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.373133][ T8744] vhci_hcd vhci_hcd.0: Device attached [ 256.458387][ T8744] netdevsim netdevsim0: Direct firmware load for x failed with error -2 [ 256.468063][ T8744] netdevsim netdevsim0: Falling back to sysfs fallback for: x [ 256.635549][ T1226] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 256.656468][ T8746] vhci_hcd: connection reset by peer [ 256.665461][ T3798] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 256.675981][ T1158] vhci_hcd: stop threads [ 256.680448][ T1158] vhci_hcd: release socket [ 256.686801][ T1158] vhci_hcd: disconnect device [ 256.813339][ T5954] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 256.924852][ T3798] usb 3-1: Using ep0 maxpacket: 8 [ 256.932715][ T3798] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.941779][ T3798] usb 3-1: config 9 has an invalid interface number: 5 but max is 0 [ 256.950005][ T3798] usb 3-1: config 9 has no interface number 0 [ 256.957561][ T3798] usb 3-1: config 9 interface 5 altsetting 9 endpoint 0x9 has an invalid bInterval 181, changing to 7 [ 257.047962][ T5954] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 257.057740][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.066758][ T5954] usb 5-1: Product: syz [ 257.072162][ T5954] usb 5-1: Manufacturer: syz [ 257.147804][ T5954] usb 5-1: SerialNumber: syz [ 257.165084][ T3798] usb 3-1: config 9 interface 5 has no altsetting 0 [ 257.193970][ T3798] usb 3-1: New USB device found, idVendor=06ff, idProduct=b000, bcdDevice=5d.a8 [ 257.287430][ T3798] usb 3-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 257.315996][ T5975] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 257.336255][ T3798] usb 3-1: Product: syz [ 257.362606][ T3798] usb 3-1: Manufacturer: syz [ 257.386356][ T3798] usb 3-1: SerialNumber: syz [ 257.478043][ T5975] usb 2-1: Using ep0 maxpacket: 16 [ 257.490514][ T5975] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 257.501250][ T5975] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 257.514774][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.538614][ T5975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.549848][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.558379][ T5975] usb 2-1: Product: э [ 257.562664][ T5975] usb 2-1: SerialNumber: syz [ 257.653510][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.665196][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.709576][ T3798] usb 3-1: USB disconnect, device number 32 [ 257.902974][ T5908] hid_parser_main: 10 callbacks suppressed [ 257.902993][ T5908] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 257.970907][ T5908] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.541775][ T8778] random: crng reseeded on system resumption [ 258.793303][ T8781] Invalid logical block size (61439) [ 258.814436][ T5954] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 259.133208][ T5954] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 259.177308][ T5954] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 259.304943][ T8789] kvm: user requested TSC rate below hardware speed [ 259.360470][ T5954] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 259.509027][ T5954] usb 5-1: USB disconnect, device number 32 [ 259.574580][ T8793] FAULT_INJECTION: forcing a failure. [ 259.574580][ T8793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.609656][ T8793] CPU: 1 UID: 0 PID: 8793 Comm: syz.3.764 Not tainted syzkaller #0 PREEMPT(full) [ 259.609688][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.609701][ T8793] Call Trace: [ 259.609709][ T8793] [ 259.609718][ T8793] dump_stack_lvl+0x189/0x250 [ 259.609746][ T8793] ? __pfx____ratelimit+0x10/0x10 [ 259.609772][ T8793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.609795][ T8793] ? __pfx__printk+0x10/0x10 [ 259.609824][ T8793] ? rcu_is_watching+0x15/0xb0 [ 259.609846][ T8793] should_fail_ex+0x414/0x560 [ 259.609873][ T8793] _copy_to_user+0x31/0xb0 [ 259.609896][ T8793] simple_read_from_buffer+0xe1/0x170 [ 259.609928][ T8793] proc_fail_nth_read+0x1b3/0x220 [ 259.609953][ T8793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.609976][ T8793] ? rw_verify_area+0x2a6/0x4d0 [ 259.610001][ T8793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.610033][ T8793] vfs_read+0x200/0xa30 [ 259.610058][ T8793] ? fdget_pos+0x247/0x320 [ 259.610078][ T8793] ? __pfx___mutex_lock+0x10/0x10 [ 259.610108][ T8793] ? __pfx_vfs_read+0x10/0x10 [ 259.610136][ T8793] ? __fget_files+0x3a0/0x420 [ 259.610165][ T8793] ? __fget_files+0x2a/0x420 [ 259.610199][ T8793] ksys_read+0x145/0x250 [ 259.610225][ T8793] ? __fget_files+0x3a0/0x420 [ 259.610256][ T8793] ? __pfx_ksys_read+0x10/0x10 [ 259.610283][ T8793] ? __pfx_v4l2_ioctl+0x10/0x10 [ 259.610316][ T8793] ? rcu_is_watching+0x15/0xb0 [ 259.610337][ T8793] do_syscall_64+0xfa/0x3b0 [ 259.610367][ T8793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.610387][ T8793] ? clear_bhb_loop+0x60/0xb0 [ 259.610410][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.610429][ T8793] RIP: 0033:0x7fccc978d5fc [ 259.610447][ T8793] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.610466][ T8793] RSP: 002b:00007fccca512030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.610488][ T8793] RAX: ffffffffffffffda RBX: 00007fccc99b5fa0 RCX: 00007fccc978d5fc [ 259.610504][ T8793] RDX: 000000000000000f RSI: 00007fccca5120a0 RDI: 0000000000000004 [ 259.610518][ T8793] RBP: 00007fccca512090 R08: 0000000000000000 R09: 0000000000000000 [ 259.610532][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.610545][ T8793] R13: 00007fccc99b6038 R14: 00007fccc99b5fa0 R15: 00007fccc9adfa28 [ 259.610567][ T8793] [ 260.306666][ T5975] usb 2-1: 0:2 : does not exist [ 260.408076][ T5975] usb 2-1: USB disconnect, device number 20 [ 260.445518][ T5954] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 260.492646][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.599420][ T8807] netlink: 92 bytes leftover after parsing attributes in process `syz.0.770'. [ 260.620434][ T8807] netlink: 92 bytes leftover after parsing attributes in process `syz.0.770'. [ 260.620544][ T5954] usb 5-1: config 2 interface 0 has no altsetting 0 [ 260.645581][ T5954] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 260.664989][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.680416][ T5954] usb 5-1: Product: syz [ 260.689344][ T5954] usb 5-1: Manufacturer: syz [ 260.756723][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.771'. [ 260.765801][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.771'. [ 260.786641][ T5954] usb 5-1: SerialNumber: syz [ 261.022414][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.031205][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.232954][ T5954] usb 5-1: USB disconnect, device number 33 [ 261.325382][ T5962] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 261.545897][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 261.562930][ T5962] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.585672][ T5962] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.618479][ T5962] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.629354][ T8839] fuse: Unknown parameter 'D21QIM&OE97}-HGl.'@ڭE9?C [ 267.049263][ T8938] dump_stack_lvl+0x189/0x250 [ 267.049285][ T8938] ? __pfx____ratelimit+0x10/0x10 [ 267.049307][ T8938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.049324][ T8938] ? __pfx__printk+0x10/0x10 [ 267.049345][ T8938] ? lock_acquire+0x5f/0x360 [ 267.049370][ T8938] should_fail_ex+0x414/0x560 [ 267.049390][ T8938] prepare_alloc_pages+0x213/0x610 [ 267.049408][ T8938] __alloc_frozen_pages_noprof+0x123/0x370 [ 267.049424][ T8938] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.049443][ T8938] ? policy_nodemask+0x27c/0x720 [ 267.049465][ T8938] alloc_pages_mpol+0x232/0x4a0 [ 267.049487][ T8938] alloc_pages_noprof+0xa9/0x190 [ 267.049508][ T8938] __pmd_alloc+0x3a/0x3b0 [ 267.049527][ T8938] walk_to_pmd+0x334/0x460 [ 267.049543][ T8938] __get_locked_pte+0x27/0xd0 [ 267.049558][ T8938] map_ldt_struct+0x4cf/0xb30 [ 267.049581][ T8938] ? __pfx_map_ldt_struct+0x10/0x10 [ 267.049600][ T8938] ? alloc_pages_noprof+0xbe/0x190 [ 267.049621][ T8938] write_ldt+0x748/0x910 [ 267.049641][ T8938] ? __pfx_write_ldt+0x10/0x10 [ 267.049658][ T8938] ? ksys_write+0x22a/0x250 [ 267.049684][ T8938] ? __pfx_ksys_write+0x10/0x10 [ 267.049702][ T8938] ? rcu_is_watching+0x15/0xb0 [ 267.049719][ T8938] __se_sys_modify_ldt+0x6c/0x320 [ 267.049738][ T8938] do_syscall_64+0xfa/0x3b0 [ 267.049760][ T8938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.049775][ T8938] ? clear_bhb_loop+0x60/0xb0 [ 267.049791][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.049806][ T8938] RIP: 0033:0x7fccc978ebe9 [ 267.049819][ T8938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.049832][ T8938] RSP: 002b:00007fccca512038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 267.049849][ T8938] RAX: ffffffffffffffda RBX: 00007fccc99b5fa0 RCX: 00007fccc978ebe9 [ 267.049860][ T8938] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000001 [ 267.049869][ T8938] RBP: 00007fccca512090 R08: 0000000000000000 R09: 0000000000000000 [ 267.049879][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.049887][ T8938] R13: 00007fccc99b6038 R14: 00007fccc99b5fa0 R15: 00007fccc9adfa28 [ 267.049904][ T8938] [ 267.294195][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.624033][ T8944] netlink: 92 bytes leftover after parsing attributes in process `syz.3.807'. [ 267.677016][ T8944] netlink: 92 bytes leftover after parsing attributes in process `syz.3.807'. [ 268.055832][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.090810][ T8958] tipc: Enabling of bearer rejected, failed to enable media [ 268.796676][ T3798] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 268.998738][ T3798] usb 2-1: config 0 has no interfaces? [ 269.066842][ T3798] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 269.076177][ T3798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.102122][ T3798] usb 2-1: Product: syz [ 269.140992][ T3798] usb 2-1: Manufacturer: syz [ 269.163075][ T3798] usb 2-1: SerialNumber: syz [ 269.248379][ T3798] usb 2-1: config 0 descriptor?? [ 270.729836][ T9008] netlink: 92 bytes leftover after parsing attributes in process `syz.2.825'. [ 270.746703][ T9008] netlink: 92 bytes leftover after parsing attributes in process `syz.2.825'. [ 270.777674][ T9009] random: crng reseeded on system resumption [ 271.657738][ T9026] vivid-000: disconnect [ 272.230334][ T8971] vivid-000: reconnect [ 272.236108][ T5858] usb 2-1: USB disconnect, device number 21 [ 272.649507][ T9049] netlink: 92 bytes leftover after parsing attributes in process `syz.4.836'. [ 272.802129][ T9049] netlink: 92 bytes leftover after parsing attributes in process `syz.4.836'. [ 274.097545][ T1226] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 274.863174][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.842'. [ 274.882584][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.842'. [ 275.323752][ T9093] FAULT_INJECTION: forcing a failure. [ 275.323752][ T9093] name failslab, interval 1, probability 0, space 0, times 0 [ 275.465498][ T9093] CPU: 0 UID: 0 PID: 9093 Comm: syz.0.846 Not tainted syzkaller #0 PREEMPT(full) [ 275.465534][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.465547][ T9093] Call Trace: [ 275.465555][ T9093] [ 275.465563][ T9093] dump_stack_lvl+0x189/0x250 [ 275.465593][ T9093] ? __pfx____ratelimit+0x10/0x10 [ 275.465621][ T9093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.465646][ T9093] ? __pfx__printk+0x10/0x10 [ 275.465676][ T9093] ? __pfx___might_resched+0x10/0x10 [ 275.465704][ T9093] ? lock_acquire+0x5f/0x360 [ 275.465734][ T9093] should_fail_ex+0x414/0x560 [ 275.465764][ T9093] should_failslab+0xa8/0x100 [ 275.465796][ T9093] __kmalloc_node_noprof+0xd1/0x4e0 [ 275.465823][ T9093] ? rcu_is_watching+0x15/0xb0 [ 275.465843][ T9093] ? qdisc_alloc+0x97/0xaa0 [ 275.465873][ T9093] qdisc_alloc+0x97/0xaa0 [ 275.465906][ T9093] qdisc_create+0x12c/0xea0 [ 275.465930][ T9093] ? lock_release+0x4b/0x3e0 [ 275.465964][ T9093] tc_modify_qdisc+0x1538/0x20e0 [ 275.465996][ T9093] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 275.466031][ T9093] ? lock_release+0x4b/0x3e0 [ 275.466059][ T9093] ? bpf_lsm_capable+0x9/0x20 [ 275.466088][ T9093] ? security_capable+0x7e/0x2e0 [ 275.466120][ T9093] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 275.466137][ T9093] rtnetlink_rcv_msg+0x779/0xb70 [ 275.466161][ T9093] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 275.466182][ T9093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.466206][ T9093] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 275.466231][ T9093] netlink_rcv_skb+0x208/0x470 [ 275.466251][ T9093] ? rcu_is_watching+0x15/0xb0 [ 275.466265][ T9093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.466287][ T9093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.466316][ T9093] netlink_unicast+0x82c/0x9e0 [ 275.466339][ T9093] ? __pfx_netlink_unicast+0x10/0x10 [ 275.466358][ T9093] ? netlink_sendmsg+0x642/0xb30 [ 275.466379][ T9093] ? skb_put+0x11b/0x210 [ 275.466393][ T9093] netlink_sendmsg+0x805/0xb30 [ 275.466418][ T9093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.466442][ T9093] ? aa_sock_msg_perm+0xf1/0x1d0 [ 275.466456][ T9093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.466472][ T9093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.466494][ T9093] __sock_sendmsg+0x219/0x270 [ 275.466513][ T9093] ____sys_sendmsg+0x505/0x830 [ 275.466530][ T9093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.466547][ T9093] ? import_iovec+0x74/0xa0 [ 275.466565][ T9093] ___sys_sendmsg+0x21f/0x2a0 [ 275.466580][ T9093] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.466607][ T9093] ? __fget_files+0x2a/0x420 [ 275.466629][ T9093] ? __fget_files+0x3a0/0x420 [ 275.466655][ T9093] __x64_sys_sendmsg+0x19b/0x260 [ 275.466671][ T9093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.466695][ T9093] ? __pfx_ksys_write+0x10/0x10 [ 275.466714][ T9093] ? rcu_is_watching+0x15/0xb0 [ 275.466730][ T9093] ? rcu_is_watching+0x15/0xb0 [ 275.466744][ T9093] do_syscall_64+0xfa/0x3b0 [ 275.466766][ T9093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.466781][ T9093] ? clear_bhb_loop+0x60/0xb0 [ 275.466797][ T9093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.466811][ T9093] RIP: 0033:0x7f89a5f8ebe9 [ 275.466824][ T9093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.466837][ T9093] RSP: 002b:00007f89a6eb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.466853][ T9093] RAX: ffffffffffffffda RBX: 00007f89a61b5fa0 RCX: 00007f89a5f8ebe9 [ 275.466864][ T9093] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 275.466874][ T9093] RBP: 00007f89a6eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 275.466883][ T9093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.466892][ T9093] R13: 00007f89a61b6038 R14: 00007f89a61b5fa0 R15: 00007f89a62dfa28 [ 275.466908][ T9093] [ 275.843931][ T9094] FAULT_INJECTION: forcing a failure. [ 275.843931][ T9094] name failslab, interval 1, probability 0, space 0, times 0 [ 275.857296][ T9094] CPU: 0 UID: 0 PID: 9094 Comm: syz.3.845 Not tainted syzkaller #0 PREEMPT(full) [ 275.857317][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.857327][ T9094] Call Trace: [ 275.857332][ T9094] [ 275.857337][ T9094] dump_stack_lvl+0x189/0x250 [ 275.857359][ T9094] ? __pfx____ratelimit+0x10/0x10 [ 275.857379][ T9094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.857396][ T9094] ? __pfx__printk+0x10/0x10 [ 275.857418][ T9094] ? __pfx___might_resched+0x10/0x10 [ 275.857432][ T9094] ? lock_acquire+0x5f/0x360 [ 275.857454][ T9094] should_fail_ex+0x414/0x560 [ 275.857474][ T9094] should_failslab+0xa8/0x100 [ 275.857497][ T9094] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 275.857517][ T9094] ? __alloc_skb+0x112/0x2d0 [ 275.857541][ T9094] __alloc_skb+0x112/0x2d0 [ 275.857563][ T9094] netlink_ack+0x146/0xa50 [ 275.857583][ T9094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.857604][ T9094] ? ref_tracker_free+0x63a/0x7d0 [ 275.857631][ T9094] ? __asan_memcpy+0x40/0x70 [ 275.857648][ T9094] ? __pfx_ref_tracker_free+0x10/0x10 [ 275.857672][ T9094] netlink_rcv_skb+0x28c/0x470 [ 275.857693][ T9094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.857715][ T9094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.857744][ T9094] netlink_unicast+0x82c/0x9e0 [ 275.857765][ T9094] ? __pfx_netlink_unicast+0x10/0x10 [ 275.857785][ T9094] ? netlink_sendmsg+0x642/0xb30 [ 275.857806][ T9094] ? skb_put+0x11b/0x210 [ 275.857819][ T9094] netlink_sendmsg+0x805/0xb30 [ 275.857844][ T9094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.857867][ T9094] ? aa_sock_msg_perm+0xf1/0x1d0 [ 275.857880][ T9094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.857897][ T9094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.857919][ T9094] __sock_sendmsg+0x219/0x270 [ 275.857938][ T9094] ____sys_sendmsg+0x505/0x830 [ 275.857954][ T9094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.857972][ T9094] ? import_iovec+0x74/0xa0 [ 275.857989][ T9094] ___sys_sendmsg+0x21f/0x2a0 [ 275.858004][ T9094] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.858031][ T9094] ? __fget_files+0x2a/0x420 [ 275.858053][ T9094] ? __fget_files+0x3a0/0x420 [ 275.858079][ T9094] __x64_sys_sendmsg+0x19b/0x260 [ 275.858094][ T9094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.858112][ T9094] ? __pfx_ksys_write+0x10/0x10 [ 275.858130][ T9094] ? rcu_is_watching+0x15/0xb0 [ 275.858146][ T9094] ? rcu_is_watching+0x15/0xb0 [ 275.858161][ T9094] do_syscall_64+0xfa/0x3b0 [ 275.858183][ T9094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.858197][ T9094] ? clear_bhb_loop+0x60/0xb0 [ 275.858213][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.858227][ T9094] RIP: 0033:0x7fccc978ebe9 [ 275.858241][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.858254][ T9094] RSP: 002b:00007fccca512038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.858270][ T9094] RAX: ffffffffffffffda RBX: 00007fccc99b5fa0 RCX: 00007fccc978ebe9 [ 275.858282][ T9094] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 275.858291][ T9094] RBP: 00007fccca512090 R08: 0000000000000000 R09: 0000000000000000 [ 275.858300][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.858309][ T9094] R13: 00007fccc99b6038 R14: 00007fccc99b5fa0 R15: 00007fccc9adfa28 [ 275.858325][ T9094] [ 276.254472][ T9097] netlink: 92 bytes leftover after parsing attributes in process `syz.1.848'. [ 276.263836][ T9097] netlink: 92 bytes leftover after parsing attributes in process `syz.1.848'. [ 276.975494][ T5921] syz_tun: tun_net_xmit 106 [ 277.185445][ T5921] syz_tun: tun_net_xmit 106 [ 277.427668][ T9128] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 277.439009][ T9128] tipc: Enabled bearer , priority 10 [ 277.485069][ T9132] netlink: 'syz.1.858': attribute type 12 has an invalid length. [ 277.493106][ T9132] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 277.503572][ T9132] netlink: 148 bytes leftover after parsing attributes in process `syz.1.858'. [ 277.518556][ T9132] netlink: 'syz.1.858': attribute type 1 has an invalid length. [ 277.527834][ T9132] netlink: 15 bytes leftover after parsing attributes in process `syz.1.858'. [ 278.075383][ T5858] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 278.226923][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 278.250460][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.273533][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.308254][ T9144] sg_write: data in/out 49116/98 bytes for SCSI command 0x0-- guessing data in; [ 278.308254][ T9144] program syz.4.862 not setting count and/or reply_len properly [ 278.331604][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.414043][ T5858] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 278.511003][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.521956][ T5858] usb 4-1: config 0 descriptor?? [ 278.565380][ T1226] tipc: Node number set to 3428182833 [ 278.690586][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'. [ 278.699790][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'. [ 278.725025][ T9149] team_slave_0: entered promiscuous mode [ 278.730764][ T9149] team_slave_1: entered promiscuous mode [ 278.740129][ T9149] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 278.941046][ T5858] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 278.953568][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 278.961007][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 278.968739][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 278.976619][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 278.984011][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 278.991460][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 278.998795][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 279.006176][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 279.014869][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 279.022417][ T5858] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 279.030720][ T5858] microsoft 0003:045E:07DA.0013: unsupported Resolution Multiplier 0 [ 279.041915][ T5858] microsoft 0003:045E:07DA.0013: unsupported Resolution Multiplier 0 [ 279.065470][ T5858] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 279.087823][ T9157] netlink: 'syz.0.866': attribute type 5 has an invalid length. [ 279.095332][ T5858] microsoft 0003:045E:07DA.0013: no inputs found [ 279.114179][ T5858] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 279.158378][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 279.200031][ T5858] usb 4-1: USB disconnect, device number 41 [ 279.567078][ T1226] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 279.603834][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 279.775539][ T9173] loop6: detected capacity change from 0 to 524288000 [ 279.795359][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 279.885786][ T9178] support for the xor transformation has been removed. [ 279.927364][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.016001][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.061955][ T1226] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 280.103203][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.138929][ T1226] usb 1-1: config 0 descriptor?? [ 280.671887][ T1226] usbhid 1-1:0.0: can't add hid device: -71 [ 280.703018][ T1226] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 280.739974][ T1226] usb 1-1: USB disconnect, device number 35 [ 280.981271][ T9194] netlink: 92 bytes leftover after parsing attributes in process `syz.1.876'. [ 280.992250][ T9194] netlink: 92 bytes leftover after parsing attributes in process `syz.1.876'. [ 281.225374][ T1226] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 281.355416][ T1226] usb 1-1: device descriptor read/64, error -71 [ 281.655642][ T1226] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 281.935540][ T1226] usb 1-1: device descriptor read/64, error -71 [ 282.080045][ T1226] usb usb1-port1: attempt power cycle [ 282.525346][ T1226] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 282.546124][ T1226] usb 1-1: device descriptor read/8, error -71 [ 282.815918][ T1226] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 282.855818][ T1226] usb 1-1: device descriptor read/8, error -71 [ 282.995656][ T1226] usb usb1-port1: unable to enumerate USB device [ 283.506681][ T9227] random: crng reseeded on system resumption [ 283.635640][ T9228] netlink: 'syz.3.884': attribute type 10 has an invalid length. [ 283.679075][ T9228] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 283.711257][ T9228] team0: Failed to send options change via netlink (err -105) [ 283.719119][ T9228] team0: Port device netdevsim0 added [ 283.773731][ T64] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 283.789000][ T9230] netlink: 'syz.4.885': attribute type 5 has an invalid length. [ 284.041990][ T9238] netlink: 92 bytes leftover after parsing attributes in process `syz.0.887'. [ 284.075475][ T9238] netlink: 92 bytes leftover after parsing attributes in process `syz.0.887'. [ 284.546106][ T5858] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 284.629082][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 284.639619][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 284.719816][ T5858] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.739437][ T5858] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 284.809383][ T5858] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.823990][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 284.841736][ T5858] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 284.976249][ T5858] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.976292][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.976313][ T5858] usb 2-1: Product: syz [ 284.976329][ T5858] usb 2-1: Manufacturer: syz [ 284.990502][ T5858] cdc_wdm 2-1:1.0: skipping garbage [ 284.990525][ T5858] cdc_wdm 2-1:1.0: skipping garbage [ 284.991497][ T5858] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 284.991511][ T5858] cdc_wdm 2-1:1.0: Unknown control protocol [ 285.191219][ T1226] usb 2-1: USB disconnect, device number 22 [ 285.753630][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 285.767482][ T9276] netlink: 92 bytes leftover after parsing attributes in process `syz.1.899'. [ 285.816214][ T9276] netlink: 92 bytes leftover after parsing attributes in process `syz.1.899'. [ 286.305451][ T5858] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 286.375432][ T1226] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 286.465505][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 286.472813][ T5858] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.485924][ T3798] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 286.494220][ T5858] usb 1-1: config 0 interface 0 has no altsetting 0 [ 286.515287][ T5858] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 286.526458][ T1226] usb 2-1: Using ep0 maxpacket: 8 [ 286.533104][ T1226] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 286.542559][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.544731][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.561334][ T1226] usb 2-1: config 0 descriptor?? [ 286.579834][ T5858] usb 1-1: config 0 descriptor?? [ 286.680561][ T3798] usb 5-1: Using ep0 maxpacket: 8 [ 286.694061][ T3798] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 286.705177][ T3798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.714072][ T3798] usb 5-1: Product: syz [ 286.729395][ T3798] usb 5-1: Manufacturer: syz [ 286.806453][ T9281] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 286.814856][ T3798] usb 5-1: SerialNumber: syz [ 286.815083][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 286.830959][ T3798] usb 5-1: config 0 descriptor?? [ 286.855789][ T9285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.910464][ T1226] usb 2-1: string descriptor 0 read error: -71 [ 286.956207][ T1226] usb 2-1: Found UVC 0.00 device (2833:0201) [ 286.978436][ T1226] usb 2-1: No valid video chain found. [ 287.019867][ T1226] usb 2-1: USB disconnect, device number 23 [ 287.047959][ T3798] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 287.059926][ T5858] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 287.087770][ T3798] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 287.107138][ T3798] usb 5-1: USB disconnect, device number 35 [ 287.354837][ T9301] random: crng reseeded on system resumption [ 287.540363][ T5858] usb 1-1: USB disconnect, device number 40 [ 287.899873][ T9311] usb usb8: usbfs: process 9311 (syz.1.908) did not claim interface 0 before use [ 287.975706][ T5954] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 288.011562][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 288.140673][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.161223][ T5954] usb 5-1: config 0 has no interfaces? [ 288.168725][ T5954] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 288.228692][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.401896][ T5954] usb 5-1: Product: syz [ 288.407624][ T5954] usb 5-1: Manufacturer: syz [ 288.435410][ T5954] usb 5-1: SerialNumber: syz [ 288.456222][ T5954] usb 5-1: config 0 descriptor?? [ 289.037836][ T5954] usb 5-1: USB disconnect, device number 36 [ 289.533797][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.913'. [ 289.544435][ T9326] netlink: 92 bytes leftover after parsing attributes in process `syz.2.913'. [ 289.685319][ T5858] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 289.855330][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 289.863046][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.875721][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 289.934897][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.951348][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.970162][ T5858] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 289.987702][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.003517][ T5858] usb 2-1: Product: syz [ 290.027503][ T5858] usb 2-1: Manufacturer: syz [ 290.033901][ T5858] usb 2-1: SerialNumber: syz [ 290.048528][ T5858] usb 2-1: config 0 descriptor?? [ 290.060732][ T5858] appledisplay 2-1:0.0: Submitting URB failed [ 290.067575][ T5858] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 290.275287][ T5858] usb 2-1: USB disconnect, device number 24 [ 290.311512][ T9347] usb usb8: usbfs: process 9347 (syz.3.918) did not claim interface 0 before use [ 290.341562][ T9347] netlink: 'syz.3.918': attribute type 3 has an invalid length. [ 290.350783][ T9347] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.918'. [ 291.384779][ T9364] random: crng reseeded on system resumption [ 292.185393][ T5942] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 292.433678][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 292.537337][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.575411][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.603209][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.635889][ T5942] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.645739][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.686957][ T5942] usb 3-1: config 0 descriptor?? [ 293.111331][ T5942] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 293.122027][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.142787][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.153211][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.161324][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.217483][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.242532][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.270345][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.298032][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.311608][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 293.329934][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.343782][ T5942] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 293.363047][ T5942] microsoft 0003:045E:07DA.0015: unsupported Resolution Multiplier 0 [ 293.382880][ T5942] microsoft 0003:045E:07DA.0015: unsupported Resolution Multiplier 0 [ 293.884651][ T9392] libceph: resolve ' [ 293.884651][ T9392] -&fYǝa2i [ 293.884651][ T9392] .?&*&' (ret=-3): failed [ 293.954178][ T5942] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 294.019453][ T5942] microsoft 0003:045E:07DA.0015: no inputs found [ 294.056116][ T5942] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 294.114082][ T5942] usb 3-1: USB disconnect, device number 33 [ 294.258971][ T9402] usb usb8: usbfs: process 9402 (syz.3.930) did not claim interface 0 before use [ 294.293381][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 295.687989][ T9421] usb usb8: usbfs: process 9421 (syz.2.935) did not claim interface 0 before use [ 295.699052][ T9421] netlink: 'syz.2.935': attribute type 3 has an invalid length. [ 295.707317][ T9421] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.935'. [ 295.982827][ T9426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.012015][ T9426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.109807][ T9429] random: crng reseeded on system resumption [ 296.312026][ T5921] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 297.027802][ T5921] usb 2-1: not running at top speed; connect to a high speed hub [ 297.096182][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 297.137866][ T5921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.173396][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.211107][ T5921] usb 2-1: Product: 㺣豭櫥ⳛ︔䢒ﷆ끵䨷ᮺ贈诶䈬柀杍팓Ṏ뜷귎龕讷኉暬佦疬乳桜턌ﺳ亄箍ḁ濳橛ᦪᄚ噉愓귷侀氾꼀扝佨㼘ጨ樜ꌊ⎲Ῠợꢬⲗ뭖玠Ἑ湃㭊ꑸﶨ炝㘒⚫姙ꤰ픱ﲾ巎喉莨띲뽕ä㤩䡽Ǧ萚炘䇵嫛 [ 297.322408][ T5921] usb 2-1: Manufacturer: −螻˙시舡ᵪ﻽朜a쬵읨ꛡ菹ﺹ佅ᡏᮚ賋前撯䇷鰫꽊駕眳↕⢮੪ [ 297.364803][ T5921] usb 2-1: SerialNumber: Н [ 297.413354][ T9427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.668680][ T5921] cdc_ncm 2-1:1.0: bind() failure [ 297.697013][ T5921] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 297.737096][ T5921] cdc_ncm 2-1:1.1: bind() failure [ 297.750965][ T5921] usb 2-1: USB disconnect, device number 25 [ 298.832982][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 298.852315][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 298.914360][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.924562][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.933911][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.948827][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.481724][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'. [ 300.589475][ T9511] random: crng reseeded on system resumption [ 301.505405][ T5908] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 302.061304][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 302.076262][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 302.093511][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.136618][ T5908] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.146208][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.155053][ T5908] usb 4-1: Product: syz [ 302.165850][ T9543] random: crng reseeded on system resumption [ 302.340242][ T5908] usb 4-1: Manufacturer: syz [ 302.373146][ T5908] usb 4-1: SerialNumber: syz [ 302.586734][ T5908] usb 4-1: config 0 descriptor?? [ 302.646751][ T5908] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 302.828715][ T5908] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 302.935782][ T9551] usb usb8: usbfs: process 9551 (syz.1.965) did not claim interface 0 before use [ 303.287556][ T5908] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 303.322088][ T5908] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 303.380865][ T9562] random: crng reseeded on system resumption [ 303.596230][ T5942] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 303.748866][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.758189][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.774352][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 303.795026][ T5942] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 303.838097][ T5942] usb 3-1: config 0 has no interface number 0 [ 303.858160][ T5942] usb 3-1: config 0 interface 230 has no altsetting 0 [ 303.876571][ T5942] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 303.887428][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.899472][ T5942] usb 3-1: Product: syz [ 304.274001][ T9576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.332644][ T5942] usb 3-1: Manufacturer: syz [ 304.337358][ T5942] usb 3-1: SerialNumber: syz [ 304.369630][ T5942] usb 3-1: config 0 descriptor?? [ 304.378976][ T5942] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 304.398285][ T5942] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 304.467693][ T5908] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 304.478830][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 304.888282][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 304.897581][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 304.907929][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 304.943401][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 304.964903][ T5908] usb 4-1: USB disconnect, device number 42 [ 305.434092][ T9590] random: crng reseeded on system resumption [ 306.017340][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 306.033079][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 306.053359][ T9599] vlan1: entered promiscuous mode [ 306.187872][ T9603] netlink: 48 bytes leftover after parsing attributes in process `syz.4.974'. [ 307.555407][ T1226] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 307.736676][ T1226] usb 4-1: Using ep0 maxpacket: 32 [ 307.936361][ T1226] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 307.945327][ T1226] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 307.953968][ T1226] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 307.963529][ T1226] usb 4-1: config 1 has no interface number 0 [ 307.964369][ T3798] syz_tun: tun_net_xmit 110 [ 307.970140][ T1226] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.985633][ T1226] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 308.001356][ T1226] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 308.011322][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.036618][ T9643] bridge_slave_0: left allmulticast mode [ 308.059522][ T1226] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 308.107998][ T9643] bridge_slave_0: left promiscuous mode [ 308.341467][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.516803][ T5962] syz_tun: tun_net_xmit 110 [ 308.546062][ T5942] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 308.662685][ T9643] bridge_slave_1: left allmulticast mode [ 308.673518][ T9643] bridge_slave_1: left promiscuous mode [ 308.694663][ T5942] usb 3-1: USB disconnect, device number 34 [ 308.793159][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.888087][ T9643] bond0: (slave bond_slave_0): Releasing backup interface [ 309.288099][ T9643] bond0: (slave bond_slave_1): Releasing backup interface [ 309.309857][ T1226] snd_usb_pod 4-1:1.1: set_interface failed [ 309.316236][ T1226] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 309.324279][ T1226] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 309.343266][ T1226] usb 4-1: USB disconnect, device number 43 [ 309.431196][ T9643] team_slave_0: left allmulticast mode [ 309.438332][ T9643] team_slave_0: left promiscuous mode [ 309.447107][ T9643] team0: Port device team_slave_0 removed [ 309.454725][ T9643] team_slave_1: left allmulticast mode [ 309.463642][ T9643] team_slave_1: left promiscuous mode [ 309.472567][ T9643] team0: Port device team_slave_1 removed [ 309.480431][ T9643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.488253][ T9643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.593108][ T9643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.646747][ T9643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.727799][ T9643] batadv1: left allmulticast mode [ 309.744405][ T9643] batadv1: left promiscuous mode [ 309.755146][ T9643] bridge0: port 3(batadv1) entered disabled state [ 310.103162][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 310.249469][ T9669] random: crng reseeded on system resumption [ 311.239210][ T9698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.996'. [ 311.248470][ T9698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.996'. [ 311.325736][ T1226] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 311.455334][ T5921] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 311.486113][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 311.505515][ T9701] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 311.516837][ T1226] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 311.537765][ T1226] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 311.593686][ T1226] usb 4-1: config 220 interface 0 has no altsetting 0 [ 311.605360][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 311.613899][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 311.624063][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 311.637437][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 311.655996][ T1226] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 311.669181][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.680010][ T1226] usb 4-1: Product: syz [ 311.684902][ T1226] usb 4-1: Manufacturer: syz [ 311.694775][ T5921] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 311.703970][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.712717][ T5921] usb 3-1: Product: syz [ 311.717764][ T1226] usb 4-1: SerialNumber: syz [ 311.722516][ T5921] usb 3-1: Manufacturer: syz [ 311.729653][ T5921] usb 3-1: SerialNumber: syz [ 311.805353][ T5921] usb 3-1: config 0 descriptor?? [ 311.856079][ T9697] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.878401][ T5921] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 311.886665][ T5921] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 311.893163][ T5921] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 311.903035][ T5921] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 311.915804][ T5921] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 312.096759][ T9697] netlink: 'syz.2.997': attribute type 5 has an invalid length. [ 312.116378][ T9697] bridge0: port 3(macsec0) entered blocking state [ 312.123026][ T9697] bridge0: port 3(macsec0) entered disabled state [ 312.134617][ T9697] macsec0: entered allmulticast mode [ 312.140079][ T9697] veth1_macvtap: entered allmulticast mode [ 312.149785][ T9697] macsec0: entered promiscuous mode [ 312.156722][ T9697] bridge0: port 3(macsec0) entered blocking state [ 312.163232][ T9697] bridge0: port 3(macsec0) entered forwarding state [ 312.173227][ T5908] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 312.220929][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 312.265567][ T9710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.272808][ T9710] IPv6: NLM_F_CREATE should be set when creating new route [ 312.456790][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 312.553578][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 312.564537][ T5908] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.578193][ T5908] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 312.589724][ T5908] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.655619][ T5908] usb 5-1: config 1 interface 0 has no altsetting 0 [ 312.664749][ T5908] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 312.674992][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.688368][ T5908] usb 5-1: Product: syz [ 312.704094][ T5908] usb 5-1: Manufacturer: syz [ 312.845778][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 312.936125][ T9727] netlink: 'syz.1.1004': attribute type 3 has an invalid length. [ 312.954136][ T9727] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1004'. [ 312.980158][ T5908] usb 5-1: SerialNumber: syz [ 312.986102][ T1226] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 312.992703][ T1226] usb 4-1: No valid video chain found. [ 313.000138][ T9707] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 313.018980][ T1226] usb 4-1: USB disconnect, device number 44 [ 313.155337][ T5921] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 313.302494][ T5908] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input29 [ 313.454498][ T5921] usb 1-1: config 0 has no interfaces? [ 313.760241][ T5921] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 313.800078][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.808499][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.808527][ T5921] usb 1-1: Product: syz [ 313.808542][ T5921] usb 1-1: Manufacturer: syz [ 313.808556][ T5921] usb 1-1: SerialNumber: syz [ 313.863594][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.906305][ T5921] usb 1-1: config 0 descriptor?? [ 314.217681][ T5921] usb 3-1: USB disconnect, device number 35 [ 314.224648][ T5921] mcba_usb 3-1:0.0 can0: device disconnected [ 315.297190][ T9759] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 315.375511][ T5908] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 315.539687][ T5908] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 315.552610][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.592775][ T5908] usb 3-1: Product: syz [ 315.615298][ T5908] usb 3-1: Manufacturer: syz [ 315.633285][ T5908] usb 3-1: SerialNumber: syz [ 315.832827][ T5921] usb 1-1: USB disconnect, device number 41 [ 316.082868][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.116091][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.271414][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1011'. [ 316.280610][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1011'. [ 316.531203][ T9735] delete_channel: no stack [ 316.544334][ T5217] bcm5974 5-1:1.0: could not read from device [ 316.544565][ T5921] usb 5-1: USB disconnect, device number 37 [ 316.557078][ T5217] bcm5974 5-1:1.0: could not read from device [ 316.568082][ T5217] bcm5974 5-1:1.0: could not read from device [ 316.660445][ T3798] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 316.729453][ T5908] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 316.766165][ T5908] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 316.790939][ T5908] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 316.917981][ T5908] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 316.932931][ T5908] usb 3-1: USB disconnect, device number 36 [ 316.961572][ T3798] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 316.972379][ T3798] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 316.995400][ T3798] usb 4-1: config 220 interface 0 has no altsetting 0 [ 317.037485][ T3798] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 317.047114][ T3798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.072024][ T3798] usb 4-1: Product: syz [ 317.076744][ T3798] usb 4-1: Manufacturer: syz [ 317.090341][ T3798] usb 4-1: SerialNumber: syz [ 317.225329][ T5921] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 317.587005][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1018'. [ 317.616701][ T9803] loop6: detected capacity change from 0 to 524288000 [ 317.643911][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 317.693729][ T5921] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 317.703294][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.723264][ T5921] usb 5-1: Product: syz [ 317.812664][ T5921] usb 5-1: Manufacturer: syz [ 317.885837][ T5921] usb 5-1: SerialNumber: syz [ 317.895393][ T5921] usb 5-1: config 0 descriptor?? [ 317.918692][ T9804] support for the xor transformation has been removed. [ 317.926917][ T5921] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 318.693973][ T3798] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 318.707246][ T3798] usb 4-1: No valid video chain found. [ 318.731152][ T3798] usb 4-1: USB disconnect, device number 45 [ 318.985369][ T1226] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 319.145320][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 319.154726][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.172312][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.241030][ T9811] capability: warning: `syz.1.1020' uses deprecated v2 capabilities in a way that may be insecure [ 319.282098][ T1226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.324164][ T1226] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.443092][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.461965][ T1226] usb 1-1: config 0 descriptor?? [ 319.883723][ T1226] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 320.095584][ T5921] gspca_stk1135: reg_w 0x200 err -110 [ 320.102203][ T5921] gspca_stk1135: serial bus timeout: status=0x00 [ 320.253296][ T5921] gspca_stk1135: Sensor write failed [ 320.261727][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.269027][ T5921] gspca_stk1135: serial bus timeout: status=0x00 [ 320.275585][ T5921] gspca_stk1135: Sensor write failed [ 320.281742][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.294557][ T5921] gspca_stk1135: serial bus timeout: status=0x00 [ 320.301002][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.308289][ T5921] gspca_stk1135: Sensor read failed [ 320.313766][ T5921] gspca_stk1135: serial bus timeout: status=0x00 [ 320.320350][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.330187][ T5921] gspca_stk1135: Sensor read failed [ 320.335933][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.346171][ T5921] gspca_stk1135: Detected sensor type unknown (0x0) [ 320.361093][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.374242][ T5921] gspca_stk1135: serial bus timeout: status=0x00 [ 320.393352][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.402221][ T5921] gspca_stk1135: Sensor read failed [ 320.407602][ T5921] gspca_stk1135: serial bus timeout: status=0x00 [ 320.415198][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.464375][ T5921] gspca_stk1135: Sensor read failed [ 320.561775][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.576564][ T5921] gspca_stk1135: serial bus timeout: status=0x00 [ 320.605549][ T1226] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 320.612820][ T1226] microsoft 0003:045E:07DA.0016: unsupported Resolution Multiplier 0 [ 320.622739][ T5921] gspca_stk1135: Sensor write failed [ 320.631434][ T5921] gspca_stk1135: serial bus timeout: status=0x00 [ 320.641715][ T5921] gspca_stk1135: Sensor write failed [ 320.658285][ T1226] microsoft 0003:045E:07DA.0016: unsupported Resolution Multiplier 0 [ 320.675392][ T5921] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 320.686346][ T1226] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 320.701204][ T5921] usb 5-1: USB disconnect, device number 38 [ 320.708497][ T1226] microsoft 0003:045E:07DA.0016: no inputs found [ 320.716694][ T1226] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 320.765647][ T1226] usb 1-1: USB disconnect, device number 42 [ 321.157794][ T9831] fido_id[9831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 321.506934][ T3798] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 321.708478][ T3798] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 321.718322][ T3798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.726421][ T3798] usb 1-1: Product: syz [ 321.730667][ T3798] usb 1-1: Manufacturer: syz [ 321.740809][ T3798] usb 1-1: SerialNumber: syz [ 321.790561][ T3798] usb 1-1: config 0 descriptor?? [ 321.808756][ T3798] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 321.840032][ T3798] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 321.912328][ T3798] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 322.013678][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 322.027965][ T3798] usb 1-1: USB disconnect, device number 43 [ 322.063694][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 322.420589][ T9856] bond2: entered promiscuous mode [ 322.425952][ T9856] bond2: entered allmulticast mode [ 322.434824][ T9856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.458120][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.464643][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.523938][ T9856] bond2 (unregistering): Released all slaves [ 322.626637][ T9855] dvmrp0: entered allmulticast mode [ 322.870037][ T9862] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.062378][ T9873] random: crng reseeded on system resumption [ 323.165305][ T5942] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 323.356406][ T5942] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 323.409118][ T5942] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 323.478344][ T5942] usb 1-1: config 220 interface 0 has no altsetting 0 [ 323.505992][ T5942] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 323.515159][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.539475][ T5942] usb 1-1: Product: syz [ 323.553844][ T5942] usb 1-1: Manufacturer: syz [ 323.565007][ T5942] usb 1-1: SerialNumber: syz [ 325.116144][ T9897] usb usb8: usbfs: process 9897 (syz.2.1041) did not claim interface 0 before use [ 325.127519][ T9897] netlink: 'syz.2.1041': attribute type 3 has an invalid length. [ 325.148053][ T9897] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1041'. [ 325.168555][ T5942] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 325.175028][ T5942] usb 1-1: No valid video chain found. [ 325.196237][ T5942] usb 1-1: USB disconnect, device number 44 [ 325.923033][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'. [ 325.935510][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'. [ 326.365813][ T9911] netlink: 'syz.4.1043': attribute type 27 has an invalid length. [ 326.392156][ T1226] syz_tun: tun_net_xmit 106 [ 326.595800][ T5942] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 326.641778][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.649294][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.735310][ T5858] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 326.869549][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.885152][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.920000][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 326.986021][ T5858] usb 5-1: Using ep0 maxpacket: 16 [ 327.001441][ T5942] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 327.015649][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.040000][ T5942] usb 1-1: config 0 descriptor?? [ 327.069168][ T5858] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.078866][ T5858] usb 5-1: config 0 has no interface number 0 [ 327.088423][ T5858] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 327.102616][ T9922] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 327.154575][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.163788][ T5858] usb 5-1: Product: syz [ 327.171420][ T5858] usb 5-1: Manufacturer: syz [ 327.179378][ T5858] usb 5-1: SerialNumber: syz [ 327.190107][ T5858] usb 5-1: config 0 descriptor?? [ 327.219653][ T5858] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 327.229611][ T9911] gre1: left promiscuous mode [ 327.235512][ T9911] gre1: left allmulticast mode [ 327.721265][ T9912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.737569][ T3798] syz_tun: tun_net_xmit 146 [ 327.743727][ T9914] netlink: 'syz.3.1046': attribute type 5 has an invalid length. [ 327.753612][ T1148] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.765017][ T1148] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.774435][ T1148] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.784887][ T1148] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.823649][ T9922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.070003][ T64] syz_tun: tun_net_xmit 126 [ 328.144329][ T1226] syz_tun: tun_net_xmit 110 [ 328.149579][ T1148] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.161531][ T9930] FAULT_INJECTION: forcing a failure. [ 328.161531][ T9930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.169843][ T1148] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.195376][ T9930] CPU: 0 UID: 0 PID: 9930 Comm: syz.1.1051 Not tainted syzkaller #0 PREEMPT(full) [ 328.195404][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.195430][ T9930] Call Trace: [ 328.195438][ T9930] [ 328.195447][ T9930] dump_stack_lvl+0x189/0x250 [ 328.195486][ T9930] ? __pfx____ratelimit+0x10/0x10 [ 328.195516][ T9930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.195539][ T9930] ? __pfx__printk+0x10/0x10 [ 328.195563][ T9930] ? __might_fault+0xb0/0x130 [ 328.195596][ T9930] ? rcu_is_watching+0x15/0xb0 [ 328.195617][ T9930] should_fail_ex+0x414/0x560 [ 328.195645][ T9930] _copy_from_user+0x2d/0xb0 [ 328.195669][ T9930] ___sys_sendmsg+0x158/0x2a0 [ 328.195692][ T9930] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.195729][ T9930] ? __fget_files+0x2a/0x420 [ 328.195760][ T9930] ? __fget_files+0x3a0/0x420 [ 328.195795][ T9930] __x64_sys_sendmsg+0x19b/0x260 [ 328.195818][ T9930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.195842][ T9930] ? __pfx_ksys_write+0x10/0x10 [ 328.195868][ T9930] ? rcu_is_watching+0x15/0xb0 [ 328.195890][ T9930] ? rcu_is_watching+0x15/0xb0 [ 328.195911][ T9930] do_syscall_64+0xfa/0x3b0 [ 328.195941][ T9930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.195962][ T9930] ? clear_bhb_loop+0x60/0xb0 [ 328.195985][ T9930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.196005][ T9930] RIP: 0033:0x7fd55038ebe9 [ 328.196023][ T9930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.196042][ T9930] RSP: 002b:00007fd5512de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.196064][ T9930] RAX: ffffffffffffffda RBX: 00007fd5505b5fa0 RCX: 00007fd55038ebe9 [ 328.196079][ T9930] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 328.196092][ T9930] RBP: 00007fd5512de090 R08: 0000000000000000 R09: 0000000000000000 [ 328.196105][ T9930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.196117][ T9930] R13: 00007fd5505b6038 R14: 00007fd5505b5fa0 R15: 00007fd5506dfa28 [ 328.196139][ T9930] [ 328.216269][ T1148] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.463812][ T1148] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.573897][ T9943] random: crng reseeded on system resumption [ 328.638270][ T5908] syz_tun: tun_net_xmit 90 [ 328.705584][ T5858] gspca_spca1528: reg_w err -110 [ 328.725522][ T5858] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 329.108638][ T5908] syz_tun: tun_net_xmit 126 [ 329.154979][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 329.505492][ T1226] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 329.639496][ T5954] usb 5-1: USB disconnect, device number 39 [ 329.696306][ T5908] syz_tun: tun_net_xmit 106 [ 329.717203][ T1226] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 329.759529][ T1226] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 329.783821][ T1226] usb 2-1: config 220 interface 0 has no altsetting 0 [ 329.800575][ T1226] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 329.815482][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.836448][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.856891][ T1226] usb 2-1: Product: syz [ 329.858331][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.882726][ T1226] usb 2-1: Manufacturer: syz [ 329.907732][ T1226] usb 2-1: SerialNumber: syz [ 329.985895][ T5954] syz_tun: tun_net_xmit 106 [ 330.080576][ T5942] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 330.090628][ T5942] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0 [ 330.698279][ T9972] usb usb8: usbfs: process 9972 (syz.3.1059) did not claim interface 0 before use [ 330.709920][ T9972] netlink: 'syz.3.1059': attribute type 3 has an invalid length. [ 330.717822][ T9972] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1059'. [ 331.147437][ T1226] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 331.153847][ T1226] usb 2-1: No valid video chain found. [ 331.167401][ T1226] usb 2-1: USB disconnect, device number 26 [ 331.222458][ T5942] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 331.250477][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 331.261335][ T5942] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffb9 [ 331.273699][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 331.334942][ T5942] ------------[ cut here ]------------ [ 331.352319][ T5942] UBSAN: shift-out-of-bounds in drivers/net/usb/asix_devices.c:679:27 [ 331.362411][ T5942] shift exponent 224 is too large for 64-bit type 'unsigned long' [ 331.402921][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 331.402951][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.402967][ T5942] Workqueue: usb_hub_wq hub_event [ 331.402992][ T5942] Call Trace: [ 331.402999][ T5942] [ 331.403005][ T5942] dump_stack_lvl+0x189/0x250 [ 331.403027][ T5942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.403045][ T5942] ? __pfx__printk+0x10/0x10 [ 331.403070][ T5942] ubsan_epilogue+0xa/0x40 [ 331.403092][ T5942] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 331.403126][ T5942] ax88772_bind+0xdcf/0xfa0 [ 331.403152][ T5942] ? __pfx_ax88772_bind+0x10/0x10 [ 331.403183][ T5942] ? __raw_spin_lock_init+0x45/0x100 [ 331.403202][ T5942] ? usbnet_probe+0x915/0x2870 [ 331.403220][ T5942] usbnet_probe+0xa96/0x2870 [ 331.403243][ T5942] ? __pfx_usbnet_probe+0x10/0x10 [ 331.403258][ T5942] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 331.403278][ T5942] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.403296][ T5942] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 331.403313][ T5942] ? usb_disable_lpm+0x77/0x3e0 [ 331.403331][ T5942] usb_probe_interface+0x668/0xc30 [ 331.403356][ T5942] ? __pfx_usb_probe_interface+0x10/0x10 [ 331.403376][ T5942] really_probe+0x26a/0x9e0 [ 331.403397][ T5942] __driver_probe_device+0x18c/0x2f0 [ 331.403414][ T5942] driver_probe_device+0x4f/0x430 [ 331.403433][ T5942] __device_attach_driver+0x2ce/0x530 [ 331.403452][ T5942] bus_for_each_drv+0x251/0x2e0 [ 331.403474][ T5942] ? __pfx___device_attach_driver+0x10/0x10 [ 331.403492][ T5942] ? __pfx_bus_for_each_drv+0x10/0x10 [ 331.403517][ T5942] __device_attach+0x2b8/0x400 [ 331.403534][ T5942] ? __pfx___device_attach+0x10/0x10 [ 331.403551][ T5942] ? do_raw_spin_unlock+0x122/0x240 [ 331.403570][ T5942] bus_probe_device+0x185/0x260 [ 331.403593][ T5942] device_add+0x7b6/0xb50 [ 331.403609][ T5942] usb_set_configuration+0x1a87/0x20e0 [ 331.403638][ T5942] usb_generic_driver_probe+0x8d/0x150 [ 331.403657][ T5942] usb_probe_device+0x1c1/0x390 [ 331.403679][ T5942] ? __pfx_usb_probe_device+0x10/0x10 [ 331.403698][ T5942] really_probe+0x26a/0x9e0 [ 331.403717][ T5942] __driver_probe_device+0x18c/0x2f0 [ 331.403734][ T5942] driver_probe_device+0x4f/0x430 [ 331.403753][ T5942] __device_attach_driver+0x2ce/0x530 [ 331.403772][ T5942] bus_for_each_drv+0x251/0x2e0 [ 331.403793][ T5942] ? __pfx___device_attach_driver+0x10/0x10 [ 331.403811][ T5942] ? __pfx_bus_for_each_drv+0x10/0x10 [ 331.403835][ T5942] __device_attach+0x2b8/0x400 [ 331.403851][ T5942] ? __pfx___device_attach+0x10/0x10 [ 331.403868][ T5942] ? do_raw_spin_unlock+0x122/0x240 [ 331.403900][ T5942] bus_probe_device+0x185/0x260 [ 331.403923][ T5942] device_add+0x7b6/0xb50 [ 331.403944][ T5942] usb_new_device+0xa39/0x16f0 [ 331.403963][ T5942] ? __pfx_usb_new_device+0x10/0x10 [ 331.403979][ T5942] ? rcu_is_watching+0x15/0xb0 [ 331.403995][ T5942] hub_event+0x2958/0x4a20 [ 331.404031][ T5942] ? __pfx_hub_event+0x10/0x10 [ 331.404048][ T5942] ? rcu_is_watching+0x15/0xb0 [ 331.404062][ T5942] ? lock_acquire+0x5f/0x360 [ 331.404086][ T5942] ? rcu_is_watching+0x15/0xb0 [ 331.404100][ T5942] ? process_scheduled_works+0x9ef/0x17b0 [ 331.404114][ T5942] ? process_scheduled_works+0x9ef/0x17b0 [ 331.404129][ T5942] process_scheduled_works+0xae1/0x17b0 [ 331.404153][ T5942] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.404178][ T5942] worker_thread+0x8a0/0xda0 [ 331.404202][ T5942] kthread+0x70e/0x8a0 [ 331.404221][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 331.404235][ T5942] ? __pfx_kthread+0x10/0x10 [ 331.404253][ T5942] ? rcu_is_watching+0x15/0xb0 [ 331.404268][ T5942] ? __pfx_kthread+0x10/0x10 [ 331.404286][ T5942] ret_from_fork+0x3f9/0x770 [ 331.404302][ T5942] ? __pfx_ret_from_fork+0x10/0x10 [ 331.404318][ T5942] ? __switch_to_asm+0x39/0x70 [ 331.404346][ T5942] ? __switch_to_asm+0x33/0x70 [ 331.404370][ T5942] ? __pfx_kthread+0x10/0x10 [ 331.404392][ T5942] ret_from_fork_asm+0x1a/0x30 [ 331.404421][ T5942] [ 331.787056][ T5942] ---[ end trace ]--- [ 331.791092][ T5942] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 331.798317][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 331.807713][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.817804][ T5942] Workqueue: usb_hub_wq hub_event [ 331.822870][ T5942] Call Trace: [ 331.826172][ T5942] [ 331.829127][ T5942] dump_stack_lvl+0x99/0x250 [ 331.833761][ T5942] ? __asan_memcpy+0x40/0x70 [ 331.838381][ T5942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.843609][ T5942] ? __pfx__printk+0x10/0x10 [ 331.848241][ T5942] vpanic+0x281/0x750 [ 331.852256][ T5942] ? __pfx_vpanic+0x10/0x10 [ 331.856810][ T5942] panic+0xb9/0xc0 [ 331.860574][ T5942] ? __pfx_panic+0x10/0x10 [ 331.865036][ T5942] ? __pfx__printk+0x10/0x10 [ 331.869680][ T5942] check_panic_on_warn+0x89/0xb0 [ 331.874629][ T5942] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 331.881187][ T5942] ax88772_bind+0xdcf/0xfa0 [ 331.885710][ T5942] ? __pfx_ax88772_bind+0x10/0x10 [ 331.890743][ T5942] ? __raw_spin_lock_init+0x45/0x100 [ 331.896043][ T5942] ? usbnet_probe+0x915/0x2870 [ 331.900903][ T5942] usbnet_probe+0xa96/0x2870 [ 331.905499][ T5942] ? __pfx_usbnet_probe+0x10/0x10 [ 331.910524][ T5942] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 331.916436][ T5942] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.922779][ T5942] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 331.928327][ T5942] ? usb_disable_lpm+0x77/0x3e0 [ 331.933183][ T5942] usb_probe_interface+0x668/0xc30 [ 331.938306][ T5942] ? __pfx_usb_probe_interface+0x10/0x10 [ 331.943946][ T5942] really_probe+0x26a/0x9e0 [ 331.948455][ T5942] __driver_probe_device+0x18c/0x2f0 [ 331.953747][ T5942] driver_probe_device+0x4f/0x430 [ 331.958776][ T5942] __device_attach_driver+0x2ce/0x530 [ 331.964153][ T5942] bus_for_each_drv+0x251/0x2e0 [ 331.969008][ T5942] ? __pfx___device_attach_driver+0x10/0x10 [ 331.974956][ T5942] ? __pfx_bus_for_each_drv+0x10/0x10 [ 331.980357][ T5942] __device_attach+0x2b8/0x400 [ 331.985225][ T5942] ? __pfx___device_attach+0x10/0x10 [ 331.990544][ T5942] ? do_raw_spin_unlock+0x122/0x240 [ 331.995763][ T5942] bus_probe_device+0x185/0x260 [ 332.000633][ T5942] device_add+0x7b6/0xb50 [ 332.004975][ T5942] usb_set_configuration+0x1a87/0x20e0 [ 332.010451][ T5942] usb_generic_driver_probe+0x8d/0x150 [ 332.015916][ T5942] usb_probe_device+0x1c1/0x390 [ 332.020863][ T5942] ? __pfx_usb_probe_device+0x10/0x10 [ 332.026245][ T5942] really_probe+0x26a/0x9e0 [ 332.030765][ T5942] __driver_probe_device+0x18c/0x2f0 [ 332.036053][ T5942] driver_probe_device+0x4f/0x430 [ 332.041078][ T5942] __device_attach_driver+0x2ce/0x530 [ 332.046538][ T5942] bus_for_each_drv+0x251/0x2e0 [ 332.051399][ T5942] ? __pfx___device_attach_driver+0x10/0x10 [ 332.057297][ T5942] ? __pfx_bus_for_each_drv+0x10/0x10 [ 332.062678][ T5942] __device_attach+0x2b8/0x400 [ 332.067447][ T5942] ? __pfx___device_attach+0x10/0x10 [ 332.072735][ T5942] ? do_raw_spin_unlock+0x122/0x240 [ 332.077934][ T5942] bus_probe_device+0x185/0x260 [ 332.082790][ T5942] device_add+0x7b6/0xb50 [ 332.087132][ T5942] usb_new_device+0xa39/0x16f0 [ 332.091901][ T5942] ? __pfx_usb_new_device+0x10/0x10 [ 332.097104][ T5942] ? rcu_is_watching+0x15/0xb0 [ 332.101883][ T5942] hub_event+0x2958/0x4a20 [ 332.106325][ T5942] ? __pfx_hub_event+0x10/0x10 [ 332.111121][ T5942] ? rcu_is_watching+0x15/0xb0 [ 332.115888][ T5942] ? lock_acquire+0x5f/0x360 [ 332.120485][ T5942] ? rcu_is_watching+0x15/0xb0 [ 332.125259][ T5942] ? process_scheduled_works+0x9ef/0x17b0 [ 332.130992][ T5942] ? process_scheduled_works+0x9ef/0x17b0 [ 332.136713][ T5942] process_scheduled_works+0xae1/0x17b0 [ 332.142266][ T5942] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.148264][ T5942] worker_thread+0x8a0/0xda0 [ 332.152901][ T5942] kthread+0x70e/0x8a0 [ 332.157003][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 332.162123][ T5942] ? __pfx_kthread+0x10/0x10 [ 332.166722][ T5942] ? rcu_is_watching+0x15/0xb0 [ 332.171494][ T5942] ? __pfx_kthread+0x10/0x10 [ 332.176087][ T5942] ret_from_fork+0x3f9/0x770 [ 332.180704][ T5942] ? __pfx_ret_from_fork+0x10/0x10 [ 332.185825][ T5942] ? __switch_to_asm+0x39/0x70 [ 332.190597][ T5942] ? __switch_to_asm+0x33/0x70 [ 332.195372][ T5942] ? __pfx_kthread+0x10/0x10 [ 332.199970][ T5942] ret_from_fork_asm+0x1a/0x30 [ 332.204744][ T5942] [ 332.208520][ T5942] Kernel Offset: disabled [ 332.212849][ T5942] Rebooting in 86400 seconds..