last executing test programs: 14.70836826s ago: executing program 3 (id=4276): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0xfffffdfd, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x3, 0xed}}) 14.471611318s ago: executing program 3 (id=4278): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/179], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r9, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r9, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r7, 0x8002}], 0x1, 0x0, 0x0, 0x0) dup2(r6, r7) r10 = getpgid(r5) fcntl$setown(r6, 0x8, r10) tkill(r5, 0x13) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 10.271918565s ago: executing program 1 (id=4286): ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) 10.197372985s ago: executing program 1 (id=4287): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)=@x86={0x80, 0x40, 0x8, 0x0, 0x0, 0x40, 0x5, 0x0, 0xfa, 0x6e, 0x2, 0x4, 0x0, 0xab, 0x7, 0xfd, 0x7, 0x51, 0x6, '\x00', 0x1, 0x5}) 9.726596178s ago: executing program 1 (id=4288): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="001600003cb19935780000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) ioprio_get$uid(0x3, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="1a8e", 0x2}], 0x1, &(0x7f0000000340)}}, {{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000003c0)="2a94e96fcfea3c30f662cab4746650b4f4e1c7cc692fb4b5b73d4b695a78139aec326b030e163230a5861230a4456c6751c47d009082c80fc4e185491e8ddc5f06f785d2efd8fed70b14f3345f495c95efb4ba2d7e6bb553c0a15e8e9f9a3946a5046875b5d183018105e39304e10d2cff340893e3dc077df6081b69dc1776ec8e63cff26e009a4c0986485074e4991a6f12bd5f89006e599c216ee6838541768da87d30e38eb7d499940d6622638cb8cb1834110c7b676f39da275a3e96a2bd2cc1d946bfc0c6501a860c7816018216e247f13c189cc697b48b38e9e2021d54f331ea21f92afd7be2294a07df2730922f", 0xf1}, {&(0x7f00000004c0)="54dc9cdf9a82d39de839583fdc835c5c35edc6f4d18baf521de22ba8316fbd801d03060082f8529cc7d97de7fbf5f611a3ef17c1dbc9e66bee033246e3c1a076ebac66d55a08f1fdf4944924b433760833df55746469a8a87681dffdc0d850ccb2a09675c530f045ae69ceda20922fbb32f4a0d0daedc5f3e0cd26163210bce01aaef3eac7d105a20c45691304e70db3c143e2a040cc244dd52d2ea15f58f80d8c6aeb6e661108619cf178878ab138c51792eee1b2d03b87eb7a0b60c4128b654707e0a2bb0c83cede315311f575c5c9aaf514dc070699ba1e69d8", 0xdb}, {&(0x7f0000000600)="b08813bce7b2bd0344dd3d3b9397205622b085e2159f2465f81bf8438a4ff280774a5ed43ba086fece82bc954bc817b9ed2b64ae3caf7ef238b89f2b81706bbcc979b812394b09de544b86914230f478c0bc6ca843c8903893f59e73901eccfdbe42449120807479879730a7d62a3651ad1578063b5ed4cfebe0bc0693c7", 0x7e}], 0x3, &(0x7f00000006c0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x19, [@dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="e52ae7e58b41f6825a4667aaf986683c44deb631cde6ae83115edb2224c1b0642d874036ca0962a89f9f88afec5d5346fe09a9a5b1730ae5226f76d29456678864701e88ae09f1390553b8c2d65602aadeb5acb0f43cb2c1934b7ba03ab918f770b15bd915a9d4359465f1e5484d16e04ccbf9a6cc1d758aa54c764e41e9ae314403883a7f6253d116566a4c09a72477e6b5d8583340f854", 0x98}], 0x1, &(0x7f0000000800)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x97, 0x0, 0x7, [0x2, 0x4, 0x200, 0xffffffff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x40}}, {{&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="4f2b6523bdef5385292bac3f29e618b7b2f9038802a88421f39044229e394bd3e914ff775e2239a062d8f53e309d62ef4d8a1b7d8afdb7102a6e8cc4b9af4e0de9b2dc887b00062773a0f4d179d4a7fb6bff11abd19dc19c48043ea8483af3c1210ea1ee29b4d133ad42acce19ff623a54b1caed8852b3d7", 0x78}, {&(0x7f0000000900)="a30036b5bf8072fc88731c70024166f0aa3a5ee0b3e2a4cc3f9fd6ee82fd1a36f6ab9a7e2a83d5f862bab865e0b8624422395a438ca61575efbba9247c245f6ae027667e2c", 0x45}], 0x2, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x27, 0x1, 0x8, [{@broadcast, 0x87}, {@loopback, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @broadcast}}}], 0x78}}], 0x4, 0xc0) 9.195863897s ago: executing program 3 (id=4290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e01000100ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd9878518b069cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d481622000000000000000a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa85aebb4fce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffff", 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 7.96643522s ago: executing program 0 (id=4294): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)}, {0x0}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e", 0x25}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c40)}, {&(0x7f0000000f40)="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", 0xfe}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000000000)="72c3601c0d4c68b19b09b44bf7b472188c1c563845687292e22d182943e6c6", 0x1f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)}], 0x1}}], 0x3, 0x0) 7.775686252s ago: executing program 4 (id=4295): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)=0x1) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1) 6.937299361s ago: executing program 0 (id=4296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6.784488815s ago: executing program 0 (id=4297): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 6.70794148s ago: executing program 4 (id=4298): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r7, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r8 = socket(0x1e, 0x1, 0x0) listen(r8, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r4}) 6.452439557s ago: executing program 1 (id=4300): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) modify_ldt$read(0x0, &(0x7f00000002c0)=""/185, 0xb9) socketpair(0x1, 0x1, 0x0, 0x0) socket(0x18, 0x6, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x8000000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000fffc00000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000010100000000000c0008000800082001a80000"], 0xc4}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 6.366745598s ago: executing program 4 (id=4301): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x80, 0x400007, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = io_uring_setup(0x1d01, &(0x7f0000000500)={0x0, 0x2005, 0x8000, 0xfffffffd, 0x228}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r4 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r5, r4}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) fstatfs(r3, &(0x7f0000000140)=""/166) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x8000000004) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r7 = dup(r6) fallocate(r7, 0x10, 0x0, 0x72000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone3(&(0x7f00000002c0)={0xca082480, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f00003c5000/0x3000)=nil, 0x3000, 0x100000c) shmdt(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="3000000000000000144012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.27980089s ago: executing program 2 (id=4302): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa980, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000180)=""/231, 0xe7}], 0x1) (async) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000080)=""/125, 0x7d}, {0x0}], 0x2) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3fffffffffffc}) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={r6}, 0x8) (async) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000001c0)={0x28, 0x5, r1, r1, 0x4, 0x2034, 0x2}) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r7, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000200)=0x84) 6.104156392s ago: executing program 3 (id=4303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000500)='./bus\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x39777c09, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000440)='GPL\x00', 0x2, 0x1000, &(0x7f0000001480)=""/4096, 0x100, 0x4, '\x00', 0x0, @fallback=0x24, r7, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000107}]}) 5.945445691s ago: executing program 2 (id=4304): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000271) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getegid() mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8008, &(0x7f0000000680)=ANY=[]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x40000001, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x2, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x1, 0x800, 0x5]], '\x00', [{0x8000, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x1, 0x0, 0x1}], '\x00', 0x2}) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 3.934572643s ago: executing program 1 (id=4305): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x10000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000240)={0x14, 0x0, 0x0}, &(0x7f0000000900)={0x44, &(0x7f0000000580)={0x20, 0x9, 0x4, "03fd64f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x84, 0x3, "28ca34"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "72cb3c"}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0x1a22002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x8001) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r10 = socket(0x2c, 0x1, 0x46055) sendmmsg$inet(r10, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 3.783926015s ago: executing program 4 (id=4306): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f01a, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x332) r1 = socket(0x10, 0x803, 0x7ff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xffff, 0x7, 0x24, 0x80000000}, {0x7, 0x4, 0x3, 0x2}, {0x1f9, 0x5, 0x7, 0x8}, {0x3, 0xac, 0x0, 0xde}, {0x3, 0x78, 0x7, 0xbeca}, {0x8, 0x8, 0x2, 0x1ff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.648019682s ago: executing program 0 (id=4307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.5537899s ago: executing program 0 (id=4308): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) futex(&(0x7f00000020c0), 0x9, 0x0, &(0x7f0000002200), &(0x7f0000002240)=0x2, 0x2) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz1\x00', {}, 0x42, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffbfd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffff4d8, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x4, 0x2, 0x4, 0x0, 0x4, 0x3, 0x0, 0x80, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x8], [0x3, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xedc0, 0x0, 0x5ee, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x4, 0x4, 0xa0000000, 0xfffffffe, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x81, 0x0, 0x0, 0x36, 0xfffffffc, 0x0, 0x0, 0x4771], [0xffffffff, 0x7f, 0x0, 0x0, 0x3, 0xfffffff3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x4, 0x0, 0x26, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x0, 0x9, 0x3c, 0x80000000, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0xc, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000002280)={{}, 0x16, 0x200, 0xffffffff}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000002140)="19afff61ada6a15c4afa2ee54459dfa8b8ff64c958c0686281ba6cc8801a1f88220bdeea255747341d7ff67a46e14204802c7837496720666ee64d324bb1f7f80dc7375d04691d2e29f6f01c1290bce582612c8a6725b469795dd5c2646c6c00202121451af5a53541f9524651714f706620aa1130618a90f3c23d55c1bbea84988270d5a0038706ea00fd79eaedd301a78838cf461f9f80473fc44e0b4991c11fee569e1750d5", 0xa7, 0x20000080, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f00000000c0)=""/254, 0xfe}], 0x2, 0xda, 0x3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000004a00070702000000000000000a0000", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20080804}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002080)=ANY=[@ANYBLOB="14ad1d466cfa0000003a00290200000000000000010a000000"], 0x14}, 0x1, 0x0, 0x0, 0xc854}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 3.512614744s ago: executing program 2 (id=4309): timer_create(0x0, 0x0, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) prctl$PR_SET_VMA(0x53564d41, 0xf4, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x0, 0x2010, r1, 0x83000000) 3.350756405s ago: executing program 3 (id=4310): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="001600003cb19935780000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) ioprio_get$uid(0x3, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="1a8e", 0x2}], 0x1, &(0x7f0000000340)}}, {{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f00000003c0)="2a94e96fcfea3c30f662cab4746650b4f4e1c7cc692fb4b5b73d4b695a78139aec326b030e163230a5861230a4456c6751c47d009082c80fc4e185491e8ddc5f06f785d2efd8fed70b14f3345f495c95efb4ba2d7e6bb553c0a15e8e9f9a3946a5046875b5d183018105e39304e10d2cff340893e3dc077df6081b69dc1776ec8e63cff26e009a4c0986485074e4991a6f12bd5f89006e599c216ee6838541768da87d30e38eb7d499940d6622638cb8cb1834110c7b676f39da275a3e96a2bd2cc1d946bfc0c6501a860c7816018216e247f13c189cc697b48b38e9e2021d54f331ea21f92afd7be2294a07df2730922f", 0xf1}, {&(0x7f00000004c0)="54dc9cdf9a82d39de839583fdc835c5c35edc6f4d18baf521de22ba8316fbd801d03060082f8529cc7d97de7fbf5f611a3ef17c1dbc9e66bee033246e3c1a076ebac66d55a08f1fdf4944924b433760833df55746469a8a87681dffdc0d850ccb2a09675c530f045ae69ceda20922fbb32f4a0d0daedc5f3e0cd26163210bce01aaef3eac7d105a20c45691304e70db3c143e2a040cc244dd52d2ea15f58f80d8c6aeb6e661108619cf178878ab138c51792eee1b2d03b87eb7a0b60c4128b654707e0a2bb0c83cede315311f575c5c9aaf514dc070699ba1e69d8", 0xdb}, {&(0x7f0000000600)="b08813bce7b2bd0344dd3d3b9397205622b085e2159f2465f81bf8438a4ff280774a5ed43ba086fece82bc954bc817b9ed2b64ae3caf7ef238b89f2b81706bbcc979b812394b09de544b86914230f478c0bc6ca843c8903893f59e73901eccfdbe42449120807479879730a7d62a3651ad1578063b5ed4cfebe0bc0693c7", 0x7e}], 0x3, &(0x7f00000006c0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x19, [@dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="e52ae7e58b41f6825a4667aaf986683c44deb631cde6ae83115edb2224c1b0642d874036ca0962a89f9f88afec5d5346fe09a9a5b1730ae5226f76d29456678864701e88ae09f1390553b8c2d65602aadeb5acb0f43cb2c1934b7ba03ab918f770b15bd915a9d4359465f1e5484d16e04ccbf9a6cc1d758aa54c764e41e9ae314403883a7f6253d116566a4c09a72477e6b5d8583340f854", 0x98}], 0x1, &(0x7f0000000800)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x97, 0x0, 0x7, [0x2, 0x4, 0x200, 0xffffffff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x40}}, {{&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="4f2b6523bdef5385292bac3f29e618b7b2f9038802a88421f39044229e394bd3e914ff775e2239a062d8f53e309d62ef4d8a1b7d8afdb7102a6e8cc4b9af4e0de9b2dc887b00062773a0f4d179d4a7fb6bff11abd19dc19c48043ea8483af3c1210ea1ee29b4d133ad42acce19ff623a54b1caed8852b3d7", 0x78}, {&(0x7f0000000900)="a30036b5bf8072fc88731c70024166f0aa3a5ee0b3e2a4cc3f9fd6ee82fd1a36f6ab9a7e2a83d5f862bab865e0b8624422395a438ca61575efbba9247c245f6ae027667e2c", 0x45}], 0x2, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x27, 0x1, 0x8, [{@broadcast, 0x87}, {@loopback, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @broadcast}}}], 0x78}}], 0x4, 0xc0) 3.207692995s ago: executing program 2 (id=4311): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r4}) 3.049063071s ago: executing program 2 (id=4312): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) ioprio_set$pid(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) close_range(r0, r1, 0x2) 1.835288327s ago: executing program 4 (id=4313): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffff", 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 1.763625611s ago: executing program 2 (id=4314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffff", 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 417.911815ms ago: executing program 4 (id=4315): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000271) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getegid() mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8008, &(0x7f0000000680)=ANY=[]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x40000001, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x2, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x1, 0x800, 0x5]], '\x00', [{0x8000, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x1, 0x0, 0x1}], '\x00', 0x2}) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 413.782259ms ago: executing program 1 (id=4316): socket$inet_smc(0x2b, 0x1, 0x0) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x18, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) gettid() socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4048004}, 0x40019) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) 60.353758ms ago: executing program 0 (id=4317): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ff00001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp6(0xa, 0x2, 0x73) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_emit_ethernet(0x1be, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x29, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028de"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 3 (id=4318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): REEMPT(full) [ 2304.665775][T24933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2304.665789][T24933] Call Trace: [ 2304.665797][T24933] [ 2304.665807][T24933] dump_stack_lvl+0x189/0x250 [ 2304.665838][T24933] ? __pfx____ratelimit+0x10/0x10 [ 2304.665869][T24933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2304.665894][T24933] ? __pfx__printk+0x10/0x10 [ 2304.665930][T24933] ? __pfx___might_resched+0x10/0x10 [ 2304.665950][T24933] ? fs_reclaim_acquire+0x7d/0x100 [ 2304.665987][T24933] should_fail_ex+0x414/0x560 [ 2304.666020][T24933] should_failslab+0xa8/0x100 [ 2304.666052][T24933] __kmalloc_cache_noprof+0x70/0x3d0 [ 2304.666080][T24933] ? nf_tables_newchain+0xef1/0x2900 [ 2304.666194][T24933] nf_tables_newchain+0xef1/0x2900 [ 2304.666236][T24933] ? __pfx_nf_tables_newchain+0x10/0x10 [ 2304.666296][T24933] ? nfnl_pernet+0x23/0x240 [ 2304.666334][T24933] ? __nla_parse+0x40/0x60 [ 2304.666369][T24933] nfnetlink_rcv+0x1132/0x2520 [ 2304.666433][T24933] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2304.666479][T24933] ? ref_tracker_free+0x63a/0x7d0 [ 2304.666540][T24933] ? __netlink_deliver_tap+0x807/0x850 [ 2304.666571][T24933] ? netlink_deliver_tap+0x2e/0x1b0 [ 2304.666626][T24933] netlink_unicast+0x82c/0x9e0 [ 2304.666664][T24933] ? __pfx_netlink_unicast+0x10/0x10 [ 2304.666707][T24933] ? netlink_sendmsg+0x642/0xb30 [ 2304.666729][T24933] ? skb_put+0x11b/0x210 [ 2304.666754][T24933] netlink_sendmsg+0x805/0xb30 [ 2304.666783][T24933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2304.666805][T24933] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2304.666827][T24933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2304.666849][T24933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2304.666869][T24933] __sock_sendmsg+0x219/0x270 [ 2304.666898][T24933] ____sys_sendmsg+0x505/0x830 [ 2304.666927][T24933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2304.666959][T24933] ? import_iovec+0x74/0xa0 [ 2304.666987][T24933] ___sys_sendmsg+0x21f/0x2a0 [ 2304.667012][T24933] ? __pfx____sys_sendmsg+0x10/0x10 [ 2304.667073][T24933] ? __fget_files+0x2a/0x420 [ 2304.667103][T24933] ? __fget_files+0x3a0/0x420 [ 2304.667144][T24933] __x64_sys_sendmsg+0x19b/0x260 [ 2304.667169][T24933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2304.667208][T24933] ? __pfx_ksys_write+0x10/0x10 [ 2304.667233][T24933] ? rcu_is_watching+0x15/0xb0 [ 2304.667259][T24933] ? do_syscall_64+0xbe/0x3b0 [ 2304.667282][T24933] do_syscall_64+0xfa/0x3b0 [ 2304.667299][T24933] ? lockdep_hardirqs_on+0x9c/0x150 [ 2304.667327][T24933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2304.667348][T24933] ? clear_bhb_loop+0x60/0xb0 [ 2304.667372][T24933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2304.667392][T24933] RIP: 0033:0x7fed1238ebe9 [ 2304.667410][T24933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2304.667446][T24933] RSP: 002b:00007fed131b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2304.667468][T24933] RAX: ffffffffffffffda RBX: 00007fed125c5fa0 RCX: 00007fed1238ebe9 [ 2304.667483][T24933] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2304.667497][T24933] RBP: 00007fed131b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2304.667510][T24933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2304.667521][T24933] R13: 00007fed125c6038 R14: 00007fed125c5fa0 R15: 00007fed126efa28 [ 2304.667555][T24933] [ 2305.014133][ T5949] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2305.040534][T24929] : entered promiscuous mode [ 2305.449492][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 2305.471522][ T5949] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2305.507260][ T5949] usb 3-1: config 0 has no interface number 0 [ 2305.541146][ T5949] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2305.572342][T24937] lo: entered promiscuous mode [ 2305.584438][ T5949] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2305.599863][T24937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2305.644920][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.686504][ T5949] usb 3-1: config 0 descriptor?? [ 2305.755483][ T5949] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2305.931241][T24918] input: syz0 as /devices/virtual/input/input68 [ 2306.054529][T24946] FAULT_INJECTION: forcing a failure. [ 2306.054529][T24946] name failslab, interval 1, probability 0, space 0, times 0 [ 2306.077850][T15048] usb 3-1: USB disconnect, device number 125 [ 2306.144959][T24946] CPU: 1 UID: 0 PID: 24946 Comm: syz.1.3886 Not tainted syzkaller #0 PREEMPT(full) [ 2306.144988][T24946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2306.145001][T24946] Call Trace: [ 2306.145009][T24946] [ 2306.145026][T24946] dump_stack_lvl+0x189/0x250 [ 2306.145057][T24946] ? __pfx____ratelimit+0x10/0x10 [ 2306.145105][T24946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2306.145130][T24946] ? __pfx__printk+0x10/0x10 [ 2306.145166][T24946] ? __pfx___might_resched+0x10/0x10 [ 2306.145186][T24946] ? fs_reclaim_acquire+0x7d/0x100 [ 2306.145236][T24946] should_fail_ex+0x414/0x560 [ 2306.145270][T24946] should_failslab+0xa8/0x100 [ 2306.145301][T24946] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2306.145329][T24946] ? __alloc_skb+0x112/0x2d0 [ 2306.145354][T24946] __alloc_skb+0x112/0x2d0 [ 2306.145403][T24946] netlink_ack+0x146/0xa50 [ 2306.145432][T24946] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2306.145534][T24946] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2306.145634][T24946] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2306.145660][T24946] ? __asan_memcpy+0x40/0x70 [ 2306.145682][T24946] ? __pfx_ref_tracker_free+0x10/0x10 [ 2306.145718][T24946] netlink_rcv_skb+0x28c/0x470 [ 2306.145747][T24946] ? __lock_acquire+0xab9/0xd20 [ 2306.145776][T24946] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2306.145802][T24946] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2306.145852][T24946] ? down_read+0x1ad/0x2e0 [ 2306.145876][T24946] genl_rcv+0x28/0x40 [ 2306.145898][T24946] netlink_unicast+0x82c/0x9e0 [ 2306.145934][T24946] ? __pfx_netlink_unicast+0x10/0x10 [ 2306.145964][T24946] ? netlink_sendmsg+0x642/0xb30 [ 2306.145981][T24946] ? skb_put+0x11b/0x210 [ 2306.146005][T24946] netlink_sendmsg+0x805/0xb30 [ 2306.146034][T24946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2306.146057][T24946] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2306.146078][T24946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2306.146100][T24946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2306.146120][T24946] __sock_sendmsg+0x219/0x270 [ 2306.146151][T24946] ____sys_sendmsg+0x505/0x830 [ 2306.146179][T24946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2306.146211][T24946] ? import_iovec+0x74/0xa0 [ 2306.146238][T24946] ___sys_sendmsg+0x21f/0x2a0 [ 2306.146263][T24946] ? __pfx____sys_sendmsg+0x10/0x10 [ 2306.146344][T24946] ? __fget_files+0x2a/0x420 [ 2306.146394][T24946] ? __fget_files+0x3a0/0x420 [ 2306.146435][T24946] __x64_sys_sendmsg+0x19b/0x260 [ 2306.146461][T24946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2306.146493][T24946] ? __pfx_ksys_write+0x10/0x10 [ 2306.146517][T24946] ? rcu_is_watching+0x15/0xb0 [ 2306.146544][T24946] ? do_syscall_64+0xbe/0x3b0 [ 2306.146567][T24946] do_syscall_64+0xfa/0x3b0 [ 2306.146584][T24946] ? lockdep_hardirqs_on+0x9c/0x150 [ 2306.146611][T24946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2306.146633][T24946] ? clear_bhb_loop+0x60/0xb0 [ 2306.146657][T24946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2306.146677][T24946] RIP: 0033:0x7f2d39f8ebe9 [ 2306.146696][T24946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2306.146714][T24946] RSP: 002b:00007f2d3aec4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2306.146753][T24946] RAX: ffffffffffffffda RBX: 00007f2d3a1c5fa0 RCX: 00007f2d39f8ebe9 [ 2306.146769][T24946] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2306.146782][T24946] RBP: 00007f2d3aec4090 R08: 0000000000000000 R09: 0000000000000000 [ 2306.146795][T24946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2306.146807][T24946] R13: 00007f2d3a1c6038 R14: 00007f2d3a1c5fa0 R15: 00007f2d3a2efa28 [ 2306.146840][T24946] [ 2306.924981][T22287] vhci_hcd: vhci_device speed not set [ 2307.448589][T24960] tipc: Enabling of bearer rejected, failed to enable media [ 2307.834839][T15048] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2308.014992][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 2308.024438][ T5949] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 2308.033146][T15048] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2308.051702][T15048] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2308.065376][ T5949] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 2308.078144][T15048] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 2308.122463][T15048] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2308.134816][T15048] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 2308.144107][T15048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.160700][T15048] usb 2-1: Product: syz [ 2308.167471][T15048] usb 2-1: Manufacturer: syz [ 2308.172573][T15048] usb 2-1: SerialNumber: syz [ 2308.185339][T15048] usb 2-1: config 0 descriptor?? [ 2308.193478][T24960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2308.214706][T22287] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2308.375402][T22287] usb 5-1: Using ep0 maxpacket: 32 [ 2308.380432][ T30] audit: type=1800 audit(1756570675.123:6769): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3898" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 2308.408400][T22287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.432080][T22287] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2308.442108][T22287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.451397][T24981] FAULT_INJECTION: forcing a failure. [ 2308.451397][T24981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2308.465399][T22287] usb 5-1: Product: syz [ 2308.469741][T22287] usb 5-1: Manufacturer: syz [ 2308.475090][T22287] usb 5-1: SerialNumber: syz [ 2308.480110][T24981] CPU: 0 UID: 0 PID: 24981 Comm: syz.2.3897 Not tainted syzkaller #0 PREEMPT(full) [ 2308.480129][T24981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2308.480138][T24981] Call Trace: [ 2308.480145][T24981] [ 2308.480152][T24981] dump_stack_lvl+0x189/0x250 [ 2308.480174][T24981] ? __pfx____ratelimit+0x10/0x10 [ 2308.480198][T24981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2308.480216][T24981] ? __pfx__printk+0x10/0x10 [ 2308.480252][T24981] should_fail_ex+0x414/0x560 [ 2308.480276][T24981] _copy_from_user+0x2d/0xb0 [ 2308.480295][T24981] __copy_msghdr+0x3c5/0x5b0 [ 2308.480315][T24981] ___sys_sendmsg+0x1a5/0x2a0 [ 2308.480332][T24981] ? __pfx____sys_sendmsg+0x10/0x10 [ 2308.480381][T24981] ? __might_fault+0xb0/0x130 [ 2308.480405][T24981] __sys_sendmmsg+0x227/0x430 [ 2308.480425][T24981] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2308.480440][T24981] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2308.480494][T24981] ? ksys_write+0x22a/0x250 [ 2308.480515][T24981] ? __pfx_ksys_write+0x10/0x10 [ 2308.480532][T24981] ? rcu_is_watching+0x15/0xb0 [ 2308.480551][T24981] __x64_sys_sendmmsg+0xa0/0xc0 [ 2308.480569][T24981] do_syscall_64+0xfa/0x3b0 [ 2308.480581][T24981] ? lockdep_hardirqs_on+0x9c/0x150 [ 2308.480602][T24981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2308.480616][T24981] ? clear_bhb_loop+0x60/0xb0 [ 2308.480634][T24981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2308.480648][T24981] RIP: 0033:0x7f582ef8ebe9 [ 2308.480662][T24981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2308.480674][T24981] RSP: 002b:00007f582fd3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2308.480690][T24981] RAX: ffffffffffffffda RBX: 00007f582f1c5fa0 RCX: 00007f582ef8ebe9 [ 2308.480701][T24981] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 2308.480710][T24981] RBP: 00007f582fd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 2308.480719][T24981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2308.480727][T24981] R13: 00007f582f1c6038 R14: 00007f582f1c5fa0 R15: 00007f582f2efa28 [ 2308.480749][T24981] [ 2308.796951][T22287] usb 5-1: config 0 descriptor?? [ 2308.807215][T22287] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 2308.896262][ T45] usb 2-1: USB disconnect, device number 12 [ 2308.969210][T24985] openvswitch: netlink: Message has 8 unknown bytes. [ 2308.976826][T24985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2309.214939][T24991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2309.223981][T24991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2310.174867][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 2310.181128][ T5949] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2310.194870][ T5949] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2311.123736][T25009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.869636][T15048] usb 5-1: USB disconnect, device number 18 [ 2312.015486][ C1] sd 0:0:1:0: [sda] tag#6634 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2312.026241][ C1] sd 0:0:1:0: [sda] tag#6634 CDB: Read(6) 08 00 00 00 03 44 [ 2312.255489][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 2312.264771][ T5949] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2312.270891][ T5949] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 2313.402386][ T30] audit: type=1800 audit(1756570680.143:6770): pid=25022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3909" name="bus" dev="ramfs" ino=94989 res=0 errno=0 [ 2314.334884][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 2314.341134][ T5949] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2314.347402][ T5949] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 2316.414904][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 2316.420260][ T5949] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 2316.427967][ T5949] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 2316.701463][T25028] FAULT_INJECTION: forcing a failure. [ 2316.701463][T25028] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.754665][T25028] CPU: 0 UID: 0 PID: 25028 Comm: syz.4.3911 Not tainted syzkaller #0 PREEMPT(full) [ 2316.754693][T25028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2316.754706][T25028] Call Trace: [ 2316.754715][T25028] [ 2316.754725][T25028] dump_stack_lvl+0x189/0x250 [ 2316.754756][T25028] ? __pfx____ratelimit+0x10/0x10 [ 2316.754788][T25028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2316.754813][T25028] ? __pfx__printk+0x10/0x10 [ 2316.754859][T25028] ? __pfx___might_resched+0x10/0x10 [ 2316.754878][T25028] ? fs_reclaim_acquire+0x7d/0x100 [ 2316.754912][T25028] should_fail_ex+0x414/0x560 [ 2316.754944][T25028] should_failslab+0xa8/0x100 [ 2316.754974][T25028] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2316.755002][T25028] ? __pfx_nf_tables_abort+0x10/0x10 [ 2316.755022][T25028] ? __alloc_skb+0x112/0x2d0 [ 2316.755056][T25028] __alloc_skb+0x112/0x2d0 [ 2316.755079][T25028] netlink_ack+0x146/0xa50 [ 2316.755114][T25028] ? __kasan_kmalloc+0x93/0xb0 [ 2316.755150][T25028] nfnetlink_rcv+0x2290/0x2520 [ 2316.755209][T25028] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2316.755287][T25028] ? netlink_deliver_tap+0x2e/0x1b0 [ 2316.755335][T25028] netlink_unicast+0x82c/0x9e0 [ 2316.755372][T25028] ? __pfx_netlink_unicast+0x10/0x10 [ 2316.755402][T25028] ? netlink_sendmsg+0x642/0xb30 [ 2316.755419][T25028] ? skb_put+0x11b/0x210 [ 2316.755443][T25028] netlink_sendmsg+0x805/0xb30 [ 2316.755483][T25028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2316.755504][T25028] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2316.755524][T25028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2316.755545][T25028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2316.755564][T25028] __sock_sendmsg+0x219/0x270 [ 2316.755592][T25028] ____sys_sendmsg+0x505/0x830 [ 2316.755619][T25028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2316.755649][T25028] ? import_iovec+0x74/0xa0 [ 2316.755675][T25028] ___sys_sendmsg+0x21f/0x2a0 [ 2316.755698][T25028] ? __pfx____sys_sendmsg+0x10/0x10 [ 2316.755752][T25028] ? __fget_files+0x2a/0x420 [ 2316.755779][T25028] ? __fget_files+0x3a0/0x420 [ 2316.755818][T25028] __x64_sys_sendmsg+0x19b/0x260 [ 2316.755841][T25028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2316.755872][T25028] ? __pfx_ksys_write+0x10/0x10 [ 2316.755903][T25028] ? do_syscall_64+0xbe/0x3b0 [ 2316.755925][T25028] do_syscall_64+0xfa/0x3b0 [ 2316.755941][T25028] ? lockdep_hardirqs_on+0x9c/0x150 [ 2316.755968][T25028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2316.756019][T25028] ? clear_bhb_loop+0x60/0xb0 [ 2316.756059][T25028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2316.756080][T25028] RIP: 0033:0x7f81aaf8ebe9 [ 2316.756098][T25028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2316.756115][T25028] RSP: 002b:00007f81abe36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2316.756137][T25028] RAX: ffffffffffffffda RBX: 00007f81ab1c5fa0 RCX: 00007f81aaf8ebe9 [ 2316.756152][T25028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2316.756165][T25028] RBP: 00007f81abe36090 R08: 0000000000000000 R09: 0000000000000000 [ 2316.756177][T25028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2316.756189][T25028] R13: 00007f81ab1c6038 R14: 00007f81ab1c5fa0 R15: 00007f81ab2efa28 [ 2316.756222][T25028] [ 2317.354918][ T5949] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2317.617097][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2317.628260][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58727, setting to 1024 [ 2317.648705][ T5949] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2317.668358][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.704667][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2317.712207][ T5949] usb 2-1: config 0 descriptor?? [ 2317.854866][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 2317.863989][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2317.876478][ T45] usb 5-1: config 125 has an invalid interface number: 27 but max is 0 [ 2317.885335][ T45] usb 5-1: config 125 has no interface number 0 [ 2317.891788][ T45] usb 5-1: config 125 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2317.904545][ T45] usb 5-1: config 125 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2317.924735][ T45] usb 5-1: config 125 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 2317.937179][ T45] usb 5-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 2317.948820][ T45] usb 5-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2317.981799][ T5949] ath6kl: Failed to submit usb control message: -71 [ 2318.004070][ T5949] ath6kl: unable to send the bmi data to the device: -71 [ 2318.062027][ T5949] ath6kl: Unable to send get target info: -71 [ 2318.120041][ T45] usb 5-1: config 125 interface 27 has no altsetting 0 [ 2318.124188][ T5949] ath6kl: Failed to init ath6kl core: -71 [ 2318.130819][ T45] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 2318.193971][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.217530][ T45] usb 5-1: Product: syz [ 2318.226585][ T5949] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2318.244210][ T5949] usb 2-1: USB disconnect, device number 13 [ 2318.258803][ T45] usb 5-1: Manufacturer: syz [ 2318.264370][ T45] usb 5-1: SerialNumber: syz [ 2318.311639][T25046] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2318.484766][T22287] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2318.663600][T22287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2318.674355][T22287] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2318.689938][T22287] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2318.743061][T22287] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2318.759948][T22287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.772082][T22287] usb 4-1: Product: syz [ 2318.776768][T22287] usb 4-1: Manufacturer: syz [ 2318.782048][T22287] usb 4-1: SerialNumber: syz [ 2318.832211][T22287] hub 4-1:1.0: bad descriptor, ignoring hub [ 2318.851943][T22287] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2319.047927][T22287] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2320.012883][ T45] hub 5-1:125.27: bad descriptor, ignoring hub [ 2320.033930][T25045] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 2320.042332][ T45] hub 5-1:125.27: probe with driver hub failed with error -5 [ 2320.075910][ T45] sierra 5-1:125.27: Sierra USB modem converter detected [ 2320.134884][ T92] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2320.195607][ T45] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 2320.287494][ T45] usb 5-1: USB disconnect, device number 19 [ 2320.294933][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 2320.309936][ T92] usb 2-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 2320.321805][ T92] usb 2-1: config 255 has an invalid descriptor of length 217, skipping remainder of the config [ 2320.326562][ T45] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2320.363364][ T45] sierra 5-1:125.27: device disconnected [ 2320.399435][ T92] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 231 [ 2320.478211][ T92] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 2320.489992][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.564259][ T92] usb 2-1: Product: syz [ 2320.630416][ T92] usb 2-1: Manufacturer: syz [ 2320.717116][ T92] usb 2-1: SerialNumber: syz [ 2321.054288][ T92] usb 2-1: USB disconnect, device number 14 [ 2322.404822][ T92] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2322.867928][ T45] usb 4-1: USB disconnect, device number 14 [ 2322.894513][ T45] usblp0: removed [ 2322.940482][ T92] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 2322.979051][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.045472][ T92] usb 2-1: Product: syz [ 2323.049698][ T92] usb 2-1: Manufacturer: syz [ 2323.143570][ T92] usb 2-1: SerialNumber: syz [ 2323.218639][ T92] usb 2-1: config 0 descriptor?? [ 2323.256698][ T92] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 2323.265121][ T92] usb 2-1: bad CDC descriptors [ 2323.270927][ T92] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 2323.474945][ T30] audit: type=1800 audit(1756570690.203:6771): pid=25102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3934" name="bus" dev="ramfs" ino=95595 res=0 errno=0 [ 2323.660452][ T45] usb 2-1: USB disconnect, device number 15 [ 2323.991197][T25108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3936'. [ 2324.034705][T15205] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2324.269826][T15205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2324.286751][T15205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58727, setting to 1024 [ 2324.357548][T15205] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2324.455075][T15205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.515310][T15205] usb 5-1: config 0 descriptor?? [ 2324.815468][T25106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.898549][T25106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.918567][T25119] loop3: detected capacity change from 0 to 1 [ 2324.935999][T25119] Dev loop3: unable to read RDB block 1 [ 2324.943008][T25119] loop3: unable to read partition table [ 2324.950898][T25119] loop3: partition table beyond EOD, truncated [ 2325.041719][T25119] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2325.091187][T15205] ath6kl: Failed to submit usb control message: -71 [ 2325.123066][T15205] ath6kl: unable to send the bmi data to the device: -71 [ 2325.134010][T15205] ath6kl: Unable to send get target info: -71 [ 2325.171721][T15205] ath6kl: Failed to init ath6kl core: -71 [ 2325.216485][T15205] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2325.277748][T15205] usb 5-1: USB disconnect, device number 20 [ 2326.945455][T15048] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2327.109729][T15048] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2327.146863][T15048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.189405][T15048] usb 5-1: Product: syz [ 2327.193626][T15048] usb 5-1: Manufacturer: syz [ 2327.332666][T15048] usb 5-1: SerialNumber: syz [ 2327.386462][T25147] FAULT_INJECTION: forcing a failure. [ 2327.386462][T25147] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.429280][T25147] CPU: 0 UID: 0 PID: 25147 Comm: syz.2.3947 Not tainted syzkaller #0 PREEMPT(full) [ 2327.429310][T25147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2327.429324][T25147] Call Trace: [ 2327.429333][T25147] [ 2327.429343][T25147] dump_stack_lvl+0x189/0x250 [ 2327.429373][T25147] ? __pfx____ratelimit+0x10/0x10 [ 2327.429409][T25147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2327.429442][T25147] ? __pfx__printk+0x10/0x10 [ 2327.429477][T25147] ? __pfx___might_resched+0x10/0x10 [ 2327.429497][T25147] ? fs_reclaim_acquire+0x7d/0x100 [ 2327.429534][T25147] should_fail_ex+0x414/0x560 [ 2327.429568][T25147] should_failslab+0xa8/0x100 [ 2327.429601][T25147] __kmalloc_cache_noprof+0x70/0x3d0 [ 2327.429636][T25147] ? nfnetlink_rcv+0xeff/0x2520 [ 2327.429669][T25147] nfnetlink_rcv+0xeff/0x2520 [ 2327.429736][T25147] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2327.429784][T25147] ? ref_tracker_free+0x63a/0x7d0 [ 2327.429846][T25147] ? __netlink_deliver_tap+0x807/0x850 [ 2327.429877][T25147] ? netlink_deliver_tap+0x2e/0x1b0 [ 2327.429934][T25147] netlink_unicast+0x82c/0x9e0 [ 2327.429972][T25147] ? __pfx_netlink_unicast+0x10/0x10 [ 2327.430005][T25147] ? netlink_sendmsg+0x642/0xb30 [ 2327.430022][T25147] ? skb_put+0x11b/0x210 [ 2327.430048][T25147] netlink_sendmsg+0x805/0xb30 [ 2327.430079][T25147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2327.430103][T25147] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2327.430125][T25147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2327.430148][T25147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2327.430168][T25147] __sock_sendmsg+0x219/0x270 [ 2327.430202][T25147] ____sys_sendmsg+0x505/0x830 [ 2327.430232][T25147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2327.430266][T25147] ? import_iovec+0x74/0xa0 [ 2327.430296][T25147] ___sys_sendmsg+0x21f/0x2a0 [ 2327.430322][T25147] ? __pfx____sys_sendmsg+0x10/0x10 [ 2327.430386][T25147] ? __fget_files+0x2a/0x420 [ 2327.430423][T25147] ? __fget_files+0x3a0/0x420 [ 2327.430479][T25147] __x64_sys_sendmsg+0x19b/0x260 [ 2327.430523][T25147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2327.430559][T25147] ? __pfx_ksys_write+0x10/0x10 [ 2327.430585][T25147] ? rcu_is_watching+0x15/0xb0 [ 2327.430613][T25147] ? do_syscall_64+0xbe/0x3b0 [ 2327.430637][T25147] do_syscall_64+0xfa/0x3b0 [ 2327.430655][T25147] ? lockdep_hardirqs_on+0x9c/0x150 [ 2327.430685][T25147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2327.430707][T25147] ? clear_bhb_loop+0x60/0xb0 [ 2327.430732][T25147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2327.430754][T25147] RIP: 0033:0x7f582ef8ebe9 [ 2327.430773][T25147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2327.430791][T25147] RSP: 002b:00007f582fd3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2327.430813][T25147] RAX: ffffffffffffffda RBX: 00007f582f1c5fa0 RCX: 00007f582ef8ebe9 [ 2327.430830][T25147] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2327.430843][T25147] RBP: 00007f582fd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 2327.430855][T25147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2327.430868][T25147] R13: 00007f582f1c6038 R14: 00007f582f1c5fa0 R15: 00007f582f2efa28 [ 2327.430901][T25147] [ 2328.411842][ T92] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2328.575093][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 2328.588457][ T92] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2328.599294][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.608849][ T92] usb 3-1: Product: syz [ 2328.613765][ T92] usb 3-1: Manufacturer: syz [ 2328.643626][ T92] usb 3-1: SerialNumber: syz [ 2328.657878][ T92] usb 3-1: config 0 descriptor?? [ 2328.672387][ T92] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2329.318428][ T45] usb 3-1: USB disconnect, device number 126 [ 2329.451972][T25170] tipc: Failed to remove unknown binding: 66,1,1/0:1140067647/1140067649 [ 2329.846949][T15048] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2329.895414][T15048] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2329.932290][T15048] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2329.951467][T15048] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2329.971455][T15048] usb 5-1: USB disconnect, device number 21 [ 2330.404710][T15048] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2330.669021][T15048] usb 5-1: Using ep0 maxpacket: 16 [ 2330.676867][T15048] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2330.699265][T15048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2330.771573][T15048] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2330.781466][T15048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.793160][T15048] usb 5-1: Product: syz [ 2330.797803][T15048] usb 5-1: Manufacturer: syz [ 2330.802522][T15048] usb 5-1: SerialNumber: syz [ 2330.821496][T15048] usb 5-1: config 0 descriptor?? [ 2330.834009][T15048] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2330.921681][T15048] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 2331.509603][T15048] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2331.516495][T15048] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 2331.621636][T25193] tipc: Enabling of bearer rejected, failed to enable media [ 2331.665364][ T5949] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2331.867579][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 2331.876714][ T5949] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 2331.886672][ T5949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2331.979121][ T5949] usb 3-1: config 0 has no interfaces? [ 2331.989615][ T5949] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 2332.063749][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.175603][ T5949] usb 3-1: config 0 descriptor?? [ 2332.370387][T15048] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 2332.381467][T15048] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 2332.915102][ T92] usb 3-1: USB disconnect, device number 127 [ 2333.014804][T15048] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 2333.079845][T15048] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 2333.204820][T15048] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 2333.223296][T15048] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 2333.244878][T15048] usb 5-1: USB disconnect, device number 22 [ 2333.871875][T25211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2335.814721][T15205] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2335.984808][T15205] usb 2-1: Using ep0 maxpacket: 16 [ 2335.991808][T15205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2336.002932][T15205] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 2336.013112][T15205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.128017][T15205] usb 2-1: config 0 descriptor?? [ 2336.145271][T15205] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input69 [ 2336.367463][ T5219] bcm5974 2-1:0.0: could not read from device [ 2336.512401][T15205] usb 2-1: USB disconnect, device number 16 [ 2336.532682][ T5219] bcm5974 2-1:0.0: could not read from device [ 2336.657107][T25240] FAULT_INJECTION: forcing a failure. [ 2336.657107][T25240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2336.725127][T25240] CPU: 1 UID: 0 PID: 25240 Comm: syz.3.3973 Not tainted syzkaller #0 PREEMPT(full) [ 2336.725155][T25240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2336.725167][T25240] Call Trace: [ 2336.725175][T25240] [ 2336.725184][T25240] dump_stack_lvl+0x189/0x250 [ 2336.725213][T25240] ? __pfx____ratelimit+0x10/0x10 [ 2336.725244][T25240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2336.725268][T25240] ? __pfx__printk+0x10/0x10 [ 2336.725295][T25240] ? __might_fault+0xb0/0x130 [ 2336.725334][T25240] should_fail_ex+0x414/0x560 [ 2336.725367][T25240] _copy_from_user+0x2d/0xb0 [ 2336.725393][T25240] kstrtouint_from_user+0xc4/0x170 [ 2336.725428][T25240] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2336.725479][T25240] proc_fail_nth_write+0x88/0x200 [ 2336.725503][T25240] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2336.725533][T25240] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2336.725557][T25240] vfs_write+0x27e/0xb30 [ 2336.725598][T25240] ? __pfx_vfs_write+0x10/0x10 [ 2336.725626][T25240] ? __fget_files+0x2a/0x420 [ 2336.725662][T25240] ? __fget_files+0x3a0/0x420 [ 2336.725690][T25240] ? __fget_files+0x2a/0x420 [ 2336.725728][T25240] ksys_write+0x145/0x250 [ 2336.725757][T25240] ? __pfx_ksys_write+0x10/0x10 [ 2336.725779][T25240] ? rcu_is_watching+0x15/0xb0 [ 2336.725804][T25240] ? do_syscall_64+0xbe/0x3b0 [ 2336.725827][T25240] do_syscall_64+0xfa/0x3b0 [ 2336.725843][T25240] ? lockdep_hardirqs_on+0x9c/0x150 [ 2336.725872][T25240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.725893][T25240] ? clear_bhb_loop+0x60/0xb0 [ 2336.725916][T25240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.725944][T25240] RIP: 0033:0x7fed1238d69f [ 2336.725962][T25240] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2336.725980][T25240] RSP: 002b:00007fed13190030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2336.726001][T25240] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed1238d69f [ 2336.726014][T25240] RDX: 0000000000000001 RSI: 00007fed131900a0 RDI: 0000000000000004 [ 2336.726027][T25240] RBP: 00007fed13190090 R08: 0000000000000000 R09: 0000000000000000 [ 2336.726039][T25240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2336.726050][T25240] R13: 00007fed125c6128 R14: 00007fed125c6090 R15: 00007fed126efa28 [ 2336.726082][T25240] [ 2337.444689][ T5949] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 2337.608949][ T5949] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 2337.626564][ T5949] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2337.674882][ T5949] usb 3-1: config 0 has no interface number 0 [ 2337.681193][ T5949] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2337.693853][ T5949] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2337.729467][ T5949] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2337.763011][ T5949] usb 3-1: config 0 interface 52 has no altsetting 0 [ 2337.781150][ T5949] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 2337.802897][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 2337.814123][ T5949] usb 3-1: Product: syz [ 2337.820253][ T5949] usb 3-1: SerialNumber: syz [ 2337.841581][ T5949] usb 3-1: config 0 descriptor?? [ 2338.237785][ T5949] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input70 [ 2338.454078][T25239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3974'. [ 2338.467046][T24136] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2338.529917][ T5949] usb 3-1: USB disconnect, device number 2 [ 2338.539338][ T5219] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 2338.554833][T15048] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2338.624943][T24136] usb 5-1: Using ep0 maxpacket: 16 [ 2338.633270][T24136] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2338.645445][T24136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2338.719855][T24136] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2338.734931][T15048] usb 2-1: Using ep0 maxpacket: 16 [ 2338.737381][T24136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.749762][T24136] usb 5-1: Product: syz [ 2338.754432][T24136] usb 5-1: Manufacturer: syz [ 2338.767944][T24136] usb 5-1: SerialNumber: syz [ 2338.794764][T15048] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 2338.805167][T15048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.809682][T22030] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 2338.830661][T15048] usb 2-1: Product: syz [ 2338.835222][T15048] usb 2-1: Manufacturer: syz [ 2338.842856][T15048] usb 2-1: SerialNumber: syz [ 2338.852205][T24136] usb 5-1: config 0 descriptor?? [ 2338.866539][T24136] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2338.908396][T24136] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 2338.989977][T15048] usb 2-1: config 0 descriptor?? [ 2339.077842][T15048] as10x_usb: device has been detected [ 2339.084192][T15048] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 2339.178251][T15048] usb 2-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 2339.224880][T15205] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2339.326110][T15048] as10x_usb: error during firmware upload part1 [ 2339.339355][T15048] Registered device Sky IT Digital Key (green led) [ 2339.395198][T15205] usb 4-1: Using ep0 maxpacket: 16 [ 2339.472344][T24136] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2339.496391][T24136] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 2339.527366][T15205] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2339.561689][T15205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2339.632408][T15205] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2339.646503][T15205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.674820][T15205] usb 4-1: Product: syz [ 2339.681194][T15205] usb 4-1: Manufacturer: syz [ 2339.689749][T15205] usb 4-1: SerialNumber: syz [ 2339.729125][T15205] usb 4-1: config 0 descriptor?? [ 2339.776608][T15205] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2339.801581][T15205] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2340.049346][T25260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2340.149765][T24136] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 2340.188895][T24136] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 2340.230993][T24136] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 2340.381869][T15205] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2340.389437][T15205] em28xx 4-1:0.0: Config register raw data: 0x97 [ 2340.680979][T15205] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 2340.697339][T15205] em28xx 4-1:0.0: No AC97 audio processor [ 2341.033430][T15205] usb 2-1: USB disconnect, device number 17 [ 2341.062566][T24136] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 2341.092044][ T5949] usb 4-1: USB disconnect, device number 15 [ 2341.099368][ T5949] em28xx 4-1:0.0: Disconnecting em28xx [ 2341.122116][ T5949] em28xx 4-1:0.0: Freeing device [ 2341.148253][T15205] Unregistered device Sky IT Digital Key (green led) [ 2341.163438][T15205] as10x_usb: device has been disconnected [ 2341.177413][T24136] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 2341.202948][T24136] usb 5-1: USB disconnect, device number 23 [ 2341.773998][T25283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2341.844006][T25284] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3987'. [ 2342.075940][T25283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 2342.606826][ T30] audit: type=1800 audit(1756570709.333:6772): pid=25296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3989" name="bus" dev="ramfs" ino=96199 res=0 errno=0 [ 2344.187730][T25306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2344.554729][T24136] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2344.738766][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.741789][T24136] usb 5-1: Using ep0 maxpacket: 16 [ 2344.745231][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.773837][T24136] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2344.804713][T24136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2344.838509][T24136] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2344.855398][T24136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.879120][T24136] usb 5-1: Product: syz [ 2344.891200][T24136] usb 5-1: Manufacturer: syz [ 2344.909943][T24136] usb 5-1: SerialNumber: syz [ 2344.942530][T24136] usb 5-1: config 0 descriptor?? [ 2344.962933][T24136] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2344.983077][T24136] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 2345.082868][T25313] FAULT_INJECTION: forcing a failure. [ 2345.082868][T25313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2345.096781][T25313] CPU: 1 UID: 0 PID: 25313 Comm: syz.3.3994 Not tainted syzkaller #0 PREEMPT(full) [ 2345.096801][T25313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2345.096811][T25313] Call Trace: [ 2345.096818][T25313] [ 2345.096824][T25313] dump_stack_lvl+0x189/0x250 [ 2345.096851][T25313] ? __pfx____ratelimit+0x10/0x10 [ 2345.096874][T25313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2345.096892][T25313] ? __pfx__printk+0x10/0x10 [ 2345.096922][T25313] should_fail_ex+0x414/0x560 [ 2345.096946][T25313] _copy_to_user+0x31/0xb0 [ 2345.096965][T25313] simple_read_from_buffer+0xe1/0x170 [ 2345.096992][T25313] proc_fail_nth_read+0x1b3/0x220 [ 2345.097011][T25313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2345.097030][T25313] ? rw_verify_area+0x2a6/0x4d0 [ 2345.097048][T25313] ? __lock_acquire+0xab9/0xd20 [ 2345.097069][T25313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2345.097087][T25313] vfs_read+0x1fd/0xa30 [ 2345.097105][T25313] ? fdget_pos+0x247/0x320 [ 2345.097121][T25313] ? __pfx___mutex_lock+0x10/0x10 [ 2345.097136][T25313] ? __pfx_vfs_read+0x10/0x10 [ 2345.097156][T25313] ? __fget_files+0x2a/0x420 [ 2345.097181][T25313] ? __fget_files+0x3a0/0x420 [ 2345.097202][T25313] ? __fget_files+0x2a/0x420 [ 2345.097231][T25313] ksys_read+0x145/0x250 [ 2345.097252][T25313] ? __pfx_ksys_read+0x10/0x10 [ 2345.097269][T25313] ? rcu_is_watching+0x15/0xb0 [ 2345.097288][T25313] ? do_syscall_64+0xbe/0x3b0 [ 2345.097305][T25313] do_syscall_64+0xfa/0x3b0 [ 2345.097318][T25313] ? lockdep_hardirqs_on+0x9c/0x150 [ 2345.097345][T25313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.097359][T25313] ? clear_bhb_loop+0x60/0xb0 [ 2345.097377][T25313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.097392][T25313] RIP: 0033:0x7fed1238d5fc [ 2345.097405][T25313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2345.097425][T25313] RSP: 002b:00007fed131b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2345.097441][T25313] RAX: ffffffffffffffda RBX: 00007fed125c5fa0 RCX: 00007fed1238d5fc [ 2345.097452][T25313] RDX: 000000000000000f RSI: 00007fed131b10a0 RDI: 0000000000000004 [ 2345.097461][T25313] RBP: 00007fed131b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2345.097470][T25313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2345.097479][T25313] R13: 00007fed125c6038 R14: 00007fed125c5fa0 R15: 00007fed126efa28 [ 2345.097502][T25313] [ 2345.342061][ C1] vkms_vblank_simulate: vblank timer overrun [ 2345.532713][ T30] audit: type=1326 audit(1756570712.273:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2345.763626][T24136] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2345.772118][T24136] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 2345.781129][ T30] audit: type=1326 audit(1756570712.303:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2345.873484][ T30] audit: type=1326 audit(1756570712.303:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2345.971372][ T30] audit: type=1326 audit(1756570712.303:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2346.044778][ T30] audit: type=1326 audit(1756570712.303:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2346.067796][T15205] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2346.076114][ T30] audit: type=1326 audit(1756570712.303:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2346.100852][ T30] audit: type=1326 audit(1756570712.303:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2346.124118][ T30] audit: type=1326 audit(1756570712.303:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2346.151376][ T30] audit: type=1326 audit(1756570712.303:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25316 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fed1238ebe9 code=0x7ffc0000 [ 2346.234893][T15205] usb 4-1: device descriptor read/64, error -71 [ 2346.406251][T25309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3992'. [ 2346.420749][T24136] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 2346.428962][T24136] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 2346.436336][T24136] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 2346.474824][T15205] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2346.624744][T15205] usb 4-1: device descriptor read/64, error -71 [ 2346.735153][T15205] usb usb4-port1: attempt power cycle [ 2347.052360][T24136] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 2347.074791][T15205] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2347.107253][T15205] usb 4-1: device descriptor read/8, error -71 [ 2347.263935][T24136] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 2347.315215][T24136] usb 5-1: USB disconnect, device number 24 [ 2347.365120][T15205] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2347.416320][T15205] usb 4-1: device descriptor read/8, error -71 [ 2347.580153][T15205] usb usb4-port1: unable to enumerate USB device [ 2347.844794][T15048] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2348.071683][T15048] usb 2-1: config 4 has an invalid interface number: 39 but max is 1 [ 2348.086247][T15048] usb 2-1: config 4 has an invalid interface number: 49 but max is 1 [ 2348.101859][T15048] usb 2-1: config 4 has no interface number 0 [ 2348.118247][T15048] usb 2-1: config 4 has no interface number 1 [ 2348.129772][T15048] usb 2-1: config 4 interface 39 has no altsetting 0 [ 2348.192481][T15048] usb 2-1: config 4 interface 49 has no altsetting 0 [ 2348.202356][T15048] usb 2-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79 [ 2348.211921][T15048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.221056][T15048] usb 2-1: Product: syz [ 2348.225836][T15048] usb 2-1: Manufacturer: syz [ 2348.231424][T15048] usb 2-1: SerialNumber: syz [ 2348.314720][ T5949] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2348.466777][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2348.481071][ T5949] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2348.491795][ T5949] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2348.532887][ T5949] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 2348.544519][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2348.553166][ T5949] usb 5-1: Product: syz [ 2348.558861][ T5949] usb 5-1: Manufacturer: syz [ 2348.567429][ T5949] usb 5-1: SerialNumber: syz [ 2348.602065][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4006'. [ 2348.703307][T25348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4007'. [ 2348.712788][T25348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4007'. [ 2348.835025][ T5949] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2349.164803][T24136] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2349.295335][T25354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4005'. [ 2349.324731][T24136] usb 4-1: device descriptor read/64, error -71 [ 2349.569378][T24136] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2349.714746][T24136] usb 4-1: device descriptor read/64, error -71 [ 2349.903732][T24136] usb usb4-port1: attempt power cycle [ 2350.378128][T25362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2350.474715][T24136] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2350.496592][T24136] usb 4-1: device descriptor read/8, error -71 [ 2350.514016][T15048] usb 2-1: USB disconnect, device number 18 [ 2350.757391][T24136] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2350.805876][T24136] usb 4-1: device descriptor read/8, error -71 [ 2350.925694][T24136] usb usb4-port1: unable to enumerate USB device [ 2351.904442][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 2351.904464][ T30] audit: type=1800 audit(1756570718.633:6882): pid=25380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4016" name="bus" dev="ramfs" ino=96897 res=0 errno=0 [ 2352.334803][T24136] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2352.496689][T24136] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2352.526939][T24136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.571385][T24136] usb 4-1: config 0 descriptor?? [ 2352.591188][T24136] cp210x 4-1:0.0: cp210x converter detected [ 2352.602591][T25395] vti0: entered promiscuous mode [ 2352.609717][T25395] vti0: entered allmulticast mode [ 2352.996129][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2353.010953][T24136] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2353.109755][T24136] usb 5-1: USB disconnect, device number 25 [ 2353.121462][T24136] usblp0: removed [ 2353.176836][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 2353.193125][ T30] audit: type=1326 audit(1756570719.933:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25386 comm="syz.3.4019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed1238ebe9 code=0x0 [ 2353.251640][ T5855] usb 4-1: USB disconnect, device number 24 [ 2353.258595][ T45] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2353.287789][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.304395][ T5855] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2353.406159][ T45] usb 2-1: config 0 descriptor?? [ 2353.423331][ T5855] cp210x 4-1:0.0: device disconnected [ 2353.436596][ T45] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2354.134759][ T5949] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2354.362018][ T5949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2354.410744][ T5949] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2354.415377][ T45] gspca_vc032x: reg_w err -110 [ 2354.431963][ T5949] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2354.484037][T22579] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2354.508434][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.529275][T22579] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2354.538582][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538601][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538613][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538624][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538636][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538646][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538658][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538669][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538680][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538691][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538702][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538713][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538724][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538735][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538746][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538757][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538768][ T45] gspca_vc032x: I2c Bus Busy Wait 00 [ 2354.538779][ T45] gspca_vc032x: Unknown sensor... [ 2354.538885][ T45] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2354.699969][ T5949] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2354.870997][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.931078][ T5949] usb 3-1: Product: syz [ 2354.940242][ T5949] usb 3-1: Manufacturer: syz [ 2354.948802][ T5949] usb 3-1: SerialNumber: syz [ 2355.173317][ T5949] hub 3-1:1.0: bad descriptor, ignoring hub [ 2355.182463][ T5949] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2355.382712][ T5949] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2355.987113][T25410] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 2356.167225][ T5949] usb 2-1: USB disconnect, device number 19 [ 2357.146220][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2357.314781][ T45] usb 4-1: device descriptor read/64, error -71 [ 2357.574884][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2357.712222][T25456] FAULT_INJECTION: forcing a failure. [ 2357.712222][T25456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2357.740003][ T45] usb 4-1: device descriptor read/64, error -71 [ 2357.865841][ T45] usb usb4-port1: attempt power cycle [ 2357.892143][T25456] CPU: 0 UID: 0 PID: 25456 Comm: syz.0.4040 Not tainted syzkaller #0 PREEMPT(full) [ 2357.892171][T25456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2357.892184][T25456] Call Trace: [ 2357.892192][T25456] [ 2357.892202][T25456] dump_stack_lvl+0x189/0x250 [ 2357.892231][T25456] ? __pfx____ratelimit+0x10/0x10 [ 2357.892261][T25456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2357.892284][T25456] ? __pfx__printk+0x10/0x10 [ 2357.892315][T25456] ? rcu_read_lock_any_held+0xb3/0x120 [ 2357.892428][T25456] should_fail_ex+0x414/0x560 [ 2357.892459][T25456] strncpy_from_user+0x36/0x290 [ 2357.892487][T25456] __x64_sys_lgetxattr+0x153/0x210 [ 2357.892514][T25456] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 2357.892558][T25456] ? __pfx_ksys_write+0x10/0x10 [ 2357.892581][T25456] ? rcu_is_watching+0x15/0xb0 [ 2357.892606][T25456] ? do_syscall_64+0xbe/0x3b0 [ 2357.892628][T25456] do_syscall_64+0xfa/0x3b0 [ 2357.892645][T25456] ? lockdep_hardirqs_on+0x9c/0x150 [ 2357.892673][T25456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2357.892692][T25456] ? clear_bhb_loop+0x60/0xb0 [ 2357.892717][T25456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2357.892764][T25456] RIP: 0033:0x7f3ff198ebe9 [ 2357.892797][T25456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2357.892814][T25456] RSP: 002b:00007f3ff276d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 2357.892834][T25456] RAX: ffffffffffffffda RBX: 00007f3ff1bc5fa0 RCX: 00007f3ff198ebe9 [ 2357.892849][T25456] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 2357.892862][T25456] RBP: 00007f3ff276d090 R08: 0000000000000000 R09: 0000000000000000 [ 2357.892873][T25456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2357.892884][T25456] R13: 00007f3ff1bc6038 R14: 00007f3ff1bc5fa0 R15: 00007f3ff1cefa28 [ 2357.892913][T25456] [ 2358.275299][T25402] usb 3-1: USB disconnect, device number 3 [ 2358.285784][T25402] usblp0: removed [ 2358.414679][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2358.435321][ T45] usb 4-1: device descriptor read/8, error -71 [ 2358.695257][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2358.728833][ T45] usb 4-1: device descriptor read/8, error -71 [ 2358.845606][ T45] usb usb4-port1: unable to enumerate USB device [ 2359.863894][T25471] Can't find ip_set type h^sh:ip,mark [ 2361.038910][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2361.284959][ T45] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2361.318833][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.379357][ T45] usb 3-1: Product: syz [ 2361.399181][ T45] usb 3-1: Manufacturer: syz [ 2361.427605][ T45] usb 3-1: SerialNumber: syz [ 2361.462404][ T45] usb 3-1: config 0 descriptor?? [ 2361.563463][ T45] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2361.634726][T15048] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2362.174693][T15048] usb 2-1: Using ep0 maxpacket: 32 [ 2362.184071][T15048] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2362.202801][T15048] usb 2-1: config 0 has no interface number 0 [ 2362.527512][ T30] audit: type=1800 audit(1756570729.243:6884): pid=25506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4053" name="bus" dev="ramfs" ino=97710 res=0 errno=0 [ 2362.561954][T15048] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2362.584676][T15048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2362.641627][T15048] usb 2-1: Product: syz [ 2362.656352][T15048] usb 2-1: Manufacturer: syz [ 2362.682158][T15048] usb 2-1: SerialNumber: syz [ 2362.682176][ T45] gspca_sunplus: reg_r err -32 [ 2362.682256][ T45] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 2362.734727][ T5855] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2362.736598][T15048] usb 2-1: config 0 descriptor?? [ 2362.778799][T15048] smsc95xx v2.0.0 [ 2362.991583][ T5855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2363.005845][ T5855] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2363.042620][ T5855] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2363.092674][ T5855] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2363.103261][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.138924][ T5855] usb 4-1: Product: syz [ 2363.370618][ T5855] usb 4-1: Manufacturer: syz [ 2363.394231][ T5855] usb 4-1: SerialNumber: syz [ 2363.849630][ T5855] hub 4-1:1.0: bad descriptor, ignoring hub [ 2363.924708][ T5855] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2363.987588][ T5855] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2364.151113][ T30] audit: type=1800 audit(1756570730.873:6885): pid=25519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4055" name="bus" dev="ramfs" ino=97104 res=0 errno=0 [ 2364.677933][T25507] usb 4-1: reset high-speed USB device number 29 using dummy_hcd [ 2365.135195][ T5949] usb 3-1: USB disconnect, device number 4 [ 2365.584788][ T5949] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2365.738660][ T5949] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2365.748123][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.776212][ T5949] usb 3-1: Product: syz [ 2365.792519][ T5949] usb 3-1: Manufacturer: syz [ 2365.813865][ T5949] usb 3-1: SerialNumber: syz [ 2366.661004][ T5855] usb 4-1: USB disconnect, device number 29 [ 2367.191190][ T5855] usblp0: removed [ 2367.231005][T15048] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 2367.260215][T15048] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 2367.649282][T15048] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2367.694984][T15048] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 2367.764635][ T5855] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2367.839543][T15048] usb 2-1: USB disconnect, device number 20 [ 2367.993907][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2368.061891][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58727, setting to 1024 [ 2368.123320][ T5855] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2368.179495][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.229514][ T5855] usb 4-1: config 0 descriptor?? [ 2368.401716][ T5949] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2368.465948][ T5949] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2368.505859][ T5949] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2368.563563][T25547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.572459][T25402] IPVS: starting estimator thread 0... [ 2368.650437][T25547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.686339][T25565] IPVS: using max 29 ests per chain, 69600 per kthread [ 2368.690118][ T5855] ath6kl: Failed to submit usb control message: -71 [ 2368.733971][ T5855] ath6kl: unable to send the bmi data to the device: -71 [ 2368.737052][ T5949] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2368.790059][ T5855] ath6kl: Unable to send get target info: -71 [ 2368.818077][ T5949] usb 3-1: USB disconnect, device number 5 [ 2368.824140][ T5855] ath6kl: Failed to init ath6kl core: -71 [ 2368.896906][ T5855] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2368.965722][ T5855] usb 4-1: USB disconnect, device number 30 [ 2369.051313][T25567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2370.224672][ T5949] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2370.348179][T25593] input: syz0 as /devices/virtual/input/input71 [ 2370.376957][ T5949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2370.436931][ T5949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2370.501693][ T5949] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2370.739217][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2370.763923][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.788783][ T5949] usb 4-1: Product: syz [ 2370.798127][ T5949] usb 4-1: Manufacturer: syz [ 2370.802862][ T5949] usb 4-1: SerialNumber: syz [ 2370.843065][ T5949] hub 4-1:1.0: bad descriptor, ignoring hub [ 2370.867739][ T5949] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2370.957109][T25402] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2371.039601][ T5949] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2371.332134][T25402] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2371.716628][T25402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.725281][T25583] usb 4-1: reset high-speed USB device number 31 using dummy_hcd [ 2371.771625][T25402] usb 3-1: Product: syz [ 2371.783878][T25402] usb 3-1: Manufacturer: syz [ 2371.819728][T25402] usb 3-1: SerialNumber: syz [ 2372.127430][T19535] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2372.471010][T19535] usb 2-1: Using ep0 maxpacket: 32 [ 2372.548038][T19535] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2372.617418][T19535] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2372.649393][T19535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2372.917264][T19535] usb 2-1: config 0 descriptor?? [ 2373.585500][T15048] usb 4-1: USB disconnect, device number 31 [ 2373.614398][T15048] usblp0: removed [ 2373.831405][T25402] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2373.948662][T15048] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2373.959255][T25402] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2373.993957][T25402] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2374.097704][T25402] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2374.134744][T15048] usb 4-1: Using ep0 maxpacket: 8 [ 2374.160912][T15048] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 2374.253379][T25402] usb 3-1: USB disconnect, device number 6 [ 2374.261753][T15048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.343248][T15048] usb 4-1: Product: syz [ 2374.368368][T15048] usb 4-1: Manufacturer: syz [ 2374.394461][T15048] usb 4-1: SerialNumber: syz [ 2374.436783][T15048] usb 4-1: config 0 descriptor?? [ 2374.554816][T15048] usb 4-1: selecting invalid altsetting 3 [ 2374.574230][T15048] comedi comedi5: could not set alternate setting 3 in high speed [ 2374.577172][ T30] audit: type=1326 audit(1756570741.313:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25628 comm="syz.4.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81aaf8ebe9 code=0x7fc00000 [ 2374.594678][T15048] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 2374.656074][T15048] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 2374.716402][T15048] usb 4-1: USB disconnect, device number 32 [ 2374.886255][T25402] usb 2-1: USB disconnect, device number 21 [ 2375.101420][T25637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4089'. [ 2375.239122][T25643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2375.357869][T25645] netlink: 'syz.1.4091': attribute type 11 has an invalid length. [ 2375.674992][T25402] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2375.846027][T25402] usb 2-1: Using ep0 maxpacket: 16 [ 2375.861184][T25402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2375.881273][T25402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2375.980194][T25402] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2375.993991][T25402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.058925][T25402] usb 2-1: config 0 descriptor?? [ 2376.485079][T25402] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.000C/input/input73 [ 2376.872710][T25402] appleir 0003:05AC:8241.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 2377.021714][T25402] usb 2-1: USB disconnect, device number 22 [ 2377.288279][T25671] fido_id[25671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2377.564667][ T30] audit: type=1800 audit(1756570744.283:6887): pid=25680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4101" name="bus" dev="ramfs" ino=98241 res=0 errno=0 [ 2377.704976][T15048] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2377.874788][T15048] usb 4-1: Using ep0 maxpacket: 8 [ 2377.888721][T15048] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 2377.902655][T15048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.934816][T15048] usb 4-1: Product: syz [ 2377.955259][T15048] usb 4-1: Manufacturer: syz [ 2377.970571][T15048] usb 4-1: SerialNumber: syz [ 2377.990755][T15048] usb 4-1: config 0 descriptor?? [ 2378.027213][T15048] usb 4-1: selecting invalid altsetting 3 [ 2378.044674][T15048] comedi comedi5: could not set alternate setting 3 in high speed [ 2378.084664][T15048] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 2378.139052][T15048] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 2378.224498][T15048] usb 4-1: USB disconnect, device number 33 [ 2379.073953][T25701] FAULT_INJECTION: forcing a failure. [ 2379.073953][T25701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2379.116824][T25701] CPU: 1 UID: 0 PID: 25701 Comm: syz.0.4111 Not tainted syzkaller #0 PREEMPT(full) [ 2379.116854][T25701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2379.116868][T25701] Call Trace: [ 2379.116877][T25701] [ 2379.116887][T25701] dump_stack_lvl+0x189/0x250 [ 2379.116922][T25701] ? __pfx____ratelimit+0x10/0x10 [ 2379.116956][T25701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2379.116982][T25701] ? __pfx__printk+0x10/0x10 [ 2379.117025][T25701] should_fail_ex+0x414/0x560 [ 2379.117061][T25701] _copy_to_user+0x31/0xb0 [ 2379.117089][T25701] simple_read_from_buffer+0xe1/0x170 [ 2379.117125][T25701] proc_fail_nth_read+0x1b3/0x220 [ 2379.117154][T25701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2379.117181][T25701] ? rw_verify_area+0x2a6/0x4d0 [ 2379.117207][T25701] ? __lock_acquire+0xab9/0xd20 [ 2379.117237][T25701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2379.117263][T25701] vfs_read+0x1fd/0xa30 [ 2379.117300][T25701] ? fdget_pos+0x247/0x320 [ 2379.117323][T25701] ? __pfx___mutex_lock+0x10/0x10 [ 2379.117346][T25701] ? __pfx_vfs_read+0x10/0x10 [ 2379.117374][T25701] ? __fget_files+0x2a/0x420 [ 2379.117410][T25701] ? __fget_files+0x3a0/0x420 [ 2379.117439][T25701] ? __fget_files+0x2a/0x420 [ 2379.117479][T25701] ksys_read+0x145/0x250 [ 2379.117509][T25701] ? __pfx_ksys_read+0x10/0x10 [ 2379.117543][T25701] ? do_syscall_64+0xbe/0x3b0 [ 2379.117567][T25701] do_syscall_64+0xfa/0x3b0 [ 2379.117585][T25701] ? lockdep_hardirqs_on+0x9c/0x150 [ 2379.117614][T25701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.117635][T25701] ? clear_bhb_loop+0x60/0xb0 [ 2379.117659][T25701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2379.117680][T25701] RIP: 0033:0x7f3ff198d5fc [ 2379.117700][T25701] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2379.117717][T25701] RSP: 002b:00007f3ff276d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2379.117738][T25701] RAX: ffffffffffffffda RBX: 00007f3ff1bc5fa0 RCX: 00007f3ff198d5fc [ 2379.117752][T25701] RDX: 000000000000000f RSI: 00007f3ff276d0a0 RDI: 0000000000000005 [ 2379.117763][T25701] RBP: 00007f3ff276d090 R08: 0000000000000000 R09: 0000000000000000 [ 2379.117774][T25701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2379.117787][T25701] R13: 00007f3ff1bc6038 R14: 00007f3ff1bc5fa0 R15: 00007f3ff1cefa28 [ 2379.117819][T25701] [ 2379.783181][ T30] audit: type=1800 audit(1756570746.523:6888): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4113" name="bus" dev="ramfs" ino=99380 res=0 errno=0 [ 2380.237137][ T5949] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2380.405153][T25711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2380.453929][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 2380.475928][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2380.491605][ T5949] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2380.501507][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.519512][ T5949] usb 5-1: config 0 descriptor?? [ 2381.764820][ T5855] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2381.809825][T25734] program syz.3.4120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2381.927991][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 2382.027525][ T5855] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2382.039782][ T5855] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2382.055342][ T5855] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2382.066514][ T5855] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2382.076490][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2382.204698][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2382.339060][T25730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'. [ 2382.348344][T25730] netlink: 'syz.2.4118': attribute type 30 has an invalid length. [ 2382.354674][ T45] usb 2-1: device descriptor read/64, error -71 [ 2382.387198][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4118'. [ 2382.399250][T25740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2382.428881][T25740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2382.483764][T25744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4123'. [ 2382.528039][ T5855] usb 3-1: string descriptor 0 read error: -71 [ 2382.576890][ T5855] usb 3-1: USB disconnect, device number 7 [ 2382.594909][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2382.628646][T22755] udevd[22755]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2382.755147][ T45] usb 2-1: device descriptor read/64, error -71 [ 2382.865577][ T45] usb usb2-port1: attempt power cycle [ 2383.169488][ T5949] usbhid 5-1:0.0: can't add hid device: -71 [ 2383.187897][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2383.203997][ T5949] usb 5-1: USB disconnect, device number 26 [ 2383.206595][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2383.245459][ T45] usb 2-1: device descriptor read/8, error -71 [ 2383.495929][ T45] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2383.527919][ T45] usb 2-1: device descriptor read/8, error -71 [ 2383.645259][ T45] usb usb2-port1: unable to enumerate USB device [ 2383.935547][ T5855] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2384.276712][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2384.288864][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2384.328171][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2384.341513][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2384.364066][ T5855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2384.374218][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.407920][ T5855] usb 4-1: config 0 descriptor?? [ 2384.442033][T25768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2384.514766][ T5949] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2384.734888][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 2384.745465][ T5949] usb 3-1: config 0 has an invalid interface number: 184 but max is 11 [ 2384.753952][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 2384.768972][ T5949] usb 3-1: config 0 has no interface number 0 [ 2384.780506][ T5949] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2384.801680][ T5949] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2384.823162][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.905673][ T5855] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 2384.939107][ T5949] usb 3-1: Product: syz [ 2384.960478][ T5949] usb 3-1: Manufacturer: syz [ 2384.983103][ T5855] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2385.007177][ T5949] usb 3-1: SerialNumber: syz [ 2385.035179][ T5949] usb 3-1: config 0 descriptor?? [ 2385.065434][ T5949] smsc75xx v1.0.0 [ 2385.455856][T25778] batadv_slave_1: entered promiscuous mode [ 2385.464989][T25778] batadv_slave_1: left promiscuous mode [ 2385.649047][ T5949] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2385.768155][ T5949] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2386.253762][T25788] dlm: no locking on control device [ 2386.274371][T25789] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4137'. [ 2386.325268][T25792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4138'. [ 2386.327182][T25789] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4137'. [ 2386.349159][T25789] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4137'. [ 2386.365816][T25788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 2386.386255][T25788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4137'. [ 2386.403406][T25788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 2386.474733][ T5855] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 2386.671993][ T5949] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 2386.714912][ T5855] usb 4-1: device descriptor read/64, error -32 [ 2386.718029][ T5949] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 2386.739890][ T5949] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2386.753312][ T5949] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 2386.777928][ T5949] usb 3-1: USB disconnect, device number 8 [ 2386.954864][ T5855] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 2388.139990][ T45] usb 4-1: USB disconnect, device number 34 [ 2388.158176][T25402] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2388.384794][T25402] usb 5-1: device descriptor read/64, error -71 [ 2388.636154][T25402] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2388.774869][T25402] usb 5-1: device descriptor read/64, error -71 [ 2388.886466][T25402] usb usb5-port1: attempt power cycle [ 2389.225578][T25402] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2389.256978][T25402] usb 5-1: device descriptor read/8, error -71 [ 2389.285055][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2389.486524][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2389.583792][T25402] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2389.742073][T25402] usb 5-1: device descriptor read/8, error -71 [ 2389.748820][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58727, setting to 1024 [ 2389.755032][T25847] __nla_validate_parse: 1 callbacks suppressed [ 2389.755054][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4154'. [ 2389.769259][ T45] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2389.924277][T25402] usb usb5-port1: unable to enumerate USB device [ 2389.930978][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2390.162242][ T45] usb 3-1: config 0 descriptor?? [ 2390.584932][T25402] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2390.759679][T25402] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2390.770701][T25402] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2390.813587][T25402] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2390.851294][T25402] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2390.861150][T25402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.872890][T25402] usb 2-1: Product: syz [ 2390.880530][T25402] usb 2-1: Manufacturer: syz [ 2390.892223][T25402] usb 2-1: SerialNumber: syz [ 2390.957796][T25402] hub 2-1:1.0: bad descriptor, ignoring hub [ 2390.967857][T25402] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2391.014854][ T5855] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2391.164828][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 2391.171756][ T5855] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 2391.183595][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.205915][T25402] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2391.245255][ T5855] usb 5-1: config 0 descriptor?? [ 2391.295320][ T45] ath6kl: Failed to submit usb control message: -110 [ 2391.306717][ T5855] usb 5-1: interface 1 not found [ 2391.312176][ T45] ath6kl: unable to send the bmi data to the device: -110 [ 2391.340648][ T45] ath6kl: Unable to send get target info: -110 [ 2391.362336][ T45] ath6kl: Failed to init ath6kl core: -110 [ 2391.393599][ T45] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2391.468905][T15048] usb 2-1: USB disconnect, device number 27 [ 2391.567762][ T45] usb 5-1: USB disconnect, device number 31 [ 2391.791624][T25860] binder: BINDER_SET_CONTEXT_MGR already set [ 2391.810730][T25860] binder: 25858:25860 ioctl 4018620d 200000000280 returned -16 [ 2391.827221][T25859] binder: 25858:25859 ioctl c0306201 200000000080 returned -14 [ 2391.852536][T25860] binder: 25858:25860 ioctl 8982 2000000000c0 returned -22 [ 2391.871150][T25859] binder: 25858:25859 ioctl 8982 2000000000c0 returned -22 [ 2391.979177][ T45] usb 3-1: USB disconnect, device number 9 [ 2391.996442][T25862] can: request_module (can-proto-5) failed. [ 2392.028391][T15048] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2392.246237][T15048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2392.298166][T15048] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2392.309546][T15048] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2392.371343][T15048] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2392.380807][T15048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.389771][T15048] usb 2-1: Product: syz [ 2392.394115][T15048] usb 2-1: Manufacturer: syz [ 2392.399044][T15048] usb 2-1: SerialNumber: syz [ 2392.418837][T15048] hub 2-1:1.0: bad descriptor, ignoring hub [ 2392.425394][T15048] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2392.454795][T19535] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2392.616332][T19535] usb 4-1: Using ep0 maxpacket: 16 [ 2392.665711][T19535] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2392.698920][T19535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.735241][T19535] usb 4-1: Product: syz [ 2392.745117][ T5949] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2392.766947][T19535] usb 4-1: Manufacturer: syz [ 2392.788544][T19535] usb 4-1: SerialNumber: syz [ 2392.812780][T19535] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2392.824202][T19535] r8152-cfgselector 4-1: config 0 descriptor?? [ 2392.914915][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 2392.926889][ T5949] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2392.943541][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2392.954874][ T5949] usb 5-1: config 0 has no interface number 0 [ 2392.961485][ T5949] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 2392.981758][ T5949] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2392.994115][ T5949] usb 5-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 2393.012292][ T5949] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2393.028841][ T5949] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2393.050798][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.071560][T25867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2393.085561][ T5949] usb 5-1: config 0 descriptor?? [ 2393.091279][T25867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2393.116229][ T5949] hso 5-1:0.1: Failed to find BULK OUT ep [ 2393.132583][T19535] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2393.151200][T19535] r8152-cfgselector 4-1: bad CDC descriptors [ 2393.179695][T19535] r8152-cfgselector 4-1: USB disconnect, device number 35 [ 2393.390988][ T30] audit: type=1800 audit(1756570760.133:6889): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4169" name="bus" dev="ramfs" ino=98936 res=0 errno=0 [ 2393.436110][T25874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2393.460621][T25874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2393.479187][ T5855] usb 5-1: USB disconnect, device number 32 [ 2394.183613][T25838] usblp0: removed [ 2394.199320][T15048] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2394.275088][T15048] usb 2-1: USB disconnect, device number 28 [ 2394.324724][ T30] audit: type=1800 audit(1756570761.063:6890): pid=25898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4170" name="bus" dev="ramfs" ino=98946 res=0 errno=0 [ 2394.428835][T15048] usblp0: removed [ 2394.776754][T15048] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2394.964678][T15048] usb 2-1: Using ep0 maxpacket: 8 [ 2395.041311][T15048] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2395.071087][T15048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.092450][T15048] usb 2-1: Product: syz [ 2395.105922][T15048] usb 2-1: Manufacturer: syz [ 2395.131730][T15048] usb 2-1: SerialNumber: syz [ 2395.180546][T15048] usb 2-1: config 0 descriptor?? [ 2395.254744][T19535] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2395.400163][T15048] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2395.424708][T19535] usb 3-1: Using ep0 maxpacket: 32 [ 2395.453273][T19535] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 2395.463557][T19535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.473309][T19535] usb 3-1: Product: syz [ 2395.478033][T19535] usb 3-1: Manufacturer: syz [ 2395.482739][T19535] usb 3-1: SerialNumber: syz [ 2395.499151][T19535] usb 3-1: config 0 descriptor?? [ 2395.516749][T19535] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 2395.579022][T19535] usb 3-1: Found UVC 0.00 device syz (0d49:7000) [ 2395.592516][T19535] usb 3-1: No valid video chain found. [ 2395.958519][T25913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4175'. [ 2396.235825][T25926] FAULT_INJECTION: forcing a failure. [ 2396.235825][T25926] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.284062][T25926] CPU: 0 UID: 0 PID: 25926 Comm: syz.3.4179 Not tainted syzkaller #0 PREEMPT(full) [ 2396.284084][T25926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2396.284093][T25926] Call Trace: [ 2396.284100][T25926] [ 2396.284107][T25926] dump_stack_lvl+0x189/0x250 [ 2396.284140][T25926] ? __pfx____ratelimit+0x10/0x10 [ 2396.284173][T25926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2396.284199][T25926] ? __pfx__printk+0x10/0x10 [ 2396.284230][T25926] ? lock_acquire+0x175/0x360 [ 2396.284260][T25926] ? __pfx___might_resched+0x10/0x10 [ 2396.284281][T25926] should_fail_ex+0x414/0x560 [ 2396.284304][T25926] ? traverse+0xd9/0x570 [ 2396.284322][T25926] should_failslab+0xa8/0x100 [ 2396.284346][T25926] __kvmalloc_node_noprof+0x161/0x5f0 [ 2396.284369][T25926] ? traverse+0xd9/0x570 [ 2396.284391][T25926] traverse+0xd9/0x570 [ 2396.284410][T25926] ? aa_file_perm+0x13a/0x1550 [ 2396.284428][T25926] ? aa_file_perm+0x13a/0x1550 [ 2396.284445][T25926] seq_read_iter+0xcfe/0xe10 [ 2396.284471][T25926] ? __asan_memset+0x22/0x50 [ 2396.284492][T25926] seq_read+0x369/0x480 [ 2396.284508][T25926] ? __lock_acquire+0xab9/0xd20 [ 2396.284558][T25926] ? __pfx_seq_read+0x10/0x10 [ 2396.284601][T25926] ? __pfx_seq_read+0x10/0x10 [ 2396.284622][T25926] proc_reg_read+0x1e9/0x2e0 [ 2396.284723][T25926] vfs_readv+0x5a7/0x850 [ 2396.284743][T25926] ? __pfx_proc_reg_read+0x10/0x10 [ 2396.284771][T25926] ? __pfx_vfs_readv+0x10/0x10 [ 2396.284806][T25926] ? __fget_files+0x2a/0x420 [ 2396.284841][T25926] ? __fget_files+0x3a0/0x420 [ 2396.284870][T25926] ? __fget_files+0x2a/0x420 [ 2396.284910][T25926] __x64_sys_preadv+0x197/0x2a0 [ 2396.284957][T25926] ? __pfx___x64_sys_preadv+0x10/0x10 [ 2396.284983][T25926] ? rcu_is_watching+0x15/0xb0 [ 2396.285012][T25926] ? do_syscall_64+0xbe/0x3b0 [ 2396.285035][T25926] do_syscall_64+0xfa/0x3b0 [ 2396.285052][T25926] ? lockdep_hardirqs_on+0x9c/0x150 [ 2396.285081][T25926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.285101][T25926] ? clear_bhb_loop+0x60/0xb0 [ 2396.285126][T25926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.285145][T25926] RIP: 0033:0x7fed1238ebe9 [ 2396.285164][T25926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2396.285181][T25926] RSP: 002b:00007fed131b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2396.285202][T25926] RAX: ffffffffffffffda RBX: 00007fed125c5fa0 RCX: 00007fed1238ebe9 [ 2396.285217][T25926] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 2396.285230][T25926] RBP: 00007fed131b1090 R08: 0000000000000000 R09: 0000000000000000 [ 2396.285242][T25926] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 2396.285253][T25926] R13: 00007fed125c6038 R14: 00007fed125c5fa0 R15: 00007fed126efa28 [ 2396.285286][T25926] [ 2397.090526][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4181'. [ 2397.100595][T25931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4181'. [ 2397.132334][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4181'. [ 2397.142436][T25931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4181'. [ 2397.152516][T15048] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2397.178112][T15048] usb 2-1: USB disconnect, device number 29 [ 2397.855109][T15048] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2398.035892][T15048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2398.086531][T15048] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2398.117133][T15048] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2398.192889][T15048] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2398.222419][T15048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.257317][T15048] usb 4-1: Product: syz [ 2398.274308][T15048] usb 4-1: Manufacturer: syz [ 2398.296833][T15048] usb 4-1: SerialNumber: syz [ 2398.319590][ T5855] usb 3-1: USB disconnect, device number 10 [ 2398.342218][T15048] hub 4-1:1.0: bad descriptor, ignoring hub [ 2398.362693][T15048] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2398.563006][T15048] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2398.854710][T19535] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2398.879588][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4191'. [ 2398.962300][T25963] batadv0: entered promiscuous mode [ 2398.968159][T25963] vlan2: entered promiscuous mode [ 2399.007314][T19535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2399.032857][T19535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2399.046831][T19535] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2399.056600][T19535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2399.088102][T19535] usb 2-1: config 0 descriptor?? [ 2399.154751][T25936] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 2399.202932][T25971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4196'. [ 2399.464735][ T45] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2399.505699][T19535] sony 0003:054C:024B.000E: unexpected long global item [ 2399.513690][T19535] sony 0003:054C:024B.000E: parse failed [ 2399.523797][T19535] sony 0003:054C:024B.000E: probe with driver sony failed with error -22 [ 2399.614702][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 2399.622915][ T45] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2399.631541][ T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2399.642727][ T45] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2399.654604][ T45] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2399.667974][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2399.677101][ T45] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2399.686682][ T45] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2399.695298][ T45] usb 5-1: Product: syz [ 2399.699583][ T45] usb 5-1: Manufacturer: syz [ 2399.704210][ T45] usb 5-1: SerialNumber: syz [ 2399.714232][ T45] usb 5-1: config 0 descriptor?? [ 2399.724354][T19535] usb 2-1: USB disconnect, device number 30 [ 2399.727123][ T45] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2399.762157][ T45] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 2399.938684][ T45] usb 5-1: USB disconnect, device number 34 [ 2399.952646][ T45] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 2400.214060][T25979] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2400.320038][T25984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4200'. [ 2400.367396][T25984] vlan3: entered allmulticast mode [ 2400.380553][T25984] veth0_to_bond: entered allmulticast mode [ 2400.625307][T25402] usb 4-1: USB disconnect, device number 36 [ 2400.653732][T25402] usblp0: removed [ 2403.073567][ T30] audit: type=1326 audit(1756570769.783:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2403.556231][ T30] audit: type=1326 audit(1756570769.783:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2404.405417][ T30] audit: type=1326 audit(1756570769.793:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2404.494881][ T30] audit: type=1326 audit(1756570769.793:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2404.518850][ T30] audit: type=1326 audit(1756570769.793:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2404.541298][ C1] vkms_vblank_simulate: vblank timer overrun [ 2404.667339][ T30] audit: type=1326 audit(1756570769.793:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2404.689801][ C1] vkms_vblank_simulate: vblank timer overrun [ 2404.772055][ T30] audit: type=1326 audit(1756570769.793:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2404.801083][ T30] audit: type=1326 audit(1756570769.793:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2404.829429][ T30] audit: type=1326 audit(1756570769.803:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2404.875511][ T30] audit: type=1326 audit(1756570769.803:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff198ebe9 code=0x7ffc0000 [ 2405.728915][T26052] FAULT_INJECTION: forcing a failure. [ 2405.728915][T26052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2405.742740][T26052] CPU: 1 UID: 0 PID: 26052 Comm: syz.3.4220 Not tainted syzkaller #0 PREEMPT(full) [ 2405.742760][T26052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2405.742770][T26052] Call Trace: [ 2405.742777][T26052] [ 2405.742783][T26052] dump_stack_lvl+0x189/0x250 [ 2405.742805][T26052] ? __pfx____ratelimit+0x10/0x10 [ 2405.742827][T26052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2405.742844][T26052] ? __pfx__printk+0x10/0x10 [ 2405.742865][T26052] ? __might_fault+0xb0/0x130 [ 2405.742893][T26052] should_fail_ex+0x414/0x560 [ 2405.742916][T26052] _copy_from_user+0x2d/0xb0 [ 2405.742933][T26052] __sys_sendto+0x25c/0x520 [ 2405.742952][T26052] ? __pfx___sys_sendto+0x10/0x10 [ 2405.742970][T26052] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2405.743002][T26052] ? __fget_files+0x3a0/0x420 [ 2405.743051][T26052] ? ksys_write+0x22a/0x250 [ 2405.743072][T26052] ? __pfx_ksys_write+0x10/0x10 [ 2405.743089][T26052] ? rcu_is_watching+0x15/0xb0 [ 2405.743109][T26052] __x64_sys_sendto+0xde/0x100 [ 2405.743126][T26052] do_syscall_64+0xfa/0x3b0 [ 2405.743139][T26052] ? lockdep_hardirqs_on+0x9c/0x150 [ 2405.743160][T26052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.743175][T26052] ? clear_bhb_loop+0x60/0xb0 [ 2405.743193][T26052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.743207][T26052] RIP: 0033:0x7fed1238ebe9 [ 2405.743222][T26052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2405.743235][T26052] RSP: 002b:00007fed131b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2405.743251][T26052] RAX: ffffffffffffffda RBX: 00007fed125c5fa0 RCX: 00007fed1238ebe9 [ 2405.743262][T26052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2405.743271][T26052] RBP: 00007fed131b1090 R08: 00002000000001c0 R09: 000000000000001c [ 2405.743281][T26052] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 2405.743290][T26052] R13: 00007fed125c6038 R14: 00007fed125c5fa0 R15: 00007fed126efa28 [ 2405.743312][T26052] [ 2405.943766][ C1] vkms_vblank_simulate: vblank timer overrun [ 2406.190432][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.199749][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.534759][T15048] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2406.702322][T15048] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2406.711784][T15048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.724815][T15048] usb 4-1: Product: syz [ 2406.729033][T15048] usb 4-1: Manufacturer: syz [ 2406.733900][T15048] usb 4-1: SerialNumber: syz [ 2407.074944][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2407.204829][ T45] usb 3-1: device descriptor read/64, error -71 [ 2407.634920][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2407.781570][ T45] usb 3-1: device descriptor read/64, error -71 [ 2407.909898][ T45] usb usb3-port1: attempt power cycle [ 2408.314786][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2408.335522][ T45] usb 3-1: device descriptor read/8, error -71 [ 2408.605129][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2408.665666][ T45] usb 3-1: device descriptor read/8, error -71 [ 2408.932738][ T45] usb usb3-port1: unable to enumerate USB device [ 2409.554664][ T45] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2409.567916][T15048] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 2409.600306][T15048] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 2409.613105][T15048] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2409.629933][T15048] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2409.650357][T15048] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2409.691802][T15048] usb 4-1: USB disconnect, device number 37 [ 2409.726141][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 2409.737651][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2409.771667][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2409.793678][ T45] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2409.806136][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.818456][ T45] usb 5-1: Product: syz [ 2409.823683][ T45] usb 5-1: Manufacturer: syz [ 2409.829929][ T45] usb 5-1: SerialNumber: syz [ 2409.845531][ T45] usb 5-1: config 0 descriptor?? [ 2409.888565][ T45] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2409.915416][ T45] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 2410.245755][T15048] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2410.415725][T15048] usb 3-1: Using ep0 maxpacket: 16 [ 2410.423532][T15048] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2410.437526][T15048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2410.454021][T15048] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2410.463272][T15048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.471526][T15048] usb 3-1: Product: syz [ 2410.475822][T15048] usb 3-1: Manufacturer: syz [ 2410.480448][T15048] usb 3-1: SerialNumber: syz [ 2410.488836][T15048] usb 3-1: config 0 descriptor?? [ 2410.496893][ T45] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2410.499386][T15048] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2410.515452][ T45] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 2410.516148][T15048] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 2410.544763][T19535] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 2410.574750][ T5855] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2410.696783][T19535] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2410.709467][T19535] usb 2-1: config 0 has no interface number 0 [ 2410.715852][T19535] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2410.731534][T19535] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2410.735543][ T5855] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2410.742721][T19535] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2410.759926][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.772195][ T5855] usb 4-1: Product: syz [ 2410.776947][ T5855] usb 4-1: Manufacturer: syz [ 2410.781587][ T5855] usb 4-1: SerialNumber: syz [ 2410.781588][T19535] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2410.795766][ T5855] usb 4-1: config 0 descriptor?? [ 2410.803819][T19535] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2410.811549][ T5855] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2410.814791][T19535] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2410.814846][T19535] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2410.814897][T19535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.826284][T19535] usb 2-1: config 0 descriptor?? [ 2410.858727][T26110] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2410.866373][T26110] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2410.878483][T19535] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2411.073367][T26111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2411.088672][T26111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2411.118466][T15048] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2411.125553][T15048] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 2411.136376][ T45] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 2411.144481][ T45] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 2411.345144][ T5855] sonixb 4-1:0.0: Error reading register 00: -110 [ 2411.742733][T15048] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 2411.759118][T15048] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 2411.766670][T15048] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 2411.775029][ T45] em28xx 5-1:0.0: AC97 command still being executed: not handled properly! [ 2411.783951][ T45] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 2411.966850][ T45] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 2411.979741][ T45] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 2411.995171][ T45] usb 5-1: USB disconnect, device number 35 [ 2412.803655][T15048] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 2412.837027][T15048] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 2412.856728][T15048] usb 3-1: USB disconnect, device number 15 [ 2413.225871][T15048] usb 4-1: USB disconnect, device number 38 [ 2413.352873][ T5855] usb 2-1: USB disconnect, device number 31 [ 2413.386130][ T5855] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2413.553979][ T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 2413.570978][ T45] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2413.790711][T15048] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2414.798393][T15048] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2414.807941][T15048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.862496][T26139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2414.959013][T15048] usb 4-1: Product: syz [ 2414.972500][T15048] usb 4-1: Manufacturer: syz [ 2414.983100][T15048] usb 4-1: SerialNumber: syz [ 2415.755584][T26148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2416.031791][T26152] FAULT_INJECTION: forcing a failure. [ 2416.031791][T26152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2416.099371][T26152] CPU: 1 UID: 0 PID: 26152 Comm: syz.4.4252 Not tainted syzkaller #0 PREEMPT(full) [ 2416.099401][T26152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2416.099415][T26152] Call Trace: [ 2416.099423][T26152] [ 2416.099433][T26152] dump_stack_lvl+0x189/0x250 [ 2416.099464][T26152] ? __pfx____ratelimit+0x10/0x10 [ 2416.099496][T26152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2416.099522][T26152] ? __pfx__printk+0x10/0x10 [ 2416.099551][T26152] ? __might_fault+0xb0/0x130 [ 2416.099593][T26152] should_fail_ex+0x414/0x560 [ 2416.099627][T26152] _copy_from_user+0x2d/0xb0 [ 2416.099653][T26152] ucma_write+0x158/0x2e0 [ 2416.099806][T26152] ? __pfx_ucma_write+0x10/0x10 [ 2416.099837][T26152] ? security_file_permission+0x75/0x290 [ 2416.099868][T26152] ? rw_verify_area+0x255/0x4d0 [ 2416.099894][T26152] ? __lock_acquire+0xab9/0xd20 [ 2416.099922][T26152] ? __pfx_ucma_write+0x10/0x10 [ 2416.099960][T26152] vfs_write+0x27e/0xb30 [ 2416.099997][T26152] ? __pfx_vfs_write+0x10/0x10 [ 2416.100027][T26152] ? __fget_files+0x2a/0x420 [ 2416.100062][T26152] ? __fget_files+0x2a/0x420 [ 2416.100091][T26152] ? __fget_files+0x3a0/0x420 [ 2416.100129][T26152] ? __fget_files+0x2a/0x420 [ 2416.100170][T26152] ksys_write+0x145/0x250 [ 2416.100201][T26152] ? __pfx_ksys_write+0x10/0x10 [ 2416.100233][T26152] ? rcu_is_watching+0x15/0xb0 [ 2416.100260][T26152] ? do_syscall_64+0xbe/0x3b0 [ 2416.100285][T26152] do_syscall_64+0xfa/0x3b0 [ 2416.100303][T26152] ? lockdep_hardirqs_on+0x9c/0x150 [ 2416.100333][T26152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2416.100354][T26152] ? clear_bhb_loop+0x60/0xb0 [ 2416.100380][T26152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2416.100400][T26152] RIP: 0033:0x7f81aaf8ebe9 [ 2416.100421][T26152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2416.100440][T26152] RSP: 002b:00007f81abe36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2416.100461][T26152] RAX: ffffffffffffffda RBX: 00007f81ab1c5fa0 RCX: 00007f81aaf8ebe9 [ 2416.100478][T26152] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 2416.100491][T26152] RBP: 00007f81abe36090 R08: 0000000000000000 R09: 0000000000000000 [ 2416.100504][T26152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2416.100516][T26152] R13: 00007f81ab1c6038 R14: 00007f81ab1c5fa0 R15: 00007f81ab2efa28 [ 2416.100554][T26152] [ 2416.340991][ C1] vkms_vblank_simulate: vblank timer overrun [ 2416.563086][T26158] gretap0: entered promiscuous mode [ 2416.570118][T26158] vlan2: entered promiscuous mode [ 2416.694739][ T45] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2416.814637][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2416.846653][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2416.860897][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58727, setting to 1024 [ 2416.874383][ T45] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2416.894711][ T5855] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2416.910932][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.926924][ T45] usb 2-1: config 0 descriptor?? [ 2416.989607][T15048] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2417.012983][T15048] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2417.033269][T15048] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2417.050587][T15048] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2417.055015][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 2417.067141][ T5855] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2417.073506][T15048] usb 4-1: USB disconnect, device number 39 [ 2417.090040][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 2417.103622][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2417.115268][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2417.125499][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2417.135756][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2417.149840][ T5855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 2417.193670][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2417.203482][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 2417.215743][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 2417.256358][ T5855] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2417.269545][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.287240][ T5855] usb 5-1: Product: syz [ 2417.291773][ T5855] usb 5-1: Manufacturer: syz [ 2417.300962][ T5855] usb 5-1: SerialNumber: syz [ 2417.958311][ T5855] usb 5-1: config 0 descriptor?? [ 2417.992697][ T5855] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2418.050455][ T45] ath6kl: Failed to submit usb control message: -110 [ 2418.065327][ T45] ath6kl: unable to send the bmi data to the device: -110 [ 2418.075522][ T45] ath6kl: Unable to send get target info: -110 [ 2418.087141][ T45] ath6kl: Failed to init ath6kl core: -110 [ 2418.102427][ T45] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2418.316586][T26180] loop6: detected capacity change from 0 to 7 [ 2418.344425][T26180] Dev loop6: unable to read RDB block 7 [ 2418.394623][T26180] loop6: unable to read partition table [ 2418.454864][T26180] loop6: partition table beyond EOD, truncated [ 2418.495566][T26180] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2418.570379][T19535] usb 2-1: USB disconnect, device number 32 [ 2418.650442][T26187] udevd[26187]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2418.781989][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4258'. [ 2418.833681][T26186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2418.874970][T26186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2418.952520][T19535] usb 5-1: USB disconnect, device number 36 [ 2419.472715][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2419.472731][ T30] audit: type=1800 audit(1756570786.203:6907): pid=26196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4264" name="bus" dev="ramfs" ino=101013 res=0 errno=0 [ 2419.976073][T26211] netlink: 'syz.2.4269': attribute type 33 has an invalid length. [ 2421.018218][T26211] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4269'. [ 2421.058006][ T30] audit: type=1326 audit(1756570787.803:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26209 comm="syz.3.4267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed1238ebe9 code=0x0 [ 2424.204695][T19535] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2424.359699][T26253] futex_wake_op: syz.0.4279 tries to shift op by 32; fix this program [ 2424.438229][T19535] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 2424.455911][T19535] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 2424.589516][T19535] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2424.662752][T19535] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 2424.672574][T19535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.721410][T19535] usb 4-1: Product: syz [ 2424.725944][T19535] usb 4-1: Manufacturer: syz [ 2424.730663][T19535] usb 4-1: SerialNumber: syz [ 2424.754379][T26247] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2424.765625][T26247] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2425.895318][ T5949] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2426.081456][ T5949] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2426.111153][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2426.172089][ T5949] usb 3-1: Product: syz [ 2426.202483][ T5949] usb 3-1: Manufacturer: syz [ 2426.228345][ T5949] usb 3-1: SerialNumber: syz [ 2426.448763][T26261] delete_channel: no stack [ 2427.279898][ T30] audit: type=1800 audit(1756570794.023:6909): pid=26278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4284" name="bus" dev="ramfs" ino=102026 res=0 errno=0 [ 2427.946047][T19535] rtl8150 4-1:1.0: couldn't reset the device [ 2427.952581][T19535] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 2428.302709][T19535] usb 4-1: USB disconnect, device number 40 [ 2428.529052][ T5949] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2428.564886][ T5949] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2428.599858][ T5949] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2428.645291][ T5949] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2428.695504][ T5949] usb 3-1: USB disconnect, device number 16 [ 2428.874820][T22287] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2429.048366][T22287] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2429.073563][T22287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.143021][T22287] usb 2-1: Product: syz [ 2429.158652][T22287] usb 2-1: Manufacturer: syz [ 2429.181229][T22287] usb 2-1: SerialNumber: syz [ 2429.464883][T22579] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2429.504033][T22579] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2429.513721][T22579] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2429.545227][T22579] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2429.725518][ T5855] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2429.886993][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2429.896280][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2429.983918][ T5855] usb 5-1: config 0 descriptor?? [ 2430.007938][ T5855] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2430.295716][ T5855] gspca_stv06xx: I2C: Read error writing address: -71 [ 2430.306748][ T5855] usb 5-1: USB disconnect, device number 37 [ 2431.583881][T26323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2431.768966][T22287] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2431.793617][T22287] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2431.823692][T22287] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2431.865613][T22287] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2431.896376][T22287] usb 2-1: USB disconnect, device number 33 [ 2432.798891][ T30] audit: type=1800 audit(1756570799.503:6910): pid=26346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4303" name="bus" dev="ramfs" ino=101203 res=0 errno=0 [ 2434.734689][T22287] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2434.907987][T22287] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2434.928424][T26367] input: syz1 as /devices/virtual/input/input74 [ 2434.948161][T22287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2435.034106][T22287] usb 2-1: config 0 descriptor?? [ 2435.060750][T26372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2435.091985][T22287] cp210x 2-1:0.0: cp210x converter detected [ 2435.240960][T26374] netlink: 'syz.2.4312': attribute type 3 has an invalid length. [ 2435.259296][T26374] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4312'. [ 2435.277513][ T5855] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2435.302918][T22287] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2435.451461][ T5855] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2435.481628][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.523311][T26360] loop6: detected capacity change from 0 to 7 [ 2435.534572][ T5855] usb 4-1: Product: syz [ 2435.545157][ T5855] usb 4-1: Manufacturer: syz [ 2435.554599][ T5855] usb 4-1: SerialNumber: syz [ 2435.587987][T26360] Dev loop6: unable to read RDB block 7 [ 2435.614447][T26360] loop6: AHDI p1 p2 [ 2435.623067][T26360] loop6: partition table partially beyond EOD, truncated [ 2435.720769][T26360] loop6: p1 start 926365495 is beyond EOD, truncated [ 2436.239254][T26380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2437.294606][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2437.732903][ T45] usb 2-1: USB disconnect, device number 34 [ 2437.946985][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2438.162456][ T45] cp210x 2-1:0.0: device disconnected [ 2438.182186][ T5855] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2438.223648][ T5855] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2438.248344][ T5855] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2438.405726][ T5855] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2438.434770][T26399] [ 2438.437160][T26399] ============================================ [ 2438.443310][T26399] WARNING: possible recursive locking detected [ 2438.449466][T26399] syzkaller #0 Not tainted [ 2438.453876][T26399] -------------------------------------------- [ 2438.460023][T26399] syz.1.4316/26399 is trying to acquire lock: [ 2438.466081][T26399] ffff88805aed0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 2438.477132][T26399] [ 2438.477132][T26399] but task is already holding lock: [ 2438.484494][T26399] ffff88805aed0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 2438.494343][T26399] and the lock comparison function returns 0: [ 2438.500403][T26399] [ 2438.500403][T26399] other info that might help us debug this: [ 2438.508452][T26399] Possible unsafe locking scenario: [ 2438.508452][T26399] [ 2438.515912][T26399] CPU0 [ 2438.519190][T26399] ---- [ 2438.522472][T26399] lock(&dev_instance_lock_key#20); [ 2438.527769][T26399] lock(&dev_instance_lock_key#20); [ 2438.533081][T26399] [ 2438.533081][T26399] *** DEADLOCK *** [ 2438.533081][T26399] [ 2438.541224][T26399] May be due to missing lock nesting notation [ 2438.541224][T26399] [ 2438.549540][T26399] 2 locks held by syz.1.4316/26399: [ 2438.554736][T26399] #0: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 2438.563806][T26399] #1: ffff88805aed0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 2438.574091][T26399] [ 2438.574091][T26399] stack backtrace: [ 2438.579984][T26399] CPU: 0 UID: 0 PID: 26399 Comm: syz.1.4316 Not tainted syzkaller #0 PREEMPT(full) [ 2438.580005][T26399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2438.580016][T26399] Call Trace: [ 2438.580025][T26399] [ 2438.580032][T26399] dump_stack_lvl+0x189/0x250 [ 2438.580056][T26399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2438.580076][T26399] ? __pfx__printk+0x10/0x10 [ 2438.580101][T26399] ? print_lock_name+0xde/0x100 [ 2438.580124][T26399] print_deadlock_bug+0x28b/0x2a0 [ 2438.580143][T26399] validate_chain+0x1a3f/0x2140 [ 2438.580162][T26399] ? stack_trace_save+0x9c/0xe0 [ 2438.580181][T26399] ? __pfx_stack_trace_save+0x10/0x10 [ 2438.580204][T26399] __lock_acquire+0xab9/0xd20 [ 2438.580229][T26399] ? __netdev_update_features+0xcb1/0x1be0 [ 2438.580249][T26399] lock_acquire+0x120/0x360 [ 2438.580270][T26399] ? __netdev_update_features+0xcb1/0x1be0 [ 2438.580294][T26399] __mutex_lock+0x187/0x1350 [ 2438.580310][T26399] ? __netdev_update_features+0xcb1/0x1be0 [ 2438.580330][T26399] ? __lock_acquire+0xab9/0xd20 [ 2438.580354][T26399] ? __netdev_update_features+0xcb1/0x1be0 [ 2438.580374][T26399] ? __pfx___mutex_lock+0x10/0x10 [ 2438.580395][T26399] __netdev_update_features+0xcb1/0x1be0 [ 2438.580420][T26399] ? __pfx___netdev_update_features+0x10/0x10 [ 2438.580440][T26399] ? __lock_acquire+0xab9/0xd20 [ 2438.580466][T26399] ? __lock_acquire+0xab9/0xd20 [ 2438.580497][T26399] netdev_change_features+0x72/0xd0 [ 2438.580515][T26399] ? __pfx_netdev_change_features+0x10/0x10 [ 2438.580534][T26399] ? __team_compute_features+0x23/0x4c0 [ 2438.580631][T26399] ? __team_compute_features+0x456/0x4c0 [ 2438.580652][T26399] ? __team_compute_features+0x23/0x4c0 [ 2438.580673][T26399] team_device_event+0x400/0x600 [ 2438.580714][T26399] notifier_call_chain+0x1b6/0x3e0 [ 2438.580771][T26399] netdev_features_change+0x85/0xc0 [ 2438.580815][T26399] ? __pfx_netdev_features_change+0x10/0x10 [ 2438.580856][T26399] ? security_capable+0x7e/0x2e0 [ 2438.580921][T26399] dev_ethtool+0x1536/0x19b0 [ 2438.580945][T26399] ? __pfx_dev_ethtool+0x10/0x10 [ 2438.580967][T26399] ? __rcu_read_unlock+0x84/0xe0 [ 2438.581005][T26399] ? dev_load+0x21/0x1f0 [ 2438.581073][T26399] dev_ioctl+0x392/0x1150 [ 2438.581099][T26399] sock_do_ioctl+0x22c/0x300 [ 2438.581124][T26399] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2438.581144][T26399] ? __lock_acquire+0xab9/0xd20 [ 2438.581172][T26399] sock_ioctl+0x576/0x790 [ 2438.581193][T26399] ? __pfx_sock_ioctl+0x10/0x10 [ 2438.581212][T26399] ? __fget_files+0x2a/0x420 [ 2438.581236][T26399] ? __fget_files+0x3a0/0x420 [ 2438.581260][T26399] ? __fget_files+0x2a/0x420 [ 2438.581284][T26399] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2438.581305][T26399] ? __pfx_sock_ioctl+0x10/0x10 [ 2438.581324][T26399] __se_sys_ioctl+0xf9/0x170 [ 2438.581344][T26399] do_syscall_64+0xfa/0x3b0 [ 2438.581359][T26399] ? lockdep_hardirqs_on+0x9c/0x150 [ 2438.581382][T26399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2438.581398][T26399] ? clear_bhb_loop+0x60/0xb0 [ 2438.581416][T26399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2438.581433][T26399] RIP: 0033:0x7f2d39f8ebe9 [ 2438.581450][T26399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2438.581465][T26399] RSP: 002b:00007f2d3ae61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2438.581483][T26399] RAX: ffffffffffffffda RBX: 00007f2d3a1c6270 RCX: 00007f2d39f8ebe9 [ 2438.581495][T26399] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c [ 2438.581506][T26399] RBP: 00007f2d3a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2438.581516][T26399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2438.581527][T26399] R13: 00007f2d3a1c6308 R14: 00007f2d3a1c6270 R15: 00007f2d3a2efa28 [ 2438.581545][T26399] [ 2439.357790][ T5855] usb 4-1: USB disconnect, device number 41