last executing test programs: 12.017814296s ago: executing program 3 (id=3052): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c9, 0xfdef) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffed2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r4, 0x36, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000006200)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000055c0)=[{&(0x7f00000034c0)="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", 0x1000}, {&(0x7f0000001380)="dd5f6d08e017793bc9670b872e9a79e5814176f05e5e3ea2b48dbf45d628955ee9eb73c6f4f23c523ada6ee6cdfe8df1e82d5515edaafd00ec93b1e5db1dbbe07b054065150c9db46c422fb8e4e9550f9651630cc5d4ed917ae16e1ada8a9fc286b6e5125f281eb301ca2ee39d4f5ab6c02754a8f79e4ded25e0303515e993daad181078e4", 0xfffffffffffffcb9}, {&(0x7f00000044c0)="1ebd7cb2793e38a9d6247bc05d2fcddd3bdde9ddb4385a23e82d6e023d458e37201a768fd4d4e45baa39b18cda567c35ad9ee996e0bee991a021daf97594610d1b1ddec49025109cb9966d7dbb3c26e0e1c3c4507153cb53adcc7740a752adec13272b8bb0c0da1e7f006745264fa4e7ed", 0x71}, {&(0x7f0000004540)="9c62a4ec176ce90eab138cfdd27b60ed9b6480b6392c6b20c756c917e515ff5d88770948362609ef50606c716eee5bc7bdbd1d9b2621fba1c0ce96034b70d866faef25ac477b7aac544f01dbac5da72a512d6b723f322aa2fce48a40e9f26a9a3f9a555d40272e7e38552b428d7070089ccb38011edf2c22b6d48ce2d568dce1f6390b6c5bce65e293dee93a0c8d2274f3bb78cb1ee63f07aee30a5026a87967485f0a0df60daaa0be9659d3ebb4d77cfdd9dcab807c94acdf737a22095e6db207809fc640cb3e01a8a804fe461cc146c5e752540a73b7bb7657bcf05c83672a3448b8cb1f00b005fcbf52521e6dfdde80432ded23b283e049c50a006036bbfb06cc2973240d5db04196e272852eb0fc87292ad9f85e776d5684e78d1c7f53d16de104c1369ad64f98b94877abd5cec12d70f53e2a0b0847ad9dfdee083f013b5ba8e6eed633e45f619d1518777e25410b97a06a4e204fbb7f4d48c96096a2f0f0fcb349d2ac3a0bba751f53a8f4799934b980d79fb7188ddd77f7e0d04cb64631322921ed92a62015f326c6bc434fa9df842af499b1e3528d91ded5cdbe73fe92af9cf4d05f4b54134c98779356615d509d6ea05e5a197074ab28d3b45aceb2069c9b6262668ff4d4fd267bec37420b02613660ed957435a0f59529df7751d73058c1ff6c1aec9c16fbc8dbaed936e0696cf28ef09bc00e35c99d8e2f084bb117db66161b92b5c026d8fd2b1bd6c590cfeb28d3acd69a3706becb8f116ec590ba70bacbfad357ed02b79202abfa43e4f77e7dbd58a317928bbf99293a70253f14f8c4a20aa24caf9a5b89111634cab1fb36c765ef3d780aaf0585026b2fe1c1a3b084b7d7372fface0b4a1a45c0843e5570b2ec753dcc0261838c0469a85101103e01b6fda8a668ed49e866ce2b1473044fce4f42e83467eeabf6723694aa4a990431726f145d37a28f6c8b3275e8c52bfe21db26fb0148389d8d816afdf1a1f8a6fbafc88dd852c5a0eeb54325636b7d3e9eba428e8845c860dffce4c81838450dcd922f52770714892fa2b601eb4593a924dfe6ac229b80214cef8428407f3f7479e89b9b3c7fa48e9c88430784488bf487e793b03e9434a0fa068a8989cc106fb1689febd842e00abc12acd2b48a770dc4c53fb28ece44bea8ef861225772daf4a9dbe09a91352de12b797384fa68241e6e8558d829575a45bea47d22fd07e25aaec734cedbaa191780a311c2b68ebce897d164ea5857fb59966999892f11f5a32e8864c8c65bbaafb38d937697f72057c2cc206ef5405eb38f0a5d0676f1cea3ea4832748950504c46ef05bd5b5e23a6f8092becfdc84ea58cd22d466d8c1df47f3876106bbbe58f13575e396265a787d9a66e01ab5c9bd80bf02f96b949da6608b4ce8ae9d39ef279b3f3472f8bd6f01674312a50598f35efd602aff7ef42f9df53e310135e71898e046e585911cae14d843b50bb12bcd6150e212b98be52657e94d22a413915b1ce73ecc948b2e47d09efe1321783876339b89feaae5e3390d31e02b4ea5c90d9a57c8bdf28ee41f3e3b387e17deddef6d42c0e2e96781e958027a0a4ea96e72cf77c00d62ffbca6f957c20d83f4786c218979f6ade6d9a59984506d3ca73d12b84461dd7d8a709d188b8b9ede182555d336a8ff777d7737a886ce0eb589af8ffc4e246f8263a6e3502de2fc32f79b8a07309dd21d796666f146b8c2b99de8cf059d8da613bb4973cbbd315464683f4b5c5addc6e5a7645c2f7b430d4907ffb1234feb166d70e46cf6a27481509d492f625d30e97e0cfceee1707ba04a4894057e907348ef2b7d150ac4f1407a3ad3749903dd38867d38175ddd651b08d1511a83a575457d36ca84e19977d6686d74715701b05605d998fcd900f1761b35016818ea9d75433d8e0718f3dd02c7cfc616fd1f7f093c32025d08dad675febc6d7978b049442b745b08d0ebb2b99e8249687959004ada736f6d0f98429a5064fe347fce5c2e8125f39e6bd837df3b8166e6013f578654aa3abb3ad69435b230f7370d6b6ef8a6fabf5e1ffd1451a42b2e0b7944205440008851cfc479d0b6d3891395384dc93b0847f0e407955d47395381359e36209832157b5b5209beb920123a833692474658ace188f18133614ff237a2c91f5286895a221079cabc1655a10e9d53b9069f60466c6e742f4b7dcf32edd2a065d920b00ac4099226f8fb3892c4aa0fe6745ee1f5b6b2c4be7fd1d18fd2d9859ee1da1bdc2a102d822673a15d9b0d9635224ec2499a641c12977bb329606578149df3376c2cfc5725de37aee75ff64404059b59e017364b8fe2262989cec95ac202d0119bb2f11e0d57cc30de664fb72694d509bb3f0c0eab641388da32d008cc0613645e00cf4b048685058e003ecafc491538c978f77354ac138f206479cd4e575f27e317609a0763fa129efe823a518354fca782a892d2fdc42e3fab9c0e2ffbaf14aee0753575d105854b0bc5977cb3aa08cf2d07e7f1e8d6de75e6702c360ac4bd8f5468560037bd10deef86c738a2b52d6dab4ff275fcb3b1dfa83f3b25d67f06c738b22736e9e8659e378b604778946a23d6823be68b603b83ef1f88d6cc1bc33e2431f5d20787d183b322c49c0b51be87d3cc84afd2c3bdd0bff83d80b42f4bb02b0ae0bd5ddf10b9a8f0d8c003c8704d77f0ed979f180a238162d47c8b83d4703ef59b6797b378430d743fa040399a957c4c69f475c541a13567ff0e2b6e6d05943ffe84c69a15f0f21c6d7e0f43a16b77f3ad4dcc554b1c8c1fbed3397c1796d252cde8526881099815c21179ccbb30b4021253a6e5447b175882842cf7c36ab71aeb2d2261c363bf79f93cb020a3b219b9ad14b1526b6c4d4a1d1dd05ee4c40a039b1ca318ce168251de24dc04841baf527da7a462eb1c5733a71c79a23e7e3d6fc8c32bcf3cc575e18c0561dfc6f6ac4047847e223ce6d4d6c180dfabaae57f288bf9a0ab73750625b2cf1c24c8a4c616b32833577a08267c41172395ace0984c9640c52764cb6e12b2431f1576b71f9f3a2b3a2c12fd8c4955b1e1b3d335570917e593d7abcfcd904949da6d788a2303b31a3969434b1d9312207b5c15c4a6aace8f681622dcaecc9c225dedb7086ab15295ff7ac375566a300b7247b0cd67ce198b847b3cab12d024c36f935d2fcc1de1b00f7cf24fd2f3d8c5e28b676e22d2106a20d6c3aacbcf7e175935b20376c5c64f40aa3cf534c845ff50147fa48264be339ab7e16caa1747663209285cbb7d5847303338328f4f9f368404e79b7c4959e0a2b700ea9e91842a70764ac026cf41c6875a0fe861841187b5758da76ce1b6198a046e47ac6b52752ae87bd8ec661974cf7f205ae5335cbc93dab41d0c1d16eae54435698feeb5e3cd500257308bc193f477070d0aaa3889c325ddae6a46d623149fcb4a88ec90ce464bd6a9b892f0a246ce5a9aef556615649dab9dbc18d5bba20aecf66de22f1e723ae4e8912a59a05325e7e2d5ec4c5152a99ee2124a6eb07510346b652e2b34d3e39527be5466b8a48f9ebe0ee74cb04643039b246884796387c0ffc4129419fe7c21e4ba8bc6862f6178f911cbdda985c73a464274498de9559b2e12a2465543f17ff7982fb18a88e6d46e8c68ea81e34aa0faae8966abb0b13cd148526119023f349c9e8e9d00c6e63318422115b02133e002db12fc64284bbece615bc1c2a85828a66119f6686cf570bb92c98823d30eac85db8883bd8c9d95a3acc45738c018f5646f89c5bb4dd1608d9c360a2e860ccf3fc7f94eed62313c7def97af9969891c89efb2cb554650859f214a6c6f79f03155d2448b904eba4461c0a125823a2d4271b46f4109121c131372aff953b31e1a7c35276b1ec8b8f156f587306c66c861be824c76a8dd870ec0b4bbe00de7a719ed31d639fa90505e6c4e5830271dbfce279fd783bde2a7d2dd92d7320f751440c78e891b2f9d523e27c5aeed3b973dcfa5f7950a4908adcbf19943adb89df3bfe7c6b1bb3606c591e73eb02b5a1440796d1790397528a2010fc4211843a46aad576eaef9bed68a90fee7c1386fe6d43657c8a2613d0e6440f296a75a11d627fcaa0b1f4d901f4d621ad2da30bb2dfb6b680334d0b4f1c5d025f24bfadc3ca8b372adc96a67734ebbff1e21607aa5d1ccf60e08bfd64772199e01001e640ff631896aa5cb5659b498310a74bf9757f4c81ebcecb85b0f6e142a941c5db95cef4a4e8fcb5a274e4785a2012792c6a4b6764b08f6ba6096cfc5fc002e11f3914477cb0558708a47a8d297ac44892658be51d180217880c8ebea4ec1b56e95c5c85d8a3f759325c8cf9d3fbfc2f5a44959fdd1f2e8296e548435131312003fe4361fe2ef654680593c183020c477819b331b7e3b2c6960c5a484a0ce8b61729d18dc9ed59c0a9dfde8a1c521583a17bfc54f68e3353528204f83a2c9c56bbe36201a79cc122f4b93a9925394ddfc9e03561e94d9bcaad576f3bcee82bd5c1305cef51af169e080652d9619785465fd1c714452014ac9304ea666fe2034d282ae85d4a8080b6de72105417af9c3c2c7bd379d92a3610d374cca6f2bfb939893a60379a4a740aa45f9a512c0eeec551ed15253bad85487a8f9afd422d80c5619d273f53d4456e31d91d24db593b0c77a7daecd667dd1aeb6dacc47f3e119b403178a1424150cb1c63a0d4cabefe737a9c2073a11fa817ea541dbe310eeb815a9c364d632f95d07f22646db2a9b447e660845f4a22f650e230768fccdec00d15e28b5204d547526fab02410d2f8feb37e316b3f7c76585aed44d0c5339c5467af2b008cdef1fe65d27b5e764950b70002fb06c6120fd65c38f85e9b2c9641969a92c23ee44594f3b09b08dafb9fae1771547e3b0daa2adf0822673c5b3a91970a68cac8b301fa09a0badfa44ebf59a4b856e5dc9c4b6a497b4c62f7d72253d499eeb9e2a8b2f0f12d85aee442052b4ec58f116b7cd977f49b0bcaca040ce9c892c784c4018342bcfaf6b5aef3433987fbeb9f690446042d2b8faa704eb6b214d771af38380c4927076b73fe5167a1b10bf7e0a8d110cd68c1354e37e1c84da094980d56c9dc55a8cdecc77de438817fb9603aafde29b4be9dc2ec42dc58ad3810ab7f10fafa9ff055cbd9ffa91276272a1d7986a16eccf5efe59a72d287679478468ff67ff1097d22bde11085f592f9b10929d27fc61b6dba57b0718a5b50f6e5391ae9b5785556b674118fbbf10dc332cdad417911aff4b8551fa8a9860020b489311c10a9b5c7ddf0c42c5eb374a857cfb732abe9362329ef3d816e142a17dbd9715ea8af7ab5dc25dfb58cb51ff2d7f00d4ebb655dc66821429c67ff613f5393842b5de6b9f85ac8a1e3435972e6e4040cd6c54c4c730aa05db3cf2815bc3581c048720fb3ec4f30d02569117979d20e0e41db991a8173d1da9efae4ff35570f71855011ba126166470f25ce1e6b71e7ecc72e1d64fda27cc1e956f08e9b522d5577f4350dd24f6f0fa2d68c2027b6be78e68ecba956ca2212cde0c3c6793fb4319e9bad20932ffc324662b9bf10577f80a0f00170aebefda0f1ff3e0b3cbc16df5cccddcd0d940032da0dced9b7fe2a2dbc181b86785e1e71de7bbcc36bebe7eefb95ef37a9a5dd65f2a1a83a7f5220c9ad926804a20cadb6f7c9b21b24d4585c9524aa4e089e876586d225152d12e19f846e7f0bb3ae3ac10b4bce4bb9849a2ef29450580d6170fc3d3c1516d394d2cf92d687c6c21ac105fd1dd4f07c4fafccc0", 0x1000}, {&(0x7f0000005540)="ec2de945ac7328ccce121b5d5d93dc582f38b128a847bde613688bf1b7f4cb8b470621b61ca32533c5c4687bee5ec706561e2b314c1c0f97b033f5aced4a71d95ef3572bb42c8f778a87f19659bef8623862fae05e", 0x55}], 0x5, &(0x7f0000005840)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x34, 0x1, 0x1, [r3, r0, r2, r4, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x8000}}], 0x1, 0x4000) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r10, 0x0, &(0x7f0000000040)='./file0\x00', 0x65, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r10, 0x47f6, 0x40, 0x2, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 9.305279448s ago: executing program 2 (id=3064): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x4) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000e00000000000000002540525101fa166e0000"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x1, 0x2, 0x0, 0x8}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.154513124s ago: executing program 2 (id=3065): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000002030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x10800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000000c0)={0x7c2, 0x7f, 0x1, 'queue1\x00', 0x3}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed430000000000001090224000100000000090400000103000000092100000001220700090581034000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "3319f0bf"}, @global=@item_4={0x3, 0x1, 0x9, "467f0b83"}]}}, 0x0}, 0x0) 7.905934582s ago: executing program 3 (id=3066): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r4, 0x0, 0x5, 0x3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x1, r4, 0x0, 0x1, 0x81}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r4, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x80}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_NAME(0x4, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r10, r9, 0xc, 0xffffffffffffffff, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.889935161s ago: executing program 4 (id=3068): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc9) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.799739818s ago: executing program 4 (id=3069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x17}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x200007af, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000}, 0x50) 6.694031739s ago: executing program 4 (id=3070): socket$igmp(0x2, 0x3, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 6.693412238s ago: executing program 2 (id=3071): syz_open_procfs(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002200)=@generic={&(0x7f00000021c0)='./file0\x00', 0x0, 0x10}, 0x18) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1fe00) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) execve(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x563fe1c184547cef) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002040)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x2b, 0x9, 0x20, 0x5, 0x2, 0x6, 0x100004, 0x0, 0x0, 0x1, 0x8ced}}, 0x50) 6.100655464s ago: executing program 0 (id=3072): socket$igmp(0x2, 0x3, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d6163767461700014000280080005", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 5.828335984s ago: executing program 3 (id=3073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfff5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) 5.60586125s ago: executing program 1 (id=3074): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="0f20e06635100000000f22e08ed8b800008ec00f9c86b39e260f01c4c6f8000f01d1baa100ecf20f187e0c260fe4ec660fd97355", 0x34}], 0x1, 0x4, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) socket$isdn(0x22, 0x2, 0x11) socket$rds(0x15, 0x5, 0x0) eventfd(0x5f0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000003, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x80, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc4}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c25843", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 5.516402491s ago: executing program 0 (id=3075): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.478064817s ago: executing program 3 (id=3076): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x30, 0x8a, {0x8a, 0x23, "f0cf5ff2bb909c80be2a16700d720d429a57bc8e8552b967e5f3be1829c37a8fc6f9f63b13fc98f18f26910f2b9bd1a10d215000d2d6776f31c78379975399613571c4419744b8e168bd54a3fb88bc305d9ecf7a3e19e7852cba437a4aeae1916ac68e581e62d26a24c114bf8363a0b8d1aae150db965593754297e77844fd0f122a8439fbc4e8ce"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="2002380000006883bf0ee849fba4d00a74c7d26e605c43e84b3cefadf05969d4179209dfb0b9c89434c6a55362569210ff260a23c2bf18d69ca0e04ff3ad5228e189ff4258f199ef66b252570cb74661dec05db9"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x7ff, 0x400, 0x9, 0xffff, 0x4, 0xa, 0x90, 0x2, 0x8001, 0x2, 0x101, 0x25}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x13}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.376450937s ago: executing program 4 (id=3077): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x18000000, 0x0, 0x318, 0x1, 0x24}, 0x9c) 4.602338855s ago: executing program 0 (id=3078): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="daffc38b69363a52fe8000480000040021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)="01", 0x1}], 0x2}, 0xb00) 4.541964879s ago: executing program 2 (id=3079): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000800)={0x0, 0x5, 0x32a71251, 0x765}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffd}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)}]) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_j1939(r0, 0x0, 0x0) 4.522546526s ago: executing program 1 (id=3080): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x303, 0x36}, "7221de4d120f747c", "e0fb3b37900597830d49c7df36e7d0e14744e319c4f11d6200", "e39382f8"}, 0x38) 4.341700188s ago: executing program 0 (id=3081): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x7c, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x0, 0x8a}}, [{{0x9, 0x5, 0x82, 0x2, 0x408, 0x2, 0x6, 0x40}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x80, 0x8, 0x6, 0x0, 0x8}, 0x31, &(0x7f00000000c0)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3b, "7e0be0b0a351d7e9644c738f7c97890f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x35, 0x5, 0x4, 0x4, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x2, 0x4}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.801405274s ago: executing program 1 (id=3082): unshare(0x24060400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7, 0x5, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x20100) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x20, 0x5, 0x12, {0x12, 0x23, "39f93d69df8a8a14bc4b712cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000400), 0x2000011a) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf9b"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000300)=""/56}, 0x20) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x8) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000500)={0x0, r6}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000000c0)={0xb}, 0x1) shutdown(r0, 0x2) 3.428757029s ago: executing program 4 (id=3083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x40000000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3.141491404s ago: executing program 4 (id=3084): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000040)=""/143, 0x8f) syz_usb_disconnect(r1) read$char_usb(r2, 0x0, 0x0) 3.010146834s ago: executing program 3 (id=3085): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/170, 0xaa}, {&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/148, 0x94}], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x42, &(0x7f0000000200)=[@cr0={0x0, 0x40000000}], 0x1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2.841854145s ago: executing program 2 (id=3086): syz_usbip_server_init(0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x3, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1bf) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1/file0\x00'}) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000380)="cd", 0x1, 0x4000, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) 2.73310104s ago: executing program 3 (id=3087): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0x53, 0xc3, 0x8, 0x4b3, 0x4001, 0x110, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x3a, 0x8, 0x0, 0xc4, 0x5f, 0xf8, 0x1d}}]}}]}}, 0x0) r1 = io_uring_setup(0x5751, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x19, &(0x7f0000000300), 0x0) syz_usb_connect$cdc_ecm(0x4, 0x5c, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x7, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "3a6ba7b668cc"}, {0x5, 0x24, 0x0, 0x90a}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1ff, 0x3, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xf7, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0xc68, 0xe4, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x7af, 0x7, 0x7, 0x1}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xc0, 0x4, 0x95, 0xff, 0x8}, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB]}, {0xbc, &(0x7f0000000200)=@string={0xbc, 0x3, "f882d42a5bb27defc6b3c8a1db9d482d925db8d5cfa53aa480a6bff703b6e94d6fd59dc42d2ee2f43a2913d752224ff335aa95c6c011c9b9cb0d71d13c1fed3fce38d2ef5bf2a68d65c39b7a3697ba88d786d88712810c1b6a0c143914c9d1f72601a5f9dbe4ac70737c0c7c5dbc6737e072a7718f03357d09fbb8f12b9da437de9776e6129072e73e6a092ff5c798af740c8f84a4e1a55308e131508fd078051eb57b25727e47e1b7796d37490d0f47747d4f66e6b2e17a9bc6"}}]}) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x8080, 0x0) socket(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) unlink(0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.39412767s ago: executing program 0 (id=3088): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffb, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000120000000000fe8000000000000000000000000000aa87"], 0x0) 931.116195ms ago: executing program 2 (id=3089): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000003c0)={{0x4, 0x5, 0x10000, 0xff, '\x00', 0x4d}, 0x1, [0x1, 0x5, 0x80, 0xffffffffffff5ae9, 0xc, 0x8be, 0x1, 0x5, 0xf, 0xe, 0x7, 0x200, 0x7, 0x0, 0x7, 0x0, 0xfffffffffffeffff, 0x9, 0x100000001, 0x5, 0x99, 0x7fffffff, 0x3, 0x473, 0xffffffffffffff1b, 0x4, 0xfffffffffffffffc, 0x29f1f0d0, 0xa5b, 0x734, 0x0, 0x1, 0x200, 0x2, 0xe, 0x1000, 0x8000000000000000, 0x8, 0x3, 0x8, 0x14, 0x4, 0x8, 0x6, 0x7, 0xffffffff, 0x8, 0xb, 0xffffffffffffff3a, 0xd, 0x40, 0x49d, 0x4, 0x7ff, 0x81, 0x80, 0x0, 0xf, 0x5, 0x0, 0x81, 0x0, 0x40, 0xcef, 0x915, 0x3, 0x100, 0xffffffff, 0x7, 0x3, 0x198f, 0x5, 0x5, 0x2, 0x2, 0x6e4f, 0x70000000000, 0x8000000000000000, 0x3, 0xb553, 0x2, 0x7, 0x101, 0x1, 0x8, 0x2, 0x0, 0x2, 0x101, 0x10, 0x6, 0xffffffffffffffde, 0x4, 0x5, 0x800, 0x3b14eb80, 0xfff, 0xed7, 0x3, 0x6, 0x6, 0x0, 0x5, 0x3, 0x6, 0x7, 0xe, 0x6, 0x9, 0x5, 0x3, 0x7, 0x3, 0x5, 0x58cf, 0x7, 0x1, 0x7, 0x81, 0xbc8, 0x2, 0x1, 0x7, 0x4, 0x863, 0x40000000, 0x100, 0x8]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000100)=[{0xb4b1, 0x4200, 0x0, 0x0}, {0x9, 0x200, 0x0, 0x0}, {0x5, 0x4000, 0x0, 0x0}], 0x3}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x3, 0x1, &(0x7f0000000080)={0x13, "ec873cbd66480f4c87a6a3f5fb8aa0b53cc7e01cd0b30e0d80db60a421f0fc4082"}}) 570.720576ms ago: executing program 0 (id=3090): socket$nl_generic(0x10, 0x3, 0x10) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket(0x4, 0x5, 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) openat$autofs(0xffffffffffffff9c, 0x0, 0x11d40be0548075bb, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc9ffb}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r3, 0x3) socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 358.467209ms ago: executing program 1 (id=3091): socket$igmp(0x2, 0x3, 0x2) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 174.010505ms ago: executing program 1 (id=3092): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000002c0)={'filter\x00', 0x2, [{}, {0x40000000}]}, 0x48) 0s ago: executing program 1 (id=3093): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r2, &(0x7f0000000000)='X', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6}, 0x1c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xb9c, &(0x7f0000000640)={0x0, 0xec25, 0x80, 0x1, 0xd0}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}}, 0x0) getpeername(r8, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@rose, @default, @bcast, @null, @bcast, @rose, @netrom]}, &(0x7f0000000240)=0x80) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x2ffb, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0897933.233:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e618e929 code=0x7ffc0000 [ 789.947500][ T30] audit: type=1326 audit(1750897933.233:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87e618e929 code=0x7ffc0000 [ 789.971977][ T5909] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 789.996843][ T5923] usb 4-1: USB disconnect, device number 2 [ 790.056499][ T30] audit: type=1326 audit(1750897933.233:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e618e929 code=0x7ffc0000 [ 790.082720][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 790.117953][ T9] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 790.130075][ T9] usb 5-1: config 0 has no interface number 0 [ 790.153785][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 790.173168][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short [ 790.182288][ T5909] usb 2-1: config 6 has an invalid interface number: 63 but max is 0 [ 790.195115][ T5909] usb 2-1: config 6 has no interface number 0 [ 790.196852][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 790.221800][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.231613][ T5909] usb 2-1: config 6 interface 63 altsetting 7 endpoint 0xA is Bulk; changing to Interrupt [ 790.232002][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 790.252420][ T30] audit: type=1326 audit(1750897933.233:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f87e618e929 code=0x7ffc0000 [ 790.300888][ T5909] usb 2-1: config 6 interface 63 altsetting 7 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 790.309318][ T9] usb 5-1: config 0 descriptor?? [ 790.317440][ T5924] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 790.338785][ T9] ftdi_sio 5-1:0.130: FTDI USB Serial Device converter detected [ 790.342579][ T5909] usb 2-1: config 6 interface 63 has no altsetting 0 [ 790.352042][ T5924] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 790.367427][ T9] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 790.393380][ T5924] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 790.407823][ T30] audit: type=1326 audit(1750897933.233:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e618e929 code=0x7ffc0000 [ 790.440620][ T5924] usb 1-1: config 8 has no interface number 0 [ 790.451371][ T5909] usb 2-1: string descriptor 0 read error: -22 [ 790.473023][ T5909] usb 2-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=43.f8 [ 790.503357][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.513446][ T5924] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 790.551728][T15506] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 790.576040][ T5909] keyspan 2-1:6.63: Keyspan 1 port adapter converter detected [ 790.614590][ T30] audit: type=1326 audit(1750897933.243:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f87e618e929 code=0x7ffc0000 [ 790.640175][ T5924] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 790.670207][ T5924] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 790.693102][ T30] audit: type=1326 audit(1750897933.243:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e618e929 code=0x7ffc0000 [ 790.720899][ T5924] usb 1-1: config 8 interface 24 has no altsetting 0 [ 790.752159][ T5924] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 790.792050][ T5909] keyspan 2-1:6.63: found no endpoint descriptor for endpoint 84 [ 790.799134][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.824933][ T30] audit: type=1326 audit(1750897933.253:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87e618d290 code=0x7ffc0000 [ 790.834223][ T5909] keyspan 2-1:6.63: found no endpoint descriptor for endpoint 81 [ 790.893718][ T5924] usb 1-1: Product: syz [ 790.919879][ T5909] keyspan 2-1:6.63: found no endpoint descriptor for endpoint 82 [ 790.933057][ T5909] keyspan 2-1:6.63: found no endpoint descriptor for endpoint 1 [ 790.955222][ T5924] usb 1-1: Manufacturer: syz [ 790.964991][ T5909] keyspan 2-1:6.63: found no endpoint descriptor for endpoint 2 [ 790.975266][ T5924] usb 1-1: SerialNumber: syz [ 790.985386][ T30] audit: type=1326 audit(1750897933.253:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87e618e52b code=0x7ffc0000 [ 791.232140][T15518] netlink: 'syz.2.2708': attribute type 1 has an invalid length. [ 791.268929][ T5909] keyspan 2-1:6.63: found no endpoint descriptor for endpoint 83 [ 791.337240][T15503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.375948][T15503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.438760][ T5909] keyspan 2-1:6.63: found no endpoint descriptor for endpoint 3 [ 791.579428][ T5909] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 791.638057][ T5909] usb 2-1: USB disconnect, device number 111 [ 791.732219][ T5909] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 791.832851][ T5909] keyspan 2-1:6.63: device disconnected [ 792.305376][T15535] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2711'. [ 792.344932][T15528] could not allocate digest TFM handle poly1305-simd [ 792.411682][T15535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2711'. [ 793.032193][ T9] usb 5-1: USB disconnect, device number 124 [ 793.157779][T10471] usb 4-1: [UEAGLE-ATM] firmware is not available [ 793.344903][ T9] ftdi_sio 5-1:0.130: device disconnected [ 793.506275][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'. [ 793.522871][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'. [ 794.478897][ T5924] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 794.498559][ T5924] vmk80xx 1-1:8.24: probe with driver vmk80xx failed with error -22 [ 794.523628][ T5924] usb 1-1: USB disconnect, device number 115 [ 794.566776][T10471] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 794.746934][T10471] usb 3-1: Using ep0 maxpacket: 16 [ 794.773237][T10471] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 794.792605][T10471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.823607][T10471] usb 3-1: config 0 descriptor?? [ 794.870588][T10471] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 795.056789][ T5924] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 795.258113][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 795.268413][ T5924] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 795.346808][ T5901] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 795.347317][ T5924] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.379945][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 795.396073][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.415692][ T5924] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.435577][ T5924] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 795.446101][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.537136][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 795.549370][ T5901] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 795.557922][ T5901] usb 5-1: config 4 has no interface number 0 [ 795.564071][ T5901] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 795.647409][ T5901] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 795.665998][ T5924] usb 1-1: GET_CAPABILITIES returned 0 [ 795.676033][ T5924] usbtmc 1-1:16.0: can't read capabilities [ 795.692677][ T5901] usb 5-1: config 4 interface 8 has no altsetting 0 [ 795.761087][ T5901] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 795.770662][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.778749][ T5901] usb 5-1: Product: syz [ 795.782932][ T5901] usb 5-1: Manufacturer: syz [ 795.787603][ T5901] usb 5-1: SerialNumber: syz [ 796.001707][ T5909] usb 1-1: USB disconnect, device number 116 [ 796.007895][T15575] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 796.114434][T15582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.125623][T15582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.165361][ T5901] opticon 5-1:4.8: opticon converter detected [ 796.176810][ T5924] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 796.182937][ T5901] usb 5-1: opticon converter now attached to ttyUSB0 [ 796.302717][ T5901] usb 5-1: USB disconnect, device number 125 [ 796.352460][ T5901] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 796.367224][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 796.382178][ T5924] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 796.402050][ T5924] usb 2-1: config 0 has no interface number 0 [ 796.418209][ T5924] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 796.442116][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.465373][ T5924] usb 2-1: config 0 descriptor?? [ 796.483837][ T5901] opticon 5-1:4.8: device disconnected [ 796.484068][ T5924] ftdi_sio 2-1:0.130: FTDI USB Serial Device converter detected [ 796.510424][ T5924] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 796.907778][T15597] netlink: 'syz.3.2726': attribute type 11 has an invalid length. [ 797.540742][ T5924] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 797.723595][ T5924] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 797.732402][ T5924] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 797.755726][T10471] gspca_sonixj: reg_w err -71 [ 797.758016][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 797.763232][T10471] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 797.784229][T10471] usb 3-1: USB disconnect, device number 6 [ 797.826786][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 797.847051][T10472] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 797.895204][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 797.948996][ T5924] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 797.961776][T15621] netlink: 'syz.0.2733': attribute type 1 has an invalid length. [ 797.981102][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 798.024362][T10472] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 798.038115][T10472] usb 4-1: config 0 interface 0 has no altsetting 0 [ 798.052119][ T5924] usb 5-1: Product: syz [ 798.053223][T10472] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 798.066535][T10472] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 798.075051][T10472] usb 4-1: Product: syz [ 798.076816][ T5924] usb 5-1: Manufacturer: syz [ 798.079404][T10472] usb 4-1: Manufacturer: syz [ 798.088521][T10472] usb 4-1: SerialNumber: syz [ 798.096427][T10472] usb 4-1: config 0 descriptor?? [ 798.099664][T15624] bond6 (unregistering): Released all slaves [ 798.132075][T10472] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 798.199970][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.238966][ T5924] cdc_wdm 5-1:1.0: skipping garbage [ 798.285453][ T5924] cdc_wdm 5-1:1.0: skipping garbage [ 798.343406][ T5924] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 798.400143][ T5924] cdc_wdm 5-1:1.0: Unknown control protocol [ 798.679679][T10471] usb 4-1: USB disconnect, device number 3 [ 798.785454][T10472] usb 2-1: USB disconnect, device number 112 [ 798.871069][T10472] ftdi_sio 2-1:0.130: device disconnected [ 798.897172][ T9] usb 5-1: USB disconnect, device number 126 [ 799.101725][T15642] netem: change failed [ 799.121105][T15642] TCP: TCP_TX_DELAY enabled [ 799.280206][T15644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2739'. [ 799.296837][T10472] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 799.516978][T10472] usb 2-1: Using ep0 maxpacket: 8 [ 799.532588][T10472] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 799.603660][T10472] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 799.634916][T10472] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 799.669132][T10472] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 799.683719][T10472] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.705314][T10472] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 799.715426][T10472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.785049][T15657] binder: BINDER_SET_CONTEXT_MGR already set [ 799.791204][T15657] binder: 15632:15657 ioctl 4018620d 200000000040 returned -16 [ 800.208262][T10472] usb 2-1: GET_CAPABILITIES returned 0 [ 800.213840][T10472] usbtmc 2-1:16.0: can't read capabilities [ 800.327059][ T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 800.476806][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 800.513708][T15635] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 800.520630][T10472] usb 2-1: USB disconnect, device number 113 [ 800.605116][T15663] loop2: detected capacity change from 0 to 3 [ 800.618542][ T5857] ldm_validate_privheads(): Disk read failed. [ 800.625034][ T5857] Dev loop2: unable to read RDB block 3 [ 800.634954][ T5857] loop2: unable to read partition table [ 800.641111][ T5857] loop2: partition table beyond EOD, truncated [ 800.668806][T15663] ldm_validate_privheads(): Disk read failed. [ 800.675108][T15663] Dev loop2: unable to read RDB block 3 [ 800.684626][T15663] loop2: unable to read partition table [ 800.693378][T15663] loop2: partition table beyond EOD, truncated [ 800.716157][T15663] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 800.748766][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 800.767599][ T9] usb 5-1: too many configurations: 105, using maximum allowed: 8 [ 800.792741][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 800.824542][ T9] usb 5-1: can't read configurations, error -71 [ 801.697437][T15679] xt_TPROXY: Can be used only with -p tcp or -p udp [ 801.905675][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 802.078112][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 802.087113][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 802.098988][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 802.206624][T15684] fuse: Bad value for 'fd' [ 802.271475][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 802.286743][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 802.348049][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 802.427141][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 802.436380][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 802.452733][ T10] usb 2-1: Product: syz [ 802.457097][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 802.467572][ T10] usb 2-1: Manufacturer: syz [ 802.506414][ T9] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 802.517741][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 802.523007][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 802.539061][ T9] usb 5-1: config 0 has no interface number 0 [ 802.546568][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 802.557731][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 802.563642][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 802.570132][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.601678][ T9] usb 5-1: config 0 descriptor?? [ 802.623193][ T9] ftdi_sio 5-1:0.130: FTDI USB Serial Device converter detected [ 802.634139][ T9] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 803.165109][ T10] usb 2-1: USB disconnect, device number 114 [ 803.257363][T15699] fuse: Bad value for 'group_id' [ 803.262363][T15699] fuse: Bad value for 'group_id' [ 803.413449][T15707] FAULT_INJECTION: forcing a failure. [ 803.413449][T15707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.427368][T15707] CPU: 0 UID: 0 PID: 15707 Comm: syz.1.2758 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 803.427395][T15707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.427407][T15707] Call Trace: [ 803.427415][T15707] [ 803.427424][T15707] dump_stack_lvl+0x189/0x250 [ 803.427456][T15707] ? __pfx____ratelimit+0x10/0x10 [ 803.427484][T15707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.427513][T15707] ? __pfx__printk+0x10/0x10 [ 803.427546][T15707] should_fail_ex+0x414/0x560 [ 803.427574][T15707] _copy_to_user+0x31/0xb0 [ 803.427595][T15707] simple_read_from_buffer+0xe1/0x170 [ 803.427620][T15707] proc_fail_nth_read+0x1df/0x250 [ 803.427646][T15707] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 803.427671][T15707] ? rw_verify_area+0x258/0x650 [ 803.427698][T15707] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 803.427722][T15707] vfs_read+0x200/0x980 [ 803.427755][T15707] ? __pfx___mutex_lock+0x10/0x10 [ 803.427783][T15707] ? __pfx_vfs_read+0x10/0x10 [ 803.427817][T15707] ? __fget_files+0x2a/0x420 [ 803.427842][T15707] ? __fget_files+0x3a0/0x420 [ 803.427861][T15707] ? __fget_files+0x2a/0x420 [ 803.427890][T15707] ksys_read+0x145/0x250 [ 803.427920][T15707] ? __pfx_ksys_read+0x10/0x10 [ 803.427954][T15707] ? do_syscall_64+0xbe/0x3b0 [ 803.427975][T15707] do_syscall_64+0xfa/0x3b0 [ 803.427990][T15707] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.428016][T15707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.428036][T15707] ? clear_bhb_loop+0x60/0xb0 [ 803.428059][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.428084][T15707] RIP: 0033:0x7f87e618d33c [ 803.428101][T15707] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 803.428118][T15707] RSP: 002b:00007f87e6f90030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 803.428138][T15707] RAX: ffffffffffffffda RBX: 00007f87e63b5fa0 RCX: 00007f87e618d33c [ 803.428152][T15707] RDX: 000000000000000f RSI: 00007f87e6f900a0 RDI: 0000000000000008 [ 803.428164][T15707] RBP: 00007f87e6f90090 R08: 0000000000000000 R09: 0000000000000000 [ 803.428176][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.428187][T15707] R13: 0000000000000000 R14: 00007f87e63b5fa0 R15: 00007f87e64dfa28 [ 803.428217][T15707] [ 803.664730][ T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 803.760188][T15715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 803.778913][T15715] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 803.788981][T15715] bond2: (slave macvlan2): making interface the new active one [ 803.798201][T15715] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 803.846755][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 803.854285][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.865298][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.875112][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 803.884250][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.894930][ T9] usb 1-1: config 0 descriptor?? [ 803.912136][T15696] delete_channel: no stack [ 803.917518][ T5901] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 804.067804][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 804.076091][ T5901] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 804.091446][ T5901] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.101771][T15719] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 804.121775][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 804.131780][ T5901] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 804.142146][ T5901] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.157168][ T5901] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 804.166534][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.286952][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 804.343491][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 804.359526][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 804.365723][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 804.381936][ T5901] usb 4-1: GET_CAPABILITIES returned 0 [ 804.384311][ T9] usb 1-1: USB disconnect, device number 117 [ 804.394106][ T5901] usbtmc 4-1:16.0: can't read capabilities [ 804.447332][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 804.454774][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 804.468504][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 804.482051][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 804.491955][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.504936][ T10] usb 3-1: config 0 descriptor?? [ 804.708495][T15705] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 804.710155][ T9] usb 4-1: USB disconnect, device number 4 [ 804.776586][ T5901] usb 5-1: USB disconnect, device number 3 [ 804.829069][ T5901] ftdi_sio 5-1:0.130: device disconnected [ 804.905857][T15730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 805.230421][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 805.241683][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 805.253256][ T10] usb 3-1: USB disconnect, device number 7 [ 805.449373][ T5901] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 805.619631][ T5901] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 805.672012][ T5901] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 805.706184][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 805.724583][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 805.782784][T15746] bond3: option mode: unable to set because the bond device is up [ 805.853840][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 805.918313][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 805.941271][ T5901] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 805.959243][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 806.004455][T15748] [U] M٭Q& K4 [ 806.010039][T15748] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 806.013852][ T5901] usb 1-1: Product: syz [ 806.032138][T15748] [U] O4 [ 806.039804][T15748] [U] UB+ '~GIރRQ^,(-|ڟ-<6&H.Z9/RJΩˈ+)֭KΦ.NHA#LW#RF7P٪MAX]LN"KM +,GSBHJX̧CQ [ 806.166792][ T5901] usb 1-1: Manufacturer: syz [ 806.197066][T10472] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 806.234260][ T5901] cdc_wdm 1-1:1.0: skipping garbage [ 806.257580][ T5901] cdc_wdm 1-1:1.0: skipping garbage [ 806.277971][ T5901] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 806.288648][ T5901] cdc_wdm 1-1:1.0: Unknown control protocol [ 806.387386][T10472] usb 3-1: Using ep0 maxpacket: 32 [ 806.397457][T10472] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 806.421855][T10472] usb 3-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 806.453636][T10472] usb 3-1: config 0 has no interface number 0 [ 806.471705][T10472] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 528 [ 806.557574][T10472] usb 3-1: config 0 interface 183 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.616990][T10472] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 806.626240][T10472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.647045][T10472] usb 3-1: Product: syz [ 806.677130][T10472] usb 3-1: Manufacturer: syz [ 806.709643][T10472] usb 3-1: SerialNumber: syz [ 806.727312][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 806.736088][T10472] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 806.755167][T10472] usb 3-1: no configuration chosen from 1 choice [ 806.779037][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 806.782980][ T5923] usb 1-1: USB disconnect, device number 118 [ 806.785651][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 806.797697][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 806.936792][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 806.967418][ T10] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 806.975625][ T10] usb 5-1: config 0 has no interface number 0 [ 807.028173][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 807.160946][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.185139][ T10] usb 5-1: config 0 descriptor?? [ 807.218375][ T10] ftdi_sio 5-1:0.130: FTDI USB Serial Device converter detected [ 807.246242][ T10] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 807.727067][T15776] netlink: 'syz.1.2782': attribute type 10 has an invalid length. [ 807.861506][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 807.927556][T15776] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 807.939113][T15777] bridge_slave_1: left allmulticast mode [ 807.945494][T15777] bridge_slave_1: left promiscuous mode [ 807.957748][T15777] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.969061][T15777] bridge_slave_0: left allmulticast mode [ 807.975444][T15777] bridge_slave_0: left promiscuous mode [ 808.020594][T15777] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.053170][T15777] bond0: (slave bridge0): Releasing backup interface [ 808.125615][T15775] pim6reg: entered allmulticast mode [ 808.246888][T10472] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 808.287819][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2784'. [ 808.304146][T15782] vlan2: entered promiscuous mode [ 808.316197][T15780] netlink: 'syz.1.2783': attribute type 1 has an invalid length. [ 808.383077][T15780] bond4 (unregistering): Released all slaves [ 808.406950][T10472] usb 4-1: Using ep0 maxpacket: 8 [ 808.423686][T10472] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 808.456847][T10472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.467073][T10472] usb 4-1: Product: syz [ 808.471274][T10472] usb 4-1: Manufacturer: syz [ 808.475970][T10472] usb 4-1: SerialNumber: syz [ 808.496412][T10472] usb 4-1: config 0 descriptor?? [ 808.508161][T10472] gspca_main: se401-2.14.0 probing 047d:5003 [ 808.523139][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.530457][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.639228][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 808.681451][T15788] [U] M٭Q& K4 [ 808.699394][T15788] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 808.787201][T15771] pim6reg: left allmulticast mode [ 808.797516][T15788] [U] O4 [ 808.801187][T15788] [U] UB+ '~GIރRQ^,(-|ڟ-<6&H.Z9/RJΩˈ+)֭KΦ.NHA#LW#RF7P٪MAX]LN"KM +,GSBHJX̧CQ [ 808.928249][T10471] usb 3-1: USB disconnect, device number 8 [ 809.917293][T10471] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 810.128539][T10472] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 810.227427][T10471] usb 3-1: Using ep0 maxpacket: 8 [ 810.233977][T10471] usb 3-1: config 2 has an invalid interface number: 138 but max is 0 [ 810.242447][T10471] usb 3-1: config 2 has no interface number 0 [ 810.248761][T10471] usb 3-1: config 2 interface 138 has no altsetting 0 [ 810.288923][T10471] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=e8.14 [ 810.317495][T10471] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.345763][T10471] usb 3-1: Product: syz [ 810.356944][T10471] usb 3-1: Manufacturer: syz [ 810.376726][T10471] usb 3-1: SerialNumber: syz [ 810.494240][T10472] usb 4-1: device descriptor read/64, error -71 [ 810.538858][ T5923] usb 5-1: USB disconnect, device number 4 [ 810.546132][ T5923] ftdi_sio 5-1:0.130: device disconnected [ 810.621323][T10471] kvaser_usb 3-1:2.138: error -ENODEV: Cannot get usb endpoint(s) [ 810.665999][T10471] usb 3-1: USB disconnect, device number 9 [ 810.872494][T10472] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 810.908644][T10472] usb 4-1: device reset changed ep0 maxpacket size! [ 810.922901][T10472] gspca_se401: read req failed req 0x06 error -19 [ 810.954537][T10472] usb 4-1: USB disconnect, device number 5 [ 811.169697][T10472] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 811.297515][T15815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2793'. [ 811.340662][T10472] usb 4-1: Using ep0 maxpacket: 32 [ 811.355941][T10472] usb 4-1: config 244 has an invalid interface number: 253 but max is 0 [ 811.364727][T10472] usb 4-1: config 244 has no interface number 0 [ 811.377713][T10472] usb 4-1: config 244 interface 253 has no altsetting 0 [ 811.400997][T10472] usb 4-1: New USB device found, idVendor=07af, idProduct=0006, bcdDevice= 1.00 [ 811.410142][T10472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.421443][T10472] usb 4-1: Product: syz [ 811.425613][T10472] usb 4-1: Manufacturer: syz [ 811.432149][T10472] usb 4-1: SerialNumber: syz [ 811.500265][T10471] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 811.671717][T10471] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 811.671740][T10471] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 811.671754][T10471] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 811.671784][T10471] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 811.671802][T10471] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 811.673505][T10471] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 811.673534][T10471] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 811.673555][T10471] usb 3-1: Product: syz [ 811.673571][T10471] usb 3-1: Manufacturer: syz [ 811.685253][T10471] cdc_wdm 3-1:1.0: skipping garbage [ 811.685271][T10471] cdc_wdm 3-1:1.0: skipping garbage [ 811.707472][T10471] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 811.707491][T10471] cdc_wdm 3-1:1.0: Unknown control protocol [ 811.807037][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 811.872562][T15822] netlink: 'syz.0.2796': attribute type 1 has an invalid length. [ 811.935854][T15822] bond6 (unregistering): Released all slaves [ 811.968622][ T10] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 811.968650][ T10] usb 5-1: config 0 has no interface number 0 [ 811.968681][ T10] usb 5-1: config 0 interface 98 has no altsetting 0 [ 811.970848][ T10] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 811.970873][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.970891][ T10] usb 5-1: Product: syz [ 811.970905][ T10] usb 5-1: Manufacturer: syz [ 811.970919][ T10] usb 5-1: SerialNumber: syz [ 811.977395][ T10] usb 5-1: config 0 descriptor?? [ 812.183416][T15820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.183884][T15820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.195171][ T10] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 812.204563][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'. [ 812.209586][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.209608][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.209817][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.209835][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.210021][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.210055][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.210255][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.210271][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.210468][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.210495][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.210690][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.210707][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.210902][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.210921][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.211130][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.211148][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.211346][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 812.211353][ T5923] usb 3-1: USB disconnect, device number 10 [ 812.211367][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 812.211381][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 812.285825][T15829] [U] M٭Q& K4 [ 812.287777][T15829] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 812.287818][T15829] [U] O4 [ 812.288333][T15829] [U] UB+ '~GIރRQ^,(-|ڟ-<6&H.Z9/RJΩˈ+)֭KΦ.NHA#LW#RF7P٪MAX]LN"KM +,GSBHJX̧CQ [ 812.530754][T15834] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 812.999702][ T10] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 812.999782][ T10] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 813.009506][ T5923] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 813.009526][ T5923] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 813.014676][ T10] usb 5-1: USB disconnect, device number 5 [ 814.051194][T10472] ums-sddr09 4-1:244.253: USB Mass Storage device detected [ 814.249249][T10472] usb 4-1: USB disconnect, device number 6 [ 814.355246][T15860] FAULT_INJECTION: forcing a failure. [ 814.355246][T15860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.355281][T15860] CPU: 0 UID: 0 PID: 15860 Comm: syz.3.2806 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 814.355304][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 814.355316][T15860] Call Trace: [ 814.355324][T15860] [ 814.355332][T15860] dump_stack_lvl+0x189/0x250 [ 814.355366][T15860] ? __pfx____ratelimit+0x10/0x10 [ 814.355393][T15860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.355422][T15860] ? __pfx__printk+0x10/0x10 [ 814.355443][T15860] ? __might_fault+0xb0/0x130 [ 814.355471][T15860] should_fail_ex+0x414/0x560 [ 814.355500][T15860] _copy_from_user+0x2d/0xb0 [ 814.355519][T15860] snd_seq_oss_write+0x515/0x930 [ 814.355563][T15860] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 814.355592][T15860] ? common_file_perm+0x199/0x200 [ 814.355620][T15860] ? security_file_permission+0x75/0x290 [ 814.355645][T15860] odev_write+0x5a/0x80 [ 814.355666][T15860] ? __pfx_odev_write+0x10/0x10 [ 814.355691][T15860] vfs_write+0x27e/0xa90 [ 814.355728][T15860] ? __pfx_vfs_write+0x10/0x10 [ 814.355758][T15860] ? __fget_files+0x2a/0x420 [ 814.355781][T15860] ? __fget_files+0x2a/0x420 [ 814.355800][T15860] ? __fget_files+0x3a0/0x420 [ 814.355819][T15860] ? __fget_files+0x2a/0x420 [ 814.355848][T15860] ksys_write+0x145/0x250 [ 814.355875][T15860] ? __pfx_ksys_write+0x10/0x10 [ 814.355890][T15860] ? rcu_is_watching+0x15/0xb0 [ 814.355924][T15860] ? do_syscall_64+0xbe/0x3b0 [ 814.355944][T15860] do_syscall_64+0xfa/0x3b0 [ 814.355960][T15860] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.355985][T15860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.356004][T15860] ? clear_bhb_loop+0x60/0xb0 [ 814.356026][T15860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.356044][T15860] RIP: 0033:0x7f38fe98e929 [ 814.356061][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.356077][T15860] RSP: 002b:00007f38ff7b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 814.356097][T15860] RAX: ffffffffffffffda RBX: 00007f38febb5fa0 RCX: 00007f38fe98e929 [ 814.356112][T15860] RDX: 0000000000000232 RSI: 00002000000004c0 RDI: 0000000000000003 [ 814.356124][T15860] RBP: 00007f38ff7b2090 R08: 0000000000000000 R09: 0000000000000000 [ 814.356136][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 814.356147][T15860] R13: 0000000000000000 R14: 00007f38febb5fa0 R15: 00007f38fecdfa28 [ 814.356176][T15860] [ 814.747765][T15846] pim6reg: entered allmulticast mode [ 815.356785][T10472] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 815.521356][T10472] usb 1-1: Using ep0 maxpacket: 8 [ 815.547357][T10472] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 815.586740][T10472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.608890][T10472] usb 1-1: Product: syz [ 815.613088][T10472] usb 1-1: Manufacturer: syz [ 815.687436][T10472] usb 1-1: SerialNumber: syz [ 815.708092][T10472] usb 1-1: config 0 descriptor?? [ 815.771571][ T5901] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 815.796794][T10472] gspca_main: se401-2.14.0 probing 047d:5003 [ 815.896602][T15852] pim6reg: left allmulticast mode [ 816.058953][ T5901] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 816.077287][ T5901] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 816.111141][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 816.121302][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 816.167104][ T5924] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 816.167193][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 816.277974][ T5901] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 816.306787][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 816.337043][ T5901] usb 4-1: Product: syz [ 816.341395][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 816.350920][ T5901] usb 4-1: Manufacturer: syz [ 816.374812][ T5901] cdc_wdm 4-1:1.0: skipping garbage [ 816.377061][ T5924] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 816.405928][ T5901] cdc_wdm 4-1:1.0: skipping garbage [ 816.413171][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 816.429444][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 816.445831][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 816.634450][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.657656][ T5901] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 816.663610][ T5901] cdc_wdm 4-1:1.0: Unknown control protocol [ 816.804760][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 816.818775][T10472] gspca_se401: read req failed req 0x06 error -19 [ 816.826930][T10472] usb 1-1: USB disconnect, device number 119 [ 816.864722][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.157577][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 817.164369][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 817.207013][ T5901] usb 4-1: USB disconnect, device number 7 [ 817.215613][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 817.304189][ T5924] usb 3-1: GET_CAPABILITIES returned 0 [ 817.347402][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 817.616034][T15872] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 817.617711][ T5901] usb 3-1: USB disconnect, device number 11 [ 818.337264][ T5901] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 818.522466][ T5901] usb 4-1: Invalid ep0 maxpacket: 16 [ 818.673055][ T5901] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 818.893603][ T5901] usb 4-1: Invalid ep0 maxpacket: 16 [ 818.981775][ T5901] usb usb4-port1: attempt power cycle [ 819.262481][T15912] loop6: detected capacity change from 0 to 524287999 [ 819.292133][T15912] buffer_io_error: 23 callbacks suppressed [ 819.292149][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.325831][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.358456][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.375311][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.376895][ T5901] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 819.391163][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.421331][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.440047][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.448069][ T5901] usb 4-1: Invalid ep0 maxpacket: 16 [ 819.453724][ T5909] IPVS: starting estimator thread 0... [ 819.473006][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.501416][T15912] ldm_validate_partition_table(): Disk read failed. [ 819.516876][T10472] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 819.516948][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.555056][T15912] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.566384][T15918] IPVS: using max 44 ests per chain, 105600 per kthread [ 819.576832][ T5901] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 819.615124][ T5901] usb 4-1: Invalid ep0 maxpacket: 16 [ 819.622869][ T5901] usb usb4-port1: unable to enumerate USB device [ 819.642112][T15912] Dev loop6: unable to read RDB block 0 [ 819.667203][T15912] loop6: unable to read partition table [ 819.684795][T15912] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 819.686865][T10472] usb 2-1: Using ep0 maxpacket: 8 [ 819.723798][T10472] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 819.734238][T10472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.744256][T10472] usb 2-1: Product: syz [ 819.752372][T10472] usb 2-1: Manufacturer: syz [ 819.758491][T10472] usb 2-1: SerialNumber: syz [ 819.772317][T10472] usb 2-1: config 0 descriptor?? [ 820.237414][T10472] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 821.007832][T10472] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 821.037417][T10472] usb 2-1: USB disconnect, device number 115 [ 821.957245][T10472] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 822.123099][T10472] usb 4-1: config 0 has no interfaces? [ 822.139311][T10472] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 822.148557][T10472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.334323][T10472] usb 4-1: Product: syz [ 822.360513][T10472] usb 4-1: Manufacturer: syz [ 822.416895][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 822.457420][T10472] usb 4-1: SerialNumber: syz [ 822.637841][T10472] usb 4-1: config 0 descriptor?? [ 822.836751][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 822.877297][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 822.905925][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.992134][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.992172][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.992206][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.992258][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 822.992284][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.098879][T15949] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 823.098927][T15949] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 823.099101][T15949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 823.288263][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 823.288298][ T9] usbtmc 5-1:16.0: can't read capabilities [ 823.679111][ T5909] usb 5-1: USB disconnect, device number 6 [ 823.698900][T15939] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 824.897309][ T9] usb 4-1: USB disconnect, device number 12 [ 825.014259][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 825.026167][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 825.035074][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 825.056702][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 825.068531][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 825.099023][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 825.110956][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 825.120101][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 825.149309][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 825.157442][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 825.212412][T15968] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 825.247087][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 825.457972][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 825.511255][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 825.537957][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.659932][ T10] usb 5-1: Product: syz [ 825.722809][ T10] usb 5-1: Manufacturer: syz [ 825.743467][T15978] QAT: Device 127 not found [ 825.776864][ T10] usb 5-1: SerialNumber: syz [ 825.787916][ T10] usb 5-1: config 0 descriptor?? [ 826.006466][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 826.025773][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2842'. [ 826.107626][T15974] chnl_net:caif_netlink_parms(): no params data found [ 826.273027][T15986] FAULT_INJECTION: forcing a failure. [ 826.273027][T15986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.304879][T15986] CPU: 1 UID: 0 PID: 15986 Comm: syz.0.2843 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 826.304905][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.304916][T15986] Call Trace: [ 826.304924][T15986] [ 826.304932][T15986] dump_stack_lvl+0x189/0x250 [ 826.304963][T15986] ? __pfx____ratelimit+0x10/0x10 [ 826.304989][T15986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.305013][T15986] ? __pfx__printk+0x10/0x10 [ 826.305027][T15986] ? __might_fault+0xb0/0x130 [ 826.305046][T15986] should_fail_ex+0x414/0x560 [ 826.305074][T15986] _copy_from_user+0x2d/0xb0 [ 826.305092][T15986] ___sys_sendmsg+0x158/0x2a0 [ 826.305116][T15986] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.305161][T15986] ? __fget_files+0x2a/0x420 [ 826.305175][T15986] ? __fget_files+0x3a0/0x420 [ 826.305195][T15986] __x64_sys_sendmsg+0x19b/0x260 [ 826.305219][T15986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.305249][T15986] ? __pfx_ksys_write+0x10/0x10 [ 826.305263][T15986] ? rcu_is_watching+0x15/0xb0 [ 826.305294][T15986] ? do_syscall_64+0xbe/0x3b0 [ 826.305308][T15986] do_syscall_64+0xfa/0x3b0 [ 826.305318][T15986] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.305335][T15986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.305348][T15986] ? clear_bhb_loop+0x60/0xb0 [ 826.305371][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.305388][T15986] RIP: 0033:0x7f32c2f8e929 [ 826.305403][T15986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.305417][T15986] RSP: 002b:00007f32c3ec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.305435][T15986] RAX: ffffffffffffffda RBX: 00007f32c31b5fa0 RCX: 00007f32c2f8e929 [ 826.305447][T15986] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 826.305455][T15986] RBP: 00007f32c3ec0090 R08: 0000000000000000 R09: 0000000000000000 [ 826.305463][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.305470][T15986] R13: 0000000000000000 R14: 00007f32c31b5fa0 R15: 00007f32c32dfa28 [ 826.305488][T15986] [ 826.569674][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2844'. [ 826.682133][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 826.730999][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 826.797597][ T10] usb 5-1: USB disconnect, device number 7 [ 826.899787][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.937863][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.953990][T15974] bridge_slave_0: entered allmulticast mode [ 826.970403][T15974] bridge_slave_0: entered promiscuous mode [ 826.981549][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2844'. [ 826.982494][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.024455][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.033056][T15974] bridge_slave_1: entered allmulticast mode [ 827.046419][T15974] bridge_slave_1: entered promiscuous mode [ 827.237998][ T5841] Bluetooth: hci5: command tx timeout [ 827.308471][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.363116][T16002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.424668][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.707605][T16012] binder: BINDER_SET_CONTEXT_MGR already set [ 827.731736][T16012] binder: 15992:16012 ioctl 4018620d 200000000040 returned -16 [ 828.357066][ T5901] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 828.497368][ T5901] usb 1-1: device descriptor read/64, error -71 [ 828.603330][T15974] team0: Port device team_slave_0 added [ 828.676155][T16018] @: renamed from vlan0 [ 828.746557][T15974] team0: Port device team_slave_1 added [ 828.756766][ T5901] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 828.850207][T16018] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2850'. [ 828.946755][ T5901] usb 1-1: device descriptor read/64, error -71 [ 829.038227][T16018] 0XD: renamed from gretap0 [ 829.058037][T16018] 0XD: entered allmulticast mode [ 829.071787][T16018] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 829.159480][ T5901] usb usb1-port1: attempt power cycle [ 829.234240][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.391172][ T5841] Bluetooth: hci5: command tx timeout [ 829.415515][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.441448][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.456804][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.473455][T16022] syz_tun: entered promiscuous mode [ 829.509061][T16022] syz_tun: left promiscuous mode [ 829.591048][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.607015][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.634809][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.696752][ T5901] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 829.719121][ T5901] usb 1-1: device descriptor read/8, error -71 [ 829.958135][ T5901] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 829.987236][T15974] hsr_slave_0: entered promiscuous mode [ 830.017122][T15974] hsr_slave_1: entered promiscuous mode [ 830.138859][T15974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.216782][T15974] Cannot create hsr debugfs directory [ 830.606791][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 830.756769][ T5909] usb 4-1: device descriptor read/64, error -71 [ 830.869225][ T5901] usb 1-1: device descriptor read/8, error -71 [ 830.908955][T15974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.936572][T15974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.036041][T16035] netlink: 'syz.0.2855': attribute type 29 has an invalid length. [ 831.064892][ T5901] usb usb1-port1: unable to enumerate USB device [ 831.079364][ T5909] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 831.129192][T15974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.164886][T15974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.217130][ T5909] usb 4-1: device descriptor read/64, error -71 [ 831.237419][T16035] netlink: 'syz.0.2855': attribute type 29 has an invalid length. [ 831.258867][T16036] netlink: 'syz.0.2855': attribute type 29 has an invalid length. [ 831.327231][ T5909] usb usb4-port1: attempt power cycle [ 831.348122][T15974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.414224][T15974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.470693][T16038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2856'. [ 831.491966][ T5841] Bluetooth: hci5: command tx timeout [ 831.504451][T15974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.517052][T15974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.676747][ T5909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 831.738320][ T5909] usb 4-1: device descriptor read/8, error -71 [ 831.984677][T15974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 832.009697][ T5909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 832.019497][T16043] fuse: Unknown parameter 'f|('a_d' [ 832.074310][T15974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 832.087371][ T5909] usb 4-1: device descriptor read/8, error -71 [ 832.110140][T15974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 832.150347][T15974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 832.204830][ T5909] usb usb4-port1: unable to enumerate USB device [ 832.355501][T15974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.381706][T15974] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.397420][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 832.409597][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.416782][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.439581][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.446778][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.534930][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.599236][ T10] usb 2-1: config 0 has no interfaces? [ 832.608879][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 832.624552][T15974] veth0_vlan: entered promiscuous mode [ 832.631208][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.663393][ T10] usb 2-1: Product: syz [ 832.672875][T15974] veth1_vlan: entered promiscuous mode [ 832.684328][ T10] usb 2-1: Manufacturer: syz [ 832.696951][ T10] usb 2-1: SerialNumber: syz [ 832.726484][ T10] usb 2-1: config 0 descriptor?? [ 832.750554][T15974] veth0_macvtap: entered promiscuous mode [ 832.762651][T15974] veth1_macvtap: entered promiscuous mode [ 832.791646][T15974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.807197][T15974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.821614][T15974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.832067][T15974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.841692][T15974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.851684][T15974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.087288][T16057] bond4: option mode: unable to set because the bond device has slaves [ 833.125714][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.142455][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.273280][T16062] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 833.291945][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.331409][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.345989][T16062] bond6 (unregistering): Released all slaves [ 833.566733][ T5841] Bluetooth: hci5: command tx timeout [ 834.691128][T16085] netlink: 'syz.4.2868': attribute type 23 has an invalid length. [ 834.727726][T16085] xt_hashlimit: max too large, truncated to 1048576 [ 834.736895][T16085] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 835.099735][ T10] usb 2-1: USB disconnect, device number 116 [ 836.532601][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2871'. [ 837.214807][T16102] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2873'. [ 837.224280][T16102] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 837.271069][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'. [ 837.383210][T16102] kvm: pic: non byte write [ 837.896755][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 837.984820][T16114] netlink: 'syz.4.2877': attribute type 1 has an invalid length. [ 838.057311][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 838.125694][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 838.135780][T16116] bond8 (unregistering): Released all slaves [ 838.180849][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.206195][ T9] usb 3-1: Product: syz [ 838.215246][ T9] usb 3-1: Manufacturer: syz [ 838.233940][ T9] usb 3-1: SerialNumber: syz [ 838.280792][ T9] usb 3-1: config 0 descriptor?? [ 838.303427][ T9] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 838.391506][T16123] bond6: entered promiscuous mode [ 838.401909][T16123] bond6: entered allmulticast mode [ 838.410192][T16123] 8021q: adding VLAN 0 to HW filter on device bond6 [ 838.485048][T16131] Cannot find set identified by id 0 to match [ 839.118774][T16135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 839.413358][T16140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2883'. [ 840.045244][T16146] bond7: entered promiscuous mode [ 840.679884][ T9] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 840.694219][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 840.996500][ T5909] usb 3-1: USB disconnect, device number 12 [ 841.990653][T16169] program syz.2.2889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 842.367394][T16171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2889'. [ 842.917021][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 843.096333][ T10] usb 5-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 843.108920][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.162172][T16175] netlink: 'syz.0.2891': attribute type 1 has an invalid length. [ 843.178409][ T10] usb 5-1: Product: syz [ 843.194734][ T10] usb 5-1: Manufacturer: syz [ 843.216291][ T10] usb 5-1: SerialNumber: syz [ 843.517902][ T10] pwc: Visionite VCS-UC300 USB webcam detected. [ 843.597054][ T5909] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 843.618407][ T10] pwc: Failed to set LED on/off time (-71) [ 843.634702][ T10] pwc: send_video_command error -71 [ 843.646888][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 843.707298][ T10] Philips webcam 5-1:5.0: probe with driver Philips webcam failed with error -71 [ 843.765295][ T10] usb 5-1: USB disconnect, device number 8 [ 843.797748][ T5909] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 843.813582][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 843.847260][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2894'. [ 843.919139][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 843.928449][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 843.940915][ T5909] usb 1-1: Product: syz [ 843.945177][ T5909] usb 1-1: Manufacturer: syz [ 843.950094][ T5909] usb 1-1: SerialNumber: syz [ 843.959311][ T5909] usb 1-1: config 0 descriptor?? [ 843.975219][ T5909] usb 1-1: selecting invalid altsetting 0 [ 844.306768][T16190] bridge_slave_1: left allmulticast mode [ 844.333079][T16190] bridge_slave_1: left promiscuous mode [ 844.361849][T16190] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.387050][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 844.548816][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 844.554820][ T9] usb 1-1: USB disconnect, device number 124 [ 844.564324][T16190] bridge_slave_0: left allmulticast mode [ 844.583116][ T5909] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 844.594151][T16190] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.616599][ T5909] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 844.662651][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 844.727783][ T5909] usb 5-1: config 1 has no interface number 0 [ 844.791410][ T5909] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 844.805946][ T5909] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 844.896953][ T5909] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 844.942171][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.966072][T16206] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2899'. [ 844.985272][T16206] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 845.038103][ T5909] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 845.224264][T16196] binder: BINDER_SET_CONTEXT_MGR already set [ 845.238217][T16196] binder: 16195:16196 ioctl 4018620d 2000000000c0 returned -16 [ 845.284440][ T5909] snd_usb_pod 5-1:1.1: set_interface failed [ 845.324929][ T5909] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 845.367906][ T5909] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 845.540415][ T5909] usb 5-1: USB disconnect, device number 9 [ 846.053870][T16222] netlink: 'syz.1.2903': attribute type 1 has an invalid length. [ 846.109427][T16222] bond4 (unregistering): Released all slaves [ 846.357305][T16219] pim6reg: entered allmulticast mode [ 846.412349][T16226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2904'. [ 846.554983][T16228] xt_hashlimit: size too large, truncated to 1048576 [ 846.617144][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 846.707480][T16231] netlink: 'syz.1.2906': attribute type 13 has an invalid length. [ 846.732007][T16231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2906'. [ 847.112707][T16231] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 847.186717][ T9681] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 847.452538][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 848.027051][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 848.030464][ T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 848.030501][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.030522][ T9] usb 5-1: Product: syz [ 848.030537][ T9] usb 5-1: Manufacturer: syz [ 848.030553][ T9] usb 5-1: SerialNumber: syz [ 848.037478][ T9] usb 5-1: config 0 descriptor?? [ 848.045374][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 848.328411][ T9] gp8psk: usb in 128 operation failed. [ 848.339234][ T9] gp8psk: usb in 137 operation failed. [ 848.344972][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 848.525313][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 848.543190][ T9] usb 5-1: media controller created [ 848.585000][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 848.607756][T16254] xt_hashlimit: size too large, truncated to 1048576 [ 848.694093][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2909'. [ 849.641573][ T9] gp8psk_fe: Frontend revision 1 attached [ 849.647478][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 849.657909][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 849.838307][ T9] gp8psk: usb in 138 operation failed. [ 849.873781][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 849.879756][ T5901] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 849.974315][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 850.036837][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 850.062843][ T5901] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 850.071845][ T5901] usb 3-1: config 0 has no interface number 0 [ 850.086880][ T5901] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 850.107897][T10471] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 850.129068][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.164946][ T5901] usb 3-1: config 0 descriptor?? [ 850.182135][ T5901] ftdi_sio 3-1:0.130: FTDI USB Serial Device converter detected [ 850.197992][ T5901] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 850.250413][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2916'. [ 850.268632][T10471] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 850.278868][T10471] usb 1-1: config 0 interface 0 has no altsetting 0 [ 850.288206][T10471] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 850.298658][T10471] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 850.313900][T10471] usb 1-1: Product: syz [ 850.318780][T10471] usb 1-1: Manufacturer: syz [ 850.323400][T10471] usb 1-1: SerialNumber: syz [ 850.331894][T10471] usb 1-1: config 0 descriptor?? [ 850.348515][ T5901] usb 5-1: USB disconnect, device number 10 [ 850.377657][T10471] usb 1-1: selecting invalid altsetting 0 [ 850.505444][T16272] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 850.583010][ T5901] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 850.813211][ T5901] usb 1-1: USB disconnect, device number 125 [ 851.112786][T16283] tipc: New replicast peer: 255.255.255.255 [ 851.125607][T16281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.136477][T16283] tipc: Enabled bearer , priority 10 [ 851.269792][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 851.279868][T16284] tipc: Disabling bearer [ 851.989929][ T10] usb 3-1: USB disconnect, device number 13 [ 852.124832][ T10] ftdi_sio 3-1:0.130: device disconnected [ 852.136729][T10471] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 852.242881][T16311] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2926'. [ 852.291356][T16311] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 852.317015][T10471] usb 4-1: Using ep0 maxpacket: 32 [ 852.329968][T16301] loop2: detected capacity change from 0 to 3 [ 852.351431][T16301] ldm_validate_privheads(): Disk read failed. [ 852.375797][T16301] Dev loop2: unable to read RDB block 3 [ 852.394108][T16301] loop2: unable to read partition table [ 852.430480][T16301] loop2: partition table beyond EOD, truncated [ 852.449968][T16301] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 852.550895][T10471] usb 4-1: unable to get BOS descriptor or descriptor too short [ 852.564058][T10471] usb 4-1: too many configurations: 105, using maximum allowed: 8 [ 852.575755][T10471] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 852.633954][T10471] usb 4-1: can't read configurations, error -71 [ 852.739554][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'. [ 852.751024][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 852.883968][T16323] netlink: 'syz.2.2928': attribute type 1 has an invalid length. [ 852.994619][T16305] pim6reg: entered allmulticast mode [ 853.459650][T16339] Cannot find set identified by id 0 to match [ 853.529110][T16341] netlink: 'syz.0.2935': attribute type 12 has an invalid length. [ 853.560065][T16341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2935'. [ 853.934939][T16348] netlink: 'syz.1.2936': attribute type 1 has an invalid length. [ 854.427232][T16354] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2938'. [ 854.439696][T16354] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 855.026757][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 855.218554][ T9] usb 5-1: config 0 has no interfaces? [ 855.233258][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 855.333560][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.451094][ T9] usb 5-1: Product: syz [ 855.456806][T10471] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 855.475854][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2942'. [ 855.525752][ T9] usb 5-1: Manufacturer: syz [ 855.564499][ T9] usb 5-1: SerialNumber: syz [ 855.616466][ T9] usb 5-1: config 0 descriptor?? [ 855.623314][T10471] usb 2-1: Using ep0 maxpacket: 8 [ 855.665336][T10471] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 855.673758][T10471] usb 2-1: config 0 has no interface number 0 [ 855.684562][T10471] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 855.706259][T10471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.781392][T10471] usb 2-1: config 0 descriptor?? [ 855.821302][T10471] ftdi_sio 2-1:0.130: FTDI USB Serial Device converter detected [ 855.830547][T10471] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 856.078218][T16378] vivid-000: disconnect [ 856.343753][T16369] vivid-000: reconnect [ 856.766754][T10471] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 857.082083][T10471] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 857.155367][ T5924] usb 5-1: USB disconnect, device number 11 [ 857.185252][T10471] usb 3-1: config 0 interface 0 has no altsetting 0 [ 857.210102][T10471] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 857.238069][T10471] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 857.274272][T10471] usb 3-1: Product: syz [ 857.279923][T10471] usb 3-1: Manufacturer: syz [ 857.351818][T10471] usb 3-1: SerialNumber: syz [ 857.387713][T10471] usb 3-1: config 0 descriptor?? [ 857.423511][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2946'. [ 857.457213][T10471] usb 3-1: selecting invalid altsetting 0 [ 858.144170][ T10] usb 3-1: USB disconnect, device number 14 [ 858.215126][ T5909] usb 2-1: USB disconnect, device number 117 [ 858.231739][ T5909] ftdi_sio 2-1:0.130: device disconnected [ 858.255789][T16407] bond1: option mode: unable to set because the bond device has slaves [ 858.276068][T16407] FAULT_INJECTION: forcing a failure. [ 858.276068][T16407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.325812][T16407] CPU: 0 UID: 0 PID: 16407 Comm: syz.3.2949 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 858.325834][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 858.325843][T16407] Call Trace: [ 858.325849][T16407] [ 858.325855][T16407] dump_stack_lvl+0x189/0x250 [ 858.325880][T16407] ? __pfx____ratelimit+0x10/0x10 [ 858.325901][T16407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.325921][T16407] ? __pfx__printk+0x10/0x10 [ 858.325936][T16407] ? __might_fault+0xb0/0x130 [ 858.325957][T16407] should_fail_ex+0x414/0x560 [ 858.325977][T16407] _copy_from_iter+0x1db/0x16f0 [ 858.325999][T16407] ? rcu_is_watching+0x15/0xb0 [ 858.326021][T16407] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 858.326035][T16407] ? __pfx__copy_from_iter+0x10/0x10 [ 858.326056][T16407] ? __build_skb_around+0x257/0x3e0 [ 858.326073][T16407] ? netlink_sendmsg+0x642/0xb30 [ 858.326088][T16407] ? skb_put+0x11b/0x210 [ 858.326105][T16407] netlink_sendmsg+0x6b2/0xb30 [ 858.326126][T16407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.326143][T16407] ? aa_sock_msg_perm+0x94/0x160 [ 858.326161][T16407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 858.326178][T16407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.326194][T16407] __sock_sendmsg+0x219/0x270 [ 858.326216][T16407] ____sys_sendmsg+0x505/0x830 [ 858.326236][T16407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.326258][T16407] ? import_iovec+0x74/0xa0 [ 858.326273][T16407] ___sys_sendmsg+0x21f/0x2a0 [ 858.326291][T16407] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.326330][T16407] ? __fget_files+0x2a/0x420 [ 858.326344][T16407] ? __fget_files+0x3a0/0x420 [ 858.326365][T16407] __x64_sys_sendmsg+0x19b/0x260 [ 858.326384][T16407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 858.326412][T16407] ? __pfx_ksys_write+0x10/0x10 [ 858.326423][T16407] ? rcu_is_watching+0x15/0xb0 [ 858.326446][T16407] ? do_syscall_64+0xbe/0x3b0 [ 858.326461][T16407] do_syscall_64+0xfa/0x3b0 [ 858.326471][T16407] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.326490][T16407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.326503][T16407] ? clear_bhb_loop+0x60/0xb0 [ 858.326519][T16407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.326532][T16407] RIP: 0033:0x7f38fe98e929 [ 858.326543][T16407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.326554][T16407] RSP: 002b:00007f38ff7b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.326569][T16407] RAX: ffffffffffffffda RBX: 00007f38febb5fa0 RCX: 00007f38fe98e929 [ 858.326578][T16407] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 858.326586][T16407] RBP: 00007f38ff7b2090 R08: 0000000000000000 R09: 0000000000000000 [ 858.326595][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.326602][T16407] R13: 0000000000000000 R14: 00007f38febb5fa0 R15: 00007f38fecdfa28 [ 858.326622][T16407] [ 858.666012][T16402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2948'. [ 860.152670][T16418] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 860.495262][T16424] binder: BINDER_SET_CONTEXT_MGR already set [ 860.501386][T16424] binder: 16415:16424 ioctl 4018620d 200000000040 returned -16 [ 860.516806][ T5901] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 860.601702][T16427] loop9: detected capacity change from 0 to 7 [ 860.645014][T16427] Dev loop9: unable to read RDB block 7 [ 860.661324][T16427] loop9: unable to read partition table [ 860.708344][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 860.727100][T16427] loop9: partition table beyond EOD, truncated [ 860.742029][T16427] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 860.744122][ T5901] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 860.798533][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.807835][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.815852][ T5901] usb 5-1: Product: syz [ 860.886872][ T5901] usb 5-1: Manufacturer: syz [ 860.925727][ T5901] usb 5-1: SerialNumber: syz [ 860.986952][T16420] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 861.386988][T10471] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 861.537122][T10471] usb 1-1: Using ep0 maxpacket: 8 [ 861.550219][T10471] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 861.559759][T10471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.568821][T10471] usb 1-1: Product: syz [ 861.575820][T10471] usb 1-1: Manufacturer: syz [ 861.596053][T10471] usb 1-1: SerialNumber: syz [ 861.597392][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2962'. [ 861.628334][T10471] usb 1-1: config 0 descriptor?? [ 861.846899][T10471] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 862.010769][ T5901] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 862.018132][ T5901] cdc_ncm 5-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 862.019375][T16456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2967'. [ 862.025574][ T5901] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 862.147051][T10472] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 862.230142][ T5901] cdc_ncm 5-1:1.0: setting tx_max = 36 [ 862.318693][T16465] team_slave_0: entered promiscuous mode [ 862.324703][T16465] team_slave_1: entered promiscuous mode [ 862.331037][T10472] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 862.364042][T10472] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 862.373758][T16465] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 862.386089][T10472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 862.411358][T10472] usb 2-1: Product: syz [ 862.411822][T16465] team_slave_0: left promiscuous mode [ 862.421492][T16465] team_slave_1: left promiscuous mode [ 862.433964][T10472] usb 2-1: Manufacturer: syz [ 862.440950][T10472] usb 2-1: SerialNumber: syz [ 862.457974][T10471] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 862.643741][T10471] usb 1-1: USB disconnect, device number 126 [ 862.650626][T10472] usb 2-1: config 0 descriptor?? [ 862.795863][ T5901] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 862.905199][ T5901] usb 5-1: USB disconnect, device number 12 [ 862.980041][T16454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.055891][ T5901] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 863.097106][T16454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.110084][T16454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2965'. [ 863.120044][T16454] loop8: detected capacity change from 0 to 1 [ 863.139910][T16454] Dev loop8: unable to read RDB block 1 [ 863.145612][T16454] loop8: unable to read partition table [ 863.163802][T16454] loop8: partition table beyond EOD, truncated [ 863.197632][T16454] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 863.221348][T16471] program syz.2.2973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.294181][ T9] usb 2-1: USB disconnect, device number 118 [ 863.704182][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 863.746859][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 863.815851][ T5901] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 863.828399][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 863.828413][ T30] audit: type=1326 audit(1750898007.303:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c098e929 code=0x7ffc0000 [ 863.963337][T10471] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 864.027741][T10471] hid-generic 0000:0000:0000.0017: hidraw1: HID v0.00 Device [syz1] on syz0 [ 864.039732][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 864.041333][ T30] audit: type=1326 audit(1750898007.303:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f64c098e929 code=0x7ffc0000 [ 864.331299][ T30] audit: type=1326 audit(1750898007.303:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c098e929 code=0x7ffc0000 [ 864.360322][ T30] audit: type=1326 audit(1750898007.303:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f64c098e929 code=0x7ffc0000 [ 864.549473][ T30] audit: type=1326 audit(1750898007.303:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c098e929 code=0x7ffc0000 [ 864.834553][ T30] audit: type=1326 audit(1750898007.303:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64c098e929 code=0x7ffc0000 [ 864.867393][ T30] audit: type=1326 audit(1750898007.303:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c098e929 code=0x7ffc0000 [ 864.892734][ T30] audit: type=1326 audit(1750898007.303:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64c0990847 code=0x7ffc0000 [ 864.915167][ T30] audit: type=1326 audit(1750898007.313:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f64c09907bc code=0x7ffc0000 [ 865.015961][ T30] audit: type=1326 audit(1750898007.313:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f64c09906f4 code=0x7ffc0000 [ 865.706868][ T44] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 865.933049][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.978036][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 866.021631][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 866.054906][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 866.103854][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 866.142723][ T44] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 866.190086][ T44] usb 5-1: Manufacturer: syz [ 866.226052][ T44] usb 5-1: config 0 descriptor?? [ 867.096763][ T44] rc_core: IR keymap rc-hauppauge not found [ 867.111161][ T44] Registered IR keymap rc-empty [ 867.131558][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.219276][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.270826][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 867.349059][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53 [ 867.395221][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.446215][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 867.468614][ T5901] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 867.507245][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.526744][ T5901] usb 4-1: can't read configurations, error -71 [ 867.561388][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.629577][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.726815][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.767408][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.768986][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 867.823644][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.834111][T16529] pim6reg: entered allmulticast mode [ 867.866968][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.895290][T10472] IPVS: starting estimator thread 0... [ 867.937043][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.966964][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 867.971927][ T44] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 867.976376][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 867.996908][T16552] IPVS: using max 45 ests per chain, 108000 per kthread [ 868.003310][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.018889][ T44] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 868.042532][ T44] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 868.051012][ T9] usb 3-1: Product: syz [ 868.061186][ T9] usb 3-1: Manufacturer: syz [ 868.066802][T10614] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 868.086598][ T9] usb 3-1: SerialNumber: syz [ 868.099950][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 868.113444][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 868.149255][ T44] usb 5-1: USB disconnect, device number 13 [ 868.237003][T10614] usb 1-1: Using ep0 maxpacket: 8 [ 868.252707][T10614] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 868.272800][T10614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.312737][T10614] usb 1-1: Product: syz [ 868.330913][T10614] usb 1-1: Manufacturer: syz [ 868.335562][T10614] usb 1-1: SerialNumber: syz [ 868.392708][T10614] usb 1-1: config 0 descriptor?? [ 868.419223][T10614] gspca_main: se401-2.14.0 probing 047d:5003 [ 868.547136][ T10] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 868.607566][T10472] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 868.641821][T16528] pim6reg: left allmulticast mode [ 868.776703][T10472] usb 2-1: Using ep0 maxpacket: 8 [ 868.803673][T10472] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 868.836123][T10472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.855128][T10472] usb 2-1: Product: syz [ 868.864015][T10472] usb 2-1: Manufacturer: syz [ 868.873980][T10472] usb 2-1: SerialNumber: syz [ 868.897632][T10472] usb 2-1: config 0 descriptor?? [ 868.916430][T10472] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 869.117362][T16562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 869.128888][T16562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 869.139981][T16562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 869.172888][T16562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 869.191486][T16562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 869.279134][ T5901] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 869.325496][ T5901] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 869.446743][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 869.548874][T10472] gspca_sonixj: reg_w1 err -71 [ 869.553769][T10472] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 869.599596][T10472] usb 2-1: USB disconnect, device number 119 [ 869.606712][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 869.612985][T10614] usb 1-1: reset high-speed USB device number 127 using dummy_hcd [ 869.626379][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 869.638173][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 869.655940][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.684824][ T10] usb 4-1: config 0 descriptor?? [ 869.694017][T16566] chnl_net:caif_netlink_parms(): no params data found [ 869.756746][T10614] usb 1-1: device descriptor read/64, error -32 [ 869.953379][T16566] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.975801][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.983016][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.998878][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.006136][T16566] bridge_slave_0: entered allmulticast mode [ 870.025773][T16566] bridge_slave_0: entered promiscuous mode [ 870.051148][T16566] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.076832][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.084174][T16566] bridge_slave_1: entered allmulticast mode [ 870.093366][T16566] bridge_slave_1: entered promiscuous mode [ 870.144534][ T10] corsair-cpro 0003:1B1C:0C10.0019: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 870.266549][T16566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.320943][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.498771][T16590] netlink: 'syz.2.2996': attribute type 10 has an invalid length. [ 870.514490][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.522399][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.522862][ T10] corsair-cpro 0003:1B1C:0C10.0019: probe with driver corsair-cpro failed with error -71 [ 870.562600][T16590] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.569834][T16590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.577376][T16590] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.584506][T16590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.605897][T16590] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 870.622525][T16566] team0: Port device team_slave_0 added [ 870.648389][T10614] gspca_se401: read req failed req 0x06 error -19 [ 870.663567][ T10] usb 4-1: USB disconnect, device number 21 [ 870.678703][T16566] team0: Port device team_slave_1 added [ 870.703177][T10614] usb 1-1: USB disconnect, device number 127 [ 870.887483][T16566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.919673][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.031748][T16566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.063262][T16598] team_slave_0: entered promiscuous mode [ 871.069009][T16598] team_slave_1: entered promiscuous mode [ 871.098488][T16598] vlan0: entered promiscuous mode [ 871.116888][T16598] team0: entered promiscuous mode [ 871.236439][T16600] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3000'. [ 871.236906][ T5841] Bluetooth: hci2: command tx timeout [ 871.257301][T16566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.266322][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.292267][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.299189][T16566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.512910][T16566] hsr_slave_0: entered promiscuous mode [ 871.517905][T16608] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3003'. [ 871.528863][T16566] hsr_slave_1: entered promiscuous mode [ 871.534221][T16608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3003'. [ 871.544249][T16566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.544328][T16566] Cannot create hsr debugfs directory [ 871.673785][T16613] vivid-003: disconnect [ 871.711188][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3005'. [ 871.755937][T16614] vlan0: entered promiscuous mode [ 872.132701][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 872.671606][T16627] netlink: 'syz.2.3008': attribute type 23 has an invalid length. [ 872.734023][T16628] xt_hashlimit: max too large, truncated to 1048576 [ 872.741082][T16628] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 872.788825][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 872.803468][ T5901] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 872.815217][T16566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.840923][ T5901] usb 1-1: config 0 has no interface number 0 [ 872.851652][ T5901] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 872.861363][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.896384][ T5901] usb 1-1: config 0 descriptor?? [ 872.938928][ T5901] ftdi_sio 1-1:0.130: FTDI USB Serial Device converter detected [ 872.960552][ T5901] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 873.238991][T16566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.356032][ T5841] Bluetooth: hci2: command tx timeout [ 873.680015][T16566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.749078][T16566] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.422730][T16566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 874.575283][T16566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 874.626613][T16566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 874.674932][T16566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 874.963539][T16612] vivid-003: reconnect [ 875.006008][T16566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.087562][ T5923] usb 5-1: [UEAGLE-ATM] firmware is not available [ 875.092472][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.159245][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.166487][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.232554][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.239684][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.399680][ T5841] Bluetooth: hci2: command tx timeout [ 875.422139][T16566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 875.520769][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.541411][ T5923] usb 1-1: USB disconnect, device number 2 [ 875.590316][ T5923] ftdi_sio 1-1:0.130: device disconnected [ 875.703679][T16566] veth0_vlan: entered promiscuous mode [ 875.784802][T16566] veth1_vlan: entered promiscuous mode [ 875.941658][T16566] veth0_macvtap: entered promiscuous mode [ 875.957373][ T5924] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 876.155230][T16566] veth1_macvtap: entered promiscuous mode [ 876.207817][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.258717][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.378673][T16566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.426760][T16566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.450967][T16566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.459850][T16566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.842438][T16660] syz_tun: entered promiscuous mode [ 876.847873][T16660] vlan0: entered promiscuous mode [ 877.057811][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.106184][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.271451][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.304057][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.373018][T16671] netlink: 'syz.3.3020': attribute type 21 has an invalid length. [ 877.398628][T16671] netlink: 'syz.3.3020': attribute type 6 has an invalid length. [ 877.429881][T16671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3020'. [ 877.478076][ T5841] Bluetooth: hci2: command tx timeout [ 877.615619][T16675] FAULT_INJECTION: forcing a failure. [ 877.615619][T16675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.649639][T16675] CPU: 1 UID: 0 PID: 16675 Comm: syz.2.3021 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 877.649669][T16675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 877.649692][T16675] Call Trace: [ 877.649701][T16675] [ 877.649711][T16675] dump_stack_lvl+0x189/0x250 [ 877.649749][T16675] ? __pfx____ratelimit+0x10/0x10 [ 877.649779][T16675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.649812][T16675] ? __pfx__printk+0x10/0x10 [ 877.649836][T16675] ? __might_fault+0xb0/0x130 [ 877.649870][T16675] should_fail_ex+0x414/0x560 [ 877.649902][T16675] _copy_from_user+0x2d/0xb0 [ 877.649924][T16675] kstrtouint_from_user+0xc4/0x170 [ 877.649956][T16675] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 877.650004][T16675] proc_fail_nth_write+0x88/0x240 [ 877.650030][T16675] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 877.650062][T16675] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 877.650089][T16675] vfs_write+0x27e/0xa90 [ 877.650136][T16675] ? __pfx_vfs_write+0x10/0x10 [ 877.650169][T16675] ? __fget_files+0x2a/0x420 [ 877.650198][T16675] ? __fget_files+0x3a0/0x420 [ 877.650219][T16675] ? __fget_files+0x2a/0x420 [ 877.650252][T16675] ksys_write+0x145/0x250 [ 877.650282][T16675] ? __fget_files+0x3a0/0x420 [ 877.650305][T16675] ? __pfx_ksys_write+0x10/0x10 [ 877.650330][T16675] ? do_syscall_64+0xbe/0x3b0 [ 877.650354][T16675] do_syscall_64+0xfa/0x3b0 [ 877.650371][T16675] ? lockdep_hardirqs_on+0x9c/0x150 [ 877.650399][T16675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.650419][T16675] ? clear_bhb_loop+0x60/0xb0 [ 877.650441][T16675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.650465][T16675] RIP: 0033:0x7f64c098d3df [ 877.650483][T16675] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 877.650501][T16675] RSP: 002b:00007f64c1862030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 877.650522][T16675] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f64c098d3df [ 877.650537][T16675] RDX: 0000000000000001 RSI: 00007f64c18620a0 RDI: 0000000000000005 [ 877.650550][T16675] RBP: 00007f64c1862090 R08: 0000000000000000 R09: 0000000000000000 [ 877.650563][T16675] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 877.650575][T16675] R13: 0000000000000000 R14: 00007f64c0bb5fa0 R15: 00007f64c0cdfa28 [ 877.650607][T16675] [ 877.888484][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.322237][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.335292][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.370572][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.408870][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.425327][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.443105][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.455050][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.491528][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.527385][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.535311][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.566429][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.579823][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.592225][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.606096][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.620443][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.634403][ T10] hid-generic 0003:7FFFFFFF:0030.001A: unknown main item tag 0x0 [ 878.660816][ T10] hid-generic 0003:7FFFFFFF:0030.001A: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 878.809998][T16695] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3026'. [ 878.875759][T16693] fido_id[16693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 879.113047][T16701] netlink: 'syz.0.3028': attribute type 1 has an invalid length. [ 879.197982][T16701] 8021q: adding VLAN 0 to HW filter on device bond9 [ 880.144624][T16701] bond9 (unregistering): Released all slaves [ 880.404773][T10472] hid (null): report_id 4084575178 is invalid [ 880.439076][T10472] hid-generic 0005:0001:0004.001B: unknown main item tag 0x6 [ 880.471943][T10472] hid-generic 0005:0001:0004.001B: unknown main item tag 0x5 [ 880.494978][T10472] hid-generic 0005:0001:0004.001B: unknown main item tag 0x3 [ 880.519859][T10472] hid-generic 0005:0001:0004.001B: unknown main item tag 0x6 [ 880.624868][T10472] hid-generic 0005:0001:0004.001B: report_id 4084575178 is invalid [ 880.694591][T10472] hid-generic 0005:0001:0004.001B: item 0 4 1 8 parsing failed [ 880.745917][T10472] hid-generic 0005:0001:0004.001B: probe with driver hid-generic failed with error -22 [ 880.795960][T16718] netlink: 'syz.1.3033': attribute type 10 has an invalid length. [ 881.336197][T16730] ip6gretap0: entered promiscuous mode [ 881.345814][T16730] ip6gretap0: left promiscuous mode [ 881.406731][ T5901] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 881.560500][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.573978][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.591730][ T5901] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 881.618501][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.695916][ T5901] usb 1-1: config 0 descriptor?? [ 882.138656][ T5901] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 882.191672][T16740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.202079][ T5901] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 882.287069][T16740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.331804][ T5901] cp2112 0003:10C4:EA90.001C: Part Number: 0x82 Device Version: 0xFE [ 882.439917][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 882.636699][ T10] usb 3-1: device descriptor read/64, error -71 [ 882.916725][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 883.036588][T10471] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 883.066956][ T10] usb 3-1: device descriptor read/64, error -71 [ 883.168273][T16727] cp2112 0003:10C4:EA90.001C: Error starting transaction: -38 [ 883.183660][ T5901] usb 1-1: USB disconnect, device number 3 [ 883.236993][T10471] usb 4-1: Using ep0 maxpacket: 32 [ 883.244938][T10471] usb 4-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 883.259919][T10471] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 883.277375][ T10] usb usb3-port1: attempt power cycle [ 883.284576][T10471] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 883.305392][T10471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.352109][T10471] usb 4-1: Product: syz [ 883.362108][T10471] usb 4-1: Manufacturer: syz [ 883.374902][T10471] usb 4-1: SerialNumber: syz [ 883.396361][T10471] usb 4-1: config 0 descriptor?? [ 883.684961][ T5924] usb 4-1: USB disconnect, device number 22 [ 883.846751][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 883.884267][ T10] usb 3-1: device descriptor read/8, error -71 [ 884.547344][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 884.663975][ T10] usb 3-1: device descriptor read/8, error -71 [ 884.787725][ T10] usb usb3-port1: unable to enumerate USB device [ 885.145117][T16777] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 885.236443][T16777] CUSE: unknown device info "3ܟ,v" [ 885.579020][T16777] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 885.579020][T16777] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 885.622306][T16777] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 885.736739][T16777] CUSE: DEVNAME unspecified [ 886.564696][T16806] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 886.703645][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 886.794746][T16810] netlink: 'syz.0.3059': attribute type 30 has an invalid length. [ 887.028001][T10614] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 887.259323][T10614] usb 5-1: Using ep0 maxpacket: 32 [ 887.284737][T10614] usb 5-1: config 9 has no interfaces? [ 887.290792][ T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 887.301459][T10614] usb 5-1: New USB device found, idVendor=19d2, idProduct=0064, bcdDevice=aa.18 [ 887.311502][T10614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.319712][T10614] usb 5-1: Product: syz [ 887.324013][T10614] usb 5-1: Manufacturer: syz [ 887.375176][T10614] usb 5-1: SerialNumber: syz [ 887.389673][T16816] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 887.447797][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 887.456191][ T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 887.471310][ T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 887.512922][T16816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3061'. [ 887.525106][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.555868][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 887.616067][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 887.646475][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 887.700039][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 887.727620][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.783226][ T10] usb 2-1: config 0 descriptor?? [ 887.997126][ T5923] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 888.023782][ T5909] usb 2-1: USB disconnect, device number 120 [ 888.042452][T16827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.132441][T16827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.176803][T10471] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 888.202455][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 888.216081][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 888.235957][T16827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.263241][ T5923] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 888.272606][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.299936][ T5923] usb 1-1: Product: syz [ 888.307977][ T5923] usb 1-1: Manufacturer: syz [ 888.322093][ T5923] usb 1-1: SerialNumber: syz [ 888.339112][ T5923] usb 1-1: config 0 descriptor?? [ 888.367512][T16822] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 888.377081][ T5923] usb 1-1: ucan: probing device on interface #0 [ 888.389041][T10471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.756554][T10471] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 888.784012][T10471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.786198][ T5923] usb 1-1: ucan: invalid EP count (1) [ 888.796842][ T5909] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 888.826040][ T5923] usb 1-1: ucan: probe failed; try to update the device firmware [ 888.847529][T10471] usb 3-1: config 0 descriptor?? [ 888.980179][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 888.995864][ T5909] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 889.014714][ T5909] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 889.029076][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.060907][ T5909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 889.086773][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 889.109009][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 889.153737][ T5909] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 889.173064][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.193104][ T5909] usb 2-1: config 0 descriptor?? [ 889.274030][T10471] arvo 0003:1E7D:30D4.001D: item fetching failed at offset 5/7 [ 889.285472][T16834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.309322][T16829] xt_TCPMSS: Only works on TCP SYN packets [ 889.340520][T10471] arvo 0003:1E7D:30D4.001D: parse failed [ 889.361200][T10471] arvo 0003:1E7D:30D4.001D: probe with driver arvo failed with error -22 [ 889.510350][ T5923] usb 3-1: USB disconnect, device number 21 [ 889.909883][ T5909] usb 5-1: USB disconnect, device number 14 [ 890.059190][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'. [ 890.143005][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3068'. [ 890.556741][T10471] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 890.728999][T10471] usb 5-1: config 1 interface 0 has no altsetting 0 [ 890.739246][T10471] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 890.748936][T10471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.757765][T10471] usb 5-1: Product: syz [ 890.762886][T10471] usb 5-1: Manufacturer: syz [ 890.768402][T10471] usb 5-1: SerialNumber: syz [ 890.871059][ T5909] usb 1-1: USB disconnect, device number 4 [ 891.009599][T16845] veth1_to_bridge: entered promiscuous mode [ 891.015763][T16845] veth1_to_bridge: entered allmulticast mode [ 891.054057][T10471] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 891.092051][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.104487][T10471] usb 5-1: USB disconnect, device number 15 [ 891.141648][T10471] usblp0: removed [ 891.186002][ T5923] usb 2-1: USB disconnect, device number 121 [ 891.310966][T16853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'. [ 891.596126][T16860] netlink: 'syz.0.3075': attribute type 1 has an invalid length. [ 891.656880][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'. [ 891.659816][T16860] 8021q: adding VLAN 0 to HW filter on device bond9 [ 891.867317][T10471] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 892.091950][T10471] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.103775][T10471] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 892.168382][T10471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.195747][T10471] usb 4-1: config 0 descriptor?? [ 892.216136][T10471] pwc: Askey VC010 type 2 USB webcam detected. [ 892.235179][T16866] bond9 (unregistering): Released all slaves [ 892.270099][T16857] delete_channel: no stack [ 892.610739][T10471] pwc: recv_control_msg error -32 req 02 val 2b00 [ 892.618115][T10471] pwc: recv_control_msg error -32 req 02 val 2700 [ 892.627908][T10471] pwc: recv_control_msg error -32 req 02 val 2c00 [ 892.739413][T10471] pwc: recv_control_msg error -32 req 04 val 1000 [ 892.776410][T10471] pwc: recv_control_msg error -32 req 04 val 1300 [ 892.870706][T10471] pwc: recv_control_msg error -32 req 04 val 1400 [ 892.901599][T10471] pwc: recv_control_msg error -32 req 02 val 2000 [ 892.909405][T10471] pwc: recv_control_msg error -32 req 02 val 2100 [ 892.916522][T10471] pwc: recv_control_msg error -32 req 04 val 1500 [ 893.056912][ T5923] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 893.124295][T10471] pwc: recv_control_msg error -32 req 02 val 2400 [ 893.132079][T10471] pwc: recv_control_msg error -32 req 02 val 2600 [ 893.209511][ T5923] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 893.218519][ T5923] usb 1-1: config 150 has no interface number 0 [ 893.224940][ T5923] usb 1-1: config 150 interface 204 has no altsetting 0 [ 893.371071][T10471] pwc: recv_control_msg error -71 req 02 val 2800 [ 893.382185][T10471] pwc: recv_control_msg error -71 req 04 val 1100 [ 893.394942][T10471] pwc: recv_control_msg error -71 req 04 val 1200 [ 893.414190][T10471] pwc: Registered as video103. [ 893.429708][T10471] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 893.477783][ T5923] usb 1-1: config 150 interface 1 has no altsetting 0 [ 893.493977][T10471] usb 4-1: USB disconnect, device number 23 [ 893.527786][ T5923] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 893.552172][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.586656][ T5923] usb 1-1: Product: syz [ 893.594923][ T5923] usb 1-1: Manufacturer: syz [ 893.611798][ T5923] usb 1-1: SerialNumber: syz [ 893.617196][T10614] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 893.809585][T10614] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 893.836748][T10614] usb 2-1: config 0 interface 0 has no altsetting 0 [ 893.856850][T10614] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 893.874424][T16883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.885196][T16883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.919260][T10614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.928943][ T5923] xr_serial 1-1:150.204: xr_serial converter detected [ 893.942212][ T5923] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 893.954565][ T5923] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 893.979581][T10614] usb 2-1: config 0 descriptor?? [ 894.009351][T16886] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 894.018871][ T5923] usb 1-1: USB disconnect, device number 5 [ 894.109541][ T5923] xr_serial 1-1:150.204: device disconnected [ 894.224609][T16895] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 894.231260][T16895] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 894.246527][T16895] vhci_hcd vhci_hcd.0: Device attached [ 894.296967][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 894.416771][T10471] vhci_hcd: vhci_device speed not set [ 894.507114][T10614] kye 0003:0458:5014.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 894.523642][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 894.535469][T10614] kye 0003:0458:5014.001E: unknown main item tag 0x1 [ 894.537495][T10471] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 894.551846][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 894.561074][T12869] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 894.573957][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 894.582715][T10614] kye 0003:0458:5014.001E: item fetching failed at offset 3/7 [ 894.631643][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.650331][T10614] kye 0003:0458:5014.001E: parse failed [ 894.660683][T10614] kye 0003:0458:5014.001E: probe with driver kye failed with error -22 [ 894.669207][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 894.687194][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 894.736662][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 894.750946][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 894.761925][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.779418][T12869] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 894.792598][T12869] usb 4-1: config 0 has no interface number 0 [ 894.794645][T16907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.800207][ T10] usb 5-1: config 0 descriptor?? [ 894.809642][T16907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.812717][T12869] usb 4-1: config 0 interface 58 has no altsetting 0 [ 894.836844][T12869] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 894.853164][T12869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.056912][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 895.105659][T10472] usb 5-1: USB disconnect, device number 16 [ 895.229605][T16896] vhci_hcd: connection reset by peer [ 895.232390][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 895.256589][T12869] usb 4-1: config 0 descriptor?? [ 895.268427][ T13] vhci_hcd: stop threads [ 895.275034][ T13] vhci_hcd: release socket [ 895.282160][ T13] vhci_hcd: disconnect device [ 895.314073][ T5909] usb 1-1: config 0 has no interfaces? [ 895.329363][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 895.338965][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.502074][ T5909] usb 1-1: config 0 descriptor?? [ 895.577522][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 895.737057][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 895.744339][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 895.766024][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 895.788751][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.809017][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 895.822779][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 895.825989][T16906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.836894][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 895.861344][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 895.871930][T16906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.888188][T10614] usb 1-1: USB disconnect, device number 6 [ 895.904534][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.922110][ T10] usb 5-1: config 0 descriptor?? [ 896.268888][T16913] block device autoloading is deprecated and will be removed. [ 896.366907][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 896.526776][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 896.540659][ T10] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 896.552040][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.566824][ T10] usb 3-1: Product: syz [ 896.606932][ T5924] usb 2-1: USB disconnect, device number 122 [ 896.674461][ T10] usb 3-1: Manufacturer: syz [ 896.699994][ T10] usb 3-1: SerialNumber: syz [ 896.721778][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3091'. [ 896.742120][ T10] usb 3-1: config 0 descriptor?? [ 897.221763][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 897.365532][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 897.426949][T16912] ------------[ cut here ]------------ [ 897.432764][T16912] usb 3-1: BOGUS control dir, pipe 80001680 doesn't match bRequestType c0 [ 897.455153][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 897.464171][ T10] usb 3-1: media controller created [ 897.487681][T16912] WARNING: CPU: 0 PID: 16912 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 897.497571][T16912] Modules linked in: [ 897.501685][T16912] CPU: 0 UID: 0 PID: 16912 Comm: syz.2.3089 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 897.514088][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 897.524342][T16912] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 897.530036][T16912] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 2b 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 24 15 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 897.549779][T16912] RSP: 0018:ffffc90003547570 EFLAGS: 00010246 [ 897.555991][T16912] RAX: caa5515d18e89b00 RBX: ffff888055653d00 RCX: 0000000000080000 [ 897.564345][T16912] RDX: ffffc90022005000 RSI: 0000000000004113 RDI: 0000000000004114 [ 897.572413][T16912] RBP: 1ffff1100b7e5c68 R08: 0000000000000003 R09: 0000000000000004 [ 897.580478][T16912] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88805bf2e340 [ 897.588484][T16912] R13: dffffc0000000000 R14: 0000000080001680 R15: ffff88814cf30f60 [ 897.596475][T16912] FS: 00007f64c18626c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 897.605682][T16912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.612608][T16912] CR2: 000000110c30e676 CR3: 000000005e656000 CR4: 00000000003526f0 [ 897.620764][T16912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 897.628789][T16912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 897.636831][T16912] Call Trace: [ 897.640130][T16912] [ 897.643106][T16912] usb_start_wait_urb+0x114/0x4c0 [ 897.648202][T16912] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 897.653805][T16912] usb_control_msg+0x232/0x3e0 [ 897.658674][T16912] dtv5100_i2c_msg+0x250/0x330 [ 897.663470][T16912] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 897.668384][T16912] __i2c_transfer+0x874/0x2170 [ 897.673184][T16912] ? stack_depot_save_flags+0x40/0x900 [ 897.678717][T16912] ? __pfx___i2c_transfer+0x10/0x10 [ 897.683939][T16912] ? kasan_save_free_info+0x46/0x50 [ 897.689205][T16912] ? __kasan_slab_free+0x62/0x70 [ 897.694174][T16912] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 897.699861][T16912] ? security_file_ioctl+0xcb/0x2d0 [ 897.705098][T16912] __i2c_smbus_xfer+0xfb0/0x1e50 [ 897.710109][T16912] ? __lock_acquire+0xab9/0xd20 [ 897.715294][T16912] ? do_raw_spin_lock+0x121/0x290 [ 897.720931][T16912] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 897.726361][T16912] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 897.732407][T16912] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 897.738416][T16912] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 897.744776][T16912] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 897.750212][T16912] i2c_smbus_xfer+0x275/0x3c0 [ 897.754930][T16912] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 897.760194][T16912] ? __lock_acquire+0xab9/0xd20 [ 897.765076][T16912] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 897.770188][T16912] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 897.775771][T16912] i2cdev_ioctl+0x5d3/0x7f0 [ 897.780327][T16912] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 897.785388][T16912] ? __fget_files+0x2a/0x420 [ 897.790030][T16912] ? __fget_files+0x3a0/0x420 [ 897.794735][T16912] ? bpf_lsm_file_ioctl+0x9/0x20 [ 897.799808][T16912] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 897.804893][T16912] __se_sys_ioctl+0xf9/0x170 [ 897.809536][T16912] do_syscall_64+0xfa/0x3b0 [ 897.814068][T16912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.820486][T16912] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 897.826129][T16912] ? clear_bhb_loop+0x60/0xb0 [ 897.830961][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.836898][T16912] RIP: 0033:0x7f64c098e929 [ 897.841327][T16912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.860973][T16912] RSP: 002b:00007f64c1862038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.869454][T16912] RAX: ffffffffffffffda RBX: 00007f64c0bb5fa0 RCX: 00007f64c098e929 [ 897.877503][T16912] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000004 [ 897.885491][T16912] RBP: 00007f64c0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 897.893511][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.901529][T16912] R13: 0000000000000000 R14: 00007f64c0bb5fa0 R15: 00007f64c0cdfa28 [ 897.909551][T16912] [ 897.912595][T16912] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 897.919874][T16912] CPU: 0 UID: 0 PID: 16912 Comm: syz.2.3089 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 897.931932][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 897.941985][T16912] Call Trace: [ 897.945263][T16912] [ 897.948195][T16912] dump_stack_lvl+0x99/0x250 [ 897.952793][T16912] ? __asan_memcpy+0x40/0x70 [ 897.957394][T16912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.962598][T16912] ? __pfx__printk+0x10/0x10 [ 897.967216][T16912] panic+0x2db/0x790 [ 897.971123][T16912] ? __pfx_panic+0x10/0x10 [ 897.975553][T16912] __warn+0x31b/0x4b0 [ 897.979548][T16912] ? usb_submit_urb+0x115d/0x1890 [ 897.984581][T16912] ? usb_submit_urb+0x115d/0x1890 [ 897.989608][T16912] report_bug+0x2be/0x4f0 [ 897.993975][T16912] ? usb_submit_urb+0x115d/0x1890 [ 897.999007][T16912] ? usb_submit_urb+0x115d/0x1890 [ 898.004029][T16912] ? usb_submit_urb+0x115f/0x1890 [ 898.009081][T16912] handle_bug+0x84/0x160 [ 898.013337][T16912] exc_invalid_op+0x1a/0x50 [ 898.017848][T16912] asm_exc_invalid_op+0x1a/0x20 [ 898.022703][T16912] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 898.028373][T16912] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 2b 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 24 15 63 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 898.048010][T16912] RSP: 0018:ffffc90003547570 EFLAGS: 00010246 [ 898.054078][T16912] RAX: caa5515d18e89b00 RBX: ffff888055653d00 RCX: 0000000000080000 [ 898.062053][T16912] RDX: ffffc90022005000 RSI: 0000000000004113 RDI: 0000000000004114 [ 898.070024][T16912] RBP: 1ffff1100b7e5c68 R08: 0000000000000003 R09: 0000000000000004 [ 898.077996][T16912] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88805bf2e340 [ 898.085969][T16912] R13: dffffc0000000000 R14: 0000000080001680 R15: ffff88814cf30f60 [ 898.093974][T16912] usb_start_wait_urb+0x114/0x4c0 [ 898.099021][T16912] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 898.104586][T16912] usb_control_msg+0x232/0x3e0 [ 898.109359][T16912] dtv5100_i2c_msg+0x250/0x330 [ 898.114141][T16912] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 898.119016][T16912] __i2c_transfer+0x874/0x2170 [ 898.123807][T16912] ? stack_depot_save_flags+0x40/0x900 [ 898.129278][T16912] ? __pfx___i2c_transfer+0x10/0x10 [ 898.134490][T16912] ? kasan_save_free_info+0x46/0x50 [ 898.139705][T16912] ? __kasan_slab_free+0x62/0x70 [ 898.144642][T16912] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 898.150274][T16912] ? security_file_ioctl+0xcb/0x2d0 [ 898.155481][T16912] __i2c_smbus_xfer+0xfb0/0x1e50 [ 898.160431][T16912] ? __lock_acquire+0xab9/0xd20 [ 898.165289][T16912] ? do_raw_spin_lock+0x121/0x290 [ 898.170323][T16912] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 898.175724][T16912] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 898.181631][T16912] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 898.187534][T16912] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 898.193876][T16912] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 898.199260][T16912] i2c_smbus_xfer+0x275/0x3c0 [ 898.203946][T16912] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 898.209152][T16912] ? __lock_acquire+0xab9/0xd20 [ 898.214014][T16912] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 898.219059][T16912] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 898.224648][T16912] i2cdev_ioctl+0x5d3/0x7f0 [ 898.229171][T16912] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 898.234204][T16912] ? __fget_files+0x2a/0x420 [ 898.238800][T16912] ? __fget_files+0x3a0/0x420 [ 898.243509][T16912] ? bpf_lsm_file_ioctl+0x9/0x20 [ 898.248457][T16912] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 898.253492][T16912] __se_sys_ioctl+0xf9/0x170 [ 898.258097][T16912] do_syscall_64+0xfa/0x3b0 [ 898.262602][T16912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.268678][T16912] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 898.274319][T16912] ? clear_bhb_loop+0x60/0xb0 [ 898.279022][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.284915][T16912] RIP: 0033:0x7f64c098e929 [ 898.289333][T16912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.308941][T16912] RSP: 002b:00007f64c1862038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.317362][T16912] RAX: ffffffffffffffda RBX: 00007f64c0bb5fa0 RCX: 00007f64c098e929 [ 898.325334][T16912] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000004 [ 898.333316][T16912] RBP: 00007f64c0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 898.341299][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.349273][T16912] R13: 0000000000000000 R14: 00007f64c0bb5fa0 R15: 00007f64c0cdfa28 [ 898.357258][T16912] [ 898.360628][T16912] Kernel Offset: disabled [ 898.364962][T16912] Rebooting in 86400 seconds..