last executing test programs: 12.883574122s ago: executing program 3 (id=1971): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x2900, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 12.569437778s ago: executing program 3 (id=1973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x7dee}}, 0x2, 0x3, 0x1, 0x5, 0x38, 0x9, 0x8}, &(0x7f0000000280)=0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000300)}}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="22003300d00000000802110000010802110600005050505050500000040400000000"], 0x40}}, 0x0) 12.029459007s ago: executing program 3 (id=1978): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9c}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000004c0)}, {&(0x7f00000005c0)="63659fbf67ada579e90ad963fe7ce0a62fb57bb30cb8168afc6c442ec534e72f633a103e5e39c809bbea456d41e98aea096870ac3dddf8012c4b0945", 0x3c}, {0x0}, {&(0x7f0000001000)="5bbc4b78d9d5c7b8e2b44fbe8e209d84fc794ddf194258bcd4d37ffa69457d74fad1a897029ae6a25eb00301c10ac5c56ec26db77e8568e843b9b932a2e6f4f7d4be16b644f525351193df8a33bf28fe7fe664a456d65012aca232468207390b2a05f2b9f44bfa96f8420cca66536f2a0548723cc134cdfa8c5ecfacda1f16fae61defad4cebe405d68ffc3db1acbb29bd7d3319a3df682660f5c0e012bcd0caedf171db99a7af53296f15588f63d690e60f246f77cd69926c886bdff066f744f64278a16309c9af71dfad0e99d1b0feaefddf9892981df8fec7017e1d6ee147525103416fcc4412bf17fe030835bc46c47a9d180a931b573f49af686c6ae67d28d3698da249573d07a1a6cb9caf91b64691df4318794521153e627e9958b461812acdef202fb64176bb18446d628caf6311da5b96c2c8fe47bc16a9e1bf60e19123963758badfa6111b4d99be8e323fc9267bc5b2e0e51a2ed82c726b1e1cb283fb015efb38f41c3de4162c4a5f75b6471afa52437da992b95a5dc108e29f59d73d766c80132fe15ae21903aba1af2625d7e56132aeee0ca34f4216f2d9c8813843659ba0dcd9b30133b3c843b51b332f8cb0d8893f20985d02d314d57009054562c331288e5866feb1b73014d8965a7e0681d7db2c13849ab74deff824bbb9661ea91c768b9a4943070d2d1349bea622c5cc9a5770d4bbf10e720b90be41a79360c0d04f93982c4ec4671973d670335714b2a5f4bf0e81080f364301579e6a3e03b597f9f09895722c20270d21043e1adbb32168a9665c67878622ad345689058746e191596408787e46826a2176710af1894188c30d292a992b08fe8acc8efb159e559a7a98c8ce7d97ba9209a3192cd1db1ba153f4c9efbcdf7f71c8d46f88f0b1fded291f0742bc5b1fcbcda80d1b44f5f5f1e9fb729b1415bceaa09883e53b8d2a5758e4ffa082da76d51ad848689ce7bb72f1ef8656347a36d07dc045382146a52483d519db6acc3967459a0e4db79e8466f689e4c5cd5d92502ad27c786db3cec3bf32ea1496f4fe9bb34e793799374dfcdfb2fb3f04e720e9e313ac9794", 0x302}], 0x4}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x24}, 0xab8}, 0x1c, &(0x7f0000000b80), 0x0, &(0x7f0000005140)=ANY=[@ANYBLOB="180000000000000029000000370000009d00000000000000c00000000000000029000000370000000014000000000000c910fc020000000000000000000000100000050200070102000001020000087a0de6d08198e5a34815e07da3bde8c959c3f949c3cd4013a66fa49e105411ffd0cef4ca749e3b20e193aaf9cc5d8a4a6e5bfe31dc0227bc6d52056211b39c44a7dac9be0fb7fa9bcbb0dcec56ab676328e223e9845d4ce30248f65df02b5bdc3c03adcf24be379be86c357e6224e7adc54e0bfa8a2b36e325089705020000c2040000000500000000"], 0xd8}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000009c0), 0x0, &(0x7f0000006500)=[@hopopts_2292={{0xd0, 0x29, 0x36, {0x4, 0x16, '\x00', [@generic={0x8, 0x76, "2958e3397c1c2e46c6d1c258577349b24bab2d3f50f3f9fabaf2da514afc2bf75a76fe085c76047635bd295cdc1d736c654499db36617e9e2575a4a0f9836894af2ef7a06ca611363e767b29b80a259a20abfc8e22361fb96159c0abe0b7db0934235e6890bc58dfcc7ebba8ab8da199d54a51623fc3"}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0xd050}, @calipso={0x7, 0x30, {0x3, 0xa, 0x2, 0x7fff, [0x0, 0x0, 0x7, 0x8, 0xbe2]}}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0xac, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x120}}], 0x4, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x1, 0xa1a}]}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x3fff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r5, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000000703000000000000000000000000000900010073797a316ec968af"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 9.855402238s ago: executing program 1 (id=1988): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f2"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$midi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) accept4(r5, 0x0, &(0x7f0000000200), 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_GET_ENDIAN(0x13, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008094}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000102010200"], 0x38}}, 0x0) recvmmsg(r2, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4120, 0x1018}, {&(0x7f0000000240)=""/75, 0x4b}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/98, 0x62}], 0x1}, 0xc}], 0x9, 0x20, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffd}, &(0x7f0000000000), &(0x7f0000000280)) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x8, '6'}, @global=@item_012={0x2, 0x1, 0x3, "9611"}]}}, 0x0}, 0x0) 8.45390014s ago: executing program 4 (id=1992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff0200000000445500000000000000013a"], 0xfce) 8.152306925s ago: executing program 4 (id=1993): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x0, 0x4}, 0x8) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xa7, 0x7, 0x16, 0x40, 0x6a2, 0x3, 0x3cf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0xa0, 0x6, [{{0x9, 0x4, 0xb4, 0x4, 0x0, 0xcd, 0x7f, 0xe4, 0x7}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3c01}}, {0x9e, &(0x7f00000000c0)=@string={0x9e, 0x3, "8a117e7ff567b2e2a86790d141324eb731bf72744ce27b30d2c6980e614bfab4bfb23d002c12d43e1a3b67907e75cdd526f04fe6592ed096aff9012ae91513582dd203138b3fd9056421693a3bfafc15e36323a60c34cbb802704655b97f40b7f6a14c4ba96e73683ce708a816c91f4f0cebc5f24fe676d522f56629c573e7563555babb113f6293e55ad3357cb6f3512b9fe74fcc62531cf58deed9"}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 7.835090099s ago: executing program 3 (id=1994): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'L-', 0x44a}, 0x16, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) syz_open_dev$sg(0x0, 0x0, 0x202001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001680)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x2a, "8f4c6c1ee008e6b7fb0000e60080b8785de0000100000000000000000000000000000000002100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f40000000000000000fea216070000168757b77f852aa600", [0x18000000000000, 0x22000000000002]}}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000240)=@ethtool_rxfh={0x47, 0x1, 0x2, 0x6, 0x4, "e87a00", 0x0, [0x9, 0x6]}}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 7.744030895s ago: executing program 0 (id=1995): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 7.605269646s ago: executing program 0 (id=1996): remap_file_pages(&(0x7f00005f5000/0x4000)=nil, 0x4000, 0x0, 0x800000000000008, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x2}, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900020073797a310000000008000340000000010900010073"], 0x34}}, 0x0) 7.272508949s ago: executing program 0 (id=1997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x5761, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000002140)='net/ip_mr_vif\x00') read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020) pread64(r8, 0x0, 0x0, 0x8) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) syz_usb_disconnect(r6) r9 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.063477571s ago: executing program 2 (id=2000): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x7dee}}, 0x2, 0x3, 0x1, 0x5, 0x38, 0x9, 0x8}, &(0x7f0000000280)=0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000300)}}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="22003300d00000000802110000010802110600005050505050500000040400000000"], 0x40}}, 0x0) 5.73186201s ago: executing program 1 (id=2001): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605de0000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 5.435426653s ago: executing program 2 (id=2002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) (fail_nth: 6) 4.495736503s ago: executing program 1 (id=2003): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c0212408501ed020109022400010000100009040c0202c17f0c00090502020002020000090582020002000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10, 0x0}, 0x20001) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf, 0xe0, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x2, 0x6, 0x4, 0x40, 0x1}, 0x104, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3, [{0x21, &(0x7f0000000340)=@string={0x21, 0x3, "9094bb463dfa75b1645fbaaa3831e29ba3a939ce8a1a5d5c0ddf6851bcb20d"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "49f327e7c12ed321b9e228d500"}}, {0x81, &(0x7f00000006c0)=@string={0x81, 0x3, "eaff3603189c91b0b7cc549bb9548e754dec031b42f7c009da603558993197edd062e3be93c720a6e1dd963b386c0d4bf3ada6fc51099d8661f64c57b27992340dde1fe8d1e498f197bc92892ec36e5da468e7349e1da3a2a8092e481779ccc0dff119e1c3a6bc4b20aefa2a55c406eba0f684c25654938578990c3682bb97"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x80000001, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x40000, 0x25dfdbff, {0xa, 0x14, 0x40, 0x0, 0x6, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg(0xffffffffffffffff, 0x0, 0x20040010) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0xffffffff) fchmod(r2, 0x18) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000003c0)={0x40, 0xf, 0x1, 'p'}, 0x0, 0x0, 0x0, 0x0}) 4.431649995s ago: executing program 3 (id=2004): unshare(0x2040400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) fdatasync(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 4.23199215s ago: executing program 2 (id=2005): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x44) (async) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x44) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x60, 0x22, 0xce, {0xce, 0x3, "33e32261652cbe6c3af4f0e778819192284dc3a4e7f34e94718b202b09ea327c521a651c5be6d4bbb8bedb70040a6bc4b8c1ae3c870f2048265393154f2100f40475a2933fe20a3f9cf59a1f96ca36de28f8895ba1973191171261f1898ab147efdde1205610385cf62f69419ebb51219a68d9b54ec237c39f602e4bba027fd7e40166a7dd9f6b0dff32927b6e0e4acb7be49c1d998ec50c3b0282889bb189cee0b9c6ba8959a33ba25843c416def2a188cd30441615c976697088d81d4b4e2b80a6f4abe2512b5ae0886cbd"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x40, 0x10, 0x4f, "5b709ec546d2b2c2a4b0a16ae53d27ae4665f8c4ad43cc509c1f6afc9a9797cc642e1e61c7c091a95672d18523129d0bcefcc21c741177a49dad99c5c150997879f8b55bdd7434182c6d694d2206ae"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x8, 0x3, 0x6, 0x7, 0x6, 0x7, 0x1c, 0x9, 0x0, 0x3ff, 0x40}}, 0xfffffffffffffffc, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.745008184s ago: executing program 4 (id=2006): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 3.687685037s ago: executing program 0 (id=2007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 3.555653404s ago: executing program 4 (id=2008): openat$mice(0xffffffffffffff9c, 0x0, 0x80082) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0x3, @sliced={0x7, [0x8000, 0x53, 0xa48c, 0x4, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x8, 0x275, 0x600, 0x1000, 0x0, 0x5a80, 0x3, 0x22, 0x6, 0x6, 0x1, 0x66d9, 0x1, 0xc1f2, 0xe3b, 0x0, 0xb, 0x1ff, 0x2, 0xfffc, 0xb6, 0x6, 0x7, 0x1, 0x9, 0x558, 0x120, 0x5, 0x3, 0x0, 0x200, 0x4, 0x2, 0x5, 0x401, 0x6, 0x1, 0x0, 0x2], 0x5}}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0d, &(0x7f0000000040)) 3.483290648s ago: executing program 0 (id=2009): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20050800) getgroups(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) unshare(0x2a020400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0d, &(0x7f0000000040)) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x4, 0x71e4, 0x8, "7abf1c0bf02104148eb78ecd50b54e59", 0x1, 0x9, 0x6, 0x42, 0x7, 0xae, 0x5}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0xc8, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xa0, 0x8, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x4}, {0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1.924486854s ago: executing program 4 (id=2010): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="0f20e06635100000000f22e08ed8b800008ec00f9c86b39e260f01c4c6f8000f01d1baa100ecf20f187e0c260fe4ec660fd97355", 0x34}], 0x1, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_clone3(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.647792364s ago: executing program 3 (id=2011): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) recvfrom$unix(0xffffffffffffffff, &(0x7f00000011c0)=""/4096, 0x1000, 0x101, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000000001010400000000000035e602000000240001801400018008000100ffffffff08000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000100006800c15038006"], 0x74}, 0x1, 0x2f000000}, 0x0) munlockall() dup(r1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 1.436271648s ago: executing program 1 (id=2012): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa4a003, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000400)="c01be984955a08d0d38c2641e369015f7c818b80ba304e7de729f530364e7a6b3aae78", 0x23) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000ffefffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 964.348161ms ago: executing program 2 (id=2013): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000500)={0x20, 0x6, 0xef, {0xef, 0x2, "03011ecc0b74a8c6001a681d9b2dc09fdeec3deb316f1e67846649f305af04838e8c9a0184be72d4bca4ee9e87af9df30c8ee5fbdeafac95547c4b2a5e9165060ccb486c381eee6952d26c68e62bc41ece53d157400d847c8f27f1c56bfaeeda9e926ff0ebc273f322073ead5e6640fb1777529983b289b0f6b5dfed2c7a92bb95e42d0711fc75e3dcad7b223f8a78b112689dabb4bb8cfea4423ff3edc03dc100fd870b3800928204ee849d1458fe6aa50dc8536932c52aabaeb5d2066a165996e9fa428bee2ad6741440ec8491493c2217271393d206eb2598fd04b1bf623bdbb0da0618cd736186292a2e6b"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, &(0x7f0000000140)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x0, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x50, 0xfffa}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x10, 0x5, 0x0, "824cd603", "44f6a005"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xff, 0x40, 0x0, 0x9, 0x5}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000600)={0x0, 0x10, 0x97, "8204fdfab54294f8ab4f25e06b8bc004f6bf3c27965ad0a60ba3df38fbb64c467d9b7c60e7855d0bc94c1ea0333078035fad4728234611accc99f346cda0e13eacebb7a8ebbf2ee6746acae41decdc8a1669eefa57339ebaf50169d8070151f86059f1277e3a9d8cd6096d1b80fb75a7ccc461be290f4f7b8394e21acb2369da444576543c106463a125ee374ad56ae8e3702905d4c25c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x40, [0xf0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'v\r'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @remote}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "d51b"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x2f}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x81}}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x1, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e, 0x0, 0x0, 0x0, 0x6}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x24020400) fcntl$setstatus(r7, 0x4, 0x40200) unshare(0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008"], 0x38}}, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r9, 0x541b, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001000370400"/20, @ANYRES32=r8, @ANYBLOB="89040400000000001400128f0a000100767863616e00000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20}}], 0x1, 0x0) 946.335345ms ago: executing program 4 (id=2014): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'L-', 0x44a}, 0x16, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) syz_open_dev$sg(0x0, 0x0, 0x202001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001680)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x2a, "8f4c6c1ee008e6b7fb0000e60080b8785de0000100000000000000000000000000000000002100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f40000000000000000fea216070000168757b77f852aa600", [0x18000000000000, 0x22000000000002]}}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000240)=@ethtool_rxfh={0x47, 0x1, 0x2, 0x6, 0x4, "e87a00", 0x0, [0x9, 0x6]}}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 944.162314ms ago: executing program 1 (id=2015): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000300000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 559.689304ms ago: executing program 1 (id=2016): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "c668d0c1"}]}}, 0x0}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x8004) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x11, 0x80a, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "c668d0c1"}]}}, 0x0}, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x8004) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) 280.779179ms ago: executing program 0 (id=2017): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x63c2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x48d01) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f000000c280)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000480)="8774605e1bb3f11563699b51dd79bc9ee958941239f76f2408090671eaefb71e1545d8d4ff2890a5d8a607f423b3c0eb72d3171c7f70c032705a87d38721a78044f07d5ca30a96cc7cebd0b28a016d9b9c7e2268c6a64ba55bce48308c7c42c61c9301363f76039383c5c2fe9115b5a9c35070894f08c1faf16965d76eced0bcf226d4719c4522c34289ebf3c4dc67ff2ba73c2c462c9a74e56d7be000487c", 0x9f}, {&(0x7f0000000540)="a0045e587682ad78d409f7a09f3a7b4f6a601db7d1a32247320be837902aab46790cc30f709cd3c50e57fa4335996a9f19e221a6ccef3580e04440d02db27ed3b7a7f747da43c72df461520d5ee8699c7cf3469c07c73353d930661bd0b5e3c6cd5f274c78", 0x65}, {&(0x7f0000000380)="820b2ff6abec66b9784816aab26b5768ed27c502a3991ba0e0d5351df15e613c6d145fb1d750f8", 0x27}, {&(0x7f00000005c0)="f0b7fd8e5bd7dd2f362ef35a88aea2d288b9ce6958d598d578a9fa118d5826691cb166b8d1546435a08067063ef08de60c06e024a7223157c36d8f512ce336f9939456b5e75e82e3149bf188c32a1afbd730caa65b92c54a35aaafcae036503bd2498bd5f917293b2d1b794f44458e937d9111fd00e1b7282bc76e0640aec404f14c60d0e1b7fb95e356e2be9d8739e4fec47c100d51e032a2f4cebe6ba82638", 0xa0}, {&(0x7f0000000680)="3e62071f4e7d94f5ff5110eb685dd5ed177c6f4732cc3cefce5cd6270f43abf823df570482bd0a7dd6b18a4befafcc132104a0a5", 0x34}], 0x5, 0x0, 0x0, 0x48d0}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000007c0)="80d38f82b3fc7b0a9adbb588e1b0bdf62bb2a9d92c1d400a8f0d18fe575020d61d498285eeb6411c0dc6ca226da541af5d1f515ed302c6dd7b2ae92dad941c467b8ba49705b83621243a2f5cee53a697d586645bda47996b97633a01e2654d6cdd2bf4bb5d92f445691608c0cac9b43d9bb615ce66ad5539c8376ccc481243a56d8e8b9941e4047af5dfe396a4b68cab98ffa60f0e1088ecc0be6d7972294e0172b1c1e53f1ac27eea0477c74efbe32be49420a68d3d3295f749d284f74f477b48460633fcdb8568ba2da59cb460fb225c45f8261cea69a7816f356837ab8ddf8e0bdfe8831518ddbcc0ed7e24a1dcf5", 0xf0}, {&(0x7f00000008c0)="0f372d231cf83f631cbe8b5ff15c4d67e205dc88b5f40df9d9caeb80ed4f693c2bfea7431812610e09621216d9c7e1956fa78c448d83b0c14081627f16810aaf3bfe36ccebcf791e320f946b4452f73bf13ea838e4cfd98c259bc1f3ce1dcb84ad73a5a8ee1fb295063a1d89d48b2f0e12fdadd0523a01bb109ab8def666efb84ce1c7aea5ac22e75c25006a35a4a1f5055c4db95b1aedde8ffd", 0x9a}, {&(0x7f0000000980)="34bfba6ed03b7799d1abc6411888cb279c21c3d0290ae7b9b7671a003fbd5ff8b13d91f7357bed0b0abffe8ff18a28ffa534d8663421bac3a6f549b43b207a0fe94f86b4f800cdd1c88b0f5d97494351051ae27f5f00e92e24917d87496a4d82ad4d76880ebbdc5911fa23f59e731f70ea1ae2abfaa08af8090fbcd263f1579be12aa93e09152033ae18ed51dd4ca88b6a261bc677ee56102b3466aeae0a10f70d68eb9ec474d869a73bc60b22334978", 0xb0}], 0x3, &(0x7f0000002e00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r0, r0, r1]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, r3, r1, r2, r1, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r3, r2, r3, r3]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r1, r4, r3, r4, r2]}}], 0x128, 0x8008084}}, {{&(0x7f0000002f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002fc0)}, {&(0x7f0000003000)="efe3ea9a0ebd4c0abdf12f64645d8fcaf21863dd9f250f739b4e5e18736ff3be19e3f00ac616b9feed00fbabff9250c9ba2c2babec000ccfb01230b4659645010efc5f3c32bea713dbaabc581d01b7b369807bbfef8aebf216c429dcc50310ef28749f16258c5da5bf469c2ea79605d91a757ee7e645b5678b231174d82cb5", 0x7f}, {&(0x7f0000003080)="532a85e7e81571fc3c52a9a25e634de159a43c0fda6eaefb5654b29b195313a773e9575b25a9767b7606e25fd34bee15d493d37cdb24803c7e24de8f5bb0e87fbdb12f96560b706bea930815766a21ed1caa41fd549e5ccd9bc4ddd3835e952b02dc41cb923d31231a960521a74a6859fb95ab9fdfbeea4352097f6560ec0be0971f462c5a37e98336c4865847b0b0e2cc9d72e0c3bee2f6e29e237933da68f5684c3627ef5f9384ce3508b303ecd7866413e02ee20a9aaf30d3c9818f2ecc1d5748fe556b4db0d8dd99d2ddc064b71f17002b701ca1412ac30745d3aa60", 0xde}, {&(0x7f0000003180)="3578dd0b304affa1b78e4e71a2bb93", 0xf}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c75000000007800000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x1}}, {{&(0x7f0000003580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000003600)="061aca034883741bad28cd4b2da9b71482e09e757c3cc935fd495a9c30d73c4567c3c5c3379a027dd337cca25fa807bfe632d984cb2b0b31790d555239f79b8171082770916f085d0ea256a56c4be650710a5af51de2", 0x56}, {&(0x7f0000003680)="6f3e9a86e3269391f1d58e6cde7e27ad5a562535f172a27ddfb90d9214402b0681365dd07410b2a198af0592e2a608d649e7e32b4dde21c82b6ee412eabf7dad5ade9c2f10242e7dbda72f6faadf4affcfaf1bd1", 0x54}, {&(0x7f0000003700)="f74caddfa1f36ab364c472f2051fabf0f79605a1b6ebf9525c51dd1e186e3017cdab008e2bc2ffa6fbad98a1345189d7d80f2a2e31f249849d6453478d15084ada2b41fb7cd4efccf490783f6ae8bb24e074f8913933610907b372efca7ba19f3976af", 0x63}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000008bf663aae4731e280698fe0d3a01000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x40010}}, {{&(0x7f0000003b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003bc0)="5b3c8e887a24628e0ac18620aa623c6f797447e8a8759ac661a190709cc18f23a9a5524b8306bf4971fb46efd0589a5c8a17c7cb75f86ad129a5c89c7c95242e43b48026e141e04e11d0b62d5a0f9770f38e06043dce2eedbf4e660ff792fae4ae986bc886fd9b3b7c65a90ed921ad19dc9652dd12e4eebbc7377037941f3260ff76fe9a498cae4cde6eac56661e56fbe8ede269b0db7f0fc92d7be03375f3d11177416de0668cdd0ccc4030d8696efb47bdc5b0e873", 0xb6}, {&(0x7f0000003c80)="13659183025c7aa0d4d7f2c249e56ceb92c2f868b414094ddde7506156108d3cc01417f4d9a2a003ee6cf0e646dae9e34e438e17adff469dd20c6b07bb4e768d9a07ec6422d3a9110e6f7e3b529f6f70e96b60b989d4fba21d6ca06938ecd1109bba691d97f571e58c09c265a591cb758658b0b92ed9c29a46e684a0735cd220114a444d", 0x84}, {&(0x7f0000003d40)="9fc7cedecbbee8f822558532d8fe00ee1a4e4fec7bde3762a92af8e20df914fc043a9ecc99704d297659a240bbefeec11631f004a3bd83d605bedc240b079ba0b22a4da3187463b43964e55640f17ce37e2e0b92", 0x54}, {&(0x7f0000003dc0)="134fa7054afbd1f23a11f594acf5e7b0d4227cd430bc00b55a250c523e79f020f3e01ff8c93cbef57a764cc07f71724837161e43317c57eccb2e61f122a59252644c4c676910f9b447c8d619ca3e37ecddfe1540171afa6e7843365823b34b38955a52bd76de462f315550c2dfae74a84e6a42fb82ed71b743974332c2eb6b33ed51a8d802143c37919d4dc6ce8acdc1e04bc4a6c0a16dbe8041dc11a76653341e0481bab027a82d3d", 0xa9}, {&(0x7f0000003e80)="3110eb8093a86705087f44931b34759677cc5b74b5049b2ebff23ab45b2ba9d7ca11dd6c4224304ba2454a698d704b2346413336afcb06c93e024b129766697d730a6307f5d14baead7ca56425b87af5c29c82458c59", 0x56}], 0x5, &(0x7f0000004080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88, 0x4040}}, {{&(0x7f0000004140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000006fc0)="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", 0x1000}, {&(0x7f00000041c0)="13eab0e10e1afe70f6d068e4f84ad995ae3a0b85c4483b4f78d4c0604d363cf16d12552f3da77feb107588f42453899c406d45929af42ffdfbb405f300e5b5ea26a62886e518381dc3adf3f2f4339a066d37a0cb265090c93e32506df4f682340d9053a66a1b743beaaabaab3e24ed1bbb41718264673f5675d547f70ca05420216d6b5971abe5849337fb683d8779f00e35e36f68456f114594d723190c136a5bfbe0f3f4128e41dc5fb89090517a51f9fd8bf2add3679b6817c68f1bcc2719c0484fadcdf480230fc608c5e230260b79cf6a9d5bec3e219a7ff0b8cca3ebb4", 0xe0}], 0x2, &(0x7f00000043c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120, 0x44}}, {{&(0x7f0000004500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000004580)="48c2428126ec453ec5dc16b0c4dd53185834b2b0b331f21b38de9277938401e78cb3177d08e62a61f84c61a72418ecf37ff744d316455ef6b9d2c22bb2369bbcfbf8f8b7c43aa72f14ce0f3c3da92297556eb1f7a1ef38c8562182202043261051798f", 0x63}, {&(0x7f0000004600)="e678e199e671af13c856b6cda9ff8bd85084d7b4a60439c0e65c76e9ee50fa0f28ad1b55f52d45fd0a5d26", 0x2b}, {&(0x7f0000004640)="407f16e33f16ad0ca4824bea44be1866e5ebc99d33f6a01434357b64f4f3815ab81ba614bb8989cd3442173acadfa5951b8eadd78afa5e2e467bcdb48d6045f45a028c60aade5b1966f954c011c2d6d328580d2d428a1afd9541268632058b2a725807c5aa1259c4e51fde", 0x6b}, {&(0x7f00000046c0)="1bf841c4597e6148bea0f814797301502d3e395aa1aef0b987c51ff8dfd9f07eed885a11d5f6fda747e6e6662d6284c2362f8e33d57336c22f341ff665d30c9194c5905c30d2f37e85f79c31a5d9ff5b033c3f894bbda0ba054ee8201ed3360a17ca7c178de491ec7e02600dfe6aeb1e761e5dff5670a63d9ae6be03bc140a8130bf8745", 0x84}, {&(0x7f0000006800)="5127285cb663df7a64fbc945733ad4d0a8d2d3f066d13fc24be98d6d15e5d6c28873b13bc1a201b1ff14a3fe1f610c8654536486b047ac37b9a27193fb57b993b9e4e8173a1446748af2015fa06dd315f8248a4852b4796e0e45298a12ce341523b047eb71ed7f3bf56922edb127e29f779eefc08833d5e5c9301d1eb8459665572b601bfb84e0b9cf25b75b944cfa7b121c78a0fb56470e4828e45d1f5c10f1d1c743100495661efa3c", 0xaa}, {&(0x7f0000004780)}], 0x6, &(0x7f0000006b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0xc4}}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006bc0)="a1742e0b26954698bc8d401489c03bbbda6ba3862352f823b99de40157e9730945854953eb4054a93333e2963eca801584ca33b7ca217c8bc20b1629f6f67114dcd166316c0a0a4978b4c4794d55332ab2d9fb9711ec3c05b6647e03cda013e5a335b92f", 0x64}, {&(0x7f0000006c40)="180b05d172b9dbaf5c494faa4209a82ecd319be63430c43ebfa2098a6e28764709a1f2ccbe12f15e1b9225553e81405385063463117fa99f407411612b80956219d30cde10ef2b2b20604b5b1d31fbdd16d05a92722610cbe79b8e77b895be746a166c37", 0x64}, {&(0x7f0000006cc0)="f75a6e70c3d4ae2ca412836be824e16bd8b7e48f7e5fba03d63d99b679aad9b25fc4e1b3db81cf196589b6a8e71ef2ed7cc795b51f952aa095d59f2ae5009c9218bb15c856ce83c5840620ef6226debadd5a", 0x52}, {&(0x7f0000006d40)='\b', 0x1}], 0x4, 0x0, 0x0, 0x80}}, {{&(0x7f0000006dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006ec0)=[{&(0x7f0000006e40)="afde34e1db258991648d8f57713524323fd815a66de1796f8571045a38fa8a96d796088eeaf4cb5086fb4a3d374d7e952140b095d83ae3b1f41d88a0f36db49505d7e1106044f9757259096a13ef1deb90392fd6cf4d928b88ce6b967deac1af6f62a3f3741246", 0x67}], 0x1, &(0x7f0000008000)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0, 0x8000}}, {{&(0x7f000000a680)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000a880)=[{&(0x7f000000a700)="ae158e327b5f3e29a915c3e23b134d18503a387c128543eeaa50b69196f18f4c3243a6d0aa07393fe9ea91f3bd949101747b8c3f0be530faa1122d658c385685f452e248dfd1d0962639b0b0100b3c115dc7a364062ff78eb390a3885e56f1ab31a1c4ecfa114d1e5002bdb01860b93a", 0x70}, {&(0x7f000000a780)="63aafad1f8e224c42835fd3fc4595203967e8aa300494e7dbaccc394800bed733391f3ec3732ec941e6529722a94386d95c3e8dc58224277778ea366a924fe32cd2ae360c13bbf122ec8a6d2899f95793eab512e0e8bcf0e473bdaa8c6393f8683cd3fc0ff4a24a6a638ab7e270ab8e81a1c645879e6288e3cb85ba274abaacfeae403b85e0326a264c5a712365dd31c84450b03ba4b66a09f57f0145bb77263155605f31bd204be7ae1ec2d02a4b232980df3f5ea4723e2e7b384da95de4c7c02", 0xc1}], 0x2, &(0x7f000000aa40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r0]}}], 0x98, 0x40880}}], 0xa, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2800000002030101000000000000000200000000000000000100000b0900020000000409000000003287be746f5e70529c46b0cb1419f5e6a77c5c07f52cf1c547260bb46589cb2a9c4018548581df9109d21af79bfd01f9bf5a6006"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffc}, {}, {0x100003ff}, {0x0, 0x0, 0x1}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0xc7, 0x4) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r8, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r8, 0x0, 0xfdef) sendto$inet6(r8, &(0x7f00000003c0)="c6", 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x339) socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0xc, 0x1, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0xf7b}, 0x0) 191.978388ms ago: executing program 2 (id=2018): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 0s ago: executing program 2 (id=2019): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000097ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) kernel console output (not intermixed with test programs): 0 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.365832][T11866] RSP: 002b:00007fc9bcac0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.365854][T11866] RAX: ffffffffffffffda RBX: 00007fc9bbdb5fa0 RCX: 00007fc9bbb8eb69 [ 577.365869][T11866] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 577.365881][T11866] RBP: 00007fc9bcac0090 R08: 0000000000000000 R09: 0000000000000000 [ 577.365894][T11866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.365906][T11866] R13: 0000000000000000 R14: 00007fc9bbdb5fa0 R15: 00007fc9bbedfa28 [ 577.365937][T11866] [ 577.771609][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 577.773431][T11870] netlink: 'syz.1.1564': attribute type 21 has an invalid length. [ 577.808475][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 577.821768][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 577.827392][T11870] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1564'. [ 577.833698][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.852316][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.865379][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.874505][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.923185][T11873] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 577.994523][T11868] kvm: pic: non byte read [ 578.001494][T11868] kvm: pic: level sensitive irq not supported [ 578.001645][T11868] kvm: pic: non byte read [ 578.018019][T11868] kvm: pic: level sensitive irq not supported [ 578.018120][T11868] kvm: pic: non byte read [ 578.030170][T11868] kvm: pic: level sensitive irq not supported [ 578.030284][T11868] kvm: pic: non byte read [ 578.137574][ T5926] usb 3-1: GET_CAPABILITIES returned 0 [ 578.151168][ T5926] usbtmc 3-1:16.0: can't read capabilities [ 578.373186][ T5950] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 578.645747][ T5861] usb 3-1: USB disconnect, device number 117 [ 578.821122][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 578.830081][ T5950] usb 4-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 578.875365][ T5950] usb 4-1: config 1 interface 0 has no altsetting 0 [ 578.909873][ T5950] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 578.930295][T11889] IPVS: length: 4096 != 24 [ 578.935665][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.965280][ T5950] usb 4-1: Product: syz [ 578.989168][ T5950] usb 4-1: Manufacturer: syz [ 579.000953][ T5950] usb 4-1: SerialNumber: syz [ 579.468475][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.481225][ T5861] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 579.499688][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.601066][ T5950] usbhid 4-1:1.0: can't add hid device: -71 [ 579.638733][ T5950] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 579.737070][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 190, changing to 11 [ 579.809685][ T5950] usb 4-1: USB disconnect, device number 88 [ 580.044887][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 50772, setting to 1024 [ 580.107467][ T5861] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 580.117439][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.742832][ T5861] usb 5-1: config 0 descriptor?? [ 580.782593][T11892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 580.881999][ T5861] smsusb:smsusb_probe: board id=8, interface number 0 [ 581.102542][ T5861] smsusb:smsusb_probe: Device initialized with return code -19 [ 581.723712][T11909] FAULT_INJECTION: forcing a failure. [ 581.723712][T11909] name failslab, interval 1, probability 0, space 0, times 0 [ 581.736806][T11909] CPU: 0 UID: 0 PID: 11909 Comm: syz.0.1574 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 581.736835][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.736847][T11909] Call Trace: [ 581.736856][T11909] [ 581.736865][T11909] dump_stack_lvl+0x189/0x250 [ 581.736894][T11909] ? __pfx____ratelimit+0x10/0x10 [ 581.736919][T11909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.736943][T11909] ? __pfx__printk+0x10/0x10 [ 581.736976][T11909] ? __lock_acquire+0xab9/0xd20 [ 581.737014][T11909] should_fail_ex+0x414/0x560 [ 581.737043][T11909] should_failslab+0xa8/0x100 [ 581.737074][T11909] kmem_cache_alloc_noprof+0x73/0x3c0 [ 581.737100][T11909] ? skb_clone+0x212/0x3a0 [ 581.737129][T11909] ? __pfx_skb_network_protocol+0x10/0x10 [ 581.737163][T11909] skb_clone+0x212/0x3a0 [ 581.737191][T11909] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 581.737220][T11909] dev_queue_xmit_nit+0x416/0xcc0 [ 581.737246][T11909] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 581.737286][T11909] dev_hard_start_xmit+0x1be/0x830 [ 581.737335][T11909] __dev_queue_xmit+0x1b8d/0x3b50 [ 581.737384][T11909] ? __dev_queue_xmit+0x27b/0x3b50 [ 581.737433][T11909] ? __pfx___dev_queue_xmit+0x10/0x10 [ 581.737479][T11909] ? __copy_skb_header+0xa7/0x550 [ 581.737508][T11909] ? __asan_memcpy+0x40/0x70 [ 581.737532][T11909] ? __skb_clone+0x63/0x7a0 [ 581.737566][T11909] ? __skb_clone+0x483/0x7a0 [ 581.737603][T11909] ? skb_clone+0x246/0x3a0 [ 581.737637][T11909] __netlink_deliver_tap+0x5ad/0x850 [ 581.737677][T11909] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.737704][T11909] netlink_deliver_tap+0x19c/0x1b0 [ 581.737731][T11909] netlink_unicast+0x7fa/0x9e0 [ 581.737763][T11909] ? __pfx_netlink_unicast+0x10/0x10 [ 581.737788][T11909] ? netlink_sendmsg+0x642/0xb30 [ 581.737811][T11909] ? skb_put+0x11b/0x210 [ 581.737842][T11909] netlink_sendmsg+0x805/0xb30 [ 581.737878][T11909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.737907][T11909] ? aa_sock_msg_perm+0xf1/0x1d0 [ 581.737937][T11909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 581.737959][T11909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.737986][T11909] __sock_sendmsg+0x219/0x270 [ 581.738011][T11909] ____sys_sendmsg+0x505/0x830 [ 581.738047][T11909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.738087][T11909] ? import_iovec+0x74/0xa0 [ 581.738110][T11909] ___sys_sendmsg+0x21f/0x2a0 [ 581.738142][T11909] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.738220][T11909] ? __fget_files+0x2a/0x420 [ 581.738250][T11909] ? __fget_files+0x3a0/0x420 [ 581.738292][T11909] __x64_sys_sendmsg+0x19b/0x260 [ 581.738324][T11909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 581.738371][T11909] ? __pfx_ksys_write+0x10/0x10 [ 581.738397][T11909] ? rcu_is_watching+0x15/0xb0 [ 581.738423][T11909] ? do_syscall_64+0xbe/0x3b0 [ 581.738453][T11909] do_syscall_64+0xfa/0x3b0 [ 581.738477][T11909] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.738501][T11909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.738521][T11909] ? clear_bhb_loop+0x60/0xb0 [ 581.738546][T11909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.738567][T11909] RIP: 0033:0x7fc8c638eb69 [ 581.738585][T11909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.738603][T11909] RSP: 002b:00007fc8c71dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.738626][T11909] RAX: ffffffffffffffda RBX: 00007fc8c65b5fa0 RCX: 00007fc8c638eb69 [ 581.738641][T11909] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 581.738654][T11909] RBP: 00007fc8c71dc090 R08: 0000000000000000 R09: 0000000000000000 [ 581.738667][T11909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.738679][T11909] R13: 0000000000000000 R14: 00007fc8c65b5fa0 R15: 00007fc8c66dfa28 [ 581.738713][T11909] [ 582.766217][T11925] vivid-000: disconnect [ 582.859165][T11927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.872505][T11927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.962644][T11906] vivid-000: reconnect [ 583.400147][T11935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1581'. [ 583.433458][ T5867] usb 5-1: USB disconnect, device number 69 [ 584.227717][T11953] FAULT_INJECTION: forcing a failure. [ 584.227717][T11953] name failslab, interval 1, probability 0, space 0, times 0 [ 584.256712][T11953] CPU: 0 UID: 0 PID: 11953 Comm: syz.4.1586 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 584.256735][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 584.256745][T11953] Call Trace: [ 584.256751][T11953] [ 584.256758][T11953] dump_stack_lvl+0x189/0x250 [ 584.256780][T11953] ? __pfx____ratelimit+0x10/0x10 [ 584.256798][T11953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.256815][T11953] ? __pfx__printk+0x10/0x10 [ 584.256839][T11953] ? __pfx___might_resched+0x10/0x10 [ 584.256852][T11953] ? fs_reclaim_acquire+0x7d/0x100 [ 584.256878][T11953] should_fail_ex+0x414/0x560 [ 584.256898][T11953] should_failslab+0xa8/0x100 [ 584.256921][T11953] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 584.256941][T11953] ? __alloc_skb+0x112/0x2d0 [ 584.256962][T11953] __alloc_skb+0x112/0x2d0 [ 584.256983][T11953] netlink_ack+0x146/0xa50 [ 584.257013][T11953] netlink_rcv_skb+0x28c/0x470 [ 584.257031][T11953] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 584.257048][T11953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.257075][T11953] ? bpf_lsm_capable+0x9/0x20 [ 584.257108][T11953] ? security_capable+0x7e/0x2e0 [ 584.257141][T11953] nfnetlink_rcv+0x26a/0x2520 [ 584.257158][T11953] ? __dev_queue_xmit+0x1d79/0x3b50 [ 584.257188][T11953] ? __dev_queue_xmit+0x27b/0x3b50 [ 584.257234][T11953] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 584.257252][T11953] ? __pfx___dev_queue_xmit+0x10/0x10 [ 584.257283][T11953] ? ref_tracker_free+0x63a/0x7d0 [ 584.257301][T11953] ? __asan_memcpy+0x40/0x70 [ 584.257331][T11953] ? __pfx_ref_tracker_free+0x10/0x10 [ 584.257347][T11953] ? __skb_clone+0x63/0x7a0 [ 584.257371][T11953] ? __skb_clone+0x483/0x7a0 [ 584.257399][T11953] ? skb_clone+0x246/0x3a0 [ 584.257422][T11953] ? __netlink_deliver_tap+0x807/0x850 [ 584.257439][T11953] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.257461][T11953] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.257484][T11953] netlink_unicast+0x82c/0x9e0 [ 584.257506][T11953] ? __pfx_netlink_unicast+0x10/0x10 [ 584.257523][T11953] ? netlink_sendmsg+0x642/0xb30 [ 584.257539][T11953] ? skb_put+0x11b/0x210 [ 584.257560][T11953] netlink_sendmsg+0x805/0xb30 [ 584.257584][T11953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.257605][T11953] ? aa_sock_msg_perm+0xf1/0x1d0 [ 584.257626][T11953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 584.257642][T11953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.257661][T11953] __sock_sendmsg+0x219/0x270 [ 584.257680][T11953] ____sys_sendmsg+0x505/0x830 [ 584.257709][T11953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.257736][T11953] ? import_iovec+0x74/0xa0 [ 584.257753][T11953] ___sys_sendmsg+0x21f/0x2a0 [ 584.257776][T11953] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.257822][T11953] ? __fget_files+0x2a/0x420 [ 584.257844][T11953] ? __fget_files+0x3a0/0x420 [ 584.257873][T11953] __x64_sys_sendmsg+0x19b/0x260 [ 584.257896][T11953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 584.257924][T11953] ? __pfx_ksys_write+0x10/0x10 [ 584.257942][T11953] ? rcu_is_watching+0x15/0xb0 [ 584.257961][T11953] ? do_syscall_64+0xbe/0x3b0 [ 584.257982][T11953] do_syscall_64+0xfa/0x3b0 [ 584.258000][T11953] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.258017][T11953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.258032][T11953] ? clear_bhb_loop+0x60/0xb0 [ 584.258050][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.258064][T11953] RIP: 0033:0x7f061278eb69 [ 584.258080][T11953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.258093][T11953] RSP: 002b:00007f0613548038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.258109][T11953] RAX: ffffffffffffffda RBX: 00007f06129b5fa0 RCX: 00007f061278eb69 [ 584.258121][T11953] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 584.258130][T11953] RBP: 00007f0613548090 R08: 0000000000000000 R09: 0000000000000000 [ 584.258139][T11953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.258148][T11953] R13: 0000000000000000 R14: 00007f06129b5fa0 R15: 00007f0612adfa28 [ 584.258171][T11953] [ 584.651905][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.132420][T11951] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1583'. [ 586.051192][ T5867] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 586.214090][ T5867] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 586.226395][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.296871][ T5867] usb 4-1: config 0 descriptor?? [ 586.441103][ T9] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 586.451800][ T5867] cp210x 4-1:0.0: cp210x converter detected [ 586.618722][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.671663][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 586.704750][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 586.735274][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.854950][ T5867] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 587.340645][ T9] usb 5-1: config 0 descriptor?? [ 587.372272][T11960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 587.424657][ T9] hub 5-1:0.0: USB hub found [ 587.427086][ T5867] usb 4-1: cp210x converter now attached to ttyUSB0 [ 587.615666][ T9] hub 5-1:0.0: 2 ports detected [ 588.031758][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 588.031863][ T30] audit: type=1326 audit(1754436980.627:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8c638eb69 code=0x0 [ 588.142777][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'. [ 588.171768][ T9] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 588.403481][ T5935] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 588.442780][ T9] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 588.571123][ T5935] usb 3-1: device descriptor read/64, error -71 [ 588.608554][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 588.628458][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 588.671334][ T5867] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 588.740614][ T9] usb 5-1: USB disconnect, device number 70 [ 588.821387][ T5935] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 588.901427][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 588.919301][ T5867] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 588.969816][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 589.005998][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 589.016162][ T5935] usb 3-1: device descriptor read/64, error -71 [ 589.061095][ T5867] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.107371][ T5867] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 589.127816][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.140085][ T5935] usb usb3-port1: attempt power cycle [ 589.395528][ T5867] usb 1-1: GET_CAPABILITIES returned 0 [ 589.424365][ T5867] usbtmc 1-1:16.0: can't read capabilities [ 589.501165][ T5935] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 589.557015][ T9] usb 4-1: USB disconnect, device number 89 [ 589.582000][ T5935] usb 3-1: device descriptor read/8, error -71 [ 589.606812][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 589.649802][ T9] cp210x 4-1:0.0: device disconnected [ 589.706685][ T24] usb 1-1: USB disconnect, device number 100 [ 589.841127][ T5935] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 589.955050][ T5935] usb 3-1: device descriptor read/8, error -71 [ 590.141623][ T5935] usb usb3-port1: unable to enumerate USB device [ 591.851349][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 592.046350][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.210666][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.237106][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.328393][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.351086][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.391926][ T9] usb 5-1: config 0 descriptor?? [ 592.680033][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.695744][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.771749][T12086] delete_channel: no stack [ 592.778090][T12093] QAT: Invalid ioctl 1075883590 [ 592.783674][T12093] QAT: Invalid ioctl 1075883590 [ 592.788816][T12093] QAT: Invalid ioctl 1075883590 [ 592.801233][T12093] QAT: Invalid ioctl 1075883590 [ 592.802392][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 592.806245][T12093] QAT: Invalid ioctl 1075883590 [ 592.841472][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 592.863886][ T9] usb 5-1: USB disconnect, device number 71 [ 592.941677][T12093] QAT: Invalid ioctl 1075883590 [ 592.976408][T12093] QAT: Invalid ioctl 1075883590 [ 592.990559][T12093] QAT: Invalid ioctl 1075883590 [ 593.071190][T12093] QAT: Invalid ioctl 1075883590 [ 593.076450][T12093] QAT: Invalid ioctl 1075883590 [ 593.391203][ T5935] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 593.554936][ T5935] usb 3-1: device descriptor read/64, error -71 [ 593.811420][ T5935] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 593.991607][ T5935] usb 3-1: device descriptor read/64, error -71 [ 594.197326][ T5935] usb usb3-port1: attempt power cycle [ 594.421118][ T5867] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 594.561149][ T5935] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 594.581226][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 594.587800][ T5935] usb 3-1: device descriptor read/8, error -71 [ 594.597759][ T5867] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 594.606591][ T5867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.635534][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.690359][ T5867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.699936][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.722674][ T5867] usb 4-1: Product: syz [ 594.743728][ T5867] usb 4-1: Manufacturer: syz [ 594.748556][ T5867] usb 4-1: SerialNumber: syz [ 594.861096][ T5935] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 594.912281][ T5935] usb 3-1: device descriptor read/8, error -71 [ 595.042463][ T5935] usb usb3-port1: unable to enumerate USB device [ 595.768993][T12127] loop6: detected capacity change from 0 to 1 [ 595.797459][ T6034] Dev loop6: unable to read RDB block 1 [ 595.864221][ T6034] loop6: unable to read partition table [ 595.923026][ T6034] loop6: partition table beyond EOD, truncated [ 596.148885][T12127] Dev loop6: unable to read RDB block 1 [ 596.157674][T12127] loop6: unable to read partition table [ 596.191297][T12127] loop6: partition table beyond EOD, truncated [ 596.225847][T12127] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 596.834602][ T981] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 597.164426][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.204864][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.251741][ T981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.311099][ T981] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.320262][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.346231][ T5867] usb 4-1: 0:2 : does not exist [ 597.388223][ T5867] usb 4-1: USB disconnect, device number 90 [ 597.432274][ T981] usb 3-1: config 0 descriptor?? [ 597.673644][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.682463][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.796764][ T981] usbhid 3-1:0.0: can't add hid device: -71 [ 597.820948][ T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 597.849440][ T981] usb 3-1: USB disconnect, device number 126 [ 597.899380][T12158] loop6: detected capacity change from 0 to 1 [ 597.919410][T12158] Dev loop6: unable to read RDB block 1 [ 597.933292][T12158] loop6: unable to read partition table [ 597.972202][T12158] loop6: partition table beyond EOD, truncated [ 598.032241][T12158] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 599.485584][T12180] FAULT_INJECTION: forcing a failure. [ 599.485584][T12180] name failslab, interval 1, probability 0, space 0, times 0 [ 599.539081][T12180] CPU: 0 UID: 0 PID: 12180 Comm: syz.1.1669 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 599.539112][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.539125][T12180] Call Trace: [ 599.539134][T12180] [ 599.539144][T12180] dump_stack_lvl+0x189/0x250 [ 599.539175][T12180] ? __pfx____ratelimit+0x10/0x10 [ 599.539200][T12180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.539223][T12180] ? __pfx__printk+0x10/0x10 [ 599.539249][T12180] ? nfnetlink_rcv+0x26a/0x2520 [ 599.539270][T12180] ? ____sys_sendmsg+0x505/0x830 [ 599.539298][T12180] ? __x64_sys_sendmsg+0x19b/0x260 [ 599.539338][T12180] should_fail_ex+0x414/0x560 [ 599.539367][T12180] should_failslab+0xa8/0x100 [ 599.539401][T12180] kmem_cache_alloc_noprof+0x73/0x3c0 [ 599.539429][T12180] ? skb_clone+0x212/0x3a0 [ 599.539464][T12180] skb_clone+0x212/0x3a0 [ 599.539499][T12180] __netlink_deliver_tap+0x404/0x850 [ 599.539538][T12180] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.539565][T12180] netlink_deliver_tap+0x19c/0x1b0 [ 599.539593][T12180] netlink_sendskb+0x68/0x140 [ 599.539618][T12180] netlink_unicast+0x397/0x9e0 [ 599.539638][T12180] ? __asan_memcpy+0x40/0x70 [ 599.539678][T12180] ? __pfx_netlink_unicast+0x10/0x10 [ 599.539711][T12180] netlink_rcv_skb+0x28c/0x470 [ 599.539738][T12180] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 599.539761][T12180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.539799][T12180] ? bpf_lsm_capable+0x9/0x20 [ 599.539827][T12180] ? security_capable+0x7e/0x2e0 [ 599.539862][T12180] nfnetlink_rcv+0x26a/0x2520 [ 599.539888][T12180] ? __dev_queue_xmit+0x1d79/0x3b50 [ 599.539932][T12180] ? __dev_queue_xmit+0x27b/0x3b50 [ 599.539976][T12180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 599.539998][T12180] ? __pfx___dev_queue_xmit+0x10/0x10 [ 599.540046][T12180] ? ref_tracker_free+0x63a/0x7d0 [ 599.540071][T12180] ? __asan_memcpy+0x40/0x70 [ 599.540094][T12180] ? __pfx_ref_tracker_free+0x10/0x10 [ 599.540123][T12180] ? __skb_clone+0x63/0x7a0 [ 599.540156][T12180] ? __skb_clone+0x483/0x7a0 [ 599.540191][T12180] ? skb_clone+0x246/0x3a0 [ 599.540223][T12180] ? __netlink_deliver_tap+0x807/0x850 [ 599.540246][T12180] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.540277][T12180] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.540311][T12180] netlink_unicast+0x82c/0x9e0 [ 599.540343][T12180] ? __pfx_netlink_unicast+0x10/0x10 [ 599.540368][T12180] ? netlink_sendmsg+0x642/0xb30 [ 599.540391][T12180] ? skb_put+0x11b/0x210 [ 599.540422][T12180] netlink_sendmsg+0x805/0xb30 [ 599.540458][T12180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.540487][T12180] ? aa_sock_msg_perm+0xf1/0x1d0 [ 599.540516][T12180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.540538][T12180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.540564][T12180] __sock_sendmsg+0x219/0x270 [ 599.540590][T12180] ____sys_sendmsg+0x505/0x830 [ 599.540626][T12180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.540666][T12180] ? import_iovec+0x74/0xa0 [ 599.540699][T12180] ___sys_sendmsg+0x21f/0x2a0 [ 599.540732][T12180] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.540802][T12180] ? __fget_files+0x2a/0x420 [ 599.540833][T12180] ? __fget_files+0x3a0/0x420 [ 599.540874][T12180] __x64_sys_sendmsg+0x19b/0x260 [ 599.540907][T12180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.540947][T12180] ? __pfx_ksys_write+0x10/0x10 [ 599.540972][T12180] ? rcu_is_watching+0x15/0xb0 [ 599.540997][T12180] ? do_syscall_64+0xbe/0x3b0 [ 599.541028][T12180] do_syscall_64+0xfa/0x3b0 [ 599.541051][T12180] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.541075][T12180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.541095][T12180] ? clear_bhb_loop+0x60/0xb0 [ 599.541121][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.541142][T12180] RIP: 0033:0x7fc9bbb8eb69 [ 599.541161][T12180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.541179][T12180] RSP: 002b:00007fc9bcac0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.541202][T12180] RAX: ffffffffffffffda RBX: 00007fc9bbdb5fa0 RCX: 00007fc9bbb8eb69 [ 599.541216][T12180] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 599.541226][T12180] RBP: 00007fc9bcac0090 R08: 0000000000000000 R09: 0000000000000000 [ 599.541235][T12180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.541244][T12180] R13: 0000000000000000 R14: 00007fc9bbdb5fa0 R15: 00007fc9bbedfa28 [ 599.541267][T12180] [ 600.532227][ T981] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 600.580697][ T5861] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 600.701129][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 600.719465][ T981] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 600.738418][ T981] usb 5-1: config 1 has no interface number 0 [ 600.756331][ T981] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 600.768542][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.769673][ T981] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 600.802361][ T981] usb 5-1: config 1 interface 105 has no altsetting 0 [ 600.810126][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.822939][ T981] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 600.832203][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.840219][ T981] usb 5-1: Product: syz [ 600.846028][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.865249][ T981] usb 5-1: Manufacturer: syz [ 600.869265][ T5861] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.878974][ T981] usb 5-1: SerialNumber: syz [ 600.888443][T12189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 600.891218][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.909277][T12189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 600.941183][ T5935] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 600.958487][ T5861] usb 1-1: config 0 descriptor?? [ 601.095139][T12206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1679'. [ 601.115495][ T5935] usb 3-1: config 7 has an invalid interface number: 81 but max is 0 [ 601.119527][ T5950] hid-generic 0000:0003:0001.001D: unknown main item tag 0x4 [ 601.136876][ T5950] hid-generic 0000:0003:0001.001D: unknown main item tag 0x0 [ 601.149325][ T5935] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 601.161277][ T5950] hid-generic 0000:0003:0001.001D: hidraw0: HID v0.03 Device [syz0] on syz1 [ 601.167762][ T5935] usb 3-1: config 7 has no interface number 0 [ 601.179935][ T5935] usb 3-1: config 7 interface 81 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 601.196624][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.205703][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.206246][ T5935] usb 3-1: config 7 interface 81 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 601.238166][ T5935] usb 3-1: config 7 interface 81 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 601.257326][ T5935] usb 3-1: config 7 interface 81 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 601.276053][ T5935] usb 3-1: config 7 interface 81 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 601.290959][ T5935] usb 3-1: config 7 interface 81 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 601.317159][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 601.336751][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 601.340326][ T5935] usb 3-1: config 7 interface 81 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 601.356922][T12189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 601.376264][ T5861] usb 1-1: USB disconnect, device number 101 [ 601.386235][T12189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 601.411490][ T5935] usb 3-1: config 7 interface 81 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 601.439845][ T5935] usb 3-1: config 7 interface 81 has no altsetting 0 [ 601.485572][ T5935] usb 3-1: New USB device found, idVendor=093a, idProduct=2474, bcdDevice=e3.e2 [ 601.492978][T12208] fido_id[12208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 601.508532][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.551051][ T5935] usb 3-1: Product: syz [ 601.572109][ T5935] usb 3-1: Manufacturer: syz [ 601.597416][ T5935] usb 3-1: SerialNumber: syz [ 601.659509][T12200] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 601.733604][T12210] netlink: 'syz.1.1680': attribute type 9 has an invalid length. [ 601.922943][ T5935] gspca_main: pac207-2.14.0 probing 093a:2474 [ 601.927840][T12214] FAULT_INJECTION: forcing a failure. [ 601.927840][T12214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.944251][ T5935] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 601.963689][T12214] CPU: 0 UID: 0 PID: 12214 Comm: syz.0.1681 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 601.963719][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.963740][T12214] Call Trace: [ 601.963750][T12214] [ 601.963760][T12214] dump_stack_lvl+0x189/0x250 [ 601.963790][T12214] ? __pfx____ratelimit+0x10/0x10 [ 601.963816][T12214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.963841][T12214] ? __pfx__printk+0x10/0x10 [ 601.963873][T12214] ? __might_fault+0xb0/0x130 [ 601.963911][T12214] should_fail_ex+0x414/0x560 [ 601.963940][T12214] _copy_to_user+0x31/0xb0 [ 601.963963][T12214] sk_getsockopt+0x1a75/0x2530 [ 601.963998][T12214] ? __pfx_sk_getsockopt+0x10/0x10 [ 601.964025][T12214] ? write_ibpb+0x30/0x40 [ 601.964062][T12214] ? __lock_acquire+0xab9/0xd20 [ 601.964129][T12214] do_sock_getsockopt+0x237/0x450 [ 601.964159][T12214] ? write_ibpb+0x30/0x40 [ 601.964187][T12214] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 601.964216][T12214] ? write_ibpb+0x30/0x40 [ 601.964239][T12214] ? __fget_files+0x3a0/0x420 [ 601.964270][T12214] ? __fget_files+0x2a/0x420 [ 601.964308][T12214] __x64_sys_getsockopt+0x1a5/0x250 [ 601.964337][T12214] ? write_ibpb+0x30/0x40 [ 601.964363][T12214] ? write_ibpb+0x30/0x40 [ 601.964392][T12214] do_syscall_64+0xfa/0x3b0 [ 601.964416][T12214] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.964440][T12214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.964461][T12214] ? clear_bhb_loop+0x60/0xb0 [ 601.964487][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.964507][T12214] RIP: 0033:0x7fc8c638eb69 [ 601.964526][T12214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.964545][T12214] RSP: 002b:00007fc8c71dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 601.964567][T12214] RAX: ffffffffffffffda RBX: 00007fc8c65b5fa0 RCX: 00007fc8c638eb69 [ 601.964583][T12214] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 601.964596][T12214] RBP: 00007fc8c71dc090 R08: 0000200000000100 R09: 0000000000000000 [ 601.964611][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.964624][T12214] R13: 0000000000000000 R14: 00007fc8c65b5fa0 R15: 00007fc8c66dfa28 [ 601.964657][T12214] [ 602.219659][ T5935] usb 3-1: USB disconnect, device number 127 [ 602.641154][ T24] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 602.735499][T12221] FAULT_INJECTION: forcing a failure. [ 602.735499][T12221] name failslab, interval 1, probability 0, space 0, times 0 [ 602.748299][T12221] CPU: 0 UID: 0 PID: 12221 Comm: syz.1.1683 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 602.748329][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.748343][T12221] Call Trace: [ 602.748353][T12221] [ 602.748363][T12221] dump_stack_lvl+0x189/0x250 [ 602.748395][T12221] ? __pfx____ratelimit+0x10/0x10 [ 602.748422][T12221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.748447][T12221] ? __pfx__printk+0x10/0x10 [ 602.748481][T12221] ? __lock_acquire+0xab9/0xd20 [ 602.748521][T12221] should_fail_ex+0x414/0x560 [ 602.748551][T12221] should_failslab+0xa8/0x100 [ 602.748584][T12221] kmem_cache_alloc_noprof+0x73/0x3c0 [ 602.748612][T12221] ? skb_clone+0x212/0x3a0 [ 602.748651][T12221] ? __pfx_skb_network_protocol+0x10/0x10 [ 602.748688][T12221] skb_clone+0x212/0x3a0 [ 602.748717][T12221] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 602.748748][T12221] dev_queue_xmit_nit+0x416/0xcc0 [ 602.748775][T12221] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 602.748816][T12221] dev_hard_start_xmit+0x1be/0x830 [ 602.748866][T12221] __dev_queue_xmit+0x1b8d/0x3b50 [ 602.748910][T12221] ? __dev_queue_xmit+0x27b/0x3b50 [ 602.748943][T12221] ? __x64_sys_sendmsg+0x19b/0x260 [ 602.748971][T12221] ? do_syscall_64+0xfa/0x3b0 [ 602.748995][T12221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.749030][T12221] ? __pfx___dev_queue_xmit+0x10/0x10 [ 602.749078][T12221] ? __copy_skb_header+0xa7/0x550 [ 602.749110][T12221] ? __asan_memcpy+0x40/0x70 [ 602.749134][T12221] ? __skb_clone+0x63/0x7a0 [ 602.749169][T12221] ? __skb_clone+0x483/0x7a0 [ 602.749208][T12221] ? skb_clone+0x246/0x3a0 [ 602.749261][T12221] __netlink_deliver_tap+0x5ad/0x850 [ 602.749303][T12221] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.749330][T12221] netlink_deliver_tap+0x19c/0x1b0 [ 602.749359][T12221] netlink_sendskb+0x68/0x140 [ 602.749385][T12221] netlink_unicast+0x397/0x9e0 [ 602.749405][T12221] ? __asan_memcpy+0x40/0x70 [ 602.749438][T12221] ? __pfx_netlink_unicast+0x10/0x10 [ 602.749473][T12221] netlink_rcv_skb+0x28c/0x470 [ 602.749500][T12221] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 602.749526][T12221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.749566][T12221] ? bpf_lsm_capable+0x9/0x20 [ 602.749593][T12221] ? security_capable+0x7e/0x2e0 [ 602.749628][T12221] nfnetlink_rcv+0x26a/0x2520 [ 602.749661][T12221] ? __dev_queue_xmit+0x1d79/0x3b50 [ 602.749704][T12221] ? __dev_queue_xmit+0x27b/0x3b50 [ 602.749750][T12221] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 602.749772][T12221] ? __pfx___dev_queue_xmit+0x10/0x10 [ 602.749821][T12221] ? ref_tracker_free+0x63a/0x7d0 [ 602.749847][T12221] ? __asan_memcpy+0x40/0x70 [ 602.749869][T12221] ? __pfx_ref_tracker_free+0x10/0x10 [ 602.749892][T12221] ? __skb_clone+0x63/0x7a0 [ 602.749928][T12221] ? __skb_clone+0x483/0x7a0 [ 602.749966][T12221] ? skb_clone+0x246/0x3a0 [ 602.750000][T12221] ? __netlink_deliver_tap+0x807/0x850 [ 602.750026][T12221] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.750059][T12221] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.750094][T12221] netlink_unicast+0x82c/0x9e0 [ 602.750127][T12221] ? __pfx_netlink_unicast+0x10/0x10 [ 602.750153][T12221] ? netlink_sendmsg+0x642/0xb30 [ 602.750177][T12221] ? skb_put+0x11b/0x210 [ 602.750209][T12221] netlink_sendmsg+0x805/0xb30 [ 602.750246][T12221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.750276][T12221] ? aa_sock_msg_perm+0xf1/0x1d0 [ 602.750307][T12221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.750331][T12221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.750359][T12221] __sock_sendmsg+0x219/0x270 [ 602.750385][T12221] ____sys_sendmsg+0x505/0x830 [ 602.750421][T12221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.750462][T12221] ? import_iovec+0x74/0xa0 [ 602.750488][T12221] ___sys_sendmsg+0x21f/0x2a0 [ 602.750521][T12221] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.750592][T12221] ? __fget_files+0x2a/0x420 [ 602.750624][T12221] ? __fget_files+0x3a0/0x420 [ 602.750673][T12221] __x64_sys_sendmsg+0x19b/0x260 [ 602.750706][T12221] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.750748][T12221] ? __pfx_ksys_write+0x10/0x10 [ 602.750774][T12221] ? rcu_is_watching+0x15/0xb0 [ 602.750801][T12221] ? do_syscall_64+0xbe/0x3b0 [ 602.750831][T12221] do_syscall_64+0xfa/0x3b0 [ 602.750855][T12221] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.750879][T12221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.750900][T12221] ? clear_bhb_loop+0x60/0xb0 [ 602.750926][T12221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.750946][T12221] RIP: 0033:0x7fc9bbb8eb69 [ 602.750967][T12221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.750989][T12221] RSP: 002b:00007fc9bcac0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.751010][T12221] RAX: ffffffffffffffda RBX: 00007fc9bbdb5fa0 RCX: 00007fc9bbb8eb69 [ 602.751026][T12221] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 602.751039][T12221] RBP: 00007fc9bcac0090 R08: 0000000000000000 R09: 0000000000000000 [ 602.751053][T12221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.751065][T12221] R13: 0000000000000000 R14: 00007fc9bbdb5fa0 R15: 00007fc9bbedfa28 [ 602.751098][T12221] [ 603.247184][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.309431][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.347541][ T981] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 603.387222][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 603.450486][ T981] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 603.467028][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.505363][ T24] usb 1-1: config 0 descriptor?? [ 603.516559][ T981] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 604.012558][T12217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.021622][T12217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.051148][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 604.098867][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 604.184052][ T981] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 96:59:f7:6b:43:4c [ 604.216024][ T24] usb 1-1: USB disconnect, device number 102 [ 604.282742][ T981] usb 5-1: USB disconnect, device number 72 [ 604.356655][ T981] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 604.623803][ T981] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 604.676388][ T981] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 604.748227][ T981] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 605.037683][T12250] syzkaller1: entered promiscuous mode [ 605.049531][T12250] syzkaller1: entered allmulticast mode [ 605.071193][ T981] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 605.211101][ T981] usb 5-1: device descriptor read/64, error -71 [ 605.275062][ T5861] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 605.462465][ T981] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 605.471204][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 605.509961][ T5861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.525171][ T5861] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.535560][ T5861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 605.557049][ T5861] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 605.591746][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.601455][ T981] usb 5-1: device descriptor read/64, error -71 [ 605.614570][T12267] FAULT_INJECTION: forcing a failure. [ 605.614570][T12267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.708049][ T5861] usb 1-1: config 0 descriptor?? [ 605.736928][T12267] CPU: 1 UID: 0 PID: 12267 Comm: syz.3.1696 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 605.736961][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.736975][T12267] Call Trace: [ 605.736984][T12267] [ 605.736994][T12267] dump_stack_lvl+0x189/0x250 [ 605.737024][T12267] ? __pfx____ratelimit+0x10/0x10 [ 605.737049][T12267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.737074][T12267] ? __pfx__printk+0x10/0x10 [ 605.737118][T12267] should_fail_ex+0x414/0x560 [ 605.737147][T12267] _copy_to_user+0x31/0xb0 [ 605.737169][T12267] simple_read_from_buffer+0xe1/0x170 [ 605.737205][T12267] proc_fail_nth_read+0x1b3/0x220 [ 605.737233][T12267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 605.737260][T12267] ? rw_verify_area+0x2a6/0x4d0 [ 605.737285][T12267] ? __lock_acquire+0xab9/0xd20 [ 605.737312][T12267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 605.737338][T12267] vfs_read+0x200/0x980 [ 605.737363][T12267] ? fdget_pos+0x247/0x320 [ 605.737386][T12267] ? __pfx___mutex_lock+0x10/0x10 [ 605.737413][T12267] ? __pfx_vfs_read+0x10/0x10 [ 605.737447][T12267] ? __fget_files+0x2a/0x420 [ 605.737481][T12267] ? __fget_files+0x3a0/0x420 [ 605.737509][T12267] ? __fget_files+0x2a/0x420 [ 605.737548][T12267] ksys_read+0x145/0x250 [ 605.737578][T12267] ? __pfx_ksys_read+0x10/0x10 [ 605.737602][T12267] ? rcu_is_watching+0x15/0xb0 [ 605.737629][T12267] ? do_syscall_64+0xbe/0x3b0 [ 605.737660][T12267] do_syscall_64+0xfa/0x3b0 [ 605.737684][T12267] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.737708][T12267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.737729][T12267] ? clear_bhb_loop+0x60/0xb0 [ 605.737754][T12267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.737775][T12267] RIP: 0033:0x7ffa6f38d57c [ 605.737794][T12267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 605.737813][T12267] RSP: 002b:00007ffa701d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 605.737836][T12267] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38d57c [ 605.737852][T12267] RDX: 000000000000000f RSI: 00007ffa701d10a0 RDI: 0000000000000006 [ 605.737865][T12267] RBP: 00007ffa701d1090 R08: 0000000000000000 R09: 0000000000000000 [ 605.737878][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 605.737894][T12267] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffa6f6dfa28 [ 605.737925][T12267] [ 606.588287][ T981] usb usb5-port1: attempt power cycle [ 606.951435][ T981] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 607.088541][ T981] usb 5-1: device descriptor read/8, error -71 [ 607.372602][ T981] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 607.396767][ T981] usb 5-1: device descriptor read/8, error -71 [ 607.422218][T12288] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1700'. [ 607.512798][ T981] usb usb5-port1: unable to enumerate USB device [ 608.335253][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 608.348732][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 608.408506][ T5861] usb 1-1: USB disconnect, device number 103 [ 608.651244][T12299] netlink: 'syz.4.1705': attribute type 1 has an invalid length. [ 608.852780][ T5861] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 609.072139][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1707'. [ 609.123345][ T5861] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.180396][ T5861] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.248159][ T5861] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.633972][ T5861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 609.681147][ T981] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 609.723615][ T5861] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 609.738057][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.822298][ T981] usb 5-1: device descriptor read/64, error -71 [ 609.862197][ T5861] usb 1-1: config 0 descriptor?? [ 610.084444][ T981] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 610.263141][ T981] usb 5-1: device descriptor read/64, error -71 [ 610.371676][ T5926] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 610.382048][ T981] usb usb5-port1: attempt power cycle [ 610.383001][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 610.453338][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 610.534014][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.676448][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.713695][ T5861] usb 1-1: USB disconnect, device number 104 [ 610.719930][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 610.761493][ T981] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 610.792392][ T981] usb 5-1: device descriptor read/8, error -71 [ 610.802109][ T5926] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 610.822446][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.934870][ T5926] usb 4-1: config 0 descriptor?? [ 611.047736][ T981] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 611.092974][ T981] usb 5-1: device descriptor read/8, error -71 [ 611.202437][ T981] usb usb5-port1: unable to enumerate USB device [ 611.243153][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.261865][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.520629][ T5926] usbhid 4-1:0.0: can't add hid device: -71 [ 611.526939][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 611.681805][ T5926] usb 4-1: USB disconnect, device number 91 [ 612.289621][T12344] binder: 12338:12344 ioctl 540f 200000000280 returned -22 [ 612.461544][ T5926] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 612.601088][ T5926] usb 4-1: device descriptor read/64, error -71 [ 612.729475][T12356] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1719'. [ 612.840867][T12359] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1720'. [ 612.905416][ T5926] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 613.042064][ T5926] usb 4-1: device descriptor read/64, error -71 [ 613.161923][ T5926] usb usb4-port1: attempt power cycle [ 613.512912][ T5926] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 613.722964][ T5926] usb 4-1: device descriptor read/8, error -71 [ 613.781088][ T5861] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 614.021109][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 614.072304][ T5861] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 614.101151][ T5926] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 614.182069][ T5926] usb 4-1: device descriptor read/8, error -71 [ 614.237565][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 614.339657][ T5926] usb usb4-port1: unable to enumerate USB device [ 614.362504][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 614.442389][ T5861] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.475903][ T5861] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 614.496575][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.824061][ T5861] usb 1-1: GET_CAPABILITIES returned 0 [ 614.921224][ T5861] usbtmc 1-1:16.0: can't read capabilities [ 615.071085][ T981] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 615.192100][T12369] tipc: Enabling of bearer rejected, already enabled [ 615.241891][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 615.266048][ T981] usb 5-1: config 0 has an invalid interface number: 223 but max is 0 [ 615.293024][ T981] usb 5-1: config 0 has no interface number 0 [ 615.332067][ T981] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 615.355737][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.365557][ T981] usb 5-1: Product: syz [ 615.379630][ T981] usb 5-1: Manufacturer: syz [ 615.408894][ T981] usb 5-1: SerialNumber: syz [ 615.455767][ T981] usb 5-1: config 0 descriptor?? [ 615.686185][ T981] usb 5-1: USB disconnect, device number 81 [ 615.701757][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 616.068261][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.086019][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.096875][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.113824][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.128420][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.254496][ T5926] usb 3-1: config 0 descriptor?? [ 616.266286][ T9] usb 1-1: USB disconnect, device number 105 [ 616.356831][ T981] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 616.531119][ T981] usb 5-1: device descriptor read/64, error -71 [ 616.546670][T12379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.597356][T12379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.664132][T12394] netlink: 'syz.3.1731': attribute type 21 has an invalid length. [ 616.698045][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 616.707906][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 616.727847][T12394] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1731'. [ 616.736631][ T5926] usb 3-1: USB disconnect, device number 2 [ 616.781509][ T981] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 616.931266][ T981] usb 5-1: device descriptor read/64, error -71 [ 617.042048][ T981] usb usb5-port1: attempt power cycle [ 617.231657][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 617.431611][ T24] usb 4-1: device descriptor read/64, error -71 [ 617.437967][ T981] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 617.484945][T12420] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1736'. [ 617.587168][ T981] usb 5-1: device descriptor read/8, error -71 [ 617.721522][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 617.831529][ T981] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 617.864155][ T24] usb 4-1: device descriptor read/64, error -71 [ 617.981604][ T24] usb usb4-port1: attempt power cycle [ 618.072390][ T981] usb 5-1: device not accepting address 85, error -71 [ 618.141753][ T981] usb usb5-port1: unable to enumerate USB device [ 618.237869][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.246828][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.261207][T12436] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1742'. [ 618.731266][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 618.751893][ T24] usb 4-1: device descriptor read/8, error -71 [ 619.031472][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 619.096853][ T24] usb 4-1: device descriptor read/8, error -71 [ 619.298357][ T24] usb usb4-port1: unable to enumerate USB device [ 620.679636][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 621.894901][T12474] IPVS: length: 4096 != 24 [ 622.771186][ T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 623.273423][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 190, changing to 11 [ 623.297382][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 50772, setting to 1024 [ 623.392446][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 623.435858][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.463179][ T24] usb 5-1: config 0 descriptor?? [ 623.469605][T12489] loop6: detected capacity change from 0 to 1 [ 623.566607][T12479] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 623.583157][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 623.612563][T12489] Dev loop6: unable to read RDB block 1 [ 624.006380][T12489] loop6: unable to read partition table [ 624.030610][ T24] smsusb:smsusb_probe: Device initialized with return code -19 [ 624.063081][T12489] loop6: partition table beyond EOD, truncated [ 624.125341][T12489] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 624.416333][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.426315][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.532958][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.603433][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.801592][T12501] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1757'. [ 625.288264][T12507] sch_tbf: burst 0 is lower than device wg2 mtu (1420) ! [ 625.326730][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 625.410722][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 625.803813][T12515] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1760'. [ 626.803891][ T5926] usb 5-1: USB disconnect, device number 86 [ 627.741070][ T981] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 627.868616][T12538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.881842][T12538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.931183][ T981] usb 5-1: Using ep0 maxpacket: 8 [ 628.053370][ T981] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 628.074431][ T981] usb 5-1: config 179 has no interface number 0 [ 628.164319][ T981] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 628.199061][ T981] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 628.255674][ T981] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 628.314627][ T981] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 628.394917][ T981] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 628.416255][ T981] usb 5-1: config 179 interface 65 has no altsetting 0 [ 628.424290][ T981] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 628.479719][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.576905][T12526] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 628.601643][ T5950] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 628.631607][ T5926] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 628.645774][ T981] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input37 [ 628.775779][ T5218] input input37: unable to receive magic message: -110 [ 628.824770][ T5926] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 628.921441][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 628.956543][ T5950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 628.957797][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 628.976223][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 628.978190][ T5926] usb 1-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 628.986895][ T981] usb 5-1: USB disconnect, device number 87 [ 629.021042][ T5950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 629.114528][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.129031][ T5950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.212454][ T5926] usb 1-1: Product: syz [ 629.236215][ T5926] usb 1-1: Manufacturer: syz [ 629.240871][ T5926] usb 1-1: SerialNumber: syz [ 629.245922][ T5950] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.282267][ T5926] usb 1-1: config 0 descriptor?? [ 629.291909][ T5950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.380197][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.861870][ T5950] usb 4-1: GET_CAPABILITIES returned 0 [ 629.867524][ T5950] usbtmc 4-1:16.0: can't read capabilities [ 630.471609][T12560] netlink: 380 bytes leftover after parsing attributes in process `syz.2.1771'. [ 631.478407][ T5935] usb 4-1: USB disconnect, device number 100 [ 631.564992][ T981] usb 1-1: USB disconnect, device number 106 [ 632.045175][T12574] tipc: Enabling of bearer rejected, failed to enable media [ 632.930272][T12579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.149723][T12585] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1777'. [ 633.342096][ T981] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 633.513853][ T981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 633.598071][ T981] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 633.687603][ T981] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.735768][ T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 633.775970][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.797744][ T981] usb 4-1: Product: syz [ 633.818649][ T981] usb 4-1: Manufacturer: syz [ 633.836844][ T981] usb 4-1: SerialNumber: syz [ 633.864092][ T981] hub 4-1:1.0: bad descriptor, ignoring hub [ 633.875325][ T981] hub 4-1:1.0: probe with driver hub failed with error -5 [ 634.061068][ T5935] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 634.091343][ T981] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 634.211427][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 634.242803][ T5935] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.323169][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 634.381091][ T5935] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 634.417621][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.440870][ T5935] usb 5-1: config 0 descriptor?? [ 634.734077][T12595] tipc: Enabling of bearer rejected, already enabled [ 634.881673][ T5935] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 634.894054][ T5935] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 634.933053][ T5935] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 634.969597][ T5935] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 634.994467][ T5935] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 635.033686][ T5935] elecom 0003:056E:00FD.001E: hidraw0: USB HID v8.00 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0 [ 635.165642][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 635.177735][T12597] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 635.558194][T12600] netlink: 380 bytes leftover after parsing attributes in process `syz.2.1782'. [ 635.871744][ T5935] usb 4-1: USB disconnect, device number 101 [ 635.891703][ T5935] usblp0: removed [ 636.204509][ T5926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 636.324464][ T5935] usb 5-1: USB disconnect, device number 88 [ 636.481074][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 636.502980][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.576240][ T5926] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 636.697698][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.750711][ T5926] usb 3-1: config 0 descriptor?? [ 636.881517][ T5935] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 636.912398][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1786'. [ 637.066026][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.082157][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.094007][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.112224][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.130530][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.168897][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.183857][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.247460][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 637.288226][ T5935] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 637.310610][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.353731][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.451964][ T5935] usb 4-1: config 0 descriptor?? [ 637.720849][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.732194][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.015162][ T5935] usbhid 4-1:0.0: can't add hid device: -71 [ 638.033277][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 638.037478][ T5935] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 638.050372][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 638.090206][ T5926] usb 3-1: USB disconnect, device number 3 [ 638.153361][ T5935] usb 4-1: USB disconnect, device number 102 [ 638.329734][T12639] netlink: 'syz.2.1790': attribute type 10 has an invalid length. [ 638.337723][T12639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1790'. [ 638.346862][T12639] team0: entered promiscuous mode [ 638.352086][T12639] team_slave_0: entered promiscuous mode [ 638.358041][T12639] team_slave_1: entered promiscuous mode [ 638.364241][T12639] team0: entered allmulticast mode [ 638.369414][T12639] team_slave_0: entered allmulticast mode [ 638.375262][T12639] team_slave_1: entered allmulticast mode [ 638.382125][T12639] bridge0: port 3(team0) entered blocking state [ 638.388532][T12639] bridge0: port 3(team0) entered disabled state [ 638.401411][T12639] bridge0: port 3(team0) entered blocking state [ 638.407845][T12639] bridge0: port 3(team0) entered forwarding state [ 638.536320][T12643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1792'. [ 638.568225][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'. [ 638.691284][ T5926] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 638.912584][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 639.040952][ T5926] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 639.116976][T12653] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1793'. [ 639.167077][ T5926] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 639.217440][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 639.257297][ T5926] usb 3-1: config 1 has no interface number 0 [ 639.535276][ T5926] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 639.609120][ T5926] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 639.697122][ T5926] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 639.770868][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.906676][T12666] FAULT_INJECTION: forcing a failure. [ 639.906676][T12666] name failslab, interval 1, probability 0, space 0, times 0 [ 639.939408][ T5926] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 640.099790][T12666] CPU: 0 UID: 0 PID: 12666 Comm: syz.4.1799 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 640.099813][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.099823][T12666] Call Trace: [ 640.099830][T12666] [ 640.099837][T12666] dump_stack_lvl+0x189/0x250 [ 640.099859][T12666] ? __pfx____ratelimit+0x10/0x10 [ 640.099877][T12666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.099895][T12666] ? __pfx__printk+0x10/0x10 [ 640.099920][T12666] ? __pfx___might_resched+0x10/0x10 [ 640.099938][T12666] should_fail_ex+0x414/0x560 [ 640.099959][T12666] should_failslab+0xa8/0x100 [ 640.099982][T12666] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 640.100003][T12666] ? __alloc_skb+0x112/0x2d0 [ 640.100027][T12666] __alloc_skb+0x112/0x2d0 [ 640.100049][T12666] netlink_sendmsg+0x5c6/0xb30 [ 640.100075][T12666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.100096][T12666] ? aa_sock_msg_perm+0xf1/0x1d0 [ 640.100118][T12666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.100135][T12666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.100154][T12666] __sock_sendmsg+0x219/0x270 [ 640.100172][T12666] ____sys_sendmsg+0x505/0x830 [ 640.100197][T12666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.100225][T12666] ? import_iovec+0x74/0xa0 [ 640.100241][T12666] ___sys_sendmsg+0x21f/0x2a0 [ 640.100264][T12666] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.100319][T12666] ? __fget_files+0x2a/0x420 [ 640.100341][T12666] ? __fget_files+0x3a0/0x420 [ 640.100370][T12666] __x64_sys_sendmsg+0x19b/0x260 [ 640.100394][T12666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.100422][T12666] ? __pfx_ksys_write+0x10/0x10 [ 640.100440][T12666] ? rcu_is_watching+0x15/0xb0 [ 640.100459][T12666] ? do_syscall_64+0xbe/0x3b0 [ 640.100480][T12666] do_syscall_64+0xfa/0x3b0 [ 640.100497][T12666] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.100514][T12666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.100529][T12666] ? clear_bhb_loop+0x60/0xb0 [ 640.100547][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.100561][T12666] RIP: 0033:0x7f061278eb69 [ 640.100575][T12666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.100588][T12666] RSP: 002b:00007f0613548038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.100604][T12666] RAX: ffffffffffffffda RBX: 00007f06129b5fa0 RCX: 00007f061278eb69 [ 640.100615][T12666] RDX: ea5bc50b6199d77e RSI: 0000200000000000 RDI: 0000000000000003 [ 640.100626][T12666] RBP: 00007f0613548090 R08: 0000000000000000 R09: 0000000000000000 [ 640.100635][T12666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.100644][T12666] R13: 0000000000000000 R14: 00007f06129b5fa0 R15: 00007f0612adfa28 [ 640.100666][T12666] [ 641.301447][ T5861] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 641.498357][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.516090][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.580515][ T5861] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 641.615642][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.640305][ T5861] usb 1-1: Product: syz [ 641.659586][ T5861] usb 1-1: Manufacturer: syz [ 641.674386][ T5861] usb 1-1: SerialNumber: syz [ 641.771748][ T5861] usb 1-1: config 0 descriptor?? [ 641.824195][ T5861] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 641.864676][ T5861] usb 1-1: No valid video chain found. [ 642.074429][ T5861] usb 1-1: USB disconnect, device number 107 [ 642.416326][ T5926] snd_usb_pod 3-1:1.1: set_interface failed [ 642.451732][ T5926] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 642.507978][ T5926] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 642.592137][ T5926] usb 3-1: USB disconnect, device number 4 [ 642.951186][ T5926] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 643.107387][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.133303][T12714] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1811'. [ 643.154100][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.164663][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 643.173971][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 643.198494][T12712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 643.218271][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 643.238013][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.273238][ T5926] usb 3-1: config 0 descriptor?? [ 643.320261][T12719] syz.0.1812 (12719): attempted to duplicate a private mapping with mremap. This is not supported. [ 643.501149][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.511943][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.656702][ T30] audit: type=1326 audit(1754437036.497:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12718 comm="syz.0.1812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8c638eb69 code=0x10000 [ 643.735956][T12723] 8021q: adding VLAN 0 to HW filter on device bond3 [ 643.855463][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 643.868704][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 644.109152][ T5926] usb 3-1: USB disconnect, device number 5 [ 644.529516][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 644.864858][T12746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.875604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.983843][T12746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1820'. [ 644.993130][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'. [ 645.010265][T12746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1820'. [ 645.382303][T12751] loop6: detected capacity change from 0 to 1 [ 645.395517][T12751] Dev loop6: unable to read RDB block 1 [ 645.404970][T12751] loop6: unable to read partition table [ 645.434155][T12751] loop6: partition table beyond EOD, truncated [ 645.467340][T12751] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 645.842450][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1823'. [ 646.043556][ T5935] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 646.271799][ T5935] usb 4-1: too many configurations: 90, using maximum allowed: 8 [ 646.378356][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 646.425604][ T5935] usb 4-1: can't read configurations, error -61 [ 646.651392][ T5950] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 646.821125][ T5935] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 646.869444][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 646.981813][ T5935] usb 4-1: too many configurations: 90, using maximum allowed: 8 [ 647.031720][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 647.046471][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 647.056529][ T5935] usb 4-1: can't read configurations, error -61 [ 647.086218][ T5935] usb usb4-port1: attempt power cycle [ 647.103403][T12769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 647.301143][ T6066] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 647.301942][ T5950] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 647.321572][ T5950] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 647.384220][ T5950] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 647.394801][ T5950] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.408441][ T5950] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.417951][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.481614][ T5935] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 647.491142][ T6066] usb 1-1: device descriptor read/64, error -71 [ 647.599406][ T5935] usb 4-1: too many configurations: 90, using maximum allowed: 8 [ 647.620191][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 647.645908][ T5935] usb 4-1: can't read configurations, error -61 [ 647.724306][ T5950] usb 3-1: GET_CAPABILITIES returned 0 [ 647.729898][ T5950] usbtmc 3-1:16.0: can't read capabilities [ 647.733724][ T6066] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 647.812206][T12776] tipc: Enabling of bearer rejected, already enabled [ 647.861067][ T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 647.868816][ T5935] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 647.975380][ T5935] usb 4-1: too many configurations: 90, using maximum allowed: 8 [ 647.991877][ T5935] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 648.005385][ T5935] usb 4-1: can't read configurations, error -61 [ 648.021455][ T5935] usb usb4-port1: unable to enumerate USB device [ 648.040135][T12778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.051145][ T6066] usb 1-1: device descriptor read/64, error -71 [ 648.065491][T12778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.081493][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 648.093104][ T24] usb 5-1: config 0 has no interfaces? [ 648.108027][ T24] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 648.125653][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.140941][ T24] usb 5-1: Product: syz [ 648.146959][ T24] usb 5-1: Manufacturer: syz [ 648.155201][T12778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.170212][ T24] usb 5-1: SerialNumber: syz [ 648.175554][ T6066] usb usb1-port1: attempt power cycle [ 648.182759][T12778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.213379][ T24] usb 5-1: config 0 descriptor?? [ 648.541548][ T6066] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 648.574516][ T6066] usb 1-1: device descriptor read/8, error -71 [ 648.811173][ T6066] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 648.846519][ T6066] usb 1-1: device descriptor read/8, error -71 [ 648.962113][ T6066] usb usb1-port1: unable to enumerate USB device [ 649.073531][ T5950] usb 3-1: USB disconnect, device number 6 [ 649.111692][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'. [ 650.203549][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.256852][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.441281][ T5926] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 650.631515][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 650.638696][ T5926] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 650.655442][ T5926] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 650.673383][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.709231][ T5926] usb 1-1: Product: Џ [ 650.736056][ T5926] usb 1-1: Manufacturer:  [ 650.754644][ T5926] usb 1-1: SerialNumber: У [ 650.870134][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1835'. [ 650.951654][ T5950] usb 5-1: USB disconnect, device number 89 [ 651.037944][ T5926] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 651.046652][ T5926] usb 1-1: found format II with max.bitrate = 256, frame size=9 [ 651.061899][ T5926] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 651.121179][ T5861] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 651.178483][ T5926] usb 1-1: USB disconnect, device number 112 [ 651.223640][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.312454][ T5861] usb 3-1: device descriptor read/64, error -71 [ 651.551250][ T5861] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 651.701094][ T5861] usb 3-1: device descriptor read/64, error -71 [ 651.844692][ T5861] usb usb3-port1: attempt power cycle [ 652.311747][ T5861] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 652.402017][ T5861] usb 3-1: device descriptor read/8, error -71 [ 652.602940][T12821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.633586][T12821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.711148][ T5861] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 652.719105][T12821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.752013][T12821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.843052][ T5861] usb 3-1: device descriptor read/8, error -71 [ 653.025257][ T5861] usb usb3-port1: unable to enumerate USB device [ 653.822765][T12835] loop6: detected capacity change from 0 to 1 [ 653.944079][T12835] Dev loop6: unable to read RDB block 1 [ 654.031752][T12835] loop6: unable to read partition table [ 654.041269][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 654.047690][T12835] loop6: partition table beyond EOD, truncated [ 654.097119][T12835] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 654.278471][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 654.409681][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 654.517797][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 654.596393][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.711208][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.773248][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.845313][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.271736][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 655.277299][ T24] usbtmc 5-1:16.0: can't read capabilities [ 655.713370][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 655.722667][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1855'. [ 655.925063][T12877] loop6: detected capacity change from 0 to 1 [ 655.955413][T12879] tipc: Enabling of bearer rejected, already enabled [ 655.974247][ T6034] Dev loop6: unable to read RDB block 1 [ 655.988279][ T6034] loop6: unable to read partition table [ 656.009115][ T6034] loop6: partition table beyond EOD, truncated [ 656.050917][T12877] Dev loop6: unable to read RDB block 1 [ 656.059799][T12877] loop6: unable to read partition table [ 656.066070][T12877] loop6: partition table beyond EOD, truncated [ 656.072937][T12877] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 656.587186][ T24] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 656.812631][ T5935] usb 5-1: USB disconnect, device number 90 [ 656.885494][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.928687][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 656.969435][ T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 657.030252][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.132975][ T24] usb 1-1: config 0 descriptor?? [ 657.143489][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 657.171093][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 657.213712][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 657.228616][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 657.239421][ T24] usb 1-1: media controller created [ 657.263636][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.469459][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 657.543257][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 657.563559][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 657.618534][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 657.633253][T12894] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1861'. [ 657.673072][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 657.742847][ T24] usb 1-1: USB disconnect, device number 113 [ 657.803877][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 657.953026][T12898] binder: 12897:12898 unknown command 0 [ 657.986008][T12898] binder: 12897:12898 ioctl c0306201 200000000080 returned -22 [ 658.046152][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 658.464842][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 658.701102][ T24] usb 5-1: device descriptor read/64, error -71 [ 658.981215][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 659.171572][ T24] usb 5-1: device descriptor read/64, error -71 [ 659.401831][ T24] usb usb5-port1: attempt power cycle [ 659.430413][T12922] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 659.439222][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.477045][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.811548][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 659.867305][ T24] usb 5-1: device descriptor read/8, error -71 [ 660.095670][T12933] IPVS: length: 4096 != 24 [ 660.124867][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 660.143023][T12931] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1872'. [ 660.163620][ T24] usb 5-1: device descriptor read/8, error -71 [ 660.244128][T12934] vivid-000: disconnect [ 660.281914][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1872'. [ 660.333820][ T24] usb usb5-port1: unable to enumerate USB device [ 660.446819][T12926] vivid-000: reconnect [ 660.664782][T12940] syzkaller1: entered promiscuous mode [ 660.670382][T12940] syzkaller1: entered allmulticast mode [ 660.771414][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 660.977273][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 190, changing to 11 [ 661.031974][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 50772, setting to 1024 [ 661.322425][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 661.392524][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.482120][ T24] usb 4-1: config 0 descriptor?? [ 661.493896][T12938] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 661.636046][T12940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1874'. [ 661.638864][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 661.664345][T12940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1874'. [ 662.531745][ T24] smsusb:smsusb_probe: Device initialized with return code -19 [ 663.995937][T12959] program syz.1.1878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 664.025799][ T5935] usb 4-1: USB disconnect, device number 107 [ 664.365497][T12957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.801494][ T5861] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 664.895697][T12965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.925129][T12965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.001349][ T5926] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 665.043606][ T5861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 665.072913][ T5861] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 665.172109][ T5861] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.315013][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.363339][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 665.404360][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.464944][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.493543][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.561032][ T5861] usb 1-1: Product: syz [ 665.645583][ T5861] usb 1-1: Manufacturer: syz [ 665.733246][ T5867] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 665.744191][ T5926] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.764113][ T5861] usb 1-1: SerialNumber: syz [ 665.776946][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.790142][ T5926] usb 4-1: config 0 descriptor?? [ 665.797540][ T5861] hub 1-1:1.0: bad descriptor, ignoring hub [ 665.803654][ T5861] hub 1-1:1.0: probe with driver hub failed with error -5 [ 665.891246][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 665.906141][ T5867] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 665.930586][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 665.941731][ T5867] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 665.952640][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.968091][ T5867] usb 3-1: config 0 descriptor?? [ 666.074611][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.083635][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.160504][ T5926] usbhid 4-1:0.0: can't add hid device: -71 [ 666.184235][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 666.293968][ T5861] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 666.317933][ T5926] usb 4-1: USB disconnect, device number 108 [ 666.379752][T12981] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1885'. [ 666.442127][ T5867] waltop 0003:172F:0034.001F: item fetching failed at offset 1/3 [ 666.456327][ T5867] waltop 0003:172F:0034.001F: probe with driver waltop failed with error -22 [ 667.571484][ T24] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 667.735074][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 667.746451][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 667.802921][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 667.824737][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.859277][ T5926] usb 1-1: USB disconnect, device number 114 [ 667.904292][ T5926] usblp0: removed [ 667.909715][T12993] IPVS: length: 4096 != 24 [ 667.921169][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 667.949737][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.017092][T12995] bridge0: port 3(team0) entered disabled state [ 668.030249][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 668.064821][T12999] netlink: 'syz.0.1889': attribute type 10 has an invalid length. [ 668.079334][ T24] usb 4-1: invalid MIDI out EP 0 [ 668.116041][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 668.181366][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.190709][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.503666][ T5867] usb 3-1: USB disconnect, device number 11 [ 668.515052][T12995] bridge_slave_0: left allmulticast mode [ 668.533974][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 668.567604][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 668.601880][ T24] usb 4-1: USB disconnect, device number 109 [ 669.240416][T12995] bridge_slave_0: left promiscuous mode [ 669.276375][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1891'. [ 669.301079][T12995] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.698133][T12995] bridge_slave_1: left allmulticast mode [ 669.709406][T12995] bridge_slave_1: left promiscuous mode [ 669.837216][T12995] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.927723][T12995] bond0: (slave bond_slave_0): Releasing backup interface [ 670.030070][T12995] bond0: (slave bond_slave_1): Releasing backup interface [ 670.048161][T12995] team_slave_0: left promiscuous mode [ 670.059826][T12995] team_slave_0: left allmulticast mode [ 670.107286][T12995] team0: Port device team_slave_0 removed [ 670.146569][T12995] team_slave_1: left promiscuous mode [ 670.211471][T12995] team_slave_1: left allmulticast mode [ 670.226315][T12995] team0: Port device team_slave_1 removed [ 670.233251][T12995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.244233][T12995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.277477][T12995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.285228][T12995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.298772][T12995] vxlan0: left promiscuous mode [ 670.314473][T12995] vxlan0: left allmulticast mode [ 670.322725][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.384968][T12995] team0: Port device vxlan0 removed [ 670.394665][T12995] bond1: (slave bridge1): Releasing backup interface [ 670.490449][T12999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.513699][T12999] bond0: entered promiscuous mode [ 670.513810][T12999] bond0: entered allmulticast mode [ 670.522225][T12999] team0: Port device bond0 added [ 670.717555][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.122806][T13002] bond0: left promiscuous mode [ 671.132525][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1895'. [ 671.146872][T13025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.153394][T13002] bond0: left allmulticast mode [ 671.191781][T13002] team0 (unregistering): Port device bond0 removed [ 671.322765][T11985] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.405388][T11985] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.427248][T11985] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.439233][T11985] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.541845][ T5867] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 671.689867][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1901'. [ 671.705829][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.724264][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.735254][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.749136][ T5867] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.760764][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.770185][T13039] program syz.4.1901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.774435][ T5867] usb 3-1: config 0 descriptor?? [ 671.839064][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1902'. [ 672.101604][ T24] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 672.160867][T13030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.212866][T13030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.261354][ T24] usb 4-1: device descriptor read/64, error -71 [ 672.301598][T13050] IPVS: length: 4096 != 24 [ 672.334907][ T5867] usbhid 3-1:0.0: can't add hid device: -71 [ 672.355011][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 672.451656][ T5935] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 672.566286][ T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 672.574496][ T5867] usb 3-1: USB disconnect, device number 12 [ 672.663637][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.673059][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.803612][ T24] usb 4-1: device descriptor read/64, error -71 [ 673.525351][ T5935] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 61, changing to 9 [ 673.536925][ T24] usb usb4-port1: attempt power cycle [ 673.546534][ T5935] usb 1-1: config 1 interface 0 has no altsetting 0 [ 673.581675][ T5935] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 673.635912][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.653930][ T5935] usb 1-1: Product: syz [ 673.658307][ T5935] usb 1-1: Manufacturer: syz [ 673.666701][ T5935] usb 1-1: SerialNumber: syz [ 673.821091][ T981] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 673.889000][ T5935] usbhid 1-1:1.0: can't add hid device: -71 [ 673.895199][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 673.976070][ T5935] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 674.003391][ T24] usb 4-1: device descriptor read/8, error -71 [ 674.047423][ T5935] usb 1-1: USB disconnect, device number 115 [ 674.102649][ T981] usb 5-1: config 0 has no interfaces? [ 674.114702][ T981] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 674.424116][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.491094][ T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 674.564550][ T981] usb 5-1: Product: syz [ 674.568892][ T981] usb 5-1: Manufacturer: syz [ 674.603573][ T981] usb 5-1: SerialNumber: syz [ 674.645192][ T981] usb 5-1: config 0 descriptor?? [ 674.655513][ T24] usb 4-1: device descriptor read/8, error -71 [ 674.771498][ T24] usb usb4-port1: unable to enumerate USB device [ 675.468632][T13068] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1908'. [ 676.145445][T13078] FAULT_INJECTION: forcing a failure. [ 676.145445][T13078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.192741][T13078] CPU: 1 UID: 0 PID: 13078 Comm: syz.3.1913 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 676.192773][T13078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 676.192787][T13078] Call Trace: [ 676.192796][T13078] [ 676.192805][T13078] dump_stack_lvl+0x189/0x250 [ 676.192835][T13078] ? __pfx____ratelimit+0x10/0x10 [ 676.192860][T13078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.192886][T13078] ? __pfx__printk+0x10/0x10 [ 676.192915][T13078] ? __might_fault+0xb0/0x130 [ 676.192957][T13078] should_fail_ex+0x414/0x560 [ 676.192984][T13078] _copy_from_user+0x2d/0xb0 [ 676.193004][T13078] ___sys_sendmsg+0x158/0x2a0 [ 676.193043][T13078] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.193106][T13078] ? __fget_files+0x2a/0x420 [ 676.193136][T13078] ? __fget_files+0x3a0/0x420 [ 676.193177][T13078] __x64_sys_sendmsg+0x19b/0x260 [ 676.193209][T13078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.193250][T13078] ? __pfx_ksys_write+0x10/0x10 [ 676.193274][T13078] ? rcu_is_watching+0x15/0xb0 [ 676.193301][T13078] ? do_syscall_64+0xbe/0x3b0 [ 676.193331][T13078] do_syscall_64+0xfa/0x3b0 [ 676.193355][T13078] ? lockdep_hardirqs_on+0x9c/0x150 [ 676.193378][T13078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.193398][T13078] ? clear_bhb_loop+0x60/0xb0 [ 676.193422][T13078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.193441][T13078] RIP: 0033:0x7ffa6f38eb69 [ 676.193459][T13078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.193478][T13078] RSP: 002b:00007ffa701d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.193501][T13078] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38eb69 [ 676.193517][T13078] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 676.193530][T13078] RBP: 00007ffa701d1090 R08: 0000000000000000 R09: 0000000000000000 [ 676.193543][T13078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.193555][T13078] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffa6f6dfa28 [ 676.193586][T13078] [ 676.438838][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 676.612072][T13086] vivid-000: disconnect [ 676.868251][T13071] vivid-000: reconnect [ 677.064962][ T24] usb 5-1: USB disconnect, device number 95 [ 677.465056][T13103] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1921'. [ 677.852251][T13107] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1920'. [ 678.742140][ T5861] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 678.991514][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 678.998427][ T5861] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 679.007574][ T5861] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 679.050655][ T5861] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 679.296080][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 679.341284][ T5861] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 679.391077][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 679.455687][ T5861] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 679.551206][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.635328][ T5861] usb 5-1: config 0 descriptor?? [ 679.855228][T13118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.883960][T13118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.893358][ T5861] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 679.943684][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1930'. [ 680.036219][ T5861] usb 5-1: USB disconnect, device number 96 [ 680.085024][ T5861] usblp0: removed [ 681.410177][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 681.545592][T13154] wireguard0: entered promiscuous mode [ 681.631157][T13154] wireguard0: entered allmulticast mode [ 681.662385][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.736032][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.008781][T13178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.023147][T13178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.049963][T13178] lo: entered allmulticast mode [ 683.058014][T13178] lo: left allmulticast mode [ 683.063700][T13178] pimreg: left allmulticast mode [ 684.446906][T13191] loop6: detected capacity change from 0 to 1 [ 684.522301][ T6034] Dev loop6: unable to read RDB block 1 [ 684.533941][ T6034] loop6: unable to read partition table [ 684.542295][ T6034] loop6: partition table beyond EOD, truncated [ 684.574992][T13191] Dev loop6: unable to read RDB block 1 [ 684.580733][T13191] loop6: unable to read partition table [ 684.631128][T13191] loop6: partition table beyond EOD, truncated [ 684.657784][T13194] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1943'. [ 684.751511][T13191] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 685.841399][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.851694][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.012970][T13215] delete_channel: no stack [ 686.194449][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.213670][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.147410][T13222] tipc: Enabling of bearer rejected, already enabled [ 687.646467][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 687.667559][T13227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.678618][T13227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.065680][ T30] audit: type=1326 audit(1754437081.907:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13241 comm="syz.2.1958" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff99e18eb69 code=0x0 [ 689.351507][ T5861] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 689.481055][ T5861] usb 1-1: device descriptor read/64, error -71 [ 689.761016][ T5861] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 689.911175][ T5861] usb 1-1: device descriptor read/64, error -71 [ 690.112824][ T5861] usb usb1-port1: attempt power cycle [ 690.491925][ T5861] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 690.512373][ T5861] usb 1-1: device descriptor read/8, error -71 [ 691.144602][ T5861] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 691.211849][ T5861] usb 1-1: device descriptor read/8, error -71 [ 691.329511][ T5861] usb usb1-port1: unable to enumerate USB device [ 691.414941][T13256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1961'. [ 691.572472][T13258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.620193][T13258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.961067][ T5935] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 692.097681][T13270] vivid-000: disconnect [ 692.153143][ T5935] usb 3-1: config 0 has no interfaces? [ 692.158984][ T5935] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 692.173615][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.196532][ T5935] usb 3-1: config 0 descriptor?? [ 692.418294][T13263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.428512][T13263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.502398][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 692.518779][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 692.537296][T13272] netlink: 'syz.0.1966': attribute type 15 has an invalid length. [ 692.587673][T13259] vivid-000: reconnect [ 692.691128][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.713582][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.989290][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.005606][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.397847][T13295] tipc: Enabling of bearer rejected, already enabled [ 694.599192][T13300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1973'. [ 694.685155][ T24] usb 3-1: USB disconnect, device number 13 [ 694.863799][T13306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.938094][T13306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.989231][T13308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.063689][T13308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.224967][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 695.401414][ T24] usb 3-1: device descriptor read/64, error -71 [ 695.451232][ T5861] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 695.631835][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 695.651418][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 695.668068][ T5861] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 695.678333][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.695341][ T5861] usb 4-1: Product: syz [ 695.699786][ T5861] usb 4-1: Manufacturer: syz [ 695.705201][ T5861] usb 4-1: SerialNumber: syz [ 695.720900][ T5861] usb 4-1: config 0 descriptor?? [ 695.744536][ T5861] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 695.749146][T13319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.821309][ T24] usb 3-1: device descriptor read/64, error -71 [ 695.851334][T13319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.931777][ T24] usb usb3-port1: attempt power cycle [ 695.954065][T13319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.979446][T13319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.281123][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 696.302812][ T24] usb 3-1: device descriptor read/8, error -71 [ 696.541353][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 696.575728][ T24] usb 3-1: device descriptor read/8, error -71 [ 696.691621][ T24] usb usb3-port1: unable to enumerate USB device [ 696.778693][T13314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.812122][T13314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.822608][T13331] tipc: Enabling of bearer rejected, already enabled [ 697.053097][T13339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.125177][ T5861] gspca_sonixj: reg_w1 err -110 [ 697.142473][T13339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.165409][T13339] program syz.1.1988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.171181][ T5861] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 697.393825][T13347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1988'. [ 697.836926][T13349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1989'. [ 698.451633][ T5926] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 698.696978][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 698.728917][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 698.772027][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 698.798335][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 698.927692][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.967704][ T5950] usb 4-1: USB disconnect, device number 114 [ 699.025517][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.092306][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.141242][ T5935] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 699.306428][ T5935] usb 5-1: unable to get BOS descriptor or descriptor too short [ 699.316065][ T5935] usb 5-1: not running at top speed; connect to a high speed hub [ 699.326873][ T5935] usb 5-1: config 7 has an invalid interface number: 180 but max is 0 [ 699.336562][ T5935] usb 5-1: config 7 has no interface number 0 [ 699.343086][ T5935] usb 5-1: config 7 interface 180 has no altsetting 0 [ 699.362865][ T5926] usb 3-1: usb_control_msg returned -71 [ 699.364641][ T5935] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 699.386835][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.396170][ T5926] usbtmc 3-1:16.0: can't read capabilities [ 699.428748][ T5935] usb 5-1: Product: syz [ 699.433676][ T5935] usb 5-1: Manufacturer: ᆊ罾柵枨톐㉁띎뼱瑲ほ웒ຘ䭡듺늿=ሬ㻔㬚遧畾헍⹙雐羚⨁ᗩ堓툭ጃ㾋יⅤ㩩層ᗼ揣꘣㐌룋瀂商羹띀ꇶ䭌溩桳ꠈ줖伟핶⥦珅囧唵뮺㼑鍢嫥㗓뙼凳鼫俧拌᱓践 [ 699.515653][ T5935] usb 5-1: SerialNumber: syz [ 699.532940][ T5926] usb 3-1: USB disconnect, device number 18 [ 700.211090][ T24] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 700.371497][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 700.390209][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.400551][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 700.411231][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.441083][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.606454][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.665432][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.953579][T13385] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2000'. [ 700.976588][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 700.982507][ T24] usbtmc 1-1:16.0: can't read capabilities [ 701.251111][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.261792][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.272386][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.282815][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.293918][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.303025][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.312183][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.321250][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.330315][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.339376][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.348447][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.357641][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.372827][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.387744][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.399419][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.409930][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 701.516867][ T24] usb 1-1: USB disconnect, device number 120 [ 701.584796][T13392] FAULT_INJECTION: forcing a failure. [ 701.584796][T13392] name failslab, interval 1, probability 0, space 0, times 0 [ 701.770584][T13392] CPU: 0 UID: 0 PID: 13392 Comm: syz.2.2002 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 701.770617][T13392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 701.770630][T13392] Call Trace: [ 701.770640][T13392] [ 701.770650][T13392] dump_stack_lvl+0x189/0x250 [ 701.770682][T13392] ? __pfx____ratelimit+0x10/0x10 [ 701.770707][T13392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.770733][T13392] ? __pfx__printk+0x10/0x10 [ 701.770768][T13392] ? __pfx___might_resched+0x10/0x10 [ 701.770788][T13392] ? fs_reclaim_acquire+0x7d/0x100 [ 701.770826][T13392] should_fail_ex+0x414/0x560 [ 701.770854][T13392] should_failslab+0xa8/0x100 [ 701.770886][T13392] kmem_cache_alloc_noprof+0x73/0x3c0 [ 701.770914][T13392] ? skb_clone+0x212/0x3a0 [ 701.770952][T13392] skb_clone+0x212/0x3a0 [ 701.770980][T13392] ? nfnetlink_rcv+0x486/0x2520 [ 701.771004][T13392] nfnetlink_rcv+0x4b4/0x2520 [ 701.771029][T13392] ? __dev_queue_xmit+0x1d79/0x3b50 [ 701.771072][T13392] ? __dev_queue_xmit+0x27b/0x3b50 [ 701.771116][T13392] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 701.771155][T13392] ? ref_tracker_free+0x63a/0x7d0 [ 701.771180][T13392] ? __asan_memcpy+0x40/0x70 [ 701.771202][T13392] ? __pfx_ref_tracker_free+0x10/0x10 [ 701.771224][T13392] ? __skb_clone+0x63/0x7a0 [ 701.771258][T13392] ? __skb_clone+0x483/0x7a0 [ 701.771293][T13392] ? skb_clone+0x246/0x3a0 [ 701.771326][T13392] ? __netlink_deliver_tap+0x807/0x850 [ 701.771352][T13392] ? netlink_deliver_tap+0x2e/0x1b0 [ 701.771397][T13392] netlink_unicast+0x82c/0x9e0 [ 701.771429][T13392] ? __pfx_netlink_unicast+0x10/0x10 [ 701.771454][T13392] ? netlink_sendmsg+0x642/0xb30 [ 701.771479][T13392] ? skb_put+0x11b/0x210 [ 701.771517][T13392] netlink_sendmsg+0x805/0xb30 [ 701.771552][T13392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.771581][T13392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 701.771612][T13392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 701.771635][T13392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.771661][T13392] __sock_sendmsg+0x219/0x270 [ 701.771687][T13392] ____sys_sendmsg+0x505/0x830 [ 701.771724][T13392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.771764][T13392] ? import_iovec+0x74/0xa0 [ 701.771788][T13392] ___sys_sendmsg+0x21f/0x2a0 [ 701.771820][T13392] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.771889][T13392] ? __fget_files+0x2a/0x420 [ 701.771920][T13392] ? __fget_files+0x3a0/0x420 [ 701.771962][T13392] __x64_sys_sendmsg+0x19b/0x260 [ 701.771995][T13392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.772035][T13392] ? __pfx_ksys_write+0x10/0x10 [ 701.772060][T13392] ? rcu_is_watching+0x15/0xb0 [ 701.772087][T13392] ? do_syscall_64+0xbe/0x3b0 [ 701.772118][T13392] do_syscall_64+0xfa/0x3b0 [ 701.772141][T13392] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.772166][T13392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.772187][T13392] ? clear_bhb_loop+0x60/0xb0 [ 701.772213][T13392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.772234][T13392] RIP: 0033:0x7ff99e18eb69 [ 701.772254][T13392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.772273][T13392] RSP: 002b:00007ff99ef22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.772296][T13392] RAX: ffffffffffffffda RBX: 00007ff99e3b5fa0 RCX: 00007ff99e18eb69 [ 701.772312][T13392] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 701.772326][T13392] RBP: 00007ff99ef22090 R08: 0000000000000000 R09: 0000000000000000 [ 701.772339][T13392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.772352][T13392] R13: 0000000000000000 R14: 00007ff99e3b5fa0 R15: 00007ff99e4dfa28 [ 701.772385][T13392] [ 702.579307][T13396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.627649][ T5935] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 702.645132][T13396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.651514][ T5935] gspca_topro: reg_w err -71 [ 702.681049][ T5935] gspca_topro: Sensor soi763a [ 702.735764][T13396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.842933][T13396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.866943][ T5935] usb 5-1: USB disconnect, device number 97 [ 703.151079][ T5861] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 703.358222][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 703.367324][ T5861] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 703.386053][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.416449][ T5861] usb 3-1: config 0 descriptor?? [ 703.439325][ T5861] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 703.604853][ T5935] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 703.662336][ T5926] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 703.781206][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 703.788623][ T5935] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 703.831692][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 703.873746][ T5926] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 703.883244][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.894824][ T5926] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 703.894835][ T5935] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 703.894864][ T5935] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.904452][ T5926] usb 4-1: config 1 has no interface number 1 [ 703.956156][ T5950] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 703.970155][ T5926] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 703.990536][ T5926] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 703.999986][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.009469][ T5926] usb 4-1: Product: syz [ 704.017416][ T5926] usb 4-1: Manufacturer: syz [ 704.017451][ T5935] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 704.022227][ T5926] usb 4-1: SerialNumber: syz [ 704.045485][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.115744][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 704.144043][ T5950] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 704.165724][ T5950] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 704.180874][ T5950] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 704.206683][ T5950] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.220265][ T5950] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 704.229516][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.293839][ T5935] usb 5-1: usb_control_msg returned -71 [ 704.309662][ T5935] usbtmc 5-1:16.0: can't read capabilities [ 704.366317][ T5935] usb 5-1: USB disconnect, device number 98 [ 704.499952][ T5950] usb 1-1: GET_CAPABILITIES returned 0 [ 704.505803][ T5950] usbtmc 1-1:16.0: can't read capabilities [ 704.866704][ T5926] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 704.901311][ T5861] gspca_vc032x: reg_w err -110 [ 704.906294][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 704.911792][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 704.917730][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 704.930701][ T5926] usb 4-1: MIDIStreaming interface descriptor not found [ 704.980091][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.003509][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.033515][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.069828][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.122012][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.150499][ T5926] usb 4-1: USB disconnect, device number 115 [ 705.156757][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.176478][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.243600][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.296814][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.299435][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.358555][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.379590][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.419120][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.444616][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.462214][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.500513][ T5861] gspca_vc032x: I2c Bus Busy Wait 00 [ 705.534865][ T5861] gspca_vc032x: Unknown sensor... [ 705.585821][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 705.645322][ T5861] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 705.670336][T13427] loop6: detected capacity change from 0 to 1 [ 705.679104][T13427] Dev loop6: unable to read RDB block 1 [ 705.738536][T13427] loop6: unable to read partition table [ 705.746656][T13427] loop6: partition table beyond EOD, truncated [ 705.763799][T13427] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 705.871270][ T5935] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 705.893691][ T9] usb 3-1: USB disconnect, device number 19 [ 706.031347][ T5935] usb 4-1: device descriptor read/64, error -71 [ 706.290396][ T5935] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 706.417005][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.440510][ T5861] usb 1-1: USB disconnect, device number 121 [ 706.525646][ T5935] usb 4-1: device descriptor read/64, error -71 [ 706.555808][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.614644][T13437] netlink: 'syz.1.2016': attribute type 10 has an invalid length. [ 706.642041][ T5935] usb usb4-port1: attempt power cycle [ 706.648791][T13439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2017'. [ 706.658209][ T12] ------------[ cut here ]------------ [ 706.664159][ T12] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 706.675683][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.733474][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.895258][ T12] WARNING: CPU: 0 PID: 12 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 706.905594][ T12] Modules linked in: [ 706.909746][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 706.921479][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 706.931786][ T12] Workqueue: bond0 bond_mii_monitor [ 706.937013][ T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 706.943094][ T12] Code: 7c fe ff ff e8 1e 40 55 f8 c6 05 d6 ce 22 06 01 90 48 c7 c7 20 a3 94 8c 48 c7 c6 0b b5 9f 8d ba 48 00 00 00 e8 5e de 18 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 706.962927][ T12] RSP: 0018:ffffc90000117670 EFLAGS: 00010246 [ 706.969034][ T12] RAX: 11800757b35b5600 RBX: ffff888026a1a000 RCX: ffff88801ce9da00 [ 706.977115][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 706.985144][ T12] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 706.993173][ T12] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 1ffff11004d4345d [ 707.001203][ T12] R13: dffffc0000000000 R14: ffffffff8c1ce268 R15: 0000000000000000 [ 707.001469][ T5935] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 707.009543][ T12] FS: 0000000000000000(0000) GS:ffff888125c24000(0000) knlGS:0000000000000000 [ 707.009587][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.032942][ T12] CR2: 00007fc8c7199f98 CR3: 000000003018e000 CR4: 00000000003526f0 [ 707.041203][ T12] Call Trace: [ 707.044536][ T12] [ 707.047471][ T12] ? ethtool_op_get_link+0xd/0x70 [ 707.052567][ T12] ethtool_op_get_link+0x15/0x70 [ 707.057542][ T12] bond_check_dev_link+0x447/0x6c0 [ 707.062746][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 707.068423][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 707.072127][ T5935] usb 4-1: device descriptor read/8, error -71 [ 707.074941][ T12] bond_mii_monitor+0x428/0x2e00 [ 707.086106][ T12] ? __lock_acquire+0xab9/0xd20 [ 707.091020][ T12] ? bond_mii_monitor+0x153/0x2e00 [ 707.096169][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 707.101619][ T12] ? register_lock_class+0x51/0x320 [ 707.106856][ T12] ? __lock_acquire+0xab9/0xd20 [ 707.111823][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 707.117580][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.122889][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 707.128640][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 707.134445][ T12] process_scheduled_works+0xade/0x17b0 [ 707.140052][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.146437][ T12] worker_thread+0x8a0/0xda0 [ 707.151148][ T12] kthread+0x711/0x8a0 [ 707.155265][ T12] ? __pfx_worker_thread+0x10/0x10 [ 707.160406][ T12] ? __pfx_kthread+0x10/0x10 [ 707.165120][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.170362][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.175688][ T12] ? __pfx_kthread+0x10/0x10 [ 707.180319][ T12] ret_from_fork+0x3f9/0x770 [ 707.185015][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 707.190166][ T12] ? __switch_to_asm+0x39/0x70 [ 707.195136][ T12] ? __switch_to_asm+0x33/0x70 [ 707.199963][ T12] ? __pfx_kthread+0x10/0x10 [ 707.204666][ T12] ret_from_fork_asm+0x1a/0x30 [ 707.209491][ T12] [ 707.212599][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 707.219930][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 707.231615][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 707.241709][ T12] Workqueue: bond0 bond_mii_monitor [ 707.246949][ T12] Call Trace: [ 707.250270][ T12] [ 707.253226][ T12] dump_stack_lvl+0x99/0x250 [ 707.257851][ T12] ? __asan_memcpy+0x40/0x70 [ 707.262474][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.267701][ T12] ? __pfx__printk+0x10/0x10 [ 707.272347][ T12] vpanic+0x281/0x750 [ 707.276374][ T12] ? __pfx__printk+0x10/0x10 [ 707.281001][ T12] ? __pfx_vpanic+0x10/0x10 [ 707.285538][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 707.290871][ T12] panic+0xb9/0xc0 [ 707.294623][ T12] ? __pfx_panic+0x10/0x10 [ 707.299088][ T12] __warn+0x31b/0x4b0 [ 707.303098][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 707.308510][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 707.313917][ T12] report_bug+0x2be/0x4f0 [ 707.318282][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 707.323693][ T12] ? __linkwatch_sync_dev+0x303/0x350 [ 707.329107][ T12] ? __linkwatch_sync_dev+0x305/0x350 [ 707.334512][ T12] handle_bug+0x84/0x160 [ 707.338793][ T12] exc_invalid_op+0x1a/0x50 [ 707.343346][ T12] asm_exc_invalid_op+0x1a/0x20 [ 707.348220][ T12] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 707.354241][ T12] Code: 7c fe ff ff e8 1e 40 55 f8 c6 05 d6 ce 22 06 01 90 48 c7 c7 20 a3 94 8c 48 c7 c6 0b b5 9f 8d ba 48 00 00 00 e8 5e de 18 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 707.373877][ T12] RSP: 0018:ffffc90000117670 EFLAGS: 00010246 [ 707.379982][ T12] RAX: 11800757b35b5600 RBX: ffff888026a1a000 RCX: ffff88801ce9da00 [ 707.387979][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 707.395980][ T12] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 707.403976][ T12] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 1ffff11004d4345d [ 707.411975][ T12] R13: dffffc0000000000 R14: ffffffff8c1ce268 R15: 0000000000000000 [ 707.420006][ T12] ? ethtool_op_get_link+0xd/0x70 [ 707.425088][ T12] ethtool_op_get_link+0x15/0x70 [ 707.430075][ T12] bond_check_dev_link+0x447/0x6c0 [ 707.435224][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 707.440899][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 707.447357][ T12] bond_mii_monitor+0x428/0x2e00 [ 707.452333][ T12] ? __lock_acquire+0xab9/0xd20 [ 707.457265][ T12] ? bond_mii_monitor+0x153/0x2e00 [ 707.462428][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 707.467828][ T12] ? register_lock_class+0x51/0x320 [ 707.473071][ T12] ? __lock_acquire+0xab9/0xd20 [ 707.477983][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 707.483737][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.488982][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 707.494730][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 707.500479][ T12] process_scheduled_works+0xade/0x17b0 [ 707.506085][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.512127][ T12] worker_thread+0x8a0/0xda0 [ 707.516777][ T12] kthread+0x711/0x8a0 [ 707.520880][ T12] ? __pfx_worker_thread+0x10/0x10 [ 707.526021][ T12] ? __pfx_kthread+0x10/0x10 [ 707.530647][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.535872][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.541098][ T12] ? __pfx_kthread+0x10/0x10 [ 707.545720][ T12] ret_from_fork+0x3f9/0x770 [ 707.550337][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 707.555479][ T12] ? __switch_to_asm+0x39/0x70 [ 707.560276][ T12] ? __switch_to_asm+0x33/0x70 [ 707.565067][ T12] ? __pfx_kthread+0x10/0x10 [ 707.569689][ T12] ret_from_fork_asm+0x1a/0x30 [ 707.574502][ T12] [ 707.577817][ T12] Kernel Offset: disabled [ 707.582142][ T12] Rebooting in 86400 seconds..