last executing test programs: 9m6.604635653s ago: executing program 1 (id=442): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000001ec0)=""/4083, 0xff3}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000000540)=""/190, 0xbe}, {&(0x7f0000000380)=""/97, 0x61}], 0x7}, 0x100) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40010) (async) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40010) 9m6.52892615s ago: executing program 1 (id=443): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x19, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4e, 0xf5, 0xa}}}}}]}}]}}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d00)={0x24, &(0x7f0000000c40)={0x20, 0x0, 0x6, {0x2, 0x31}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x3, "b870"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x89b}}}}, 0x0) 9m4.656678896s ago: executing program 1 (id=448): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000ffffab", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c"]}]}, 0x5c}], 0x1}, 0x300) 9m4.386808937s ago: executing program 1 (id=451): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0xffffffffffffff52}}, 0x1006) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000300)={0xa, 0x4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x9, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x400, 0xc0, 0xd}, 0x18) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000240)={{r3}, 0x6, &(0x7f0000000180)=[0x6, 0x9, 0x3, 0x7fffffff, 0x7f, 0x1ff], 0x8a, 0x3, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000020601080000000600000000000000000e0003006269746d61703a6970000000050004000000000900ff7f00000000000000002000078005001400040000000c0001800800010080ffffff0500030000000000050005000200000005000100068e9de3bd9fd498fa0252821db8029dc081d3190630fbaf47ff0d84403a23d8f2921d888b023c54c1942c6e368b1878a827cbef1ad78c79184dbb56321d3b10e7602af198b54be5fcebe3fd9c87488675fb0669f3330163ae457095879ba0f02e57988266eebd"], 0x68}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d11, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0xffffffffffffff52}}, 0x1006) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000300)={0xa, 0x4}, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) syz_open_dev$MSR(&(0x7f0000000080), 0x9, 0x0) (async) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x400, 0xc0, 0xd}, 0x18) (async) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000240)={{r3}, 0x6, &(0x7f0000000180)=[0x6, 0x9, 0x3, 0x7fffffff, 0x7f, 0x1ff], 0x8a, 0x3, 0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000020601080000000600000000000000000e0003006269746d61703a6970000000050004000000000900ff7f00000000000000002000078005001400040000000c0001800800010080ffffff0500030000000000050005000200000005000100068e9de3bd9fd498fa0252821db8029dc081d3190630fbaf47ff0d84403a23d8f2921d888b023c54c1942c6e368b1878a827cbef1ad78c79184dbb56321d3b10e7602af198b54be5fcebe3fd9c87488675fb0669f3330163ae457095879ba0f02e57988266eebd"], 0x68}}, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d11, &(0x7f00000002c0)) (async) 9m4.164324208s ago: executing program 1 (id=453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x4d, 0x0, "9850aefd374fa3fc96567405ccb772853e8109351ec3c12b48638e2f762b40660780cb75ff882832d6a1c6c20a4cb282ea619fda84db39d95685779f5e954229f79180bbeeb9939d81af21c28840e280"}, 0xd8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) 9m3.644072263s ago: executing program 1 (id=457): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x19, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4e, 0xf5, 0xa}}}}}]}}]}}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d00)={0x24, &(0x7f0000000c40)={0x20, 0x0, 0x6, {0x2, 0x31}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x3, "b870"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x89b}}}}, 0x0) 9m3.268671244s ago: executing program 32 (id=457): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x19, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4e, 0xf5, 0xa}}}}}]}}]}}, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d00)={0x24, &(0x7f0000000c40)={0x20, 0x0, 0x6, {0x2, 0x31}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x3, "b870"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x89b}}}}, 0x0) 7m39.576548768s ago: executing program 4 (id=988): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002113bfcfa901b6dddd67ed8adcf73ff142405053e0603234e2838af922f610b463b96f664e68ccf2f201d95fefc41cb73b06ee381085dd8728f9e6566515571fbe7c9c9871b55419132bc7b8b54349518c1ddcf2c0d8f3b1e8c88c270ecca320d7c58ae23bf506f59851b59854ec146c9b1fb9d79f08f341b1036526624f7600e07752354c595193b6b9cbfe8c9ab98a197630fca81fb5a6f96c3012cfa33007bb5b3ef644f17b6e421744c7433bb8860"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000200)='R', 0x1) syz_usb_disconnect(r1) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x27, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x164, &(0x7f0000000200)=ANY=[@ANYBLOB="5d01004e689544c1da98352f1b429a6bc19632b77a2d3cbde3674b55f60dacce1dc20b15344706373e7092260f2a140adacb43471f78a2953c86ea97f25ca4e653c6e9eb60aaa79ba486e1c0b3d38c1a7b7f6bd915dd21ca98dc1bba06d794c01d86a7e17c98d7419432727193b57947d0c1413b30cf58b8bbc6ad110ac116c7bbb909abbee5cc16e913b9ea09e5c10332a37dbb894c0f1f0e49119efd5254017dc6791d6fbbbf6cfdcb8db76970c734bd07c63aaaba8fdfc19cca6e9ca6374a892c825206840b973a3e918fcd93c7c4a29db5092cfdf67831ec4609b535d5e275180bc211851e2dbb33bdcda15263236ae9fe900532867ffb8859bf81ca3cd41a49344fee18afd64879f8db0bddabca5ceebfbff53fc0df5ee30169138c3428c3d95c39ae74143e6e6e9d8346982df996eca6b0e8ec08002bed7d347bfb56f30fb20d12ebc137ba85ac52706dec22eb6e551af174cafe"]) 7m36.559310291s ago: executing program 4 (id=1012): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f00000000c0)='&\x00\x00\x00\"', 0x5) (rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendto$packet(r2, 0x0, 0x0, 0x90, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async, rerun: 64) bind$tipc(r0, 0x0, 0x0) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a00010d000009000000000004000080080004"], 0x1c}], 0x1}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) 7m36.324264699s ago: executing program 4 (id=1013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1}, 0xd}], 0x1, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00', @ANYRESOCT], 0x44}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7m36.14654018s ago: executing program 4 (id=1014): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(r0, 0x4004743b, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x0, 0x5, 0x3, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x2, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x36, 0x1, 0x0, "3a649f5edf27acce030e1f60ae2726d20fb09634b50b865066c27811ca55e21f"}) 7m36.020784568s ago: executing program 4 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="b8aa59e57b18ac38e2aa812431f4ef38", 0x10) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="b8aa59e57b18ac38e2aa812431f4ef38", 0x10) close(r0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x8000000, 0x0, 0xc880}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) userfaultfd(0x80001) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00005e9000/0x3000)=nil, 0x3000}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00005e9000/0x3000)=nil, 0x3000}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x40946400, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7m35.900486176s ago: executing program 4 (id=1016): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c"]}]}, 0x5c}], 0x1}, 0x300) 7m20.295548208s ago: executing program 33 (id=1016): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c"]}]}, 0x5c}], 0x1}, 0x300) 8.177944739s ago: executing program 5 (id=3231): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000002680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8\x9e\x95\xdfa\xd5\xafA)t\x7fV\xf9\xe1\xe7\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15H\x84\xb8\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xfd\xff\xff\xff\xff\xff\xff\xff\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xce\xe7\xc0\xe6v\xb5\xf5\x9d\x90W\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb-\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z\x00\xf8/\xcf\xc2\xb0\r\xde\xa3\x8aw\xf1C\x94\xb6\xf7\xde\"\xbe\xffk|\xaa\x0ez9f\b\xa9\f\xedW\xafe07\x1fP\xe0\x98\n\x93;\xea\x9b\x8c\x0f\x9d\x1a$\xe0\xa4\xd7\xc2\xe5b\xe29\xa8\xba\xc4)_\x99\xb6\xd8\xd5\xd9\x9c\xb5,]n\xeba\xbf\xc3!\x88X\x9a\xd9\x8b\xdcRF\x86\x87[\xb9\xb1\x04m\xf1Q9\x10)fZV\xd7N\xa5\x91\xa0\x12.H^\tH\xe5\x1f\x9b\x06\xad\xb8\xf2\x004G\r\xa8a\a\xf2\xbd\xa9\xd1\xe2\xd72!O\xe7C\xbb\xaawzn$\x11j\t\xc1c\xf2\xf2~\xa1@\xf60e`\x17)X\xc8(\x1b\xafJ*\xec\x16_\xcc\xbe\x85\xc4\xa4\x88\x00d\xaf!\xdd\x9e\x84W\xba\xd2\x7f;\x12\r\x01\f\x9b\xc7*.\xd84Ce).\xd7[\xdd\x87F\x19\x15\x84\x0eU\xa4P\xbdgf\xca\x8e\xa0\xc1\x04\xaf\xacj\xd9\xffQ', 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00008d4000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x5454c000) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) (fail_nth: 3) 7.620643875s ago: executing program 5 (id=3232): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000566e4c9afbdbdf250c000000100004800900010073797a3000000000380006800800068000000000080001000e000000040002000800060005000000040005000400020008000100c2f70000080006000e0000000c00078008000100ffff00000c0002800800020000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x8010) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x28001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000001000818804", 0x9}], 0x1}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x1e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0xf00, 0x5e}) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x204082, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000004180)="f2f30f018d2300baf80c66b8ae1a858066efbafc0cec66b80f0000000f23d80f21f86635c00000800f23f80f20d86635080000000f22d8650fb27f27660f120e16490f01c9eebaf80c66b82c9be48866efbafc0c66b80b00000066ef0fc73e0000", 0x61}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)='[', 0x1}], 0x1) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f00000003c0)={@multicast1, @rand_addr, @loopback}, &(0x7f0000000400)=0xc) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000580)=""/98, &(0x7f0000000440)=0x62) socket(0x1e, 0x4, 0x0) 7.2524271s ago: executing program 0 (id=3235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000004ac0)=""/31, &(0x7f0000004b00)=0x1f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}, 'syz_tun\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'veth0_to_bridge\x00', {0x3}, 0x4}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={0xe0, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x42}}}}, [@NL80211_ATTR_BEACON_HEAD={0xb5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @from_mac, {0x0, 0xd1}}, 0xb, @random=0xa, 0x4019, @val={0x0, 0x10, @random="c0ce754aa2229e59d24d19ae79c70321"}, @val, @void, @void, @void, @val={0x5, 0x3, {0x4, 0xed, 0x1}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xb, 0xd, 0x8}}, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x8, 0x2d, 0x6}}, [{0xdd, 0x64, "569a0508d8b428d7f526cf677ba5739d8f4587e85e5ac206c234bc8c06901ee2c8b63f09453d1afda890dd4c791df917ae88c22d0a2adba7ae92cf4f036f65785df1d0fe61316758f45d9c891a31c8df926cac58b175a605297f74b6ec5d725e9fb440e1"}]}}]}, 0xe0}}, 0x400c020) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r2, &(0x7f00000000c0)="240000001e004b0214ffff0000edffff040018000200000000000040006f11264a50f19ea8a6", 0x26) 6.356613542s ago: executing program 0 (id=3239): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x7fff, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) (async) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)={0x40, 0x6, 0xc, {0xc, 0xd, "a17e9d4cc545bdaadc54"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.92457633s ago: executing program 3 (id=3242): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x8, 0x28, 0xe4d, 0x80, 0x7ff, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x3, 0x4, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.59763644s ago: executing program 5 (id=3246): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000ffffffffffffab5600", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c"]}]}, 0x5c}], 0x1}, 0x300) 4.411568742s ago: executing program 5 (id=3247): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc73ebdfa468265f4, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x5, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x6, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x3, 0xea}}}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0x0, 0x3}]}, 0x1, [{0x0, 0x0}]}) 3.710580555s ago: executing program 2 (id=3250): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback}}}], 0x20}, 0x4) 3.661797384s ago: executing program 2 (id=3251): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000002680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8\x9e\x95\xdfa\xd5\xafA)t\x7fV\xf9\xe1\xe7\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15H\x84\xb8\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xfd\xff\xff\xff\xff\xff\xff\xff\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xce\xe7\xc0\xe6v\xb5\xf5\x9d\x90W\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb-\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z\x00\xf8/\xcf\xc2\xb0\r\xde\xa3\x8aw\xf1C\x94\xb6\xf7\xde\"\xbe\xffk|\xaa\x0ez9f\b\xa9\f\xedW\xafe07\x1fP\xe0\x98\n\x93;\xea\x9b\x8c\x0f\x9d\x1a$\xe0\xa4\xd7\xc2\xe5b\xe29\xa8\xba\xc4)_\x99\xb6\xd8\xd5\xd9\x9c\xb5,]n\xeba\xbf\xc3!\x88X\x9a\xd9\x8b\xdcRF\x86\x87[\xb9\xb1\x04m\xf1Q9\x10)fZV\xd7N\xa5\x91\xa0\x12.H^\tH\xe5\x1f\x9b\x06\xad\xb8\xf2\x004G\r\xa8a\a\xf2\xbd\xa9\xd1\xe2\xd72!O\xe7C\xbb\xaawzn$\x11j\t\xc1c\xf2\xf2~\xa1@\xf60e`\x17)X\xc8(\x1b\xafJ*\xec\x16_\xcc\xbe\x85\xc4\xa4\x88\x00d\xaf!\xdd\x9e\x84W\xba\xd2\x7f;\x12\r\x01\f\x9b\xc7*.\xd84Ce).\xd7[\xdd\x87F\x19\x15\x84\x0eU\xa4P\xbdgf\xca\x8e\xa0\xc1\x04\xaf\xacj\xd9\xffQ', 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0xa7d, 0x0, 0x2}, {0x805, 0x0, 0xff}, {0xbd9, 0x0, 0x7fffffffffffffff}, {0x942, 0x0, 0x8000000000000001}, {0x823, 0x0, 0x80}, {0x2ec, 0x0, 0x1}, {0xae4, 0x0, 0x9}, {0x60000734, 0x0, 0x1}, {0x988, 0x0, 0x3}]}) mmap(&(0x7f00008d4000/0x2000)=nil, 0x2000, 0x800002, 0x11, r1, 0x5454c000) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 3.536444735s ago: executing program 3 (id=3252): syz_usb_connect(0x5, 0x59, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e01000018240201020253e89a"], 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async, rerun: 32) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = socket$inet(0x2, 0x3, 0x33) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "25ce416c", {0x3, 0x101, 0x0, 0x6, 0x8, 0x8, 0x2}}) (async, rerun: 32) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) (async, rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r4 = syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async) socket(0x2, 0xa, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') (async) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0812080003000601ff1fbdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async, rerun: 64) r9 = syz_open_dev$radio(&(0x7f0000000700), 0x3, 0x2) (async, rerun: 64) rt_tgsigqueueinfo(r4, r4, 0x3, &(0x7f0000000940)={0x31, 0x10, 0x3}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mtu(r10, 0x0, 0xa, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_STD(r11, 0x40085618, &(0x7f00000000c0)=0x8000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f0000000740)={0x0, 0x8, 0x1002, 0x1}) (async) preadv(r7, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/186, 0xba}], 0x1, 0x92bb, 0x21a) (async) syz_usb_connect$cdc_ncm(0x0, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="1201e4250200001025f0a0a44000010203010902aa00020102e0080904000001020d00000b240600019c453a16e3a905240001800d240f01060000009408f9ff05063d1a080034042402011524120700a317a88b045e4f01a607c0ffcb7e392a07240ae2b402080e24070802000500ffff03000f00152412d809a317a88b045e4f01a607c0ffcb7e392a05240102100905810340000000090904010000020d40000904010102020d0000090582020240000906d7"], &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x5e, 0x80, 0xf, 0x10, 0x8}, 0x121, &(0x7f0000000800)={0x5, 0xf, 0x121, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x5, 0x3b04}, @ssp_cap={0x20, 0x10, 0xa, 0x50, 0x5, 0x400, 0xf000, 0x0, [0xffc0c0, 0x0, 0x0, 0xff80b0, 0x3f0f]}, @generic={0xf5, 0x10, 0xa, "022d1ade626225d8e573499bebb6bba6649b870fd3c192788cb9a1d327bb06103ecfa4634be9ea56012e275d131b7e8cc6acd6e04a673a989af8ad97989db53a53848ca8fcc98c92dcaea28a8e48f3f7e23871525bda65f8d99986d9354be6a526024b38c11edf2f51ca42eb7cadb9bda17dfddaba3709c4d58e1fce75b2eccbad30dc5b887d877e2cf8ee929761d5d683faeba3d59257f9728fe70cd56929948b57ddc544f7550b211e1e4c59f57176ea11c39b68d2c2431ed429d05dbd6c0b4646148007861148b3fae044a7766b6085259fc8b4e175c5e7d674b19de13a110a7c6d946a09b8d2eda6a61001d3381efc49"}]}, 0x7, [{0xf2, &(0x7f0000000240)=@string={0xf2, 0x3, "132897bf628e85b46a6c75e04888591b72e1eeeed7a6011be99122a73fd6a293c2124765c7db75222e3763058c6da5997fcd41e1ddbcaee30e4fea67eb0289490c6a0b67c65b8c2b85418a2ea4302ddc4bd2c8f55f257216d74aee669e05dbe3c0eeae67b1c4bb1d15e43f935b92637d664ba412c5a660de95e32d72f6fea069e7216c88146d09c329b91a7c95ec66a8e398ea45aed1bfddd354197fbeff638c948cafc553e71aceb5bc68c5cf847e1c68d3aa71d27bf714bf1b65a2a7d79c8f7e0ed588bb5b81bfcabf7580b1d25bfc8e560385d73ba113f7acfb84dcf81d9e9d5c14b47bedddbc7e6fca1b518bdb49"}}, {0x15, &(0x7f0000000340)=@string={0x15, 0x3, "f34bda61c23e0a46a735cfd8080d70d00b839a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2801}}, {0x8d, &(0x7f00000003c0)=ANY=[@ANYBLOB="8d030ef97b0cf895d1b06c9e440cb4fd9f8b7a25c0cb8b767fd58767596502f08d264df98c36f65f53f436cdd0792444689736d1bc78dac5806c2612e750bf5451cc939aa595521cc173739f1165967ae1ce12bbea12dba97444f12851c8c4ddc1560989991d6d6bd64ffc1beb20b99df31355ed0aef36071ecccdcbb69fad3a47785ce055a1970f7f80a393fa"]}, {0x102, &(0x7f0000000480)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x43, &(0x7f0000000780)=@string={0x43, 0x3, "4d9fc07b319a154426bdd7d53c71b77a0eff2c0d6b11df1001cf3a1dae17df134bfbc6880931217e7d132a0e724d7840139d57dd55f22ba573af8c4e3726535c9f"}}]}) 3.534438286s ago: executing program 2 (id=3253): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8f79, 0x7, 0x0, 0x3, 0xf}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) 3.321375758s ago: executing program 0 (id=3254): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a00000001090222006d49b17f0009040000000e010000082403"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x0, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) setuid(0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x45}, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r6) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000600010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r7) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000040)) 3.144548776s ago: executing program 3 (id=3255): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000ffffffffffffbeda00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c"]}]}, 0x5c}], 0x1}, 0x300) 3.024633719s ago: executing program 5 (id=3256): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103ca"], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x4, 0x1, 0xc, 0x12, 0x4, 0x81, 0xfffffffc, 0x2, 0xfffffffe, 0x1, 0x1, 0x2, 0x101, 0x8, 0x400009, 0x3, 0x5, 0x99, 0xcaa7, 0x80, 0x0, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.923854743s ago: executing program 3 (id=3257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x80000000) (async) socket$inet(0x2, 0x2, 0x879f) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000100)=0x40) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES16=r0]) (async) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0xfffeffd1, 0x2, 0x1fb, 0x8113, 0x5, "04ff8affffe29da51d976d7f03080e000d00", 0x0, 0x201}) (async) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 2.600279263s ago: executing program 2 (id=3258): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) 2.464375591s ago: executing program 2 (id=3259): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004480)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="6000000000000000290000003700000089080000f2a27a2b920085a1e8834c77f28996a9000000000738000000000c0a4b005766d96f00000000000100000000000005000000000000000100000000000000f7ff0600000400000000000000000014"], 0x78}}], 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x200) ioctl$NBD_PRINT_DEBUG(r1, 0xab06) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, &(0x7f0000000000)) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000380)={r5, 0x7c}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r6 = syz_usb_connect$cdc_ncm(0x3, 0x10f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd, 0x2, 0x1, 0x7f, 0x160, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "80cc"}, {0x5, 0x24, 0x0, 0xee}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1000, 0x4, 0xba}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x80, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xb53}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x7e, 0x24, 0x13, 0x0, "b089ac4d983013ef46558db4def8ea5e01219a72003cb2205d8d3efb3d762cd5bb9aace13f55f2d7813f768a6be96090d7e1e51707147b9e0bfcf3e8450cf7825b79deb331bb0869684e2280a79970a2c9d6d373bcbaf93caede8cf24f1abbee0660d6de9f7f210b674fd319659c069c65a17fb11ba04827c20d"}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x6f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x24, 0x4}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2e, 0x63, 0x2, 0xff, 0x71}, 0x7c, &(0x7f0000000840)=ANY=[], 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x438}}]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x3}, 0x20) syz_usb_control_io$cdc_ncm(r6, &(0x7f00000004c0)={0x14, &(0x7f0000000400)={0x40, 0x8, 0xaf, {0xaf, 0x1, "056f0231fbf701bb467e96e18b7e5e2ec18c0bf15689f0a43eb07a4fd5dc373583122db88ca2702d4ff48625a79c43e2232631adb42f3dc2a3a4cc6c99dd3bcd6afccc4ae065da8a1ffe8e46db5e0f8737578c069966380b4e73bc0815b1f59f48f03f75affb1d351159a6b68b93edaeafcce743c74ef6dfddb60d40ce26698e053f407bd65ca8e51aca716110a2541410ecedee7cc1b0bc5e828ed05a4ff96dd63f399e84942617ff1a4115ed"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000840)=ANY=[@ANYBLOB="401435000000b812e7a3034be582cd44ecae3f57d88b6e0ae93f2ebd22bea51e3964408a0d4f082fc7019ee01bc5df90d0aea72157578e6c56ac95b5499e7b99542f030b9a9d8e4436e1e7fe730adbe73ef4397ac7842dee835aae41aff548271036dea583b04411b1e1edd1521d28689a9412045d2838000dfe7592309373a179a90203cb98aa4d5ef86a3c815c45d50372"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x0, 0x2, 0x6, 0x6, 0xa25, 0x7, 0x3, 0x1000, 0xa, 0x3, 0x7, 0xff}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000640)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) 1.057585573s ago: executing program 3 (id=3260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) sendmmsg$unix(r3, &(0x7f0000002fc0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x810) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x42000) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x6) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r7) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 887.06885ms ago: executing program 5 (id=3261): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x80000002, 0x12) getsockopt$inet_mreqsrc(r2, 0x0, 0x50, &(0x7f0000000100)={@remote, @multicast2, @private}, &(0x7f0000000140)=0xc) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0x5, 0x2c, {0x2c, 0x2, "672039a31cda2d6573727a8cd32651318aa8ec7b55b3e4ebcb018440901bde25dce9e311dcacb55b2778"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xcb, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "92d0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9000, 0x7fff, 0x5}, {0x6, 0x24, 0x1a, 0x5, 0x7}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x5e, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x4, 0x7f, 0x3, 0x8, 0xd}, 0x51, &(0x7f0000000440)={0x5, 0xf, 0x51, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "b973d38c67149a7d6853fb09937a0400"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0xb, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x49, 0x95, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x83e, 0xf00, 0x200, [0xc0, 0xff1e, 0x18000, 0xc0f0, 0xff3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x8, 0x6375}]}, 0xa, [{0x31, &(0x7f00000004c0)=@string={0x31, 0x3, "0ac1fb9e2a041c65e60fe68383ac006ed7437f8470a16b7062a42a61f82724ec42bbe35dff21ecdbeebb5a0ea297a0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x282b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3fc1dcd36dd17fa}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4063}}, {0xbb, &(0x7f0000000640)=@string={0xbb, 0x3, "ff59a8b786f39d344ad41027b600a93c7f783cbd773ac1d0d83d420e7dc824c30ee9e53219122f3841b8efec617c0ede829d58fc6c253f8d5130f7798a4200c4fc981c3d1c6677610d32e34997e0817e625b3fb3639870f8e89e5392da26cf96ce381c3e64ac852bef6c51891495471cf7b8a1ff670b7366c6c73ef2a52e060430ec26f58e6591e71061d8eebc69189eb0cfdf5a2777d37d47e38fe4b1decb6e9de6a950f699bbd41884f902243193e185b8a6520c12d5aa42"}}, {0x7a, &(0x7f0000000700)=@string={0x7a, 0x3, "726dd0d2917bf9da564723f81f2528bd4aa78b246cf75403b150c43f08746ed9b3446aac7d2a183d4a01cf5089b52908515db0c32f587c958a6ed17e33394e8c42928e9c130e0e263365f55e064c7c7f40ebdff2915539d0bf14df4bc57b6ece4d7e5aee6ced1ac9c2df7a44accaa92317458c170af379ac"}}, {0xf8, &(0x7f0000000780)=@string={0xf8, 0x3, "2c2b9397a165307e216cf57673630ea909837f68a994a496f5ba68236f9f09685a8def8bcae67eb3a96a06c5279982d20d301f01cbb4d762e6fca568a4ec20dc2bd8ec302914800de58d250d3fcd7b7d58c7567f34b4be72c63ccce5fbd50608aa95ef683ad5af703ef694243da7805beb07f1db85d5ac3177764f7cd045eef6d706bf6b3720f258a8383194dcbd25f398029bfae4ca588324f5da9ae239f3cf87de85402349c871eaec681e0eac108f78ed408fa10d3d5776603556a2f2eb575a4bb0c732557915aa3f3eff18366e3f5677b8d2fce3fdfefeb7386f1e5b8ae2a0c12fd97e61d8bbe14db0487256b47fe62a757ccf60"}}, {0x36, &(0x7f0000000880)=@string={0x36, 0x3, "9c1744c360075979e59484c729efe0d3c3cb517df8537a82604191b77e38b5d8e6ca960e5c55a9541d70a17293fe3fac405cc1a4"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000ac0)={0x14, &(0x7f0000000980)={0x0, 0x22, 0xc2, {0xc2, 0x28, "c2c1481915b897dc2ed9cc183a683f08961d65e2f94b4dcc1eac74d151987ff9b0578e0458335d5ce338ebf42ccfeab9380bb0f25a2d9436901eae7de218ab1ca3e44db5dbfb02fb355b48611a55b35417aaf9a8a03d084284ec318aa8c901e8fa45a91a833f2cca4954a7759aee59c1f998514413dff18bf4f31e5d9e1e5b10aa2300c757cf11760a6f505d70e25b14db32bcfc4b50d4c3797e493b472a3fccb68f7af8928fb74153a907c97f7a800a8645b2355161983796bdf3540428c13a"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000b00)={0x20, 0x3, 0x6f, "f1358b59475c694d3922fc2b8cc80ea3d41f539246c3fe1a308c6c62a225d35d5c80652554787c0070a0efaf59e751916d8ff6d1e40a31a420023d1e8abf3fc52cb2a6cdb4c1c533cb06a25a045fafdbcd7086b78a5b596cae5b76282ff439fb2c2490a511f727c8d266c53dc5db7f"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x8, 0x2, 0x81, 0x5, 0x0, 0x6, 0x4, 0x9, 0x101, 0x5, 0x80, 0x9}}, &(0x7f0000000c40)={0x20, 0x85, 0x4, 0x1ff}, &(0x7f0000000c80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000cc0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000d00)={0x20, 0x89, 0x2, 0x1}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000000c0)=0x57c, 0x4) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='mqueue\x00', 0x2200011, 0x0) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000240)='./file0\x00', 0x20000400) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000340)={'filter\x00', 0x0, [0x1, 0xfff, 0xfdd, 0x8, 0x8]}, &(0x7f0000000080)=0x54) mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000200000000000000bad863ca03005be5a5286bc10b4fd62fe69718aa37a500000000000000000000000000000000aeb5d6be65a7b7e211430900"/104], 0x58) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r7, 0x89ee, &(0x7f0000000300)) 812.15038ms ago: executing program 3 (id=3262): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x6f5f}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', r5, 0x40, 0x8000, 0x7fffffff, 0x9, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ssrr={0x89, 0x1f, 0x19, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x6f, [@local, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendto$packet(r4, &(0x7f0000000280)="001d81c57c2030093f254aea526e732388a8", 0x12, 0x4000041, &(0x7f0000000000)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @remote}, 0x14) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000001600)=ANY=[@ANYBLOB="62118cea493c7ba30bb9f8f98253b2bbb4198103cac31e89b6543f592740ff08119e2b4affb618a56c54a592f89f76a7dcbcb0455980"]) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 704.957221ms ago: executing program 2 (id=3263): symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa9}}, 0x8) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000240)={0x34, &(0x7f00000000c0)={0x20, 0x17, 0x4, "830b99fc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 261.737884ms ago: executing program 0 (id=3264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x20, 0x8, 0x4, 0x5, 0xcc7, 0x6, 0x26, 0xd, 0x100, 0x4, 0x1, 0x1, 0xfffffffe, 0x6, 0xe1, 0x0, 0x1a449, 0x7, 0x40000003, 0x89, 0xcaa4, 0x0, 0x0, 0xb, 0xe69, 0x2c, 0x8, 0x4088, 0x0, 0xfffffff8]}) 160.207451ms ago: executing program 0 (id=3265): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000055aaffffffffffff00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c"]}]}, 0x5c}], 0x1}, 0x300) 0s ago: executing program 0 (id=3266): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffd, 0x180, 0x4, 0x14, 0x0, 0x0, 0x7fffffffffffe, 0x7fffffff, 0x4005, 0x4006, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffd, 0x180, 0x4, 0x14, 0x0, 0x0, 0x7fffffffffffe, 0x7fffffff, 0x4005, 0x4006, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) (async) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x3, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) (async) kernel console output (not intermixed with test programs): 948200][T21780] dump_stack_lvl+0x189/0x250 [ 656.948230][T21780] ? __pfx____ratelimit+0x10/0x10 [ 656.948250][T21780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.948273][T21780] ? __pfx__printk+0x10/0x10 [ 656.948295][T21780] ? __might_fault+0xb0/0x130 [ 656.948329][T21780] should_fail_ex+0x414/0x560 [ 656.948358][T21780] _copy_from_user+0x2d/0xb0 [ 656.948380][T21780] ___sys_sendmsg+0x158/0x2a0 [ 656.948404][T21780] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.948458][T21780] ? __fget_files+0x2a/0x420 [ 656.948477][T21780] ? __fget_files+0x3a0/0x420 [ 656.948507][T21780] __x64_sys_sendmsg+0x19b/0x260 [ 656.948530][T21780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.948559][T21780] ? __pfx_ksys_write+0x10/0x10 [ 656.948581][T21780] ? do_syscall_64+0xbe/0xfa0 [ 656.948603][T21780] do_syscall_64+0xfa/0xfa0 [ 656.948620][T21780] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.948638][T21780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.948655][T21780] ? clear_bhb_loop+0x60/0xb0 [ 656.948676][T21780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.948693][T21780] RIP: 0033:0x7fd663f8eec9 [ 656.948709][T21780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.948723][T21780] RSP: 002b:00007fd664e1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.948741][T21780] RAX: ffffffffffffffda RBX: 00007fd6641e5fa0 RCX: 00007fd663f8eec9 [ 656.948754][T21780] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 656.948765][T21780] RBP: 00007fd664e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 656.948777][T21780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.948787][T21780] R13: 00007fd6641e6038 R14: 00007fd6641e5fa0 R15: 00007ffc3f7ab798 [ 656.948823][T21780] [ 657.323391][ T116] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 657.443957][T21784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2993'. [ 657.482363][ T116] usb 6-1: Using ep0 maxpacket: 32 [ 657.492771][ T116] usb 6-1: no configurations [ 657.497398][ T116] usb 6-1: can't read configurations, error -22 [ 657.520068][T21788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 657.525767][ T116] usb usb6-port1: attempt power cycle [ 657.674315][T21794] netlink: 57 bytes leftover after parsing attributes in process `syz.3.2997'. [ 657.784088][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 657.872520][ T116] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 657.892857][ T116] usb 6-1: Using ep0 maxpacket: 32 [ 657.898595][ T116] usb 6-1: no configurations [ 657.903405][ T116] usb 6-1: can't read configurations, error -22 [ 657.944150][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 657.953516][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.966267][ T24] usb 3-1: config 0 descriptor?? [ 657.975522][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 658.032414][ T116] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 658.053030][ T116] usb 6-1: Using ep0 maxpacket: 32 [ 658.059094][ T116] usb 6-1: no configurations [ 658.063819][ T116] usb 6-1: can't read configurations, error -22 [ 658.070672][ T116] usb usb6-port1: unable to enumerate USB device [ 658.174230][ T24] gspca_spca508: reg_read err -32 [ 658.179806][ T24] gspca_spca508: reg_read err -32 [ 658.186872][ T24] gspca_spca508: reg_read err -32 [ 658.394661][ T24] gspca_spca508: reg_read err -71 [ 658.405645][ T24] gspca_spca508: reg write: error -71 [ 658.418332][ T24] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 658.430446][ T24] usb 3-1: USB disconnect, device number 62 [ 658.933243][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 659.082403][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 659.088746][ T24] usb 4-1: config 4 has an invalid interface number: 20 but max is 0 [ 659.097002][ T24] usb 4-1: config 4 has no interface number 0 [ 659.103173][ T24] usb 4-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 659.114390][ T24] usb 4-1: config 4 interface 20 has no altsetting 0 [ 659.123259][ T24] usb 4-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6 [ 659.132994][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.141051][ T24] usb 4-1: Product: syz [ 659.145938][ T24] usb 4-1: Manufacturer: syz [ 659.150527][ T24] usb 4-1: SerialNumber: syz [ 659.262523][ T5865] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 659.375767][ T24] HFC-S_USB 4-1:4.20: probe with driver HFC-S_USB failed with error -5 [ 659.391461][ T24] usb 4-1: USB disconnect, device number 21 [ 659.413192][ T5865] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 659.425867][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 659.439952][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 659.451777][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.460554][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 659.470504][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 659.481604][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.489297][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 659.498344][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 659.509503][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.519169][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 659.528291][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 659.540673][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.548716][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 659.557863][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 659.570443][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.578259][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 659.589107][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 659.600311][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.608735][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 659.617826][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 659.631665][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.640271][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 659.649530][ T5865] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 659.660719][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.671269][ T5865] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 659.680477][ T5865] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 659.689116][ T5865] usb 3-1: Product: syz [ 659.693401][ T5865] usb 3-1: Manufacturer: syz [ 659.698016][ T5865] usb 3-1: SerialNumber: syz [ 659.714210][ T5865] usb 3-1: config 0 descriptor?? [ 659.726644][ T5865] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 659.745942][T21823] netlink: 57 bytes leftover after parsing attributes in process `syz.5.3006'. [ 659.999053][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 660.014763][ T5865] usb 3-1: USB disconnect, device number 63 [ 660.041449][ T5865] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 660.307269][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 660.464072][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 660.470903][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.479269][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3014'. [ 660.485385][ T10] usb 4-1: New USB device found, idVendor=0711, idProduct=0950, bcdDevice= 6.9d [ 660.500481][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.508992][ T10] usb 4-1: Product: syz [ 660.514195][ T10] usb 4-1: Manufacturer: syz [ 660.521823][ T10] usb 4-1: SerialNumber: syz [ 660.525049][T21851] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 660.536556][ T10] usb 4-1: config 0 descriptor?? [ 660.541987][T21851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.546687][ T10] sisusb 4-1:0.0: Invalid USB2VGA device [ 660.556897][ T10] sisusb 4-1:0.0: probe with driver sisusb failed with error -22 [ 660.563138][T21851] usb usb8: usbfs: process 21851 (syz.5.3014) did not claim interface 0 before use [ 660.775786][ T24] usb 4-1: USB disconnect, device number 22 [ 660.932397][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 661.018693][T21867] block nbd2: Unsupported socket: should be TCP or UNIX. [ 661.103445][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 661.111146][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 661.120056][ T10] usb 6-1: config 179 has no interface number 0 [ 661.126840][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 661.138736][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 661.150873][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 661.163121][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 661.175035][ T10] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 661.188801][ T10] usb 6-1: config 179 interface 65 has no altsetting 0 [ 661.196255][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 661.210322][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.214425][T21870] FAULT_INJECTION: forcing a failure. [ 661.214425][T21870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.232530][T21870] CPU: 1 UID: 0 PID: 21870 Comm: syz.3.3018 Not tainted syzkaller #0 PREEMPT(full) [ 661.232553][T21870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 661.232563][T21870] Call Trace: [ 661.232570][T21870] [ 661.232577][T21870] dump_stack_lvl+0x189/0x250 [ 661.232605][T21870] ? __pfx____ratelimit+0x10/0x10 [ 661.232630][T21870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.232648][T21870] ? __pfx__printk+0x10/0x10 [ 661.232665][T21870] ? __might_fault+0xb0/0x130 [ 661.232691][T21870] should_fail_ex+0x414/0x560 [ 661.232713][T21870] _copy_from_iter+0x1de/0x1790 [ 661.232732][T21870] ? rcu_is_watching+0x15/0xb0 [ 661.232751][T21870] ? kmalloc_reserve+0xbd/0x290 [ 661.232766][T21870] ? __pfx__copy_from_iter+0x10/0x10 [ 661.232781][T21870] ? __build_skb_around+0x262/0x3f0 [ 661.232798][T21870] ? netlink_sendmsg+0x642/0xb30 [ 661.232812][T21870] ? skb_put+0x11b/0x210 [ 661.232827][T21870] netlink_sendmsg+0x6b2/0xb30 [ 661.232849][T21870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.232866][T21870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 661.232884][T21870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.232898][T21870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.232912][T21870] __sock_sendmsg+0x21c/0x270 [ 661.232933][T21870] ____sys_sendmsg+0x505/0x830 [ 661.232952][T21870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.232973][T21870] ? import_iovec+0x74/0xa0 [ 661.232991][T21870] ___sys_sendmsg+0x21f/0x2a0 [ 661.233007][T21870] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.233020][T21870] ? preempt_schedule_common+0x83/0xd0 [ 661.233062][T21870] ? __fget_files+0x2a/0x420 [ 661.233077][T21870] ? __fget_files+0x3a0/0x420 [ 661.233103][T21870] __x64_sys_sendmsg+0x19b/0x260 [ 661.233121][T21870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.233151][T21870] ? do_syscall_64+0xbe/0xfa0 [ 661.233170][T21870] do_syscall_64+0xfa/0xfa0 [ 661.233184][T21870] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.233200][T21870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.233214][T21870] ? clear_bhb_loop+0x60/0xb0 [ 661.233229][T21870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.233242][T21870] RIP: 0033:0x7fd663f8eec9 [ 661.233255][T21870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.233267][T21870] RSP: 002b:00007fd664e1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.233281][T21870] RAX: ffffffffffffffda RBX: 00007fd6641e5fa0 RCX: 00007fd663f8eec9 [ 661.233291][T21870] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 661.233300][T21870] RBP: 00007fd664e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 661.233307][T21870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.233315][T21870] R13: 00007fd6641e6038 R14: 00007fd6641e5fa0 R15: 00007ffc3f7ab798 [ 661.233338][T21870] [ 661.258381][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input50 [ 661.427115][T21876] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3019'. [ 661.483217][ T5223] input input50: unable to receive magic message: -110 [ 661.507070][T21875] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3019'. [ 661.627954][ T5223] input input50: unable to receive magic message: -32 [ 661.649681][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 661.649681][ T5865] usb 6-1: USB disconnect, device number 43 [ 662.058420][T21900] FAULT_INJECTION: forcing a failure. [ 662.058420][T21900] name failslab, interval 1, probability 0, space 0, times 0 [ 662.071116][T21900] CPU: 1 UID: 0 PID: 21900 Comm: syz.2.3027 Not tainted syzkaller #0 PREEMPT(full) [ 662.071139][T21900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 662.071148][T21900] Call Trace: [ 662.071157][T21900] [ 662.071165][T21900] dump_stack_lvl+0x189/0x250 [ 662.071193][T21900] ? __pfx____ratelimit+0x10/0x10 [ 662.071211][T21900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.071226][T21900] ? __pfx__printk+0x10/0x10 [ 662.071243][T21900] ? __pfx___might_resched+0x10/0x10 [ 662.071255][T21900] ? fs_reclaim_acquire+0x7d/0x100 [ 662.071267][T21900] should_fail_ex+0x414/0x560 [ 662.071286][T21900] should_failslab+0xa8/0x100 [ 662.071298][T21900] __kmalloc_noprof+0xcb/0x7f0 [ 662.071313][T21900] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 662.071327][T21900] ? rcu_is_watching+0x15/0xb0 [ 662.071343][T21900] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 662.071361][T21900] genl_family_rcv_msg_doit+0xb8/0x300 [ 662.071378][T21900] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 662.071394][T21900] ? __pfx_genl_get_cmd+0x10/0x10 [ 662.071405][T21900] ? __pfx_nbd_genl_connect+0x10/0x10 [ 662.071424][T21900] ? stack_trace_save+0x9c/0xe0 [ 662.071442][T21900] genl_rcv_msg+0x60e/0x790 [ 662.071460][T21900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.071473][T21900] ? __pfx_nbd_genl_connect+0x10/0x10 [ 662.071494][T21900] netlink_rcv_skb+0x208/0x470 [ 662.071504][T21900] ? __lock_acquire+0xab9/0xd20 [ 662.071515][T21900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.071529][T21900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.071549][T21900] ? down_read+0x1ad/0x2e0 [ 662.071564][T21900] genl_rcv+0x28/0x40 [ 662.071575][T21900] netlink_unicast+0x82f/0x9e0 [ 662.071596][T21900] ? __pfx_netlink_unicast+0x10/0x10 [ 662.071611][T21900] ? netlink_sendmsg+0x642/0xb30 [ 662.071620][T21900] ? skb_put+0x11b/0x210 [ 662.071634][T21900] netlink_sendmsg+0x805/0xb30 [ 662.071650][T21900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.071662][T21900] ? aa_sock_msg_perm+0xf1/0x1d0 [ 662.071676][T21900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.071687][T21900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.071698][T21900] __sock_sendmsg+0x21c/0x270 [ 662.071715][T21900] ____sys_sendmsg+0x505/0x830 [ 662.071730][T21900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.071747][T21900] ? import_iovec+0x74/0xa0 [ 662.071762][T21900] ___sys_sendmsg+0x21f/0x2a0 [ 662.071775][T21900] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.071806][T21900] ? __fget_files+0x2a/0x420 [ 662.071818][T21900] ? __fget_files+0x3a0/0x420 [ 662.071835][T21900] __x64_sys_sendmsg+0x19b/0x260 [ 662.071848][T21900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 662.071865][T21900] ? __pfx_ksys_write+0x10/0x10 [ 662.071878][T21900] ? do_syscall_64+0xbe/0xfa0 [ 662.071892][T21900] do_syscall_64+0xfa/0xfa0 [ 662.071901][T21900] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.071912][T21900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.071921][T21900] ? clear_bhb_loop+0x60/0xb0 [ 662.071933][T21900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.071943][T21900] RIP: 0033:0x7f3220f8eec9 [ 662.071953][T21900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.071961][T21900] RSP: 002b:00007f3221dfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.071972][T21900] RAX: ffffffffffffffda RBX: 00007f32211e5fa0 RCX: 00007f3220f8eec9 [ 662.071979][T21900] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 662.071986][T21900] RBP: 00007f3221dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 662.071992][T21900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.071997][T21900] R13: 00007f32211e6038 R14: 00007f32211e5fa0 R15: 00007ffd28311d18 [ 662.072014][T21900] [ 662.432814][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 662.572803][ T10] usb 4-1: device descriptor read/64, error -71 [ 662.703723][T21915] vxcan1: entered allmulticast mode [ 662.822468][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 662.983191][ T10] usb 4-1: device descriptor read/64, error -71 [ 663.093510][ T10] usb usb4-port1: attempt power cycle [ 663.432527][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 663.452731][ T116] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 663.461672][ T10] usb 4-1: device descriptor read/8, error -71 [ 663.612974][ T116] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 663.621591][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.630948][ T116] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.642724][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.650347][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.659373][ T116] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.671779][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.679485][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.688530][ T116] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.699433][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.706190][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 663.714830][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.723813][ T116] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.734792][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.741869][ T10] usb 4-1: device descriptor read/8, error -71 [ 663.748719][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.757666][ T116] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.769711][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.777272][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.786384][ T116] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.797517][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.805776][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.814721][ T116] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.825607][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.833135][ T116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 663.842016][ T116] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 663.852964][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 663.859914][ T10] usb usb4-port1: unable to enumerate USB device [ 663.869897][ T116] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 663.879111][ T116] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 663.887502][ T116] usb 3-1: Product: syz [ 663.891664][ T116] usb 3-1: Manufacturer: syz [ 663.896323][ T116] usb 3-1: SerialNumber: syz [ 663.902930][ T116] usb 3-1: config 0 descriptor?? [ 663.911826][ T116] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 664.115807][T21925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.125294][T21925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.188958][ T24] usb 3-1: USB disconnect, device number 64 [ 664.196746][ T24] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 664.902461][ T5872] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 664.914320][ T5872] Bluetooth: hci1: Injecting HCI hardware error event [ 664.924984][ T5870] Bluetooth: hci1: hardware error 0x00 [ 664.973616][T21940] FAULT_INJECTION: forcing a failure. [ 664.973616][T21940] name failslab, interval 1, probability 0, space 0, times 0 [ 664.989093][T21940] CPU: 0 UID: 0 PID: 21940 Comm: syz.3.3037 Not tainted syzkaller #0 PREEMPT(full) [ 664.989118][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.989130][T21940] Call Trace: [ 664.989138][T21940] [ 664.989145][T21940] dump_stack_lvl+0x189/0x250 [ 664.989175][T21940] ? __pfx____ratelimit+0x10/0x10 [ 664.989195][T21940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.989227][T21940] ? __pfx__printk+0x10/0x10 [ 664.989253][T21940] ? __pfx___might_resched+0x10/0x10 [ 664.989273][T21940] ? fs_reclaim_acquire+0x7d/0x100 [ 664.989296][T21940] should_fail_ex+0x414/0x560 [ 664.989327][T21940] should_failslab+0xa8/0x100 [ 664.989348][T21940] __kmalloc_cache_noprof+0x6f/0x6f0 [ 664.989373][T21940] ? nbd_alloc_and_init_config+0x88/0x260 [ 664.989404][T21940] nbd_alloc_and_init_config+0x88/0x260 [ 664.989427][T21940] ? nbd_genl_connect+0x97c/0x18f0 [ 664.989452][T21940] nbd_genl_connect+0x9d7/0x18f0 [ 664.989485][T21940] ? __pfx_nbd_genl_connect+0x10/0x10 [ 664.989515][T21940] ? rcu_is_watching+0x15/0xb0 [ 664.989541][T21940] ? __nla_parse+0x40/0x60 [ 664.989563][T21940] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 664.989595][T21940] genl_family_rcv_msg_doit+0x215/0x300 [ 664.989626][T21940] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 664.989663][T21940] ? stack_trace_save+0x9c/0xe0 [ 664.989692][T21940] genl_rcv_msg+0x60e/0x790 [ 664.989722][T21940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 664.989743][T21940] ? __pfx_nbd_genl_connect+0x10/0x10 [ 664.989781][T21940] netlink_rcv_skb+0x208/0x470 [ 664.989798][T21940] ? __lock_acquire+0xab9/0xd20 [ 664.989818][T21940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 664.989841][T21940] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 664.989879][T21940] ? down_read+0x1ad/0x2e0 [ 664.989904][T21940] genl_rcv+0x28/0x40 [ 664.989923][T21940] netlink_unicast+0x82f/0x9e0 [ 664.989957][T21940] ? __pfx_netlink_unicast+0x10/0x10 [ 664.989983][T21940] ? netlink_sendmsg+0x642/0xb30 [ 664.989999][T21940] ? skb_put+0x11b/0x210 [ 664.990022][T21940] netlink_sendmsg+0x805/0xb30 [ 664.990051][T21940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.990073][T21940] ? aa_sock_msg_perm+0xf1/0x1d0 [ 664.990097][T21940] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 664.990115][T21940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.990135][T21940] __sock_sendmsg+0x21c/0x270 [ 664.990164][T21940] ____sys_sendmsg+0x505/0x830 [ 664.990190][T21940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 664.990226][T21940] ? import_iovec+0x74/0xa0 [ 664.990251][T21940] ___sys_sendmsg+0x21f/0x2a0 [ 664.990275][T21940] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.990330][T21940] ? __fget_files+0x2a/0x420 [ 664.990348][T21940] ? __fget_files+0x3a0/0x420 [ 664.990380][T21940] __x64_sys_sendmsg+0x19b/0x260 [ 664.990403][T21940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 664.990434][T21940] ? __pfx_ksys_write+0x10/0x10 [ 664.990457][T21940] ? do_syscall_64+0xbe/0xfa0 [ 664.990480][T21940] do_syscall_64+0xfa/0xfa0 [ 664.990497][T21940] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.990515][T21940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.990532][T21940] ? clear_bhb_loop+0x60/0xb0 [ 664.990553][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.990569][T21940] RIP: 0033:0x7fd663f8eec9 [ 664.990585][T21940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.990600][T21940] RSP: 002b:00007fd664e1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.990619][T21940] RAX: ffffffffffffffda RBX: 00007fd6641e5fa0 RCX: 00007fd663f8eec9 [ 664.990632][T21940] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 664.990644][T21940] RBP: 00007fd664e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 664.990656][T21940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.990666][T21940] R13: 00007fd6641e6038 R14: 00007fd6641e5fa0 R15: 00007ffc3f7ab798 [ 664.990698][T21940] [ 664.990707][T21940] nbd: couldn't allocate config [ 665.440997][T21947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3040'. [ 665.453225][T21947] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3040'. [ 665.471877][T21949] siw: device registration error -23 [ 665.736668][T21962] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3046'. [ 665.812412][ T116] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 665.822388][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 665.973735][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 665.984946][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.992435][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 665.995235][ T116] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 666.005106][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.008928][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.021363][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.038964][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 666.048099][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.048698][ T116] usb 4-1: config 0 descriptor?? [ 666.066666][ T24] usb 3-1: config 0 descriptor?? [ 666.092874][ T5978] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 666.244365][ T5978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.254946][ T5978] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=c0.c5 [ 666.264555][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.275690][ T5978] usb 6-1: config 0 descriptor?? [ 666.476445][ T116] lua 0003:1E7D:2C2E.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 666.495583][T21965] [U] ©„ [ 666.533490][T21964] [U] © [ 666.541351][ T5978] usb 6-1: string descriptor 0 read error: -71 [ 666.558733][ T5978] hub 6-1:0.0: bad descriptor, ignoring hub [ 666.572592][ T5978] hub 6-1:0.0: probe with driver hub failed with error -5 [ 666.595544][ T5978] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 666.598219][T18145] usb 6-1: Failed to submit usb control message: -71 [ 666.617898][T18145] usb 6-1: unable to send the bmi data to the device: -71 [ 666.626911][T18145] usb 6-1: unable to get target info from device [ 666.635088][T18145] usb 6-1: could not get target info (-71) [ 666.635836][ T5978] usb 6-1: USB disconnect, device number 44 [ 666.640984][T18145] usb 6-1: could not probe fw (-71) [ 666.689344][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 666.695681][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 666.709383][ T24] usb 3-1: USB disconnect, device number 65 [ 666.992435][ T5870] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 667.090348][T21977] loop3: detected capacity change from 0 to 7 [ 667.098600][T21977] Dev loop3: unable to read RDB block 7 [ 667.107365][T21977] loop3: unable to read partition table [ 667.115368][T21977] loop3: partition table beyond EOD, truncated [ 667.121695][T21977] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.278688][T21981] FAULT_INJECTION: forcing a failure. [ 667.278688][T21981] name failslab, interval 1, probability 0, space 0, times 0 [ 667.296803][T21981] CPU: 0 UID: 0 PID: 21981 Comm: syz.2.3049 Not tainted syzkaller #0 PREEMPT(full) [ 667.296827][T21981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.296838][T21981] Call Trace: [ 667.296846][T21981] [ 667.296854][T21981] dump_stack_lvl+0x189/0x250 [ 667.296883][T21981] ? __pfx____ratelimit+0x10/0x10 [ 667.296901][T21981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.296924][T21981] ? __pfx__printk+0x10/0x10 [ 667.296949][T21981] ? __pfx___might_resched+0x10/0x10 [ 667.296968][T21981] ? fs_reclaim_acquire+0x7d/0x100 [ 667.296990][T21981] should_fail_ex+0x414/0x560 [ 667.297019][T21981] should_failslab+0xa8/0x100 [ 667.297039][T21981] kmem_cache_alloc_noprof+0x74/0x6e0 [ 667.297078][T21981] ? stack_depot_save_flags+0x40/0x860 [ 667.297099][T21981] ? __kernfs_new_node+0xd7/0x7e0 [ 667.297122][T21981] __kernfs_new_node+0xd7/0x7e0 [ 667.297137][T21981] ? __lock_acquire+0xab9/0xd20 [ 667.297164][T21981] ? __pfx___kernfs_new_node+0x10/0x10 [ 667.297181][T21981] ? kernfs_root+0x1c/0x230 [ 667.297211][T21981] ? kernfs_root+0x1c/0x230 [ 667.297231][T21981] ? kernfs_root+0x1c/0x230 [ 667.297251][T21981] ? kernfs_root+0x1c/0x230 [ 667.297276][T21981] kernfs_new_node+0x102/0x210 [ 667.297296][T21981] __kernfs_create_file+0x4b/0x2e0 [ 667.297320][T21981] sysfs_add_file_mode_ns+0x238/0x300 [ 667.297349][T21981] sysfs_create_file_ns+0x128/0x1a0 [ 667.297370][T21981] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 667.297396][T21981] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 667.297415][T21981] ? nla_memcpy+0x5b/0xc0 [ 667.297438][T21981] ? device_create_file+0xf4/0x1c0 [ 667.297459][T21981] nbd_genl_connect+0x1328/0x18f0 [ 667.297493][T21981] ? __pfx_nbd_genl_connect+0x10/0x10 [ 667.297521][T21981] ? rcu_is_watching+0x15/0xb0 [ 667.297546][T21981] ? __nla_parse+0x40/0x60 [ 667.297569][T21981] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 667.297602][T21981] genl_family_rcv_msg_doit+0x215/0x300 [ 667.297631][T21981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 667.297668][T21981] ? stack_trace_save+0x9c/0xe0 [ 667.297700][T21981] genl_rcv_msg+0x60e/0x790 [ 667.297730][T21981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.297750][T21981] ? __pfx_nbd_genl_connect+0x10/0x10 [ 667.297787][T21981] netlink_rcv_skb+0x208/0x470 [ 667.297804][T21981] ? __lock_acquire+0xab9/0xd20 [ 667.297823][T21981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.297848][T21981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.297886][T21981] ? down_read+0x1ad/0x2e0 [ 667.297911][T21981] genl_rcv+0x28/0x40 [ 667.297931][T21981] netlink_unicast+0x82f/0x9e0 [ 667.297965][T21981] ? __pfx_netlink_unicast+0x10/0x10 [ 667.297991][T21981] ? netlink_sendmsg+0x642/0xb30 [ 667.298006][T21981] ? skb_put+0x11b/0x210 [ 667.298028][T21981] netlink_sendmsg+0x805/0xb30 [ 667.298062][T21981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.298084][T21981] ? aa_sock_msg_perm+0xf1/0x1d0 [ 667.298108][T21981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.298127][T21981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.298147][T21981] __sock_sendmsg+0x21c/0x270 [ 667.298176][T21981] ____sys_sendmsg+0x505/0x830 [ 667.298204][T21981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.298234][T21981] ? import_iovec+0x74/0xa0 [ 667.298258][T21981] ___sys_sendmsg+0x21f/0x2a0 [ 667.298280][T21981] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.298338][T21981] ? __fget_files+0x2a/0x420 [ 667.298358][T21981] ? __fget_files+0x3a0/0x420 [ 667.298385][T21981] __x64_sys_sendmsg+0x19b/0x260 [ 667.298407][T21981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.298437][T21981] ? __pfx_ksys_write+0x10/0x10 [ 667.298457][T21981] ? do_syscall_64+0xbe/0xfa0 [ 667.298479][T21981] do_syscall_64+0xfa/0xfa0 [ 667.298493][T21981] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.298510][T21981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.298526][T21981] ? clear_bhb_loop+0x60/0xb0 [ 667.298546][T21981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.298562][T21981] RIP: 0033:0x7f3220f8eec9 [ 667.298578][T21981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.298592][T21981] RSP: 002b:00007f3221dfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.298610][T21981] RAX: ffffffffffffffda RBX: 00007f32211e5fa0 RCX: 00007f3220f8eec9 [ 667.298623][T21981] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 667.298634][T21981] RBP: 00007f3221dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 667.298645][T21981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.298655][T21981] R13: 00007f32211e6038 R14: 00007f32211e5fa0 R15: 00007ffd28311d18 [ 667.298683][T21981] [ 667.298697][T21981] block nbd2: device_create_file failed for backend! [ 668.183133][ T5865] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 668.354980][ T5865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.384858][ T5865] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 668.399210][T22023] netlink: 'syz.5.3055': attribute type 19 has an invalid length. [ 668.422835][ T5865] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.441976][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.456252][ T5865] usb 3-1: Product: syz [ 668.462729][ T5865] usb 3-1: Manufacturer: syz [ 668.482517][ T5865] usb 3-1: SerialNumber: syz [ 668.618945][ T24] usb 4-1: USB disconnect, device number 27 [ 668.666200][T22037] binder: 22032:22037 ioctl c0306201 200000000000 returned -14 [ 668.705591][ T5865] usb 3-1: 0:2 : does not exist [ 668.735143][ T5865] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 668.798093][ T5865] usb 3-1: USB disconnect, device number 66 [ 668.840036][T20736] udevd[20736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.395976][T22068] loop3: detected capacity change from 0 to 7 [ 669.412913][ T5978] IPVS: starting estimator thread 0... [ 669.437244][T22068] Dev loop3: unable to read RDB block 7 [ 669.458324][T22068] loop3: unable to read partition table [ 669.467509][ T5865] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 669.473355][T22068] loop3: partition table beyond EOD, truncated [ 669.504315][T22070] IPVS: using max 27 ests per chain, 64800 per kthread [ 669.512609][T22068] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 669.596945][ T5238] Dev loop3: unable to read RDB block 7 [ 669.612482][ T5865] usb 4-1: device descriptor read/64, error -71 [ 669.618997][ T5238] loop3: unable to read partition table [ 669.625858][ T5238] loop3: partition table beyond EOD, truncated [ 669.862703][ T5865] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 670.012617][ T5865] usb 4-1: device descriptor read/64, error -71 [ 670.132857][ T5865] usb usb4-port1: attempt power cycle [ 670.192789][ T5975] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 670.373522][ T5975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 670.389968][ T5975] usb 3-1: not running at top speed; connect to a high speed hub [ 670.399591][ T5975] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 670.413305][ T5975] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 670.426722][ T5975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 670.438292][ T5975] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.452345][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.461077][ T5975] usb 3-1: Product: syz [ 670.464637][T22109] FAULT_INJECTION: forcing a failure. [ 670.464637][T22109] name failslab, interval 1, probability 0, space 0, times 0 [ 670.467738][ T5975] usb 3-1: Manufacturer: syz [ 670.478312][ T5865] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 670.483427][ T5975] usb 3-1: SerialNumber: syz [ 670.490698][T22109] CPU: 1 UID: 0 PID: 22109 Comm: syz.5.3070 Not tainted syzkaller #0 PREEMPT(full) [ 670.490720][T22109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.490731][T22109] Call Trace: [ 670.490739][T22109] [ 670.490747][T22109] dump_stack_lvl+0x189/0x250 [ 670.490776][T22109] ? __pfx____ratelimit+0x10/0x10 [ 670.490794][T22109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.490818][T22109] ? __pfx__printk+0x10/0x10 [ 670.490845][T22109] ? __pfx___might_resched+0x10/0x10 [ 670.490869][T22109] should_fail_ex+0x414/0x560 [ 670.490898][T22109] should_failslab+0xa8/0x100 [ 670.490919][T22109] __kmalloc_noprof+0xcb/0x7f0 [ 670.490941][T22109] ? kobject_get_path+0xc5/0x2d0 [ 670.490959][T22109] ? __kasan_kmalloc+0x93/0xb0 [ 670.490979][T22109] kobject_get_path+0xc5/0x2d0 [ 670.491004][T22109] kobject_uevent_env+0x292/0x8c0 [ 670.491028][T22109] ? do_raw_spin_unlock+0x122/0x240 [ 670.491048][T22109] nbd_config_put+0x17e/0x790 [ 670.491074][T22109] ? device_create_file+0xf4/0x1c0 [ 670.491094][T22109] nbd_genl_connect+0x167c/0x18f0 [ 670.491125][T22109] ? __pfx_nbd_genl_connect+0x10/0x10 [ 670.491154][T22109] ? rcu_is_watching+0x15/0xb0 [ 670.491178][T22109] ? __nla_parse+0x40/0x60 [ 670.491200][T22109] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 670.491230][T22109] genl_family_rcv_msg_doit+0x215/0x300 [ 670.491259][T22109] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 670.491296][T22109] ? stack_trace_save+0x9c/0xe0 [ 670.491324][T22109] genl_rcv_msg+0x60e/0x790 [ 670.491351][T22109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.491372][T22109] ? __pfx_nbd_genl_connect+0x10/0x10 [ 670.491415][T22109] netlink_rcv_skb+0x208/0x470 [ 670.491430][T22109] ? __lock_acquire+0xab9/0xd20 [ 670.491449][T22109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.491471][T22109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.491507][T22109] ? down_read+0x1ad/0x2e0 [ 670.491530][T22109] genl_rcv+0x28/0x40 [ 670.491549][T22109] netlink_unicast+0x82f/0x9e0 [ 670.491582][T22109] ? __pfx_netlink_unicast+0x10/0x10 [ 670.491608][T22109] ? netlink_sendmsg+0x642/0xb30 [ 670.491623][T22109] ? skb_put+0x11b/0x210 [ 670.491645][T22109] netlink_sendmsg+0x805/0xb30 [ 670.491672][T22109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.491694][T22109] ? aa_sock_msg_perm+0xf1/0x1d0 [ 670.491715][T22109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.491733][T22109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.491753][T22109] __sock_sendmsg+0x21c/0x270 [ 670.491779][T22109] ____sys_sendmsg+0x505/0x830 [ 670.491804][T22109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.491833][T22109] ? import_iovec+0x74/0xa0 [ 670.491857][T22109] ___sys_sendmsg+0x21f/0x2a0 [ 670.491879][T22109] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.491934][T22109] ? __fget_files+0x2a/0x420 [ 670.491953][T22109] ? __fget_files+0x3a0/0x420 [ 670.491983][T22109] __x64_sys_sendmsg+0x19b/0x260 [ 670.492004][T22109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.492034][T22109] ? __pfx_ksys_write+0x10/0x10 [ 670.492055][T22109] ? do_syscall_64+0xbe/0xfa0 [ 670.492077][T22109] do_syscall_64+0xfa/0xfa0 [ 670.492094][T22109] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.492111][T22109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.492127][T22109] ? clear_bhb_loop+0x60/0xb0 [ 670.492147][T22109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.492163][T22109] RIP: 0033:0x7f217898eec9 [ 670.492178][T22109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.492192][T22109] RSP: 002b:00007f217987f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.492210][T22109] RAX: ffffffffffffffda RBX: 00007f2178be5fa0 RCX: 00007f217898eec9 [ 670.492222][T22109] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 670.492233][T22109] RBP: 00007f217987f090 R08: 0000000000000000 R09: 0000000000000000 [ 670.492243][T22109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.492257][T22109] R13: 00007f2178be6038 R14: 00007f2178be5fa0 R15: 00007ffd12bae428 [ 670.492287][T22109] [ 670.513109][ T5865] usb 4-1: device descriptor read/8, error -71 [ 670.930952][ T5975] usb 3-1: 0:2 : does not exist [ 670.952448][ T5978] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 671.133057][ T5865] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 671.142459][ T5978] usb 6-1: Using ep0 maxpacket: 8 [ 671.149215][ T5978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 671.163366][ T5865] usb 4-1: device descriptor read/8, error -71 [ 671.184208][ T5978] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 671.202442][ T5978] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 671.210565][ T5978] usb 6-1: Product: syz [ 671.234123][T22128] openvswitch: netlink: Flow actions attr not present in new flow. [ 671.253636][T22128] netlink: 'syz.2.3069': attribute type 178 has an invalid length. [ 671.262373][ T5978] usb 6-1: Manufacturer: syz [ 671.269936][ T5978] usb 6-1: SerialNumber: syz [ 671.273572][ T5865] usb usb4-port1: unable to enumerate USB device [ 671.404145][ T5865] usb 3-1: USB disconnect, device number 67 [ 671.488820][ T5978] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 671.498103][ T5978] usb 6-1: Handspring Visor / Palm OS: port 125, is for unknown use [ 671.507533][ T5978] usb 6-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 671.519507][ T5978] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 671.832502][ T5978] usb 6-1: palm_os_3_probe - error -110 getting bytes available request [ 671.841507][ T5978] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 671.851201][ T5978] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 671.864348][ T5978] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 671.959331][T22150] loop3: detected capacity change from 0 to 7 [ 671.966549][T22150] Dev loop3: unable to read RDB block 7 [ 671.972144][T22150] loop3: unable to read partition table [ 671.981136][T22150] loop3: partition table beyond EOD, truncated [ 671.987419][T22150] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 672.176767][T22154] picdev_read: 77 callbacks suppressed [ 672.176787][T22154] kvm: pic: non byte read [ 672.187376][T22154] kvm: pic: non byte read [ 672.191937][T22154] kvm: pic: non byte read [ 672.197562][T22154] kvm: pic: non byte read [ 672.208549][T22154] kvm: pic: non byte read [ 672.214220][T22154] kvm: pic: non byte read [ 672.218871][T22154] kvm: pic: non byte read [ 672.225049][T22154] kvm: pic: non byte read [ 672.230201][T22158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 672.240655][T22154] kvm: pic: non byte read [ 672.245623][T22154] kvm: pic: non byte read [ 672.250206][T22158] nbd: must specify at least one socket [ 672.407809][T22167] FAULT_INJECTION: forcing a failure. [ 672.407809][T22167] name failslab, interval 1, probability 0, space 0, times 0 [ 672.431044][T22167] CPU: 0 UID: 0 PID: 22167 Comm: syz.3.3079 Not tainted syzkaller #0 PREEMPT(full) [ 672.431069][T22167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 672.431079][T22167] Call Trace: [ 672.431087][T22167] [ 672.431095][T22167] dump_stack_lvl+0x189/0x250 [ 672.431125][T22167] ? __pfx____ratelimit+0x10/0x10 [ 672.431147][T22167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 672.431171][T22167] ? __pfx__printk+0x10/0x10 [ 672.431200][T22167] ? __pfx___might_resched+0x10/0x10 [ 672.431220][T22167] ? fs_reclaim_acquire+0x7d/0x100 [ 672.431242][T22167] should_fail_ex+0x414/0x560 [ 672.431273][T22167] should_failslab+0xa8/0x100 [ 672.431293][T22167] kmem_cache_alloc_node_noprof+0x77/0x710 [ 672.431317][T22167] ? __alloc_skb+0x112/0x2d0 [ 672.431341][T22167] __alloc_skb+0x112/0x2d0 [ 672.431362][T22167] alloc_uevent_skb+0x7d/0x230 [ 672.431389][T22167] kobject_uevent_net_broadcast+0x2fa/0x560 [ 672.431418][T22167] kobject_uevent_env+0x55b/0x8c0 [ 672.431450][T22167] nbd_config_put+0x17e/0x790 [ 672.431477][T22167] ? device_create_file+0xf4/0x1c0 [ 672.431504][T22167] nbd_genl_connect+0x167c/0x18f0 [ 672.431536][T22167] ? __pfx_nbd_genl_connect+0x10/0x10 [ 672.431567][T22167] ? rcu_is_watching+0x15/0xb0 [ 672.431592][T22167] ? __nla_parse+0x40/0x60 [ 672.431615][T22167] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 672.431644][T22167] genl_family_rcv_msg_doit+0x215/0x300 [ 672.431673][T22167] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 672.431710][T22167] ? stack_trace_save+0x9c/0xe0 [ 672.431739][T22167] genl_rcv_msg+0x60e/0x790 [ 672.431768][T22167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.431789][T22167] ? __pfx_nbd_genl_connect+0x10/0x10 [ 672.431827][T22167] netlink_rcv_skb+0x208/0x470 [ 672.431842][T22167] ? __lock_acquire+0xab9/0xd20 [ 672.431861][T22167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.431884][T22167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.431922][T22167] ? down_read+0x1ad/0x2e0 [ 672.431946][T22167] genl_rcv+0x28/0x40 [ 672.431966][T22167] netlink_unicast+0x82f/0x9e0 [ 672.432001][T22167] ? __pfx_netlink_unicast+0x10/0x10 [ 672.432026][T22167] ? netlink_sendmsg+0x642/0xb30 [ 672.432043][T22167] ? skb_put+0x11b/0x210 [ 672.432065][T22167] netlink_sendmsg+0x805/0xb30 [ 672.432095][T22167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.432117][T22167] ? aa_sock_msg_perm+0xf1/0x1d0 [ 672.432140][T22167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.432158][T22167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.432178][T22167] __sock_sendmsg+0x21c/0x270 [ 672.432206][T22167] ____sys_sendmsg+0x505/0x830 [ 672.432233][T22167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.432262][T22167] ? import_iovec+0x74/0xa0 [ 672.432283][T22167] ___sys_sendmsg+0x21f/0x2a0 [ 672.432306][T22167] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.432365][T22167] ? __fget_files+0x2a/0x420 [ 672.432385][T22167] ? __fget_files+0x3a0/0x420 [ 672.432416][T22167] __x64_sys_sendmsg+0x19b/0x260 [ 672.432440][T22167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.432469][T22167] ? __pfx_ksys_write+0x10/0x10 [ 672.432497][T22167] ? do_syscall_64+0xbe/0xfa0 [ 672.432520][T22167] do_syscall_64+0xfa/0xfa0 [ 672.432537][T22167] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.432555][T22167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.432573][T22167] ? clear_bhb_loop+0x60/0xb0 [ 672.432594][T22167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.432610][T22167] RIP: 0033:0x7fd663f8eec9 [ 672.432626][T22167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.432641][T22167] RSP: 002b:00007fd664e1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.432660][T22167] RAX: ffffffffffffffda RBX: 00007fd6641e5fa0 RCX: 00007fd663f8eec9 [ 672.432672][T22167] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 672.432683][T22167] RBP: 00007fd664e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 672.432694][T22167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.432705][T22167] R13: 00007fd6641e6038 R14: 00007fd6641e5fa0 R15: 00007ffc3f7ab798 [ 672.432737][T22167] [ 673.019513][T22178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.335418][T22189] netlink: 'syz.0.3083': attribute type 25 has an invalid length. [ 673.344586][T22189] netlink: 'syz.0.3083': attribute type 7 has an invalid length. [ 673.562996][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 673.569103][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 673.704954][T21587] usb 6-1: USB disconnect, device number 45 [ 673.716028][T21587] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 673.744597][T21587] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 673.763959][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 673.773458][T21587] visor 6-1:1.0: device disconnected [ 673.833717][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 673.840038][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 673.872762][T22208] netlink: 'syz.5.3087': attribute type 1 has an invalid length. [ 673.892206][T22208] netlink: 'syz.5.3087': attribute type 3 has an invalid length. [ 673.922375][T22208] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3087'. [ 673.941971][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.965683][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.978540][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 673.994873][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.028239][ T24] usb 3-1: config 0 descriptor?? [ 674.166560][T22214] ISOFS: Unable to identify CD-ROM format. [ 674.174609][T22197] ceph: No mds server is up or the cluster is laggy [ 674.371206][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 674.389128][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 674.420146][ T24] usb 3-1: USB disconnect, device number 68 [ 674.447837][T22223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.652544][T21587] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 674.852408][T21587] usb 6-1: Invalid ep0 maxpacket: 32 [ 674.912753][ T5978] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 674.986312][T21587] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 675.144187][T21587] usb 6-1: Invalid ep0 maxpacket: 32 [ 675.150271][T21587] usb usb6-port1: attempt power cycle [ 675.202439][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 675.277503][T22244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.286388][T22244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.288753][T22234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.303252][T22234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.316094][ T5978] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 675.325375][ T5978] usb 4-1: can't read configurations, error -71 [ 675.352908][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 675.360239][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 675.369198][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.379626][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 675.389658][ T24] usb 3-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 675.400619][ T24] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 675.416754][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.425929][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.435276][ T24] usb 3-1: Product: syz [ 675.440375][ T24] usb 3-1: Manufacturer: syz [ 675.445043][ T24] usb 3-1: SerialNumber: syz [ 675.492633][T21587] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 675.523447][T21587] usb 6-1: Invalid ep0 maxpacket: 32 [ 675.652464][T21587] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 675.673879][ T24] usb 3-1: USB disconnect, device number 69 [ 675.683539][T21587] usb 6-1: Invalid ep0 maxpacket: 32 [ 675.690384][T21587] usb usb6-port1: unable to enumerate USB device [ 675.725510][T20736] udevd[20736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.192488][ T5978] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 676.197634][T22252] syzkaller1: entered promiscuous mode [ 676.207125][T22252] syzkaller1: entered allmulticast mode [ 676.364138][ T5978] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 676.372487][ T5978] usb 4-1: config 0 has no interface number 0 [ 676.378598][ T5978] usb 4-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 676.391771][ T5978] usb 4-1: config 0 interface 11 altsetting 0 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 676.411506][ T5978] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 676.420927][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.434688][ T5978] usb 4-1: Product: syz [ 676.438887][ T5978] usb 4-1: Manufacturer: syz [ 676.446103][ T5978] usb 4-1: SerialNumber: syz [ 676.458123][ T5978] usb 4-1: config 0 descriptor?? [ 676.473103][T22249] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 676.688872][T22249] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 676.698537][ T5978] usb 4-1: No status endpoint found [ 676.782490][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 676.901555][ T5978] usb 4-1: USB disconnect, device number 33 [ 676.932459][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 676.939185][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.950989][ T24] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.961202][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 676.967905][ T24] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 676.977391][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.987569][ T24] usb 3-1: config 0 descriptor?? [ 677.599925][ T24] usb 3-1: string descriptor 0 read error: -71 [ 677.620219][ T24] uclogic 0003:5543:0045.0036: failed retrieving string descriptor #200: -71 [ 677.643625][ T24] uclogic 0003:5543:0045.0036: failed retrieving pen parameters: -71 [ 677.652209][ T24] uclogic 0003:5543:0045.0036: failed probing pen v2 parameters: -71 [ 677.663077][ T24] uclogic 0003:5543:0045.0036: failed probing parameters: -71 [ 677.671153][ T24] uclogic 0003:5543:0045.0036: probe with driver uclogic failed with error -71 [ 677.687997][ T24] usb 3-1: USB disconnect, device number 70 [ 677.752531][ T5978] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 677.905665][ T5978] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 677.917636][ T5978] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.927699][ T5978] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 677.941017][ T5978] usb 6-1: config 0 interface 0 has no altsetting 0 [ 677.948319][ T5978] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 677.957655][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.967941][ T5978] usb 6-1: config 0 descriptor?? [ 677.992621][T21587] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 678.160328][T21587] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 678.171216][T21587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.179816][T21587] usb 4-1: Product: syz [ 678.184830][T21587] usb 4-1: Manufacturer: syz [ 678.189449][T21587] usb 4-1: SerialNumber: syz [ 678.196822][T21587] usb 4-1: config 0 descriptor?? [ 678.402543][ T5975] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 678.427538][ T5978] hid (null): unknown global tag 0xd [ 678.437439][ T5978] hid-alps 0003:044E:120C.0037: unknown global tag 0xd [ 678.444649][ T5978] hid-alps 0003:044E:120C.0037: item 0 1 1 13 parsing failed [ 678.452731][ T5978] hid-alps 0003:044E:120C.0037: parse failed [ 678.459480][ T5978] hid-alps 0003:044E:120C.0037: probe with driver hid-alps failed with error -22 [ 678.562339][ T5975] usb 3-1: Invalid ep0 maxpacket: 64 [ 678.614782][T21587] usb 4-1: Firmware: major: 118, minor: 209, hardware type: HULUSB (4) [ 678.649792][ T24] usb 6-1: USB disconnect, device number 50 [ 678.692452][ T5975] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 678.823390][T21587] usb 4-1: failed to fetch extended address, random address set [ 678.852605][ T5975] usb 3-1: Invalid ep0 maxpacket: 64 [ 678.858445][ T5975] usb usb3-port1: attempt power cycle [ 678.859644][T21587] usb 4-1: USB disconnect, device number 34 [ 679.002510][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 679.156223][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 679.165487][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.173580][ T24] usb 6-1: Product: syz [ 679.177747][ T24] usb 6-1: Manufacturer: syz [ 679.182405][ T24] usb 6-1: SerialNumber: syz [ 679.193193][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 679.199487][ T24] r8152-cfgselector 6-1: config 0 descriptor?? [ 679.212440][ T5975] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 679.234337][ T5975] usb 3-1: Invalid ep0 maxpacket: 64 [ 679.368252][ T5975] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 679.393278][ T5975] usb 3-1: Invalid ep0 maxpacket: 64 [ 679.398938][ T5975] usb usb3-port1: unable to enumerate USB device [ 679.611438][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 679.618004][T22294] netlink: 'syz.0.3109': attribute type 8 has an invalid length. [ 679.635422][ T24] r8152-cfgselector 6-1: bad CDC descriptors [ 679.648922][ T24] r8152-cfgselector 6-1: USB disconnect, device number 51 [ 680.209662][T22299] netlink: 'syz.5.3111': attribute type 3 has an invalid length. [ 680.218622][T22299] netlink: 'syz.5.3111': attribute type 3 has an invalid length. [ 680.602613][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 680.712431][ T5865] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 680.752910][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 680.761273][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 680.770994][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.779119][ T24] usb 6-1: Product: syz [ 680.783726][ T24] usb 6-1: Manufacturer: syz [ 680.788323][ T24] usb 6-1: SerialNumber: syz [ 680.795087][ T24] usb 6-1: config 0 descriptor?? [ 680.802091][ T24] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 680.866298][ T5865] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 680.877280][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.888253][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1628, setting to 1024 [ 680.899278][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 680.913095][ T5865] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 680.922177][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.933828][ T5865] usb 4-1: config 0 descriptor?? [ 680.939824][T22313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 681.207189][ T24] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 681.268145][T22324] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 681.358741][ T5865] waterforce 0003:1044:7A4D.0038: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 681.435259][ T5865] waterforce 0003:1044:7A4D.0038: fw version request failed with -71 [ 681.475603][ T5975] usb 6-1: USB disconnect, device number 52 [ 681.487699][ T5975] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 681.498188][ T5975] visor 6-1:0.0: device disconnected [ 681.562832][ T5865] usb 4-1: USB disconnect, device number 35 [ 682.026425][T22345] input: syz0 as /devices/virtual/input/input51 [ 682.292691][ T5865] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 682.472576][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 682.479209][ T5865] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.492279][ T5865] usb 6-1: config 0 interface 0 has no altsetting 0 [ 682.498918][ T5865] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 682.508546][ T5975] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 682.508656][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.526870][ T5865] usb 6-1: config 0 descriptor?? [ 682.672415][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 682.679140][ T5975] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 682.687426][ T5975] usb 4-1: config 0 has no interface number 0 [ 682.693658][ T5975] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.707177][ T5975] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 682.717883][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.725955][ T5975] usb 4-1: Product: syz [ 682.730127][ T5975] usb 4-1: Manufacturer: syz [ 682.734820][ T5975] usb 4-1: SerialNumber: syz [ 682.741774][ T5975] usb 4-1: config 0 descriptor?? [ 682.751401][ T5975] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 682.761298][ T5975] em28xx 4-1:0.132: Video interface 132 found: isoc [ 683.012706][ T5975] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 683.078938][ T5975] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 683.090304][ T5975] em28xx 4-1:0.132: board has no eeprom [ 683.162363][ T5975] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 683.177795][ T5975] em28xx 4-1:0.132: analog set to isoc mode. [ 683.191830][T21967] em28xx 4-1:0.132: Registering V4L2 extension [ 683.195268][ T5865] usbhid 6-1:0.0: can't add hid device: -71 [ 683.208186][ T5975] usb 4-1: USB disconnect, device number 36 [ 683.219641][ T5975] em28xx 4-1:0.132: Disconnecting em28xx [ 683.224642][ T5865] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 683.273159][ T5865] usb 6-1: USB disconnect, device number 53 [ 683.347159][T21967] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 683.355846][T21967] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 683.364817][T21967] em28xx 4-1:0.132: No AC97 audio processor [ 683.376738][T21967] usb 4-1: Decoder not found [ 683.381359][T21967] em28xx 4-1:0.132: failed to create media graph [ 683.392208][T21967] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 683.403824][T21967] em28xx 4-1:0.132: Remote control support is not available for this card. [ 683.412560][ T5975] em28xx 4-1:0.132: Closing input extension [ 683.427719][ T5975] em28xx 4-1:0.132: Freeing device [ 683.533332][ T5978] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 683.575689][T22373] loop3: detected capacity change from 0 to 7 [ 683.583915][T22373] Dev loop3: unable to read RDB block 7 [ 683.589566][T22373] loop3: unable to read partition table [ 683.595885][T22373] loop3: partition table beyond EOD, truncated [ 683.602904][T22373] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 683.693289][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 683.707599][ T5978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.731434][ T5978] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 683.746110][ T5978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 683.759302][ T5978] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 683.772871][ T5978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 683.782131][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 683.795973][ T5978] usb 3-1: SerialNumber: syz [ 683.808787][T22367] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 683.818934][ T5978] usb 3-1: bad CDC descriptors [ 683.830987][ T5978] usb-storage 3-1:1.0: USB Mass Storage device detected [ 683.848821][ T5978] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 683.856915][ T5975] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 683.866125][ T5978] scsi host1: usb-storage 3-1:1.0 [ 684.023578][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 684.028642][ T5865] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 684.037486][ T5975] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 684.049316][ T5975] usb 4-1: config 0 has no interface number 0 [ 684.067478][ T5975] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 684.076759][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.084872][ T5975] usb 4-1: Product: syz [ 684.089287][ T5975] usb 4-1: Manufacturer: syz [ 684.095480][ T5975] usb 4-1: SerialNumber: syz [ 684.113313][ T5975] usb 4-1: config 0 descriptor?? [ 684.121705][ T5975] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 684.172418][ T5865] usb 6-1: device descriptor read/64, error -71 [ 684.327810][ T5975] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 684.357293][ T5975] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 684.412407][ T5865] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 684.531486][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 115 [ 684.572672][ T5865] usb 6-1: device descriptor read/64, error -71 [ 684.694321][ T5865] usb usb6-port1: attempt power cycle [ 684.940310][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 684.951573][ T5975] usb 4-1: USB disconnect, device number 37 [ 684.976610][ T5975] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 685.000789][ T5975] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 685.022228][ T5975] quatech2 4-1:0.51: device disconnected [ 685.032396][ T5865] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 685.055183][T22382] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 685.068396][ T5865] usb 6-1: device descriptor read/8, error -71 [ 685.332417][ T5865] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 685.364167][ T5865] usb 6-1: device descriptor read/8, error -71 [ 685.475939][ T5865] usb usb6-port1: unable to enumerate USB device [ 685.690402][T22441] No control pipe specified [ 686.034160][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.040723][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.052361][ T5978] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 686.182460][T22382] usb 3-1: device descriptor read/64, error -71 [ 686.203889][ T5978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.214830][ T5978] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 686.225503][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.235601][ T5978] usb 4-1: config 0 descriptor?? [ 686.244179][ T5978] pwc: Askey VC010 type 2 USB webcam detected. [ 686.422543][T22382] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 686.572465][T22382] usb 3-1: device descriptor read/64, error -71 [ 686.643326][ T5978] pwc: recv_control_msg error -32 req 02 val 2b00 [ 686.661789][ T5978] pwc: recv_control_msg error -71 req 02 val 2700 [ 686.683626][ T5978] pwc: recv_control_msg error -71 req 02 val 2c00 [ 686.690875][ T5978] pwc: recv_control_msg error -71 req 04 val 1000 [ 686.700009][ T5978] pwc: recv_control_msg error -71 req 04 val 1300 [ 686.712790][ T5978] pwc: recv_control_msg error -71 req 04 val 1400 [ 686.719542][ T5978] pwc: recv_control_msg error -71 req 02 val 2000 [ 686.726612][ T5978] pwc: recv_control_msg error -71 req 02 val 2100 [ 686.734641][ T5978] pwc: recv_control_msg error -71 req 04 val 1500 [ 686.744803][ T5978] pwc: recv_control_msg error -71 req 02 val 2500 [ 686.762624][ T5978] pwc: recv_control_msg error -71 req 02 val 2400 [ 686.769604][ T5978] pwc: recv_control_msg error -71 req 02 val 2600 [ 686.779332][ T5978] pwc: recv_control_msg error -71 req 02 val 2900 [ 686.789424][ T5978] pwc: recv_control_msg error -71 req 02 val 2800 [ 686.798124][ T5978] pwc: recv_control_msg error -71 req 04 val 1100 [ 686.815039][T22382] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 686.836543][ T5978] pwc: recv_control_msg error -71 req 04 val 1200 [ 686.869263][ T5978] pwc: Registered as video103. [ 686.879542][T22382] usb 3-1: device descriptor read/8, error -71 [ 686.902483][ T5978] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 686.937219][ T5978] usb 4-1: USB disconnect, device number 38 [ 687.132387][T22382] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 687.174643][T22382] usb 3-1: device descriptor read/8, error -71 [ 687.245367][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 687.319596][T21587] usb 3-1: USB disconnect, device number 75 [ 687.414109][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 687.441635][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.492570][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.509900][ T24] usb 6-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 687.533639][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.573620][ T24] usb 6-1: config 0 descriptor?? [ 687.631886][T22495] nbd: must specify a size in bytes for the device [ 687.805190][T21587] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 687.962376][T21587] usb 3-1: device descriptor read/64, error -71 [ 688.012790][ T24] input: HID 28bd:0935 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0935.0039/input/input53 [ 688.128742][ T24] uclogic 0003:28BD:0935.0039: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.5-1/input0 [ 688.202613][ T24] usb 6-1: USB disconnect, device number 58 [ 688.212470][T21587] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 688.240473][T22511] fido_id[22511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 688.354165][T21587] usb 3-1: device descriptor read/64, error -71 [ 688.462895][T21587] usb usb3-port1: attempt power cycle [ 688.652374][ T5865] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 688.802542][T21587] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 688.811979][ T5865] usb 4-1: config 0 interface 0 altsetting 186 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.823377][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0 [ 688.831028][T21587] usb 3-1: device descriptor read/8, error -71 [ 688.837766][ T5865] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 688.847636][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.858922][ T5865] usb 4-1: config 0 descriptor?? [ 689.291268][T22537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.299957][T21587] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 689.303706][T22537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.323330][T21587] usb 3-1: Using ep0 maxpacket: 16 [ 689.328640][ T5931] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 689.337078][ T5865] usbhid 4-1:0.0: can't add hid device: -71 [ 689.346465][ T5865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 689.359733][ T5865] usb 4-1: USB disconnect, device number 39 [ 689.373208][T21587] usb 3-1: config 0 has an invalid interface number: 152 but max is 2 [ 689.385005][T21587] usb 3-1: config 0 has an invalid interface number: 130 but max is 2 [ 689.393942][T21587] usb 3-1: config 0 has an invalid interface number: 76 but max is 2 [ 689.407909][T21587] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 689.417684][T21587] usb 3-1: config 0 has no interface number 0 [ 689.430730][T21587] usb 3-1: config 0 has no interface number 1 [ 689.437412][T21587] usb 3-1: config 0 has no interface number 2 [ 689.447625][T21587] usb 3-1: config 0 interface 152 altsetting 1 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 689.470159][T21587] usb 3-1: config 0 interface 152 altsetting 1 endpoint 0x8D has invalid wMaxPacketSize 0 [ 689.481333][T21587] usb 3-1: config 0 interface 152 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 689.494465][T21587] usb 3-1: config 0 interface 152 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 689.506124][T21587] usb 3-1: config 0 interface 152 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 689.520548][T21587] usb 3-1: config 0 interface 152 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 689.531891][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.543219][ T5931] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 689.553556][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.563822][T21587] usb 3-1: config 0 interface 152 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 689.588569][ T5931] usb 6-1: config 0 descriptor?? [ 689.595576][T21587] usb 3-1: config 0 interface 152 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 689.607122][T21587] usb 3-1: config 0 interface 152 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 689.618290][T21587] usb 3-1: config 0 interface 130 altsetting 9 endpoint 0x8 has an invalid bInterval 151, changing to 11 [ 689.633496][ T5931] pwc: Askey VC010 type 2 USB webcam detected. [ 689.639984][T21587] usb 3-1: config 0 interface 130 altsetting 9 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 689.651463][T21587] usb 3-1: config 0 interface 130 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 689.663185][T21587] usb 3-1: config 0 interface 76 altsetting 40 has a duplicate endpoint with address 0x7, skipping [ 689.684473][T21587] usb 3-1: config 0 interface 76 altsetting 40 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 689.704929][T21587] usb 3-1: config 0 interface 76 altsetting 40 has a duplicate endpoint with address 0xD, skipping [ 689.716496][T21587] usb 3-1: config 0 interface 76 altsetting 40 has a duplicate endpoint with address 0xB, skipping [ 689.728046][T21587] usb 3-1: config 0 interface 76 altsetting 40 has an endpoint descriptor with address 0x2F, changing to 0xF [ 689.748313][T21587] usb 3-1: config 0 interface 76 altsetting 40 has a duplicate endpoint with address 0xF, skipping [ 689.759931][T21587] usb 3-1: config 0 interface 152 has no altsetting 0 [ 689.767210][T21587] usb 3-1: config 0 interface 130 has no altsetting 0 [ 689.777399][T21587] usb 3-1: config 0 interface 76 has no altsetting 0 [ 689.788257][T21587] usb 3-1: New USB device found, idVendor=19d2, idProduct=1127, bcdDevice=66.8b [ 689.800310][T21587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.808739][T21587] usb 3-1: Product: à ‡ [ 689.814268][T21587] usb 3-1: Manufacturer: Ø» [ 689.818899][T21587] usb 3-1: SerialNumber: syz [ 689.833971][T21587] usb 3-1: config 0 descriptor?? [ 690.036205][T22535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.045164][T22535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.055648][ T5931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 690.063620][T21587] option 3-1:0.152: GSM modem (1-port) converter detected [ 690.071368][ T5931] pwc: recv_control_msg error -32 req 02 val 2700 [ 690.083880][ T5931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 690.092081][ T5931] pwc: recv_control_msg error -32 req 04 val 1000 [ 690.093351][ T5978] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 690.106660][ T5931] pwc: recv_control_msg error -32 req 04 val 1300 [ 690.123589][T21587] usb 3-1: USB disconnect, device number 79 [ 690.131955][ T5931] pwc: recv_control_msg error -32 req 04 val 1400 [ 690.139856][ T5931] pwc: recv_control_msg error -32 req 02 val 2000 [ 690.151851][ T5931] pwc: recv_control_msg error -32 req 02 val 2100 [ 690.159112][T21587] option 3-1:0.152: device disconnected [ 690.166274][ T5931] pwc: recv_control_msg error -32 req 04 val 1500 [ 690.185142][ T5931] pwc: recv_control_msg error -32 req 02 val 2500 [ 690.255822][ T5978] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 690.266950][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.277958][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.288786][ T5978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 690.303405][ T5978] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 690.312632][ T5978] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 690.320758][ T5978] usb 4-1: Manufacturer: syz [ 690.328488][ T5978] usb 4-1: config 0 descriptor?? [ 690.393347][ T5931] pwc: recv_control_msg error -32 req 02 val 2600 [ 690.603923][ T5931] pwc: recv_control_msg error -71 req 02 val 2800 [ 690.611340][ T5931] pwc: recv_control_msg error -71 req 04 val 1100 [ 690.619076][ T5931] pwc: recv_control_msg error -71 req 04 val 1200 [ 690.627511][ T5931] pwc: Registered as video103. [ 690.636014][ T5931] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54 [ 690.661145][ T5931] usb 6-1: USB disconnect, device number 59 [ 690.691125][T20759] udevd[20759]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 690.744089][ T5978] appleir 0003:05AC:8243.003A: item fetching failed at offset 0/1 [ 690.755175][ T5978] appleir 0003:05AC:8243.003A: parse failed [ 690.761133][ T5978] appleir 0003:05AC:8243.003A: probe with driver appleir failed with error -22 [ 691.060042][ T116] usb 4-1: USB disconnect, device number 40 [ 691.074999][ T5978] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 691.169892][T22572] comedi comedi2: fl512: I/O port conflict (0x3,16) [ 691.236331][ T5978] usb 3-1: device descriptor read/64, error -71 [ 691.502350][ T5978] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 691.643031][ T5978] usb 3-1: device descriptor read/64, error -71 [ 691.658520][T22594] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3175'. [ 691.702513][ T116] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 691.752778][ T5978] usb usb3-port1: attempt power cycle [ 691.884170][ T116] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 691.897480][ T116] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 691.906714][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.914845][ T5975] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 691.922564][ T116] usb 6-1: Product: syz [ 691.928053][ T116] usb 6-1: Manufacturer: syz [ 691.932975][ T116] usb 6-1: SerialNumber: syz [ 691.939815][ T116] usb 6-1: config 0 descriptor?? [ 691.949577][ T116] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 692.083875][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.093751][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 692.107269][ T5975] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 692.116522][ T5978] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 692.124129][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.135752][ T5975] usb 4-1: config 0 descriptor?? [ 692.155358][ T24] usb 6-1: USB disconnect, device number 60 [ 692.163440][ T5978] usb 3-1: device descriptor read/8, error -71 [ 692.432461][ T5978] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 692.463099][ T5978] usb 3-1: device descriptor read/8, error -71 [ 692.549109][ T5975] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x1 [ 692.556452][ T5975] kovaplus 0003:1E7D:2D50.003B: item fetching failed at offset 3/5 [ 692.564939][ T5975] kovaplus 0003:1E7D:2D50.003B: parse failed [ 692.570972][ T5975] kovaplus 0003:1E7D:2D50.003B: probe with driver kovaplus failed with error -22 [ 692.580751][ T5978] usb usb3-port1: unable to enumerate USB device [ 692.750221][ T5978] usb 4-1: USB disconnect, device number 41 [ 693.304841][T22607] netlink: 'syz.5.3185': attribute type 21 has an invalid length. [ 693.314280][T22607] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3185'. [ 693.532376][ T5978] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 693.612364][ T5931] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 693.685805][ T5978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.696097][ T5978] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 693.705291][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.716833][ T5978] usb 4-1: config 0 descriptor?? [ 693.726048][ T5978] pwc: Askey VC010 type 2 USB webcam detected. [ 693.762450][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 693.770154][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.780894][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 693.793103][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 693.804305][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.819473][ T5931] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 693.829275][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.837649][ T5931] usb 6-1: Product: syz [ 693.842207][ T5931] usb 6-1: Manufacturer: syz [ 693.847157][ T5931] usb 6-1: SerialNumber: syz [ 693.855515][ T5931] usb 6-1: config 0 descriptor?? [ 693.932620][ T5931] rc_core: IR keymap rc-xbox-dvd not found [ 693.940650][ T5931] Registered IR keymap rc-empty [ 693.947466][ T5931] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 693.958771][ T5931] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input56 [ 694.075843][ T5931] usb 6-1: USB disconnect, device number 61 [ 694.081974][ C1] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 694.129116][T22605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.139324][T22605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.150136][ T5978] pwc: recv_control_msg error -32 req 02 val 2b00 [ 694.158608][ T5978] pwc: recv_control_msg error -32 req 02 val 2700 [ 694.165807][ T5978] pwc: recv_control_msg error -32 req 02 val 2c00 [ 694.173659][ T5978] pwc: recv_control_msg error -32 req 04 val 1000 [ 694.182904][ T5978] pwc: recv_control_msg error -32 req 04 val 1300 [ 694.189901][ T5978] pwc: recv_control_msg error -32 req 04 val 1400 [ 694.197102][ T5978] pwc: recv_control_msg error -32 req 02 val 2000 [ 694.204206][ T5978] pwc: recv_control_msg error -32 req 02 val 2100 [ 694.211392][ T5978] pwc: recv_control_msg error -32 req 04 val 1500 [ 694.222374][ T5978] pwc: recv_control_msg error -32 req 02 val 2500 [ 694.302396][ T5975] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 694.434150][ T5978] pwc: recv_control_msg error -32 req 02 val 2600 [ 694.462486][ T5975] usb 3-1: Using ep0 maxpacket: 8 [ 694.470690][ T5975] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 694.478973][ T5975] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 694.489073][ T5975] usb 3-1: config 3 has no interface number 0 [ 694.495318][ T5975] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 694.508468][ T5975] usb 3-1: config 3 interface 45 has no altsetting 0 [ 694.518174][ T5975] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 694.528038][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.536815][ T5975] usb 3-1: Product: syz [ 694.540981][ T5975] usb 3-1: Manufacturer: syz [ 694.545818][ T5975] usb 3-1: SerialNumber: syz [ 694.645946][ T5978] pwc: recv_control_msg error -71 req 02 val 2800 [ 694.653557][ T5978] pwc: recv_control_msg error -71 req 04 val 1100 [ 694.660356][ T5978] pwc: recv_control_msg error -71 req 04 val 1200 [ 694.668315][ T5978] pwc: Registered as video103. [ 694.677359][ T5978] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 694.704552][ T5978] usb 4-1: USB disconnect, device number 42 [ 694.862359][ T5931] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 695.012386][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 695.021202][ T5931] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 695.030346][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.038654][ T5931] usb 6-1: Product: syz [ 695.042905][ T5931] usb 6-1: Manufacturer: syz [ 695.047512][ T5931] usb 6-1: SerialNumber: syz [ 695.055148][ T5931] usb 6-1: config 0 descriptor?? [ 695.482648][T22626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.500405][T22626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.740940][ T5931] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 695.756299][ T5931] gspca_sunplus: reg_w_riv err -71 [ 695.766611][ T5931] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 695.779401][ T5931] usb 6-1: USB disconnect, device number 62 [ 695.862763][ T24] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 695.992405][ T24] usb 4-1: device descriptor read/64, error -71 [ 696.232441][ T24] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 696.362348][ T24] usb 4-1: device descriptor read/64, error -71 [ 696.493748][ T24] usb usb4-port1: attempt power cycle [ 696.622396][ T116] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 696.783286][ T116] usb 6-1: too many configurations: 55, using maximum allowed: 8 [ 696.794676][ T116] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 696.802403][ T116] usb 6-1: can't read configurations, error -61 [ 696.832674][ T24] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 696.852945][ T24] usb 4-1: device descriptor read/8, error -71 [ 696.948746][ T116] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 696.949918][T22665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3192'. [ 696.970087][ T5975] usb 3-1: USB disconnect, device number 84 [ 696.996687][T20736] udevd[20736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.102417][ T24] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 697.113725][ T116] usb 6-1: too many configurations: 55, using maximum allowed: 8 [ 697.123899][ T116] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 697.124579][ T24] usb 4-1: device descriptor read/8, error -71 [ 697.131589][ T116] usb 6-1: can't read configurations, error -61 [ 697.131997][ T116] usb usb6-port1: attempt power cycle [ 697.243703][ T24] usb usb4-port1: unable to enumerate USB device [ 697.392434][ T5975] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 697.504075][ T116] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 697.523548][ T116] usb 6-1: too many configurations: 55, using maximum allowed: 8 [ 697.532927][ T116] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 697.540519][ T116] usb 6-1: can't read configurations, error -61 [ 697.547267][ T5975] usb 3-1: Using ep0 maxpacket: 8 [ 697.554805][ T5975] usb 3-1: config 162 has an invalid interface number: 196 but max is 2 [ 697.564748][ T5975] usb 3-1: config 162 has an invalid descriptor of length 244, skipping remainder of the config [ 697.576303][ T5975] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 3 [ 697.585683][ T5975] usb 3-1: config 162 has no interface number 0 [ 697.591989][ T5975] usb 3-1: config 162 interface 196 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.605312][ T5975] usb 3-1: config 162 interface 196 has no altsetting 0 [ 697.614213][ T5975] usb 3-1: New USB device found, idVendor=12d1, idProduct=87e8, bcdDevice=40.84 [ 697.623532][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.631538][ T5975] usb 3-1: Product: syz [ 697.636077][ T5975] usb 3-1: Manufacturer: syz [ 697.640696][ T5975] usb 3-1: SerialNumber: syz [ 697.692497][ T116] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 697.713482][ T116] usb 6-1: too many configurations: 55, using maximum allowed: 8 [ 697.722907][ T116] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 697.730485][ T116] usb 6-1: can't read configurations, error -61 [ 697.737301][ T116] usb usb6-port1: unable to enumerate USB device [ 697.854609][ T5975] huawei_cdc_ncm 3-1:162.196: skipping garbage [ 697.860822][ T5975] huawei_cdc_ncm 3-1:162.196: CDC Union missing and no IAD found [ 697.870053][ T5975] huawei_cdc_ncm 3-1:162.196: bind() failure [ 697.879761][ T5975] usb 3-1: USB disconnect, device number 85 [ 698.622465][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 698.692959][T22679] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 698.699501][T22679] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 698.708026][T22679] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 698.715024][T22679] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 698.721529][T22679] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 698.728394][T22679] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 698.735190][T22679] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 698.741669][T22679] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 698.748717][T22679] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 698.756608][T22679] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 698.763137][T22679] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 698.769614][T22679] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 698.777655][T22679] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 698.786411][T22679] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 698.793245][T22679] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 698.795360][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.799797][T22679] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 698.810212][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 698.826031][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.834798][T22679] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 698.841624][T22679] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 698.848335][T22679] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 698.849273][ T24] usb 3-1: config 0 descriptor?? [ 698.856301][T22679] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 698.867425][T22679] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 698.871775][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 698.874966][T22679] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 698.887169][T22679] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 699.042094][T22687] loop3: detected capacity change from 0 to 7 [ 699.049843][T22687] Dev loop3: unable to read RDB block 7 [ 699.055709][T22687] loop3: unable to read partition table [ 699.061634][T22687] loop3: partition table beyond EOD, truncated [ 699.071516][T22687] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 699.289817][T22673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.299523][T22673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.311613][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 699.320137][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 699.328699][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 699.337467][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 699.346241][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 699.354146][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 699.361611][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 699.373084][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 699.391754][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 699.399490][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 699.462854][ T5975] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 699.520827][T22700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.540202][T22700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.608920][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 699.644095][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 699.651162][ T5975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.661655][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 699.676118][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 699.687482][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 699.697294][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 699.715525][ T5975] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 699.724971][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 699.736533][ T5975] usb 4-1: Product: syz [ 699.740735][ T5975] usb 4-1: Manufacturer: syz [ 699.745546][ T5975] usb 4-1: SerialNumber: syz [ 699.753404][ T5975] usb 4-1: config 0 descriptor?? [ 699.818966][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 699.828364][ T5865] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 699.836836][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 699.844800][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 699.862012][ T24] pwc: Registered as video103. [ 699.886215][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 699.943937][ T24] usb 3-1: USB disconnect, device number 86 [ 699.964637][ T5975] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 699.980816][ T5975] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 700.005892][ T5865] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 700.018349][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.048587][ T5865] usb 6-1: config 0 descriptor?? [ 700.165179][ T5975] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 700.173128][ T5975] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 700.186957][ T5975] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 700.308254][T22701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.322668][T22701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.365804][ T5975] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 701.090185][T22737] lo speed is unknown, defaulting to 1000 [ 701.246569][T22745] FAULT_INJECTION: forcing a failure. [ 701.246569][T22745] name failslab, interval 1, probability 0, space 0, times 0 [ 701.260656][T22745] CPU: 0 UID: 0 PID: 22745 Comm: syz.0.3209 Not tainted syzkaller #0 PREEMPT(full) [ 701.260691][T22745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 701.260702][T22745] Call Trace: [ 701.260710][T22745] [ 701.260718][T22745] dump_stack_lvl+0x189/0x250 [ 701.260747][T22745] ? __pfx____ratelimit+0x10/0x10 [ 701.260858][T22745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.260891][T22745] ? __pfx__printk+0x10/0x10 [ 701.260918][T22745] ? __pfx___might_resched+0x10/0x10 [ 701.260938][T22745] ? fs_reclaim_acquire+0x7d/0x100 [ 701.260961][T22745] should_fail_ex+0x414/0x560 [ 701.260986][T22745] should_failslab+0xa8/0x100 [ 701.260998][T22745] __kvmalloc_node_noprof+0x158/0x910 [ 701.261007][T22745] ? aa_file_perm+0x13a/0x1550 [ 701.261021][T22745] ? seq_read_iter+0x202/0xe20 [ 701.261041][T22745] seq_read_iter+0x202/0xe20 [ 701.261055][T22745] ? look_up_lock_class+0x74/0x170 [ 701.261085][T22745] ? __asan_memset+0x22/0x50 [ 701.261114][T22745] seq_read+0x369/0x480 [ 701.261131][T22745] ? __pfx_seq_read+0x10/0x10 [ 701.261147][T22745] ? rw_verify_area+0x2a6/0x4d0 [ 701.261156][T22745] ? __lock_acquire+0xab9/0xd20 [ 701.261167][T22745] ? __pfx_seq_read+0x10/0x10 [ 701.261176][T22745] vfs_read+0x200/0xa30 [ 701.261191][T22745] ? fdget_pos+0x247/0x320 [ 701.261214][T22745] ? __pfx___mutex_lock+0x10/0x10 [ 701.261236][T22745] ? __pfx_vfs_read+0x10/0x10 [ 701.261256][T22745] ? __fget_files+0x2a/0x420 [ 701.261275][T22745] ? __fget_files+0x3a0/0x420 [ 701.261286][T22745] ? __fget_files+0x2a/0x420 [ 701.261307][T22745] ksys_read+0x145/0x250 [ 701.261320][T22745] ? __pfx_ksys_read+0x10/0x10 [ 701.261335][T22745] ? do_syscall_64+0xbe/0xfa0 [ 701.261357][T22745] do_syscall_64+0xfa/0xfa0 [ 701.261375][T22745] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.261394][T22745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.261411][T22745] ? clear_bhb_loop+0x60/0xb0 [ 701.261427][T22745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.261437][T22745] RIP: 0033:0x7f8b8138eec9 [ 701.261448][T22745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.261457][T22745] RSP: 002b:00007f8b82156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 701.261468][T22745] RAX: ffffffffffffffda RBX: 00007f8b815e5fa0 RCX: 00007f8b8138eec9 [ 701.261475][T22745] RDX: 0000000000002020 RSI: 0000200000000400 RDI: 0000000000000003 [ 701.261484][T22745] RBP: 00007f8b82156090 R08: 0000000000000000 R09: 0000000000000000 [ 701.261494][T22745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.261504][T22745] R13: 00007f8b815e6038 R14: 00007f8b815e5fa0 R15: 00007ffe558beab8 [ 701.261536][T22745] [ 701.526359][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.545093][T22746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.567282][T22746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.586511][T22690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.609562][T22690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.637148][ T5975] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 701.652125][ T5975] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 701.666477][ T5975] usb 4-1: USB disconnect, device number 47 [ 701.851616][T22762] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3214'. [ 702.103206][ T5975] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 702.276797][ T5975] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 702.286201][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.295585][ T5975] usb 3-1: Product: syz [ 702.299797][ T5975] usb 3-1: Manufacturer: syz [ 702.304585][ T5975] usb 3-1: SerialNumber: syz [ 702.318442][ T5975] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 702.338728][ T116] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 702.348086][ T5870] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 702.352606][ T5872] Bluetooth: hci4: command 0x1003 tx timeout [ 702.410021][ T5865] kaweth 6-1:0.0: Firmware present in device. [ 702.418549][ T5865] kaweth 6-1:0.0: Error reading configuration (-71), no net device created [ 702.429662][ T5865] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 702.440275][ T5865] usb 6-1: USB disconnect, device number 67 [ 702.827068][T22779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 702.957625][ T5865] usb 3-1: USB disconnect, device number 87 [ 703.005831][T22785] FAULT_INJECTION: forcing a failure. [ 703.005831][T22785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.019412][T22785] CPU: 0 UID: 0 PID: 22785 Comm: syz.3.3220 Not tainted syzkaller #0 PREEMPT(full) [ 703.019436][T22785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 703.019447][T22785] Call Trace: [ 703.019455][T22785] [ 703.019463][T22785] dump_stack_lvl+0x189/0x250 [ 703.019492][T22785] ? __pfx____ratelimit+0x10/0x10 [ 703.019511][T22785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.019535][T22785] ? __pfx__printk+0x10/0x10 [ 703.019557][T22785] ? __might_fault+0xb0/0x130 [ 703.019591][T22785] should_fail_ex+0x414/0x560 [ 703.019620][T22785] _copy_to_iter+0x404/0x1790 [ 703.019655][T22785] ? __pfx__copy_to_iter+0x10/0x10 [ 703.019675][T22785] ? m_stop+0x125/0x2d0 [ 703.019703][T22785] ? m_stop+0x24e/0x2d0 [ 703.019728][T22785] seq_read_iter+0xbf5/0xe20 [ 703.019765][T22785] seq_read+0x369/0x480 [ 703.019790][T22785] ? __pfx_seq_read+0x10/0x10 [ 703.019819][T22785] ? rw_verify_area+0x2a6/0x4d0 [ 703.019835][T22785] ? __lock_acquire+0xab9/0xd20 [ 703.019852][T22785] ? __pfx_seq_read+0x10/0x10 [ 703.019869][T22785] vfs_read+0x200/0xa30 [ 703.019885][T22785] ? fdget_pos+0x247/0x320 [ 703.019910][T22785] ? __pfx___mutex_lock+0x10/0x10 [ 703.019930][T22785] ? __pfx_vfs_read+0x10/0x10 [ 703.019948][T22785] ? __fget_files+0x2a/0x420 [ 703.019971][T22785] ? __fget_files+0x3a0/0x420 [ 703.019988][T22785] ? __fget_files+0x2a/0x420 [ 703.020016][T22785] ksys_read+0x145/0x250 [ 703.020035][T22785] ? __pfx_ksys_read+0x10/0x10 [ 703.020056][T22785] ? do_syscall_64+0xbe/0xfa0 [ 703.020077][T22785] do_syscall_64+0xfa/0xfa0 [ 703.020094][T22785] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.020112][T22785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.020128][T22785] ? clear_bhb_loop+0x60/0xb0 [ 703.020149][T22785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.020165][T22785] RIP: 0033:0x7fd663f8eec9 [ 703.020181][T22785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.020195][T22785] RSP: 002b:00007fd664e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.020214][T22785] RAX: ffffffffffffffda RBX: 00007fd6641e5fa0 RCX: 00007fd663f8eec9 [ 703.020226][T22785] RDX: 0000000000002020 RSI: 0000200000000400 RDI: 0000000000000003 [ 703.020238][T22785] RBP: 00007fd664e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 703.020249][T22785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.020276][T22785] R13: 00007fd6641e6038 R14: 00007fd6641e5fa0 R15: 00007ffc3f7ab798 [ 703.020312][T22785] [ 703.269398][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.330369][T22789] nbd: must specify at least one socket [ 703.374489][T22787] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3221'. [ 703.407983][T22792] netlink: 'syz.3.3223': attribute type 1 has an invalid length. [ 703.416153][T22792] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3223'. [ 703.642056][T22803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3226'. [ 703.784891][ T116] usb 3-1: Service connection timeout for: 257 [ 703.794708][ T116] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 703.819017][ T116] ath9k_htc: Failed to initialize the device [ 703.835837][ T5865] usb 3-1: ath9k_htc: USB layer deinitialized [ 703.877918][T22817] FAULT_INJECTION: forcing a failure. [ 703.877918][T22817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 703.892660][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.5.3231 Not tainted syzkaller #0 PREEMPT(full) [ 703.892685][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 703.892696][T22817] Call Trace: [ 703.892704][T22817] [ 703.892711][T22817] dump_stack_lvl+0x189/0x250 [ 703.892741][T22817] ? __pfx____ratelimit+0x10/0x10 [ 703.892760][T22817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.892784][T22817] ? __pfx__printk+0x10/0x10 [ 703.892809][T22817] ? fs_reclaim_acquire+0x7d/0x100 [ 703.892835][T22817] should_fail_ex+0x414/0x560 [ 703.892866][T22817] prepare_alloc_pages+0x213/0x610 [ 703.892891][T22817] __alloc_frozen_pages_noprof+0x123/0x370 [ 703.892914][T22817] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 703.892931][T22817] ? smaps_page_accumulate+0x163/0x280 [ 703.892965][T22817] ? policy_nodemask+0x27c/0x720 [ 703.892979][T22817] ? __lock_acquire+0xab9/0xd20 [ 703.893005][T22817] alloc_pages_mpol+0x232/0x4a0 [ 703.893030][T22817] vma_alloc_folio_noprof+0xe4/0x200 [ 703.893052][T22817] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 703.893084][T22817] folio_prealloc+0x30/0x180 [ 703.893110][T22817] __handle_mm_fault+0x2a8b/0x5400 [ 703.893150][T22817] ? __pfx___handle_mm_fault+0x10/0x10 [ 703.893193][T22817] ? find_vma+0xe7/0x160 [ 703.893215][T22817] ? __pfx_find_vma+0x10/0x10 [ 703.893239][T22817] handle_mm_fault+0x40a/0x8e0 [ 703.893271][T22817] do_user_addr_fault+0x764/0x1380 [ 703.893307][T22817] exc_page_fault+0x82/0x100 [ 703.893329][T22817] asm_exc_page_fault+0x26/0x30 [ 703.893344][T22817] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 703.893366][T22817] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 3f 32 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 703.893379][T22817] RSP: 0018:ffffc9000bd178d8 EFLAGS: 00050202 [ 703.893394][T22817] RAX: ffffffff84d3c401 RBX: ffff88807eece000 RCX: 00000000000002ab [ 703.893405][T22817] RDX: 0000000000000000 RSI: ffff88807eecec00 RDI: 0000200000001000 [ 703.893416][T22817] RBP: ffffc9000bd17a50 R08: ffff88807eeceeaa R09: 1ffff1100fdd9dd5 [ 703.893428][T22817] R10: dffffc0000000000 R11: ffffed100fdd9dd6 R12: dffffc0000000000 [ 703.893440][T22817] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000eab [ 703.893459][T22817] ? _copy_to_iter+0x401/0x1790 [ 703.893485][T22817] _copy_to_iter+0x493/0x1790 [ 703.893528][T22817] ? __pfx__copy_to_iter+0x10/0x10 [ 703.893549][T22817] ? m_stop+0x125/0x2d0 [ 703.893576][T22817] ? m_stop+0x24e/0x2d0 [ 703.893601][T22817] seq_read_iter+0xbf5/0xe20 [ 703.893639][T22817] seq_read+0x369/0x480 [ 703.893664][T22817] ? __pfx_seq_read+0x10/0x10 [ 703.893694][T22817] ? rw_verify_area+0x2a6/0x4d0 [ 703.893711][T22817] ? __lock_acquire+0xab9/0xd20 [ 703.893728][T22817] ? __pfx_seq_read+0x10/0x10 [ 703.893746][T22817] vfs_read+0x200/0xa30 [ 703.893762][T22817] ? fdget_pos+0x247/0x320 [ 703.893786][T22817] ? __pfx___mutex_lock+0x10/0x10 [ 703.893807][T22817] ? __pfx_vfs_read+0x10/0x10 [ 703.893827][T22817] ? __fget_files+0x2a/0x420 [ 703.893851][T22817] ? __fget_files+0x3a0/0x420 [ 703.893870][T22817] ? __fget_files+0x2a/0x420 [ 703.893899][T22817] ksys_read+0x145/0x250 [ 703.893919][T22817] ? __pfx_ksys_read+0x10/0x10 [ 703.893941][T22817] ? do_syscall_64+0xbe/0xfa0 [ 703.893964][T22817] do_syscall_64+0xfa/0xfa0 [ 703.893981][T22817] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.894000][T22817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.894017][T22817] ? clear_bhb_loop+0x60/0xb0 [ 703.894037][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.894054][T22817] RIP: 0033:0x7f217898eec9 [ 703.894069][T22817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.894084][T22817] RSP: 002b:00007f217987f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.894101][T22817] RAX: ffffffffffffffda RBX: 00007f2178be5fa0 RCX: 00007f217898eec9 [ 703.894114][T22817] RDX: 0000000000002020 RSI: 0000200000000400 RDI: 0000000000000003 [ 703.894125][T22817] RBP: 00007f217987f090 R08: 0000000000000000 R09: 0000000000000000 [ 703.894136][T22817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.894147][T22817] R13: 00007f2178be6038 R14: 00007f2178be5fa0 R15: 00007ffd12bae428 [ 703.894179][T22817] [ 704.316743][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.554495][ T5865] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 704.622995][T21967] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 704.712364][ T5865] usb 3-1: device descriptor read/64, error -71 [ 704.752364][T21967] usb 6-1: device descriptor read/64, error -71 [ 704.952326][ T5865] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 705.012584][T21967] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 705.082347][ T5865] usb 3-1: device descriptor read/64, error -71 [ 705.152379][T21967] usb 6-1: device descriptor read/64, error -71 [ 705.192595][ T5865] usb usb3-port1: attempt power cycle [ 705.262812][T21967] usb usb6-port1: attempt power cycle [ 705.542513][ T5865] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 705.574086][ T5865] usb 3-1: device descriptor read/8, error -71 [ 705.608559][T21967] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 705.625467][T22835] netlink: 'syz.3.3238': attribute type 1 has an invalid length. [ 705.633621][T22835] netlink: 'syz.3.3238': attribute type 11 has an invalid length. [ 705.641449][T22835] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3238'. [ 705.667327][T21967] usb 6-1: device descriptor read/8, error -71 [ 705.757471][T22843] FAULT_INJECTION: forcing a failure. [ 705.757471][T22843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.773429][T22843] CPU: 0 UID: 0 PID: 22843 Comm: syz.3.3241 Not tainted syzkaller #0 PREEMPT(full) [ 705.773454][T22843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 705.773465][T22843] Call Trace: [ 705.773472][T22843] [ 705.773480][T22843] dump_stack_lvl+0x189/0x250 [ 705.773510][T22843] ? __pfx____ratelimit+0x10/0x10 [ 705.773528][T22843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.773550][T22843] ? __pfx__printk+0x10/0x10 [ 705.773584][T22843] should_fail_ex+0x414/0x560 [ 705.773613][T22843] _copy_to_user+0x31/0xb0 [ 705.773637][T22843] simple_read_from_buffer+0xe1/0x170 [ 705.773660][T22843] proc_fail_nth_read+0x1b3/0x220 [ 705.773687][T22843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.773714][T22843] ? rw_verify_area+0x2a6/0x4d0 [ 705.773730][T22843] ? __lock_acquire+0xab9/0xd20 [ 705.773747][T22843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.773773][T22843] vfs_read+0x200/0xa30 [ 705.773789][T22843] ? fdget_pos+0x247/0x320 [ 705.773812][T22843] ? __pfx___mutex_lock+0x10/0x10 [ 705.773832][T22843] ? __pfx_vfs_read+0x10/0x10 [ 705.773851][T22843] ? __fget_files+0x2a/0x420 [ 705.773875][T22843] ? __fget_files+0x3a0/0x420 [ 705.773893][T22843] ? __fget_files+0x2a/0x420 [ 705.773921][T22843] ksys_read+0x145/0x250 [ 705.773941][T22843] ? __pfx_ksys_read+0x10/0x10 [ 705.773962][T22843] ? do_syscall_64+0xbe/0xfa0 [ 705.773985][T22843] do_syscall_64+0xfa/0xfa0 [ 705.774001][T22843] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.774020][T22843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.774036][T22843] ? clear_bhb_loop+0x60/0xb0 [ 705.774057][T22843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.774073][T22843] RIP: 0033:0x7fd663f8d8dc [ 705.774090][T22843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 705.774105][T22843] RSP: 002b:00007fd664e1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 705.774129][T22843] RAX: ffffffffffffffda RBX: 00007fd6641e5fa0 RCX: 00007fd663f8d8dc [ 705.774141][T22843] RDX: 000000000000000f RSI: 00007fd664e1e0a0 RDI: 0000000000000005 [ 705.774153][T22843] RBP: 00007fd664e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 705.774164][T22843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.774174][T22843] R13: 00007fd6641e6038 R14: 00007fd6641e5fa0 R15: 00007ffc3f7ab798 [ 705.774205][T22843] [ 705.842560][ T5865] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 705.846625][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.894287][ T5865] usb 3-1: device descriptor read/8, error -71 [ 705.894782][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.039718][ C0] hrtimer: interrupt took 257458421 ns [ 706.046367][ T5865] usb usb3-port1: unable to enumerate USB device [ 706.139791][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.202413][T21967] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 706.222807][T21967] usb 6-1: device descriptor read/8, error -71 [ 706.342618][T21967] usb usb6-port1: unable to enumerate USB device [ 706.533058][ T5975] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 706.683748][ T5975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.694780][ T5975] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 706.706882][ T5975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 706.716139][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.724259][ T5975] usb 4-1: Product: syz [ 706.728736][ T5975] usb 4-1: Manufacturer: syz [ 706.733689][ T5975] usb 4-1: SerialNumber: syz [ 706.745450][ T5975] cdc_mbim 4-1:1.0: skipping garbage [ 706.944580][T22848] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 707.162346][ T5865] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 707.314081][ T5865] usb 3-1: config 9 has an invalid interface number: 1 but max is 0 [ 707.322354][ T5865] usb 3-1: config 9 has no interface number 0 [ 707.328453][ T5865] usb 3-1: config 9 interface 1 has no altsetting 0 [ 707.338130][ T5865] usb 3-1: string descriptor 0 read error: -22 [ 707.344487][ T5865] usb 3-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 707.353615][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.374994][ T5865] cx231xx 3-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 707.394206][ T5865] cx231xx 3-1:9.1: Not found matching IAD interface [ 707.450563][T22857] loop3: detected capacity change from 0 to 7 [ 707.458309][T22857] Dev loop3: unable to read RDB block 7 [ 707.465182][T22857] loop3: unable to read partition table [ 707.471115][T22857] loop3: partition table beyond EOD, truncated [ 707.477944][T22857] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 707.586868][ T10] usb 3-1: USB disconnect, device number 92 [ 707.617347][T22848] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 707.635271][ T5975] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 707.672614][ T5975] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 707.695347][ T5975] wwan wwan0: port wwan0mbim0 attached [ 707.715595][ T5975] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, c6:b6:f4:a5:b8:c9 [ 707.850968][ T10] usb 4-1: USB disconnect, device number 48 [ 707.870782][ T10] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 707.902398][ T5931] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 707.961422][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 708.057432][ T5931] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 708.068846][ T5931] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 708.082054][ T5931] usb 6-1: config 1 interface 0 has no altsetting 0 [ 708.097045][ T5931] usb 6-1: string descriptor 0 read error: -22 [ 708.103553][ T5931] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.122419][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.144206][T22861] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 708.160591][T22861] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 708.179513][ T5931] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 708.389446][ T10] usb 6-1: USB disconnect, device number 72 [ 708.582377][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 708.735944][ T5931] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 708.913197][T22904] loop3: detected capacity change from 0 to 7 [ 708.920693][T22904] Dev loop3: unable to read RDB block 7 [ 708.927967][T22904] loop3: unable to read partition table [ 708.934967][T22904] loop3: partition table beyond EOD, truncated [ 708.941169][T22904] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 709.232341][ T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 709.382487][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 709.394294][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.425784][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 709.450321][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.463365][ T10] usb 6-1: config 0 descriptor?? [ 709.473548][ T10] hub 6-1:0.0: USB hub found [ 709.614941][ T5931] usb 4-1: device descriptor read/64, error -71 [ 709.680574][T22906] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 709.689442][T22906] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 709.697392][T22906] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 709.706295][T22906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 709.714270][T22906] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 709.720958][T22906] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 709.728096][T22906] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 709.736302][T22906] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 709.746936][T22906] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 709.755998][ T10] hub 6-1:0.0: 1 port detected [ 709.762382][T22906] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 709.776007][T22906] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 709.788811][T22906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 709.792581][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 709.795965][T22906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 709.809642][T22906] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 709.816321][T22906] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 709.824114][T22906] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 709.831079][T22906] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 709.837627][T22906] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 709.846664][T22906] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 709.870099][ T5931] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 709.952382][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 709.966971][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.980174][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.994303][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 710.008655][ T24] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 710.018295][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.032576][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.044664][ T5931] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 710.057251][ T24] usb 3-1: config 0 descriptor?? [ 710.077651][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 710.123852][ T5931] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 710.141213][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.149371][ T5931] usb 4-1: Product: syz [ 710.155076][ T5931] usb 4-1: Manufacturer: syz [ 710.159725][ T5931] usb 4-1: SerialNumber: syz [ 710.175420][ T5931] usb 4-1: config 0 descriptor?? [ 710.412184][ T5931] uvcvideo 4-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 710.421962][ T5931] uvcvideo 4-1:0.0: No valid video chain found. [ 710.438837][ T5931] usb 4-1: USB disconnect, device number 50 [ 710.502937][ T24] hid-multitouch 0003:0457:07DA.003C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 710.578576][ T5975] usb 6-1: USB disconnect, device number 73 [ 710.586263][ T10] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 710.690215][T22927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.704941][T22927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.782492][ T116] usb 3-1: USB disconnect, device number 93 [ 710.998325][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 711.021554][T22963] netlink: 'syz.3.3260': attribute type 10 has an invalid length. [ 711.040984][T22963] veth0_vlan: left promiscuous mode [ 711.064375][T22963] veth0_vlan: entered promiscuous mode [ 711.076307][T22963] team0: Device veth0_vlan failed to register rx_handler [ 711.412465][ T5931] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 711.564236][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.576028][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.586405][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 711.594099][ T5931] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 711.603426][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.618375][ T5931] usb 6-1: config 0 descriptor?? [ 711.776050][ T24] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 711.785409][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.794666][ T24] usb 3-1: Product: syz [ 711.798967][ T24] usb 3-1: Manufacturer: syz [ 711.807660][ T24] usb 3-1: SerialNumber: syz [ 711.823397][ T24] usb 3-1: config 0 descriptor?? [ 711.838734][ T24] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 094 [ 711.848530][T22980] loop3: detected capacity change from 0 to 7 [ 711.857521][T21744] Dev loop3: unable to read RDB block 7 [ 711.864365][T21744] loop3: unable to read partition table [ 711.870275][T21744] loop3: partition table beyond EOD, truncated [ 711.879567][T22980] Dev loop3: unable to read RDB block 7 [ 711.886305][T22980] loop3: unable to read partition table [ 711.893846][T22980] loop3: partition table beyond EOD, truncated [ 711.900160][T22980] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 712.046511][ T5931] stadia 0003:18D1:9400.003D: unknown main item tag 0x0 [ 712.060575][ T5870] non-paged memory [ 712.067719][ T5870] list_del corruption, ffff88805c080b80->next is LIST_POISON1 (dead000000000100) [ 712.074891][ T5931] stadia 0003:18D1:9400.003D: item fetching failed at offset 4/5 [ 712.077505][ T5870] ------------[ cut here ]------------ [ 712.090743][ T5870] kernel BUG at lib/list_debug.c:58! [ 712.096726][ T5931] stadia 0003:18D1:9400.003D: parse failed [ 712.099744][ T5870] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 712.108791][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 712.118251][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 712.128299][ T5870] Workqueue: hci2 hci_conn_timeout [ 712.133412][ T5870] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 712.140425][ T5870] Code: e0 71 05 8c 48 89 de e8 f0 21 48 fc 90 0f 0b 4c 89 e7 e8 f5 f8 24 fd 48 c7 c7 40 72 05 8c 48 89 de 4c 89 e2 e8 d3 21 48 fc 90 <0f> 0b 4c 89 e7 e8 d8 f8 24 fd 48 c7 c7 a0 72 05 8c 48 89 de 4c 89 [ 712.160018][ T5870] RSP: 0000:ffffc9000406f960 EFLAGS: 00010246 [ 712.166070][ T5870] RAX: 000000000000004e RBX: ffff88805c080b80 RCX: cafc2282a7ac0200 [ 712.174027][ T5870] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 712.181986][ T5870] RBP: ffffffff8a9e1350 R08: ffffffff8fe49c77 R09: 1ffffffff1fc938e [ 712.189941][ T5870] R10: dffffc0000000000 R11: fffffbfff1fc938f R12: dead000000000100 [ 712.197900][ T5870] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 712.205861][ T5870] FS: 0000000000000000(0000) GS:ffff8881257b7000(0000) knlGS:0000000000000000 [ 712.214780][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.221345][ T5870] CR2: 00007f8b81249160 CR3: 000000007f208000 CR4: 00000000003526f0 [ 712.229313][ T5870] Call Trace: [ 712.232579][ T5870] [ 712.235499][ T5870] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 712.241120][ T5870] hci_cancel_connect_sync+0xc8/0x120 [ 712.246490][ T5870] hci_abort_conn+0x191/0x330 [ 712.251158][ T5870] ? process_scheduled_works+0x9ef/0x17b0 [ 712.256864][ T5870] process_scheduled_works+0xae1/0x17b0 [ 712.262400][ T5870] ? __pfx_process_scheduled_works+0x10/0x10 [ 712.268371][ T5870] worker_thread+0x8a0/0xda0 [ 712.272955][ T5870] ? __kthread_parkme+0x7b/0x200 [ 712.277881][ T5870] kthread+0x711/0x8a0 [ 712.281938][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 712.287033][ T5870] ? __pfx_kthread+0x10/0x10 [ 712.291609][ T5870] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.296786][ T5870] ? lockdep_hardirqs_on+0x9c/0x150 [ 712.301969][ T5870] ? __pfx_kthread+0x10/0x10 [ 712.306547][ T5870] ret_from_fork+0x4bc/0x870 [ 712.311126][ T5870] ? __pfx_ret_from_fork+0x10/0x10 [ 712.316224][ T5870] ? __switch_to_asm+0x39/0x70 [ 712.320972][ T5870] ? __switch_to_asm+0x33/0x70 [ 712.325722][ T5870] ? __pfx_kthread+0x10/0x10 [ 712.330307][ T5870] ret_from_fork_asm+0x1a/0x30 [ 712.335061][ T5870] [ 712.338149][ T5870] Modules linked in: [ 712.342050][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.344265][T22965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.349140][ T5870] ---[ end trace 0000000000000000 ]--- [ 712.362329][ T5870] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 712.369401][ T5870] Code: e0 71 05 8c 48 89 de e8 f0 21 48 fc 90 0f 0b 4c 89 e7 e8 f5 f8 24 fd 48 c7 c7 40 72 05 8c 48 89 de 4c 89 e2 e8 d3 21 48 fc 90 <0f> 0b 4c 89 e7 e8 d8 f8 24 fd 48 c7 c7 a0 72 05 8c 48 89 de 4c 89 [ 712.369508][ T5931] stadia 0003:18D1:9400.003D: probe with driver stadia failed with error -22 [ 712.389430][ T5870] RSP: 0000:ffffc9000406f960 EFLAGS: 00010246 [ 712.389456][ T5870] RAX: 000000000000004e RBX: ffff88805c080b80 RCX: cafc2282a7ac0200 [ 712.401648][T22965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.404317][ T5870] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 712.429105][ T5870] RBP: ffffffff8a9e1350 R08: ffffffff8fe49c77 R09: 1ffffffff1fc938e [ 712.437246][ T5870] R10: dffffc0000000000 R11: fffffbfff1fc938f R12: dead000000000100 [ 712.445265][ T5870] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 712.454951][ T5870] FS: 0000000000000000(0000) GS:ffff8881257b7000(0000) knlGS:0000000000000000 [ 712.464009][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.470625][ T5870] CR2: 00007f8b81249160 CR3: 0000000075c8c000 CR4: 00000000003526f0 [ 712.478809][ T5870] Kernel panic - not syncing: Fatal exception [ 712.485138][ T5870] Kernel Offset: disabled [ 712.489490][ T5870] Rebooting in 86400 seconds..