last executing test programs: 10.164434162s ago: executing program 2 (id=1769): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000100)) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2384, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000380)="0f01c366b9850b000066b86d00000066ba000000000f30650f20a40f1a5300f36c8bffbaa000ec6766c74424004d3a9fa96766c7442402418b424b6766c744240600000000670f011c2466b90b0a000066b8ac4e5c3066ba93c586230f30d1da", 0x60}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) sendmsg$nl_route(r0, 0x0, 0xa041) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x20000094) r9 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x808088, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,'], 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x18000, 0xcd) statx(r9, &(0x7f00000001c0)='./file0/file0\x00', 0x4000, 0x1, &(0x7f0000000540)) 8.537752493s ago: executing program 0 (id=1772): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) close(0x3) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x36586f1a57007436) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000240)) (async, rerun: 64) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x88c20, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0x5, 0x7, {0x53, 0x7ff, 0x8, {0x9, 0x3b81}, {0x6, 0x3b9}, @ramp={0x7, 0x2, {0x2, 0x8, 0x5, 0x65fd}}}, {0x55, 0x0, 0x8430, {0x81, 0x5}, {0x4, 0x3}, @cond=[{0x0, 0xe, 0xfff7, 0x9, 0x2, 0xdecf}, {0x1ff, 0x7, 0x8, 0x200, 0x8, 0x3}]}}) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x4}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000040)={0x1b, 0x5, 0x2, 0x4000}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010070000904000001020d0000052406000105240000000d240f01fdfffffffdff08000006241a000010090581034000000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x9, 0x4, 0x7, 0x8, 0xf0, 0x6, 0x47, 0xf85, 0x4ca7, 0xc, 0x6de, 0xfffc}}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8.383408785s ago: executing program 1 (id=1773): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8c]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8000}]}}}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4044000}, 0x48004) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 6.201423015s ago: executing program 2 (id=1782): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000480)={0x40, 0x10, 0x90, {0x90, 0xd, "c6bbe44717ea14be303525dfdb38e11a0df7a55b704b9ffd061d9293e1e4d1ba65c2ba8c0b9e404a435603a177a029ed229c223f1b8ffc6f329f30b647af4c2dd3b46e18a4527674106242c4b20b560ec13b53955ccb7adbebd84e849456c584fadee7c5cf2ced9bee957d219e941d002ac9259115d5b9aff9ade730c00494049c1f5fcd21af66d7a1c1ce61174c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.200500561s ago: executing program 0 (id=1783): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}, @hci_ev_le_ext_adv_report}}, 0x5) 5.579471655s ago: executing program 0 (id=1784): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@userptr={0x7, 0x8, 0x4, 0xa9d1393a489c0899, 0x401, {}, {0x2, 0x1, 0x6, 0x8, 0xfa, 0x10, "657be439"}, 0x80000001, 0x2, {0x0}, 0x80}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x2a378088b3ea073e, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x19, 0x1, 0x7, 0x1, 0x1, 0x92, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5, 0x5, 0x80}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xf, 0xb5, 0x5, 0x18, 0x1}, 0x10b, &(0x7f00000002c0)={0x5, 0xf, 0x10b, 0x6, [@generic={0x4b, 0x10, 0x1, "b8c737264d1b2696fb73cff5692b985a7c9ee0158a20427dd687c1f20dd97b5ddf6552d4225ad864507f54c67b1d2a7d20f3f225af36b4992730383e3a2d426c6df61de7b520e005"}, @ssp_cap={0x18, 0x10, 0xa, 0x23, 0x3, 0x3ff, 0xf000, 0xe, [0xff0000, 0x3fc0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x0, 0x8, 0x4, 0xe5}, @ssp_cap={0x18, 0x10, 0xa, 0x12, 0x3, 0xbe9, 0xf000, 0xd4, [0xf0, 0xc000, 0xff00c0]}, @ptm_cap={0x3}, @generic={0x7d, 0x10, 0x1, "31f50ef030f765ed9432fb39d9de377d61c34af81aa80badfc76e3d8685dbfaec96dcc39c84a3c32cdc5f126e754a600e00080409438341021a44b769a691dc5a60809b84a9395f29b83fea9c0da9ec8da12b8c63ae057ffc6243dbb8d2e90d5718529b8edbe1af7e120f9cdf64e7fec2a7547fd3ad1d1373b8b"}]}, 0x9, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0x68, &(0x7f0000000480)=ANY=[@ANYBLOB="68039b0d638abed45e1397f8c015386e7415325e839215a78885925b7f4a44ca8dd9376ec72177dae8b525d00d8062a4c226ba744f30b38464a0cbdf1cfd7a6d08ea27e4c9c55b2a51ac69c15cee4b00"/91]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x409}}, {0xf0, &(0x7f0000000580)=@string={0xf0, 0x3, "663c300b793a6fafb2299d0728387a9e80c473e7e14f3fa8a0147e4f5d726cfff0c1d7388d6bbd95de2dcfd6ad30f17510c1c3b8593948830e602bd11af5b13ac60c2124f822fc68e6cc8338de16b716ded9ddfbb2ad7e449af6fe2c0778ff5b82fdd9f1a8e3d0dbb483828afe0c98da72c280c37ef23ad8c0041c9b9a13c171bbcc303afcd09608ba442c279406f9c4e27ef5e46874d4bf46a9702fbd622225dd685d73058082f45cc6c3b35a7c8f88f14e76a8a2589ecc79b0fd5ca9659737f5ef3d3fcc95661eb6fe07b08f3124e1b00e254ed4393653d2f4217c9185db3e3206ab2df6b16cea3c56d7be87b2"}}, {0x18, &(0x7f0000000680)=@string={0x18, 0x3, "e6df4e90e469df6ab9c4bc1a17b5c5c682a27d0075d7"}}, {0x2f, &(0x7f00000006c0)=@string={0x2f, 0x3, "2845cde719dfc1b02a438dba46ab154511d73497704192ac6c11a38c41b9140be845840ae6e081b2faf9283de1"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x420}}]}) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406441, &(0x7f0000000280)={0x34, 0xfffffffe, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r4, r4, 0x0, 0xffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) write$UHID_INPUT(r8, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x2c00}, [@RTA_IIF={0x8, 0x3, r10}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x2c}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x19, 0x9, "1f1c524f", "e81cfd1a"}}, 0x0}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f0000000800)={0x0, 0xb3, 0x1, 0x0, 0xf, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000018c0)=ANY=[@ANYBLOB="4c000000200022082abd7000ffdbdf250a1420280b00000748390acf1ae95fbdbf5d392abe3e818a080000001400020000000000000000000000ffffac141443080010000900000014000100fe80000000000000000000000000001b"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000040) 5.209854335s ago: executing program 1 (id=1786): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x800200, 0x0, 0x50323234, 0x7, 0xfffffffd, 0x0, 0x3}}) (fail_nth: 1) 4.933687619s ago: executing program 1 (id=1787): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x3ff, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) 4.79501048s ago: executing program 1 (id=1788): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008340)={0x2020}, 0x2020) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000b40)="b2", 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) creat(0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='status\x00') preadv(r2, 0x0, 0x0, 0x6, 0x82e2) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40810) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x5) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) listen(0xffffffffffffffff, 0x0) 4.759422763s ago: executing program 4 (id=1789): socket$qrtr(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x2b, 0x80801, 0x1) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xa) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) epoll_create1(0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$igmp(0x2, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 4.64183034s ago: executing program 4 (id=1790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003000000000000000000000000000000a20000000000a010000010900010073797a310000000040000000030a0101000010000000000001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0x7, 0x21}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x374}}, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000305000400000000000900020073797a310000000014000780050015000300000008001240000000000500050002000000050001000640000016000300686173683a6e65742c706f72742c6e65740000"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044804}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000080)='d', 0x2}]) 4.179165565s ago: executing program 2 (id=1791): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x6, 0x5, "4ba5acb5df00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80147, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x6, 0x0, 0xfffffffffffffffe, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = dup(0xffffffffffffffff) read$FUSE(r4, &(0x7f0000004400)={0x2020}, 0x2020) 3.647272368s ago: executing program 4 (id=1792): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000480)={0x20, 0x3, 0x27, {0x27, 0xd, "92d5930b770606050bf7780bd6ac362bca39fe20c7a200"/37}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x35, "868c3eae75f5dbac8098e1e5abf740e5f9235c53a90146180c11042aad3fa99d0c9a2df4744abb71589c7c13e935a35c4c457616c6"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x2, 0x4, 0x7, 0x2, 0x7, 0x0, 0x2, 0x6, 0xcf56, 0x3, 0xfffe, 0x8}}, &(0x7f00000001c0)={0x20, 0x85, 0x4, 0xdb200000}, &(0x7f0000000200)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000240)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000000280)={0x20, 0x89, 0x2}}) (async, rerun: 32) syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000980)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0}) 3.631615008s ago: executing program 1 (id=1793): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010102}}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) 3.079695804s ago: executing program 0 (id=1794): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x7}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (fail_nth: 5) 2.872926263s ago: executing program 0 (id=1795): unshare(0x20000400) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x8b15, &(0x7f0000000080)) 2.810968285s ago: executing program 1 (id=1796): timer_create(0x2, 0x0, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) timer_gettime(r0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x2c9ab000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="18030000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="2d00f4dd94270047956490a40f41aec46f0aafd1001e546e0041fc0f9bf738dc711faa99a72943018c8ef78cda0864fffba9dcce0507ac1d5dd8ce6cfe2afb82", @ANYRESHEX=r4], 0x318}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="600200007d040000051f01fcfffaffffff020000000000000000000000000000ac1b000000000000000000000000000000004400046e6fc866c97d609906000b00000000009000001df6db000000003dd300000000000000007f0ac95c6af906b6efb15b6ea98be3bbcd82b2c79d889c0be807957c9800318f00704a86cec602007dfa673effaebefadd7e6ceb09b5351f5bde054000000000187be4fce2b716e2348200b500003b595fcb14034300000000000000081700cfc200100000000c000000000f580502b66e00f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f5160500000000000000c267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/596, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=r0], 0x260) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) msgget$private(0x0, 0x2) mmap(&(0x7f00009c2000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') 2.790980845s ago: executing program 0 (id=1797): socket(0x18, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.497319351s ago: executing program 2 (id=1798): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x3ff, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) 2.168435273s ago: executing program 2 (id=1800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCSETSW2(r3, 0x5434, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, &(0x7f0000000140)=""/58, 0x3a, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x38, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r7 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x40) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000180)={0x8, 0x2826, 0x8, 0x36, 0x9, 0x6, "78b51b44f5bd13ae4f54180fdbf478b0", 0x0, 0xfc, 0x5, 0x41, 0x3, 0xfd, 0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xe) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x2200077d) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000007, 0x4000010, r8, 0x8000000) 1.311637082s ago: executing program 4 (id=1802): io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)='d', 0x2}]) 1.120803029s ago: executing program 3 (id=1803): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)}], 0x1}}], 0x1, 0x11) r2 = socket$kcm(0x1e, 0x1, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0xf5) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x90000000) 1.11071959s ago: executing program 4 (id=1804): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001200), 0x80400) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0x1}]) r6 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) dup3(r4, r2, 0x80000) listen(r1, 0x101) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000e5c000)={0x2, 0x4e1e, @dev}, 0x10) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40805) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000001240)={0x0, 0x1, 0xff, 0x3, 0x3}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x2}, 0xc) creat(&(0x7f0000000040)='./file0\x00', 0x4) getpid() 945.91157ms ago: executing program 3 (id=1805): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x101, 0x9c, &(0x7f0000000240)=""/156, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x67b, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 794.323984ms ago: executing program 3 (id=1806): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000280)=@e={0xff, 0xc, 0x6, 0xc, @SEQ_CONTROLLER=0xff, 0x7e, 0x4, 0x10}) 760.87075ms ago: executing program 3 (id=1807): unshare(0x20000400) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x8b15, 0x0) 689.681237ms ago: executing program 3 (id=1808): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 534.783671ms ago: executing program 3 (id=1809): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2f7}, &(0x7f0000000000), &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 504.360922ms ago: executing program 2 (id=1810): syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x5c, 0x90, 0xae, 0x40, 0xb95, 0x2790, 0xa9a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb6, 0x3, 0x90, 0x2, [{{0x9, 0x4, 0x84, 0x1e, 0x0, 0xff, 0x2e, 0xc4}}]}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xc8, &(0x7f0000000880)=@string={0xc8, 0x3, "e61232acdd11a023f144ee2c5268c8c443e3352496ae1ad1d5b0ad80c5d23a8ba8ebb0deb537e06c55b191ab02cd472e92cbb8ddb9fa706daeed16c172c9f5bfef8f2cfc38e775485f449f2b2e0d83b59265a301c42a1d62fa0419910757f9495cdd3435ae05907ac1f338b8a5a0ad93a83c363815141188162fbe1d3988969344370365f46a5a9cb3d97ecf829ef9538e8a3fb912bfb3659727938281b0d7a5f43caa75e08d874f04a2a84c1e7533fa604fd22e0cebb26ea6fb928dab1e844f74a551b96553"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x414}}, {0xfe, &(0x7f00000009c0)=@string={0xfe, 0x3, "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"}}]}) 0s ago: executing program 4 (id=1811): socket(0x1e, 0x2, 0xfffffffc) r0 = socket$inet6(0xa, 0x1, 0x100) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x7398, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x11, &(0x7f0000000100)={0x4, &(0x7f00000002c0)=[{0x7ff, 0x1, 0xd, 0x6}, {0x4b, 0x2, 0x7, 0x645}, {0xfff7, 0xba, 0x5, 0x5}, {0xe56, 0x4, 0xda, 0x400}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000100)={0x50, 0x0, r10}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r9, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): 0003 [ 503.865805][T11317] RBP: 00007f3cb2770090 R08: 0000000000000000 R09: 0000000000000000 [ 503.865816][T11317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.865826][T11317] R13: 0000000000000000 R14: 00007f3cb1ba5fa0 R15: 00007f3cb1ccfa28 [ 503.865855][T11317] [ 503.933175][ T5883] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 503.959769][T11317] : renamed from bond0 (while UP) [ 504.056379][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 504.503584][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.523212][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 504.523382][ T5882] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 504.537568][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.539455][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.558269][ T5882] usb 2-1: config 0 descriptor?? [ 504.569951][ T5882] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 504.586294][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.596298][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 504.607784][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.656976][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 504.664029][ T5883] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 504.664105][ T9] usb 5-1: config 0 descriptor?? [ 504.681366][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.704870][ T5883] usb 4-1: config 0 descriptor?? [ 504.868113][T11327] FAULT_INJECTION: forcing a failure. [ 504.868113][T11327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.885585][T11327] CPU: 0 UID: 0 PID: 11327 Comm: syz.2.1585 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 504.885612][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 504.885623][T11327] Call Trace: [ 504.885631][T11327] [ 504.885639][T11327] dump_stack_lvl+0x241/0x360 [ 504.885670][T11327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.885693][T11327] ? __pfx__printk+0x10/0x10 [ 504.885728][T11327] should_fail_ex+0x424/0x570 [ 504.885751][T11327] _copy_to_user+0x31/0xb0 [ 504.885777][T11327] simple_read_from_buffer+0xc4/0x170 [ 504.885805][T11327] proc_fail_nth_read+0x1ef/0x260 [ 504.885827][T11327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.885848][T11327] ? rw_verify_area+0x246/0x630 [ 504.885866][T11327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.885885][T11327] vfs_read+0x21f/0xb90 [ 504.885909][T11327] ? __pfx___mutex_lock+0x10/0x10 [ 504.885929][T11327] ? __pfx_vfs_read+0x10/0x10 [ 504.885958][T11327] ? __fget_files+0x2a/0x420 [ 504.885976][T11327] ? __fget_files+0x39d/0x420 [ 504.885990][T11327] ? __fget_files+0x2a/0x420 [ 504.886015][T11327] ksys_read+0x19d/0x2d0 [ 504.886036][T11327] ? __pfx_ksys_read+0x10/0x10 [ 504.886061][T11327] ? do_syscall_64+0xb6/0x230 [ 504.886082][T11327] do_syscall_64+0xf3/0x230 [ 504.886100][T11327] ? clear_bhb_loop+0x45/0xa0 [ 504.886120][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.886137][T11327] RIP: 0033:0x7fe9fc38bb7c [ 504.886153][T11327] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 504.886167][T11327] RSP: 002b:00007fe9fd132030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.886184][T11327] RAX: ffffffffffffffda RBX: 00007fe9fc5a5fa0 RCX: 00007fe9fc38bb7c [ 504.886196][T11327] RDX: 000000000000000f RSI: 00007fe9fd1320a0 RDI: 0000000000000004 [ 504.886205][T11327] RBP: 00007fe9fd132090 R08: 0000000000000000 R09: 0000000000000000 [ 504.886215][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.886224][T11327] R13: 0000000000000000 R14: 00007fe9fc5a5fa0 R15: 00007fe9fc6cfa28 [ 504.886251][T11327] [ 505.116798][ T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 505.125730][ T55] Bluetooth: hci2: Injecting HCI hardware error event [ 505.135035][ T55] Bluetooth: hci2: hardware error 0x00 [ 505.197469][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 505.205265][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 505.235483][ T9] usb 5-1: USB disconnect, device number 105 [ 506.114226][ T5882] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 506.273059][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 506.280042][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 506.289097][ T5882] usb 5-1: config 5 has an invalid interface number: 215 but max is 0 [ 506.297430][ T5882] usb 5-1: config 5 has no interface number 0 [ 506.303788][ T5882] usb 5-1: config 5 interface 215 has no altsetting 0 [ 506.313318][ T5882] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 506.322647][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.331006][ T5882] usb 5-1: Product: syz [ 506.335479][ T5882] usb 5-1: Manufacturer: syz [ 506.340112][ T5882] usb 5-1: SerialNumber: syz [ 506.533052][ T10] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 506.584895][ T5882] cypress_m8 5-1:5.215: DeLorme Earthmate USB converter detected [ 506.623362][ T3611] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 506.643555][ T5882] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 506.651839][ T9] usb 2-1: USB disconnect, device number 114 [ 506.680398][ T5882] usb 5-1: USB disconnect, device number 106 [ 506.693421][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 506.712694][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.719452][ T5882] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 506.739621][ T5882] cypress_m8 5-1:5.215: device disconnected [ 506.771885][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.787203][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 506.798452][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.815726][ T10] usb 3-1: config 0 descriptor?? [ 506.833293][ T3611] usb 1-1: Using ep0 maxpacket: 16 [ 506.903165][ T3611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.914427][ T3611] usb 1-1: config 0 has no interfaces? [ 506.927520][ T3611] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 506.957611][ T3611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.985850][ T3611] usb 1-1: config 0 descriptor?? [ 507.213191][ T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 507.358054][T11351] dccp_invalid_packet: P.Data Offset(64) too large [ 507.420628][T11357] fuse: Bad value for 'fd' [ 507.873184][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 507.896682][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 507.915349][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 507.956139][ T5883] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 507.988211][T11355] hsr0: left promiscuous mode [ 507.996220][ T5883] asix 4-1:0.0: probe with driver asix failed with error -71 [ 508.013271][ T10] usb 3-1: USB disconnect, device number 106 [ 508.037997][ T5883] usb 4-1: USB disconnect, device number 115 [ 508.083054][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 508.156438][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 508.195182][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.232418][ T9] usb 5-1: config 0 descriptor?? [ 508.269395][ T9] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 508.281111][ T9] pwc: Warning: more than 1 configuration available. [ 508.614060][ T5888] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 508.799498][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 508.807798][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.822763][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.833339][ T5888] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 508.842533][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.864856][ T5888] usb 4-1: config 0 descriptor?? [ 509.097735][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 509.106841][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 509.146275][ T5888] usb 4-1: USB disconnect, device number 116 [ 509.308546][ T9] pwc: send_video_command error -71 [ 509.317659][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 509.367214][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 509.398545][ T9] usb 5-1: USB disconnect, device number 107 [ 509.439030][ T5888] usb 1-1: USB disconnect, device number 89 [ 509.623497][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 509.785357][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.797595][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.807464][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.820493][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.829667][ T120] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 509.838345][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.853974][ T10] usb 3-1: config 0 descriptor?? [ 509.903222][ T5888] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 509.923045][ T5903] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 510.003022][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 510.010335][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.021309][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.031137][ T120] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 510.040259][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.051410][ T120] usb 2-1: config 0 descriptor?? [ 510.074149][ T5888] usb 1-1: not running at top speed; connect to a high speed hub [ 510.082800][ T5888] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 510.091213][ T5888] usb 1-1: config 95 has no interface number 0 [ 510.097558][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 510.102852][ T5888] usb 1-1: config 95 interface 1 has no altsetting 0 [ 510.113985][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.125396][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.135309][ T5903] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 510.144757][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.153395][ T5888] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 510.162479][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.171850][ T5888] usb 1-1: Product: syz [ 510.178302][ T5903] usb 5-1: config 0 descriptor?? [ 510.187973][ T5888] usb 1-1: Manufacturer: syz [ 510.192625][ T5888] usb 1-1: SerialNumber: syz [ 510.267610][ T10] plantronics 0003:047F:FFFF.0023: item fetching failed at offset 13/15 [ 510.276693][ T10] plantronics 0003:047F:FFFF.0023: parse failed [ 510.283199][ T10] plantronics 0003:047F:FFFF.0023: probe with driver plantronics failed with error -22 [ 510.469940][ T120] usbhid 2-1:0.0: can't add hid device: -71 [ 510.477014][ T120] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 510.489682][ T120] usb 2-1: USB disconnect, device number 115 [ 510.505360][ T10] usb 3-1: USB disconnect, device number 107 [ 510.814537][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 510.823230][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 510.830952][ T55] Bluetooth: hci4: hardware error 0x00 [ 510.836918][ T5883] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 510.993116][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 511.015016][ T5883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 511.034185][ T5883] usb 4-1: config 128 has an invalid interface number: 53 but max is 1 [ 511.042494][ T5883] usb 4-1: config 128 has an invalid interface number: 50 but max is 1 [ 511.055840][ T5883] usb 4-1: config 128 has no interface number 0 [ 511.063110][ T5883] usb 4-1: config 128 has no interface number 1 [ 511.069558][ T5883] usb 4-1: config 128 interface 50 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 511.080868][ T5883] usb 4-1: config 128 interface 50 altsetting 3 endpoint 0xE has an invalid bInterval 133, changing to 11 [ 511.111641][ T5883] usb 4-1: config 128 interface 50 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 511.134112][ T5883] usb 4-1: config 128 interface 50 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 511.156154][ T5903] usbhid 5-1:0.0: can't add hid device: -71 [ 511.157780][ T5883] usb 4-1: config 128 interface 53 has no altsetting 0 [ 511.180263][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 511.198825][ T5883] usb 4-1: config 128 interface 50 has no altsetting 0 [ 511.273123][ T5903] usb 5-1: USB disconnect, device number 108 [ 511.274743][ T5883] usb 4-1: New USB device found, idVendor=2304, idProduct=0242, bcdDevice=5c.71 [ 511.297595][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.323151][ T5883] usb 4-1: Product: syz [ 511.339025][ T5883] usb 4-1: Manufacturer: syz [ 511.356090][ T5883] usb 4-1: SerialNumber: syz [ 511.591600][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.603480][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.793251][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 511.842805][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.905441][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.999030][T11399] program syz.3.1609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.059519][ T5888] usb 1-1: USB disconnect, device number 90 [ 512.089148][ T5883] hub 4-1:128.50: Invalid hub with more than one config or interface [ 512.113319][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 512.153102][ T5883] hub 4-1:128.50: probe with driver hub failed with error -22 [ 512.157642][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 512.185872][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.206851][ T5883] usb 4-1: USB disconnect, device number 117 [ 512.284854][ T10] usb 3-1: config 0 descriptor?? [ 512.323338][ T10] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 512.357287][ T10] pwc: Warning: more than 1 configuration available. [ 512.509291][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.636356][T11417] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1615'. [ 512.660791][ T5903] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 512.723453][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 512.833248][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 512.842728][ T5903] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 512.862383][ T5903] usb 5-1: config 179 has no interface number 0 [ 512.878035][ T5903] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 512.893463][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 512.903776][ T5903] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 512.935657][ T5903] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 512.988136][ T5903] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 513.009993][ T5903] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 513.020419][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.039466][T11415] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 513.126765][ T30] audit: type=1326 audit(1743717082.223:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b3f8d169 code=0x7ffc0000 [ 513.150739][ T30] audit: type=1326 audit(1743717082.223:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b3f8d169 code=0x7ffc0000 [ 513.203748][ T30] audit: type=1326 audit(1743717082.253:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff6b3f8d169 code=0x7ffc0000 [ 513.248189][ T5882] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 513.268792][ T5903] usb 5-1: USB disconnect, device number 109 [ 513.274940][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 513.274972][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 513.294374][ T30] audit: type=1326 audit(1743717082.253:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b3f8d169 code=0x7ffc0000 [ 513.319206][ T30] audit: type=1326 audit(1743717082.253:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b3f8d169 code=0x7ffc0000 [ 513.380491][ T10] pwc: send_video_command error -71 [ 513.390665][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 513.401644][ T30] audit: type=1326 audit(1743717082.273:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff6b3f8d169 code=0x7ffc0000 [ 513.417854][ T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 513.427801][ T5882] usb 2-1: device descriptor read/64, error -71 [ 513.498506][ T30] audit: type=1326 audit(1743717082.273:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6b3f29359 code=0x7ffc0000 [ 513.532493][ T10] usb 3-1: USB disconnect, device number 108 [ 513.542379][ T30] audit: type=1326 audit(1743717082.273:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b3f8d169 code=0x7ffc0000 [ 513.578075][ T30] audit: type=1326 audit(1743717082.273:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b3f8d169 code=0x7ffc0000 [ 513.602281][ T30] audit: type=1326 audit(1743717082.273:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6b3f29359 code=0x7ffc0000 [ 513.703066][ T5888] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 513.703254][ T5882] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 513.853367][ T5882] usb 2-1: device descriptor read/64, error -71 [ 513.963302][ T5882] usb usb2-port1: attempt power cycle [ 514.003115][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 514.113305][ T5888] usb 4-1: device descriptor read/64, error -71 [ 514.169736][ T10] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 514.187360][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.201768][ T10] usb 3-1: Product: syz [ 514.203156][ T5883] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 514.219970][ T10] usb 3-1: Manufacturer: syz [ 514.229552][ T10] usb 3-1: SerialNumber: syz [ 514.245401][ T10] usb 3-1: config 0 descriptor?? [ 514.258856][ T10] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 514.266927][ T10] usb 3-1: bad CDC descriptors [ 514.291184][ T10] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 514.310548][ T5882] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 514.343374][ T5883] usb 5-1: device descriptor read/64, error -71 [ 514.351305][ T5882] usb 2-1: device descriptor read/8, error -71 [ 514.363041][ T5888] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 514.496203][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 514.533514][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 514.561094][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.593208][ T5883] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 514.618800][ T5882] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 514.626817][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.636811][ T5888] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 514.646366][ T5882] usb 2-1: device descriptor read/8, error -71 [ 514.652653][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.693677][ T5888] usb 4-1: config 0 descriptor?? [ 514.699915][ T3611] usb 3-1: USB disconnect, device number 109 [ 514.755547][ T5883] usb 5-1: device descriptor read/64, error -71 [ 514.768204][ T5882] usb usb2-port1: unable to enumerate USB device [ 514.883450][ T5883] usb usb5-port1: attempt power cycle [ 515.223339][ T5883] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 515.243673][ T5883] usb 5-1: device descriptor read/8, error -71 [ 515.483126][ T5883] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 515.515599][ T5883] usb 5-1: device descriptor read/8, error -71 [ 515.633536][ T5883] usb usb5-port1: unable to enumerate USB device [ 515.702567][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 515.711013][ T10] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 515.734043][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 515.758044][ T5888] usb 4-1: USB disconnect, device number 119 [ 515.973088][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 516.001440][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.012496][ T10] usb 3-1: config 0 has no interfaces? [ 516.022394][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 516.031944][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.061075][ T10] usb 3-1: config 0 descriptor?? [ 516.369852][ T5888] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 516.499114][T11448] dccp_invalid_packet: P.Data Offset(64) too large [ 516.557533][T11463] fuse: Bad value for 'fd' [ 516.586655][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 516.640699][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.651103][ T5888] usb 4-1: config 0 has no interfaces? [ 516.662371][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 516.683116][ T5883] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 516.714231][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.744816][ T5888] usb 4-1: config 0 descriptor?? [ 516.844669][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 517.093548][ T5888] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 517.119897][T11470] fuse: Bad value for 'fd' [ 517.188465][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.199045][ T5883] usb 2-1: config 0 has no interfaces? [ 517.207918][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 517.218785][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.247209][ T5883] usb 2-1: config 0 descriptor?? [ 517.289549][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 517.308915][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 517.321942][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.339037][ T5888] usb 1-1: config 0 descriptor?? [ 517.343278][ T3611] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 517.360564][ T5888] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 517.369731][ T5888] pwc: Warning: more than 1 configuration available. [ 517.594772][ T3611] usb 5-1: config 0 has an invalid interface number: 129 but max is 0 [ 517.603328][ T3611] usb 5-1: config 0 has no interface number 0 [ 517.618497][T11464] dccp_invalid_packet: P.Data Offset(64) too large [ 517.626317][T11464] fuse: Bad value for 'fd' [ 517.653182][ T3611] usb 5-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 517.702786][ T3611] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 517.727959][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.755658][ T3611] usb 5-1: Product: syz [ 517.761414][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 517.786061][ T3611] usb 5-1: Manufacturer: syz [ 517.892803][ T3611] usb 5-1: SerialNumber: syz [ 517.921997][ T3611] r8152-cfgselector 5-1: Unknown version 0x0000 [ 517.929028][ T3611] r8152-cfgselector 5-1: config 0 descriptor?? [ 517.938181][T11468] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 517.948557][ T3611] r8152 5-1:0.129: Expected endpoints are not found [ 518.239081][T11468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.255125][T11468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.309916][ T5888] pwc: send_video_command error -71 [ 518.315290][ T5888] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 518.377396][ T5888] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 518.426425][ T5888] usb 1-1: USB disconnect, device number 91 [ 518.484823][ T3611] r8152-cfgselector 5-1: USB disconnect, device number 114 [ 518.665837][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 519.013116][ T5888] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 519.049881][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 519.183290][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 519.190303][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 519.213636][ T5888] usb 1-1: config 128 has an invalid interface number: 53 but max is 1 [ 519.222147][ T5888] usb 1-1: config 128 has an invalid interface number: 50 but max is 1 [ 519.238941][ T5888] usb 1-1: config 128 has no interface number 0 [ 519.251080][ T5888] usb 1-1: config 128 has no interface number 1 [ 519.262842][ T5888] usb 1-1: config 128 interface 50 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 519.280437][ T5888] usb 1-1: config 128 interface 50 altsetting 3 endpoint 0xE has an invalid bInterval 133, changing to 11 [ 519.294264][ T5888] usb 1-1: config 128 interface 50 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 519.307433][ T5888] usb 1-1: config 128 interface 50 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 519.318700][ T5888] usb 1-1: config 128 interface 53 has no altsetting 0 [ 519.327151][ T5888] usb 1-1: config 128 interface 50 has no altsetting 0 [ 519.327641][ T3611] usb 3-1: USB disconnect, device number 110 [ 519.337279][ T5888] usb 1-1: New USB device found, idVendor=2304, idProduct=0242, bcdDevice=5c.71 [ 519.353022][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 519.366895][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.392094][ T5888] usb 1-1: Product: syz [ 519.416633][ T5888] usb 1-1: Manufacturer: syz [ 519.426850][ T5888] usb 1-1: SerialNumber: syz [ 519.523097][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 519.538524][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.555756][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.571908][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 519.591791][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.620453][ T10] usb 5-1: config 0 descriptor?? [ 519.646379][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.677383][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.730789][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.763316][T11484] xt_ipcomp: unknown flags 12 [ 519.815073][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.841020][T11477] program syz.0.1634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.858283][ T120] usb 4-1: USB disconnect, device number 120 [ 519.982250][ T5888] hub 1-1:128.50: Invalid hub with more than one config or interface [ 520.010893][ T5888] hub 1-1:128.50: probe with driver hub failed with error -22 [ 520.045531][ T5888] usb 1-1: USB disconnect, device number 92 [ 520.092185][ T3611] usb 2-1: USB disconnect, device number 120 [ 520.563116][ T3611] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 520.648801][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 520.653239][ T5883] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 520.657765][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 520.695686][ T10] usb 5-1: USB disconnect, device number 115 [ 520.725641][ T3611] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.756028][ T3611] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.816146][ T5883] usb 4-1: no configurations [ 520.853986][ T3611] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.873017][ T5883] usb 4-1: can't read configurations, error -22 [ 520.881378][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.910391][ T5882] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 520.929788][ T3611] usb 2-1: SerialNumber: syz [ 521.053178][ T5883] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 521.093113][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 521.173277][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 521.203850][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.247392][ T5883] usb 4-1: no configurations [ 521.258431][ T3611] usb 2-1: 0:2 : does not exist [ 521.277431][ T5883] usb 4-1: can't read configurations, error -22 [ 521.301661][ T5882] usb 1-1: config 0 descriptor?? [ 521.321337][T11501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.337837][ T3611] usb 2-1: unit 5 not found! [ 521.358465][ T5883] usb usb4-port1: attempt power cycle [ 521.375923][ T5882] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 521.393160][ T10] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 521.412906][ T3611] usb 2-1: USB disconnect, device number 121 [ 521.421684][ T5882] pwc: Warning: more than 1 configuration available. [ 521.592083][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 521.618747][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.643170][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.664447][ T10] usb 3-1: Product: syz [ 521.668658][ T10] usb 3-1: Manufacturer: syz [ 521.691066][ T10] usb 3-1: SerialNumber: syz [ 521.709767][ T10] usb 3-1: config 0 descriptor?? [ 521.723109][ T5883] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 521.771582][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 521.784577][ T5883] usb 4-1: no configurations [ 521.810411][ T5883] usb 4-1: can't read configurations, error -22 [ 521.913489][ T3611] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 521.953117][ T5883] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 521.976475][ T5883] usb 4-1: no configurations [ 521.981981][ T5883] usb 4-1: can't read configurations, error -22 [ 521.990115][ T5883] usb usb4-port1: unable to enumerate USB device [ 521.993972][ T10] hso 3-1:0.0: Can't find BULK IN endpoint [ 522.002817][ T10] usb-storage 3-1:0.0: USB Mass Storage device detected [ 522.073088][ T3611] usb 5-1: Using ep0 maxpacket: 32 [ 522.081112][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.100587][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.111997][ T3611] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 522.124006][ T3611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.140819][ T3611] usb 5-1: config 0 descriptor?? [ 522.207454][ T10] usb 3-1: USB disconnect, device number 111 [ 522.307929][ T5882] pwc: send_video_command error -71 [ 522.317812][ T5882] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 522.353076][ T5882] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 522.382152][ T5882] usb 1-1: USB disconnect, device number 93 [ 522.574798][ T3611] savu 0003:1E7D:2D5A.0024: unbalanced collection at end of report description [ 522.585402][ T3611] savu 0003:1E7D:2D5A.0024: parse failed [ 522.591235][ T3611] savu 0003:1E7D:2D5A.0024: probe with driver savu failed with error -22 [ 522.711561][T11528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.865476][ T3611] usb 5-1: USB disconnect, device number 116 [ 523.125472][T11536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.651937][T11544] veth1_macvtap: left promiscuous mode [ 523.688996][T11544] macsec0: entered promiscuous mode [ 523.714884][T11544] macsec0: entered allmulticast mode [ 523.973610][ T120] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 524.141416][ T120] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 524.165384][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.184458][T11529] syz.0.1653 (11529): drop_caches: 2 [ 524.207389][ T120] usb 4-1: Product: syz [ 524.214915][ T120] usb 4-1: Manufacturer: syz [ 524.296011][ T120] usb 4-1: SerialNumber: syz [ 524.318992][ T120] usb 4-1: config 0 descriptor?? [ 524.327996][ T120] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 524.336874][ T120] usb 4-1: bad CDC descriptors [ 524.363850][ T120] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 524.503554][ T3611] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 524.550813][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 524.664946][ T3611] usb 2-1: Using ep0 maxpacket: 8 [ 524.689472][ T3611] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 524.698725][ T5882] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 524.708494][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.720515][ T3611] usb 2-1: config 0 descriptor?? [ 524.724800][T11549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.759715][ T3611] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 524.772534][ T3611] pwc: Warning: more than 1 configuration available. [ 524.811096][ T5883] usb 4-1: USB disconnect, device number 125 [ 524.868402][ T5882] usb 1-1: not running at top speed; connect to a high speed hub [ 524.880683][ T5882] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 524.889256][ T5882] usb 1-1: config 95 has no interface number 0 [ 524.902587][ T5882] usb 1-1: config 95 interface 1 has no altsetting 0 [ 524.918538][ T5882] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 524.929917][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.938576][ T5882] usb 1-1: Product: syz [ 524.944671][ T5882] usb 1-1: Manufacturer: syz [ 524.949375][ T5882] usb 1-1: SerialNumber: syz [ 525.370505][T11565] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1663'. [ 525.471899][T11567] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 525.656327][ T5882] usb 1-1: USB disconnect, device number 94 [ 525.833071][ T5883] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 525.848420][ T3611] pwc: send_video_command error -71 [ 525.858250][ T3611] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 525.886532][ T3611] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 525.904579][ T120] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 525.957079][ T3611] usb 2-1: USB disconnect, device number 122 [ 526.030481][ T5883] usb 5-1: device descriptor read/64, error -71 [ 526.296965][ T5883] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 526.350072][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.494035][ T5883] usb 5-1: device descriptor read/64, error -71 [ 526.633528][ T5888] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 526.633617][ T5883] usb usb5-port1: attempt power cycle [ 526.738952][T11587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1670'. [ 526.827345][ T5888] usb 2-1: no configurations [ 526.836802][ T5888] usb 2-1: can't read configurations, error -22 [ 526.976129][T11593] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 527.023094][ T5888] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 527.033125][ T5883] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 527.133275][ T120] usb 4-1: device descriptor read/64, error -71 [ 527.134035][ T5883] usb 5-1: device descriptor read/8, error -71 [ 527.268248][ T5888] usb 2-1: no configurations [ 527.274412][ T5888] usb 2-1: can't read configurations, error -22 [ 527.281367][ T5888] usb usb2-port1: attempt power cycle [ 527.373173][ T120] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 527.393112][ T5883] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 527.455445][ T5883] usb 5-1: device descriptor read/8, error -71 [ 527.563928][ T5883] usb usb5-port1: unable to enumerate USB device [ 527.585998][ T120] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.595452][ T120] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.613301][ T120] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.629715][ T120] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.646907][ T120] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.656219][ T5888] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 527.667417][ T120] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.676793][ T120] usb 4-1: Product: syz [ 527.681067][ T120] usb 4-1: Manufacturer: syz [ 527.692412][ T5888] usb 2-1: no configurations [ 527.700030][ T5888] usb 2-1: can't read configurations, error -22 [ 527.764262][ T120] cdc_wdm 4-1:1.0: skipping garbage [ 527.769934][ T120] cdc_wdm 4-1:1.0: skipping garbage [ 527.813341][ T120] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 527.833037][ T5888] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 527.943507][ T5883] usb 4-1: USB disconnect, device number 127 [ 527.972707][ T5888] usb 2-1: no configurations [ 527.977478][ T5888] usb 2-1: can't read configurations, error -22 [ 527.987020][ T5888] usb usb2-port1: unable to enumerate USB device [ 528.558139][ T5882] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 528.680357][T11606] FAULT_INJECTION: forcing a failure. [ 528.680357][T11606] name failslab, interval 1, probability 0, space 0, times 0 [ 528.703056][T11606] CPU: 0 UID: 0 PID: 11606 Comm: syz.4.1675 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 528.703082][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 528.703092][T11606] Call Trace: [ 528.703099][T11606] [ 528.703106][T11606] dump_stack_lvl+0x241/0x360 [ 528.703135][T11606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.703157][T11606] ? __pfx__printk+0x10/0x10 [ 528.703183][T11606] ? __pfx___might_resched+0x10/0x10 [ 528.703228][T11606] should_fail_ex+0x424/0x570 [ 528.703250][T11606] should_failslab+0xac/0x100 [ 528.703273][T11606] __kmalloc_cache_noprof+0x73/0x370 [ 528.703293][T11606] ? nf_tables_newtable+0x551/0x1e80 [ 528.703323][T11606] nf_tables_newtable+0x551/0x1e80 [ 528.703344][T11606] ? __lock_acquire+0xad5/0xd80 [ 528.703370][T11606] ? __pfx_nf_tables_newtable+0x10/0x10 [ 528.703404][T11606] ? __nla_parse+0x40/0x60 [ 528.703426][T11606] nfnetlink_rcv+0x12eb/0x28f0 [ 528.703474][T11606] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 528.703538][T11606] ? skb_clone+0x240/0x390 [ 528.703569][T11606] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.703594][T11606] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.703618][T11606] netlink_unicast+0x7f8/0x9a0 [ 528.703647][T11606] ? __pfx_netlink_unicast+0x10/0x10 [ 528.703669][T11606] ? skb_put+0x114/0x1f0 [ 528.703696][T11606] netlink_sendmsg+0x8c3/0xcd0 [ 528.703731][T11606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.703757][T11606] ? aa_sock_msg_perm+0x91/0x160 [ 528.703785][T11606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.703804][T11606] __sock_sendmsg+0x221/0x270 [ 528.703828][T11606] ____sys_sendmsg+0x523/0x860 [ 528.703851][T11606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.703865][T11606] ? __fget_files+0x2a/0x420 [ 528.703886][T11606] ? __fget_files+0x2a/0x420 [ 528.703911][T11606] __sys_sendmsg+0x271/0x360 [ 528.703939][T11606] ? __pfx___sys_sendmsg+0x10/0x10 [ 528.704011][T11606] ? do_syscall_64+0xb6/0x230 [ 528.704033][T11606] do_syscall_64+0xf3/0x230 [ 528.704052][T11606] ? clear_bhb_loop+0x45/0xa0 [ 528.704072][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.704089][T11606] RIP: 0033:0x7f0340b8d169 [ 528.704106][T11606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.704120][T11606] RSP: 002b:00007f03419d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.704139][T11606] RAX: ffffffffffffffda RBX: 00007f0340da5fa0 RCX: 00007f0340b8d169 [ 528.704151][T11606] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 528.704163][T11606] RBP: 00007f03419d4090 R08: 0000000000000000 R09: 0000000000000000 [ 528.704173][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.704182][T11606] R13: 0000000000000000 R14: 00007f0340da5fa0 R15: 00007f0340ecfa28 [ 528.704212][T11606] [ 529.003033][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 529.098254][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 529.116426][ T5882] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 529.148033][ T5882] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.206039][ T5882] usb 3-1: config 1 interface 0 has no altsetting 0 [ 529.281669][ T5882] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 529.291125][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.303778][ T5882] usb 3-1: Product: syz [ 529.307967][ T5882] usb 3-1: Manufacturer: syz [ 529.315792][ T5882] usb 3-1: SerialNumber: syz [ 529.333149][ T5888] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 529.363291][T11604] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 529.399586][T11617] set match dimension is over the limit! [ 529.573075][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 529.585526][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 529.602723][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.624081][ T120] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 529.635996][ T5888] usb 4-1: config 0 descriptor?? [ 529.648004][ T5888] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 529.687522][ T5888] pwc: Warning: more than 1 configuration available. [ 529.714200][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input47 [ 529.763021][ T3611] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 529.794221][ T120] usb 5-1: not running at top speed; connect to a high speed hub [ 529.803331][ T120] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 529.815642][ T120] usb 5-1: config 95 has no interface number 0 [ 529.825051][ T120] usb 5-1: config 95 interface 1 has no altsetting 0 [ 529.836097][ T120] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 529.847851][ T120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.856203][ T120] usb 5-1: Product: syz [ 529.864335][ T120] usb 5-1: Manufacturer: syz [ 529.871393][ T120] usb 5-1: SerialNumber: syz [ 529.914029][ T3611] usb 2-1: Using ep0 maxpacket: 16 [ 529.930089][ T3611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.943586][ T3611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 529.959841][ T3611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 529.969970][ T3611] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 529.984379][ T3611] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.001812][ T3611] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 530.012270][ T3611] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 530.023459][ T3611] usb 2-1: Manufacturer: syz [ 530.032258][ T3611] usb 2-1: config 0 descriptor?? [ 530.403313][ T3611] rc_core: IR keymap rc-hauppauge not found [ 530.409470][ T3611] Registered IR keymap rc-empty [ 530.433528][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.474431][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.487040][ T120] usb 5-1: USB disconnect, device number 121 [ 530.538441][ T3611] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 530.604317][ T3611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 530.632457][ T5888] pwc: send_video_command error -71 [ 530.652405][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.677365][ T5888] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 530.698893][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.703109][ T5888] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 530.729667][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.737006][ T5888] usb 4-1: USB disconnect, device number 2 [ 530.754863][T11623] FAULT_INJECTION: forcing a failure. [ 530.754863][T11623] name failslab, interval 1, probability 0, space 0, times 0 [ 530.777925][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 530.803527][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.3.1681 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 530.803558][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 530.803568][T11623] Call Trace: [ 530.803575][T11623] [ 530.803583][T11623] dump_stack_lvl+0x241/0x360 [ 530.803613][T11623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.803636][T11623] ? __pfx__printk+0x10/0x10 [ 530.803662][T11623] ? __pfx___might_resched+0x10/0x10 [ 530.803687][T11623] should_fail_ex+0x424/0x570 [ 530.803710][T11623] should_failslab+0xac/0x100 [ 530.803734][T11623] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 530.803758][T11623] ? __request_module+0x2d7/0x640 [ 530.803781][T11623] kstrdup+0x42/0x100 [ 530.803802][T11623] __request_module+0x2d7/0x640 [ 530.803823][T11623] ? rtnl_link_ops_get+0x19f/0x250 [ 530.803847][T11623] ? __pfx___request_module+0x10/0x10 [ 530.803880][T11623] ? rtnl_link_ops_get+0x22/0x250 [ 530.803901][T11623] ? rtnl_link_ops_get+0x21d/0x250 [ 530.803926][T11623] rtnl_newlink+0x68f/0x1fe0 [ 530.803952][T11623] ? is_bpf_text_address+0x288/0x2a0 [ 530.803972][T11623] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 530.803995][T11623] ? kernel_text_address+0xa7/0xe0 [ 530.804013][T11623] ? __pfx_rtnl_newlink+0x10/0x10 [ 530.804031][T11623] ? unwind_get_return_address+0x4d/0x90 [ 530.804052][T11623] ? arch_stack_walk+0xff/0x150 [ 530.804077][T11623] ? __lock_acquire+0xad5/0xd80 [ 530.804101][T11623] ? __lock_acquire+0xad5/0xd80 [ 530.804121][T11623] ? __lock_acquire+0xad5/0xd80 [ 530.804154][T11623] ? is_bpf_text_address+0x26/0x2a0 [ 530.804178][T11623] ? is_bpf_text_address+0x288/0x2a0 [ 530.804195][T11623] ? is_bpf_text_address+0x26/0x2a0 [ 530.804214][T11623] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 530.804237][T11623] ? kernel_text_address+0xa7/0xe0 [ 530.804254][T11623] ? __kernel_text_address+0xd/0x40 [ 530.804275][T11623] ? aa_get_newest_label+0x101/0x6f0 [ 530.804303][T11623] ? __lock_acquire+0xad5/0xd80 [ 530.804340][T11623] ? __pfx_rtnl_newlink+0x10/0x10 [ 530.804363][T11623] rtnetlink_rcv_msg+0x80f/0xd70 [ 530.804381][T11623] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 530.804405][T11623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 530.804422][T11623] ? __lock_acquire+0xad5/0xd80 [ 530.804456][T11623] netlink_rcv_skb+0x208/0x480 [ 530.804479][T11623] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 530.804501][T11623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.804540][T11623] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.804563][T11623] ? netlink_deliver_tap+0x2e/0x1b0 [ 530.804586][T11623] netlink_unicast+0x7f8/0x9a0 [ 530.804620][T11623] ? __pfx_netlink_unicast+0x10/0x10 [ 530.804641][T11623] ? skb_put+0x114/0x1f0 [ 530.804661][T11623] netlink_sendmsg+0x8c3/0xcd0 [ 530.804694][T11623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.804720][T11623] ? aa_sock_msg_perm+0x91/0x160 [ 530.804746][T11623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.804765][T11623] __sock_sendmsg+0x221/0x270 [ 530.804789][T11623] ____sys_sendmsg+0x523/0x860 [ 530.804815][T11623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.804830][T11623] ? __fget_files+0x2a/0x420 [ 530.804849][T11623] ? __fget_files+0x2a/0x420 [ 530.804874][T11623] __sys_sendmsg+0x271/0x360 [ 530.804896][T11623] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.804966][T11623] ? do_syscall_64+0xb6/0x230 [ 530.804988][T11623] do_syscall_64+0xf3/0x230 [ 530.805006][T11623] ? clear_bhb_loop+0x45/0xa0 [ 530.805026][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.805043][T11623] RIP: 0033:0x7ff6b3f8d169 [ 530.805059][T11623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.805074][T11623] RSP: 002b:00007ff6b4eb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.805093][T11623] RAX: ffffffffffffffda RBX: 00007ff6b41a5fa0 RCX: 00007ff6b3f8d169 [ 530.805106][T11623] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 530.805117][T11623] RBP: 00007ff6b4eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 530.805128][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.805138][T11623] R13: 0000000000000000 R14: 00007ff6b41a5fa0 R15: 00007ff6b42cfa28 [ 530.805165][T11623] [ 530.806745][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 531.226094][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.226743][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.251662][T11626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.299082][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.314831][T11626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.345851][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.385142][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.429562][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.463382][ T3611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 531.514701][ T5198] bcm5974 3-1:1.0: could not read from device [ 531.515096][ T5888] usb 3-1: USB disconnect, device number 112 [ 531.594978][ T120] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 531.605277][ T3611] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 531.613986][ T5198] bcm5974 3-1:1.0: could not read from device [ 531.629043][T11636] set match dimension is over the limit! [ 531.660514][T11635] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1684'. [ 531.671876][ T6074] bcm5974 3-1:1.0: could not read from device [ 531.681067][ T3611] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 531.735217][ T5198] bcm5974 3-1:1.0: could not read from device [ 531.754864][ T120] usb 1-1: Using ep0 maxpacket: 16 [ 531.782223][ T3611] usb 2-1: USB disconnect, device number 127 [ 531.806890][ T120] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.819008][ T120] usb 1-1: config 0 has no interfaces? [ 531.867167][ T120] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 531.878103][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.938959][ T120] usb 1-1: config 0 descriptor?? [ 532.188433][T11628] dccp_invalid_packet: P.Data Offset(64) too large [ 532.197468][T11628] fuse: Bad value for 'fd' [ 532.268973][ T5888] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 532.483658][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 532.530083][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.587896][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.593835][ T3611] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 532.630601][ T5888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 532.658119][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.713277][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 532.714189][ T5888] usb 3-1: config 0 descriptor?? [ 532.753042][ T3611] usb 2-1: Using ep0 maxpacket: 16 [ 532.814663][ T3611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.893115][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 532.981365][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.994413][ T3611] usb 2-1: config 0 has no interfaces? [ 533.016578][ T3611] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 533.064309][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 533.083610][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.101032][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 533.208876][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 533.211940][ T3611] usb 2-1: config 0 descriptor?? [ 533.221924][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 533.244531][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 533.244784][ T5888] usb 3-1: USB disconnect, device number 113 [ 533.294563][ T120] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 533.314125][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 533.420320][ T5882] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 533.457185][ T120] usb 5-1: Using ep0 maxpacket: 8 [ 533.470757][ T120] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 533.481068][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.500383][ T120] usb 5-1: config 0 descriptor?? [ 533.516130][ T120] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 533.529090][ T120] pwc: Warning: more than 1 configuration available. [ 533.539015][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 533.656813][ T5882] usb 4-1: Product: syz [ 533.662500][ T5882] usb 4-1: Manufacturer: syz [ 533.711210][ T5882] usb 4-1: SerialNumber: syz [ 533.727316][ T5882] usb 4-1: config 0 descriptor?? [ 533.749456][T11644] dccp_invalid_packet: P.Data Offset(64) too large [ 533.811472][T11651] fuse: Bad value for 'fd' [ 534.099030][ T5888] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 534.253032][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 534.261074][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.279980][ T5888] usb 3-1: config 128 has an invalid interface number: 53 but max is 1 [ 534.349038][ T5888] usb 3-1: config 128 has an invalid interface number: 50 but max is 1 [ 534.373365][ T5882] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 534.391136][ T5882] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 534.400491][ T5888] usb 3-1: config 128 has no interface number 0 [ 534.411311][ T5888] usb 3-1: config 128 has no interface number 1 [ 534.455690][ T120] pwc: send_video_command error -71 [ 534.462879][ T120] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 534.509394][ T5888] usb 3-1: config 128 interface 50 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 534.537924][ T120] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 534.562375][ T5888] usb 3-1: config 128 interface 50 altsetting 3 endpoint 0xE has an invalid bInterval 133, changing to 11 [ 534.590371][ T120] usb 5-1: USB disconnect, device number 122 [ 534.605447][ T5882] usb 1-1: USB disconnect, device number 95 [ 534.632170][ T5888] usb 3-1: config 128 interface 50 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 534.652057][ T5888] usb 3-1: config 128 interface 50 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 534.711825][T11656] program syz.4.1693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.728026][ T5888] usb 3-1: config 128 interface 53 has no altsetting 0 [ 534.809590][ T5888] usb 3-1: config 128 interface 50 has no altsetting 0 [ 534.855456][ T5888] usb 3-1: New USB device found, idVendor=2304, idProduct=0242, bcdDevice=5c.71 [ 534.905257][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.932046][T11663] futex_wake_op: syz.3.1689 tries to shift op by -33; fix this program [ 534.968876][ T5888] usb 3-1: Product: syz [ 534.985729][ T5888] usb 3-1: Manufacturer: syz [ 535.013879][ T5888] usb 3-1: SerialNumber: syz [ 535.149811][ T120] usb 2-1: USB disconnect, device number 2 [ 535.290339][T11653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.336060][T11653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.965478][T11653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.984762][T11653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.199278][ T5903] usb 4-1: USB disconnect, device number 3 [ 536.224926][ T120] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 536.318086][T11653] program syz.2.1692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.393295][ T120] usb 1-1: Using ep0 maxpacket: 32 [ 536.406467][ T5888] hub 3-1:128.50: Invalid hub with more than one config or interface [ 536.423092][ T5882] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 536.427585][ T120] usb 1-1: unable to get BOS descriptor or descriptor too short [ 536.442236][ T120] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 536.458964][ T5888] hub 3-1:128.50: probe with driver hub failed with error -22 [ 536.469921][ T120] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.496193][ T5888] usb 3-1: USB disconnect, device number 114 [ 536.502380][ T120] usb 1-1: config 1 interface 0 has no altsetting 0 [ 536.528285][ T120] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 536.542339][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.552052][ T120] usb 1-1: Product: syz [ 536.558479][ T120] usb 1-1: Manufacturer: syz [ 536.566933][ T120] usb 1-1: SerialNumber: syz [ 536.579042][T11674] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 536.593029][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 536.603814][ T5882] usb 2-1: config 2 has an invalid interface number: 169 but max is 0 [ 536.612056][ T5882] usb 2-1: config 2 has no interface number 0 [ 536.622037][ T5882] usb 2-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 536.639349][ T5882] usb 2-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 536.651926][ T5882] usb 2-1: config 2 interface 169 altsetting 0 endpoint 0x8B has an invalid bInterval 129, changing to 11 [ 536.663692][ T5882] usb 2-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 58232, setting to 1024 [ 536.675072][ T5882] usb 2-1: config 2 interface 169 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 536.688650][ T5882] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 536.697803][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.705972][ T3611] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 536.719145][ T5882] cypress_m8 2-1:2.169: DeLorme Earthmate USB converter detected [ 536.804477][ T120] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input49 [ 536.843273][ T3611] usb 5-1: device descriptor read/64, error -71 [ 536.883222][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 536.927517][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.938002][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.959415][ T5882] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 537.014339][ T5882] usb 2-1: USB disconnect, device number 3 [ 537.047597][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.048973][ T5882] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 537.066212][ T5903] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 537.082292][ T5882] cypress_m8 2-1:2.169: device disconnected [ 537.084716][ T5903] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 537.101963][ T5903] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 537.103377][ T3611] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 537.114755][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.129944][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.138248][ T5903] usb 4-1: Product: syz [ 537.142581][ T5903] usb 4-1: Manufacturer: syz [ 537.147285][ T5903] usb 4-1: SerialNumber: syz [ 537.247502][ T3611] usb 5-1: device descriptor read/64, error -71 [ 537.253095][ T5888] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 537.357818][T11681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 537.373829][ T3611] usb usb5-port1: attempt power cycle [ 537.453311][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 537.463937][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.475120][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.485016][ T5888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 537.494240][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.505344][ T5888] usb 3-1: config 0 descriptor?? [ 537.713460][ T3611] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 537.744868][ T3611] usb 5-1: device descriptor read/8, error -71 [ 537.913076][ T120] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 537.932723][ T5888] savu 0003:1E7D:2D5A.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 537.969009][T11681] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 537.986893][ T3611] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 538.014303][ T3611] usb 5-1: device descriptor read/8, error -71 [ 538.063049][ T120] usb 2-1: Using ep0 maxpacket: 16 [ 538.070185][ T120] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 538.078941][ T120] usb 2-1: config 0 has no interface number 0 [ 538.085151][ T120] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 538.101510][ T120] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.113610][ T120] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 538.126541][ T3611] usb usb5-port1: unable to enumerate USB device [ 538.133640][ T120] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 538.147279][ T5888] usb 3-1: USB disconnect, device number 115 [ 538.153885][ T120] usb 2-1: Product: syz [ 538.160466][ T120] usb 2-1: SerialNumber: syz [ 538.179604][ T120] usb 2-1: config 0 descriptor?? [ 538.185980][ T5903] cdc_mbim 4-1:1.0: bind() failure [ 538.199504][ T120] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 538.208870][ T5903] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 538.218052][ T5903] cdc_ncm 4-1:1.1: bind() failure [ 538.225135][ T120] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input50 [ 538.483845][ T5198] bcm5974 1-1:1.0: could not read from device [ 538.484312][ T5888] usb 1-1: USB disconnect, device number 96 [ 538.496512][ T5198] bcm5974 1-1:1.0: could not read from device [ 538.520229][ T5972] bcm5974 1-1:1.0: could not read from device [ 538.594615][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 538.595516][ T3611] usb 2-1: USB disconnect, device number 4 [ 538.601882][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 538.620423][ T3611] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 538.753593][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.769617][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.963220][ T5888] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 539.133563][ T5888] usb 1-1: config 0 has no interfaces? [ 539.150005][ T5888] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 539.159437][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.206960][ T5888] usb 1-1: Product: syz [ 539.213722][ T5888] usb 1-1: Manufacturer: syz [ 539.224030][ T5888] usb 1-1: SerialNumber: syz [ 539.240101][ T5888] usb 1-1: config 0 descriptor?? [ 539.245234][ T120] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 539.513017][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 539.533225][ T5903] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 539.709816][ T120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.737681][ T120] usb 3-1: config 0 has no interfaces? [ 539.770873][ T120] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 539.792734][ T5882] usb 4-1: USB disconnect, device number 4 [ 539.815424][ T5903] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 539.835807][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.938410][ T5903] usb 2-1: Product: syz [ 539.942979][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.971784][ T5903] usb 2-1: Manufacturer: syz [ 540.007467][ T5903] usb 2-1: SerialNumber: syz [ 540.040021][ T120] usb 3-1: config 0 descriptor?? [ 540.081961][ T5903] usb 2-1: config 0 descriptor?? [ 540.114334][ T5903] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 540.128255][ T5903] usb 2-1: bad CDC descriptors [ 540.138353][ T5903] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 540.211414][ T3611] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 540.319158][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 540.466333][T11698] dccp_invalid_packet: P.Data Offset(64) too large [ 540.532591][T11709] fuse: Bad value for 'fd' [ 540.547287][ T5903] usb 2-1: USB disconnect, device number 5 [ 540.567219][ T3611] usb 5-1: config 0 has no interfaces? [ 540.592106][ T3611] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 540.602285][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.810830][ T3611] usb 5-1: Product: syz [ 540.830542][ T3611] usb 5-1: Manufacturer: syz [ 540.863072][ T3611] usb 5-1: SerialNumber: syz [ 540.888779][T11712] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1709'. [ 540.924198][ T3611] usb 5-1: config 0 descriptor?? [ 541.606871][ T120] usb 1-1: USB disconnect, device number 97 [ 541.687210][T11720] FAULT_INJECTION: forcing a failure. [ 541.687210][T11720] name failslab, interval 1, probability 0, space 0, times 0 [ 541.725522][T11720] CPU: 1 UID: 0 PID: 11720 Comm: syz.0.1711 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 541.725548][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 541.725559][T11720] Call Trace: [ 541.725566][T11720] [ 541.725574][T11720] dump_stack_lvl+0x241/0x360 [ 541.725603][T11720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.725625][T11720] ? __pfx__printk+0x10/0x10 [ 541.725650][T11720] ? __pfx___might_resched+0x10/0x10 [ 541.725674][T11720] should_fail_ex+0x424/0x570 [ 541.725696][T11720] should_failslab+0xac/0x100 [ 541.725719][T11720] __kmalloc_cache_noprof+0x73/0x370 [ 541.725738][T11720] ? tcf_block_get_ext+0x145/0x1670 [ 541.725762][T11720] tcf_block_get_ext+0x145/0x1670 [ 541.725797][T11720] tcf_block_get+0xfa/0x150 [ 541.725819][T11720] ? __pfx_tcf_block_get+0x10/0x10 [ 541.725837][T11720] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 541.725862][T11720] ? hrtimer_setup+0x4d/0x90 [ 541.725883][T11720] htb_init+0x201/0xde0 [ 541.725905][T11720] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 541.725922][T11720] ? qdisc_alloc+0x7bd/0xa80 [ 541.725939][T11720] ? qdisc_create+0x104/0xdf0 [ 541.725953][T11720] ? rtnetlink_rcv_msg+0x7c2/0xd70 [ 541.725972][T11720] ? netlink_rcv_skb+0x208/0x480 [ 541.725989][T11720] ? netlink_unicast+0x7f8/0x9a0 [ 541.726004][T11720] ? netlink_sendmsg+0x8c3/0xcd0 [ 541.726021][T11720] ? __sock_sendmsg+0x221/0x270 [ 541.726039][T11720] ? __pfx_htb_init+0x10/0x10 [ 541.726055][T11720] ? do_syscall_64+0xf3/0x230 [ 541.726091][T11720] ? lockdep_rtnl_is_held+0x26/0x40 [ 541.726106][T11720] ? qdisc_lookup+0x353/0x6b0 [ 541.726120][T11720] ? __pfx_htb_init+0x10/0x10 [ 541.726138][T11720] qdisc_create+0x70b/0xdf0 [ 541.726163][T11720] tc_modify_qdisc+0x156d/0x2610 [ 541.726195][T11720] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 541.726209][T11720] ? trace_contention_end+0x3c/0x120 [ 541.726229][T11720] ? __mutex_lock+0x380/0x10c0 [ 541.726246][T11720] ? aa_get_newest_label+0x101/0x6f0 [ 541.726295][T11720] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 541.726313][T11720] rtnetlink_rcv_msg+0x7c2/0xd70 [ 541.726331][T11720] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 541.726355][T11720] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.726388][T11720] ? ref_tracker_free+0x63e/0x7e0 [ 541.726410][T11720] netlink_rcv_skb+0x208/0x480 [ 541.726431][T11720] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.726452][T11720] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.726487][T11720] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.726509][T11720] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.726531][T11720] netlink_unicast+0x7f8/0x9a0 [ 541.726558][T11720] ? __pfx_netlink_unicast+0x10/0x10 [ 541.726579][T11720] ? skb_put+0x114/0x1f0 [ 541.726599][T11720] netlink_sendmsg+0x8c3/0xcd0 [ 541.726626][T11720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.726641][T11720] ? aa_sock_msg_perm+0x91/0x160 [ 541.726656][T11720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.726667][T11720] __sock_sendmsg+0x221/0x270 [ 541.726681][T11720] ____sys_sendmsg+0x523/0x860 [ 541.726696][T11720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.726705][T11720] ? __fget_files+0x2a/0x420 [ 541.726715][T11720] ? __fget_files+0x2a/0x420 [ 541.726729][T11720] __sys_sendmmsg+0x3a0/0x7b0 [ 541.726745][T11720] ? __pfx___sys_sendmmsg+0x10/0x10 [ 541.726774][T11720] ? rcu_read_lock_any_held+0xbb/0x160 [ 541.726787][T11720] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 541.726801][T11720] ? vfs_write+0xb29/0xd10 [ 541.726817][T11720] ? ksys_write+0x24e/0x2d0 [ 541.726829][T11720] ? __mutex_unlock_slowpath+0x229/0x800 [ 541.726855][T11720] ? ksys_write+0x275/0x2d0 [ 541.726872][T11720] __x64_sys_sendmmsg+0xa0/0xb0 [ 541.726883][T11720] do_syscall_64+0xf3/0x230 [ 541.726894][T11720] ? clear_bhb_loop+0x45/0xa0 [ 541.726905][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.726915][T11720] RIP: 0033:0x7f3cb198d169 [ 541.726925][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.726933][T11720] RSP: 002b:00007f3cb2770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 541.726945][T11720] RAX: ffffffffffffffda RBX: 00007f3cb1ba5fa0 RCX: 00007f3cb198d169 [ 541.726952][T11720] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 541.726959][T11720] RBP: 00007f3cb2770090 R08: 0000000000000000 R09: 0000000000000000 [ 541.726965][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.726971][T11720] R13: 0000000000000000 R14: 00007f3cb1ba5fa0 R15: 00007f3cb1ccfa28 [ 541.726986][T11720] [ 542.372855][ T3611] usb 3-1: USB disconnect, device number 116 [ 542.617349][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 542.811591][ T120] usb 5-1: USB disconnect, device number 127 [ 543.443133][ T3611] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 543.643047][ T3611] usb 2-1: Using ep0 maxpacket: 16 [ 543.643069][ T120] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 543.679592][ T3611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.709579][ T3611] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 543.731148][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.770790][ T3611] usb 2-1: config 0 descriptor?? [ 543.853527][ T120] usb 5-1: device descriptor read/64, error -71 [ 544.063039][ T3611] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 544.093568][ T120] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 544.223144][ T120] usb 5-1: device descriptor read/64, error -71 [ 544.256577][ T3611] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.273121][ T5903] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 544.322440][ T3611] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 544.348017][ T3611] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 544.348061][ T120] usb usb5-port1: attempt power cycle [ 544.371479][ T3611] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 544.401591][ T3611] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.412693][ T3611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.422630][ T3611] usb 4-1: Product: syz [ 544.428807][ T3611] usb 4-1: Manufacturer: syz [ 544.434657][ T3611] usb 4-1: SerialNumber: syz [ 544.446681][ T5903] usb 1-1: no configurations [ 544.451311][ T5903] usb 1-1: can't read configurations, error -22 [ 544.533023][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 544.613127][ T5903] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 544.648250][T11746] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 544.695475][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.706521][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.721133][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.735029][ T10] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 544.746837][ T120] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 544.754892][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.777352][ T5903] usb 1-1: no configurations [ 544.783998][ T120] usb 5-1: device descriptor read/8, error -71 [ 544.794495][ T5903] usb 1-1: can't read configurations, error -22 [ 544.805529][ T10] usb 3-1: config 0 descriptor?? [ 544.817627][ T5903] usb usb1-port1: attempt power cycle [ 545.043198][ T120] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 545.063766][ T120] usb 5-1: device descriptor read/8, error -71 [ 545.176431][ T5903] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 545.184354][ T120] usb usb5-port1: unable to enumerate USB device [ 545.204732][ T5903] usb 1-1: no configurations [ 545.209371][ T5903] usb 1-1: can't read configurations, error -22 [ 545.222543][ T10] hid-udraw 0003:20D6:CB17.0026: unknown main item tag 0x0 [ 545.233753][ T10] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0026/input/input51 [ 545.272026][T11746] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 545.311363][ T10] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0026/input/input52 [ 545.332274][ T10] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0026/input/input53 [ 545.345582][ T5903] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 545.360541][ T10] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0026/input/input54 [ 545.379100][ T5903] usb 1-1: no configurations [ 545.383805][ T5903] usb 1-1: can't read configurations, error -22 [ 545.391114][ T5903] usb usb1-port1: unable to enumerate USB device [ 545.448732][ T10] hid-udraw 0003:20D6:CB17.0026: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 545.450841][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.471581][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.485131][ T3611] cdc_mbim 4-1:1.0: bind() failure [ 545.524337][ T3611] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 545.533577][ T3611] cdc_ncm 4-1:1.1: bind() failure [ 545.726930][ T3611] usb 3-1: USB disconnect, device number 117 [ 545.788714][ T10] usb 2-1: USB disconnect, device number 6 [ 546.045986][T11763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.056423][T11763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.343180][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 546.513469][ T5903] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 546.545775][ T10] usb 2-1: config 0 has no interfaces? [ 546.559718][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 546.617280][T11773] gtp0: entered allmulticast mode [ 546.653763][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.661928][ T10] usb 2-1: Product: syz [ 546.669880][ T10] usb 2-1: Manufacturer: syz [ 546.682483][ T10] usb 2-1: SerialNumber: syz [ 546.763009][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 546.772853][ T5903] usb 5-1: config 2 has an invalid interface number: 169 but max is 0 [ 546.792872][ T5903] usb 5-1: config 2 has no interface number 0 [ 546.808726][ T10] usb 2-1: config 0 descriptor?? [ 546.816135][ T5903] usb 5-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.843253][ T5903] usb 5-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 546.926981][ T5903] usb 5-1: config 2 interface 169 altsetting 0 endpoint 0x8B has an invalid bInterval 129, changing to 11 [ 546.993607][ T3611] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 547.006975][ T5903] usb 5-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 58232, setting to 1024 [ 547.032828][ T5903] usb 5-1: config 2 interface 169 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 547.074263][ T5903] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 547.089309][ T5882] usb 4-1: USB disconnect, device number 5 [ 547.146678][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.187991][ T5903] cypress_m8 5-1:2.169: DeLorme Earthmate USB converter detected [ 547.223589][ T3611] usb 3-1: config 0 has no interfaces? [ 547.364435][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 547.396908][ T5903] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 547.424733][ T3611] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 547.440803][ T3611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.467067][ T3611] usb 3-1: Product: syz [ 547.467606][ T5903] usb 5-1: USB disconnect, device number 6 [ 547.506137][T11762] fuse: Unknown parameter '0xffffffffffffffff' [ 547.520391][ T3611] usb 3-1: Manufacturer: syz [ 547.540513][ T3611] usb 3-1: SerialNumber: syz [ 547.559914][ T5903] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 547.578440][ T5903] cypress_m8 5-1:2.169: device disconnected [ 547.578990][ T3611] usb 3-1: config 0 descriptor?? [ 549.063056][ T5882] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 549.154474][ T5903] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 549.203015][ T5882] usb 5-1: device descriptor read/64, error -71 [ 549.313741][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 549.320809][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.335751][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.379183][ T5903] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.392878][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.401895][ T5903] usb 1-1: Product: syz [ 549.411771][ T10] usb 2-1: USB disconnect, device number 7 [ 549.437103][ T5903] usb 1-1: Manufacturer: syz [ 549.449342][ T5903] usb 1-1: SerialNumber: syz [ 549.514790][ T5882] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 549.576640][ T120] usb 3-1: USB disconnect, device number 118 [ 549.664927][T11809] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1741'. [ 549.685185][ T5882] usb 5-1: device descriptor read/64, error -71 [ 549.755251][ T5903] usb 1-1: 0:2 : does not exist [ 549.790620][ T5903] usb 1-1: USB disconnect, device number 102 [ 549.803901][ T5882] usb usb5-port1: attempt power cycle [ 549.883120][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 549.913120][ T5904] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 549.984512][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.024046][ T3611] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 550.038931][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 550.048930][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.057176][ T10] usb 2-1: Product: syz [ 550.061520][ T10] usb 2-1: Manufacturer: syz [ 550.066175][ T10] usb 2-1: SerialNumber: syz [ 550.072676][ T10] usb 2-1: config 0 descriptor?? [ 550.077762][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 550.085223][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.097296][ T10] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 550.105271][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.115211][ T10] usb 2-1: bad CDC descriptors [ 550.120369][ T10] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 550.128091][ T5904] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 550.139949][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.146682][ T5882] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 550.160690][ T5904] usb 4-1: config 0 descriptor?? [ 550.173055][ T3611] usb 3-1: Using ep0 maxpacket: 32 [ 550.180393][ T3611] usb 3-1: unable to get BOS descriptor or descriptor too short [ 550.189454][ T5882] usb 5-1: device descriptor read/8, error -71 [ 550.196897][ T3611] usb 3-1: config 128 has an invalid interface number: 53 but max is 1 [ 550.206286][ T3611] usb 3-1: config 128 has an invalid interface number: 50 but max is 1 [ 550.214608][ T3611] usb 3-1: config 128 has no interface number 0 [ 550.220955][ T3611] usb 3-1: config 128 has no interface number 1 [ 550.227356][ T3611] usb 3-1: config 128 interface 50 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 550.238487][ T3611] usb 3-1: config 128 interface 50 altsetting 3 endpoint 0xE has an invalid bInterval 133, changing to 11 [ 550.250267][ T3611] usb 3-1: config 128 interface 50 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 550.261386][ T3611] usb 3-1: config 128 interface 50 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 550.272607][ T3611] usb 3-1: config 128 interface 53 has no altsetting 0 [ 550.279613][ T3611] usb 3-1: config 128 interface 50 has no altsetting 0 [ 550.289170][ T3611] usb 3-1: New USB device found, idVendor=2304, idProduct=0242, bcdDevice=5c.71 [ 550.312807][ T10] usb 2-1: USB disconnect, device number 8 [ 550.335655][ T3611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.346021][ T3611] usb 3-1: Product: syz [ 550.350215][ T3611] usb 3-1: Manufacturer: syz [ 550.357105][ T3611] usb 3-1: SerialNumber: syz [ 550.433064][ T5882] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 550.453679][ T5882] usb 5-1: device descriptor read/8, error -71 [ 550.564283][ T5882] usb usb5-port1: unable to enumerate USB device [ 550.584886][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.598265][ T5904] usbhid 4-1:0.0: can't add hid device: -71 [ 550.602846][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.608653][ T5904] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 550.619709][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.621826][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.656115][T11812] program syz.2.1743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.669706][ T5904] usb 4-1: USB disconnect, device number 6 [ 550.712048][ T3611] hub 3-1:128.50: Invalid hub with more than one config or interface [ 550.730089][ T3611] hub 3-1:128.50: probe with driver hub failed with error -22 [ 550.747877][ T3611] usb 3-1: USB disconnect, device number 119 [ 551.559157][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 551.682758][ T3611] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 551.902339][T11843] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1753'. [ 551.903122][ T5882] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 551.943051][ T3611] usb 4-1: Using ep0 maxpacket: 16 [ 551.989720][ T3611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.000075][ T3611] usb 4-1: config 0 has no interfaces? [ 552.009605][ T3611] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 552.029328][ T3611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.066446][ T3611] usb 4-1: config 0 descriptor?? [ 552.163104][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 552.175767][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 552.185590][ T5882] usb 1-1: config 128 has an invalid interface number: 8 but max is 1 [ 552.198131][ T5882] usb 1-1: config 128 has an invalid interface number: 92 but max is 1 [ 552.224795][ T5882] usb 1-1: config 128 has no interface number 0 [ 552.259471][ T5882] usb 1-1: config 128 has no interface number 1 [ 552.270429][ T5882] usb 1-1: config 128 interface 8 has no altsetting 0 [ 552.362456][T11831] fuse: Bad value for 'fd' [ 552.374832][ T5882] usb 1-1: config 128 interface 92 has no altsetting 0 [ 552.395597][ T5882] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=8c.42 [ 552.407933][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.416343][ T5882] usb 1-1: Product: syz [ 552.420623][ T5882] usb 1-1: Manufacturer: syz [ 552.429326][ T5882] usb 1-1: SerialNumber: syz [ 552.660803][ T5882] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 552.681474][ T5882] usb 1-1: selecting invalid altsetting 0 [ 552.767325][ T2342] pvrusb2: Invalid write control endpoint [ 552.787845][ T5882] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 552.810156][T11856] netlink: 'syz.2.1756': attribute type 6 has an invalid length. [ 552.843150][ T5882] usb 1-1: selecting invalid altsetting 0 [ 552.852691][T11856] FAULT_INJECTION: forcing a failure. [ 552.852691][T11856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.884188][ T5882] usb 1-1: USB disconnect, device number 103 [ 552.910884][T11856] CPU: 1 UID: 0 PID: 11856 Comm: syz.2.1756 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 552.910911][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 552.910922][T11856] Call Trace: [ 552.910930][T11856] [ 552.910937][T11856] dump_stack_lvl+0x241/0x360 [ 552.910968][T11856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.910991][T11856] ? __pfx__printk+0x10/0x10 [ 552.911025][T11856] should_fail_ex+0x424/0x570 [ 552.911049][T11856] _copy_to_user+0x31/0xb0 [ 552.911075][T11856] simple_read_from_buffer+0xc4/0x170 [ 552.911103][T11856] proc_fail_nth_read+0x1ef/0x260 [ 552.911125][T11856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.911146][T11856] ? rw_verify_area+0x246/0x630 [ 552.911163][T11856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.911190][T11856] vfs_read+0x21f/0xb90 [ 552.911213][T11856] ? __pfx___mutex_lock+0x10/0x10 [ 552.911233][T11856] ? __pfx_vfs_read+0x10/0x10 [ 552.911255][T11856] ? __fget_files+0x2a/0x420 [ 552.911272][T11856] ? __fget_files+0x39d/0x420 [ 552.911286][T11856] ? __fget_files+0x2a/0x420 [ 552.911311][T11856] ksys_read+0x19d/0x2d0 [ 552.911332][T11856] ? __pfx_ksys_read+0x10/0x10 [ 552.911356][T11856] ? do_syscall_64+0xb6/0x230 [ 552.911378][T11856] do_syscall_64+0xf3/0x230 [ 552.911397][T11856] ? clear_bhb_loop+0x45/0xa0 [ 552.911417][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.911433][T11856] RIP: 0033:0x7fe9fc38bb7c [ 552.911448][T11856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 552.911462][T11856] RSP: 002b:00007fe9fd132030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.911479][T11856] RAX: ffffffffffffffda RBX: 00007fe9fc5a5fa0 RCX: 00007fe9fc38bb7c [ 552.911490][T11856] RDX: 000000000000000f RSI: 00007fe9fd1320a0 RDI: 0000000000000004 [ 552.911500][T11856] RBP: 00007fe9fd132090 R08: 0000000000000000 R09: 0000000000000000 [ 552.911510][T11856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.911519][T11856] R13: 0000000000000000 R14: 00007fe9fc5a5fa0 R15: 00007fe9fc6cfa28 [ 552.911545][T11856] [ 553.130077][ T2342] pvrusb2: Invalid write control endpoint [ 553.137555][ T2342] pvrusb2: Invalid write control endpoint [ 553.302546][ T2342] pvrusb2: Invalid write control endpoint [ 553.348710][ T2342] pvrusb2: Invalid write control endpoint [ 553.390654][ T2342] pvrusb2: Invalid write control endpoint [ 553.418683][ T2342] pvrusb2: Invalid write control endpoint [ 553.441312][ T2342] pvrusb2: Invalid write control endpoint [ 553.457726][ T2342] pvrusb2: Invalid write control endpoint [ 553.475413][ T2342] pvrusb2: Invalid write control endpoint [ 553.512879][T11870] xt_connbytes: Forcing CT accounting to be enabled [ 553.519721][T11870] set match dimension is over the limit! [ 553.583325][ T2342] pvrusb2: Invalid write control endpoint [ 553.589399][ T2342] pvrusb2: Invalid write control endpoint [ 553.597140][ T2342] pvrusb2: Invalid write control endpoint [ 553.985198][ T2342] pvrusb2: Invalid write control endpoint [ 553.990986][ T2342] pvrusb2: Invalid write control endpoint [ 554.093346][ T2342] pvrusb2: Invalid write control endpoint [ 554.113149][ T2342] pvrusb2: Invalid write control endpoint [ 554.124213][ T2342] pvrusb2: Invalid write control endpoint [ 554.151599][ T2342] pvrusb2: Invalid write control endpoint [ 554.178749][ T2342] pvrusb2: Invalid write control endpoint [ 554.283074][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 554.329730][ T3611] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 554.360266][ T2342] pvrusb2: Invalid write control endpoint [ 554.418766][ T2342] pvrusb2: Invalid write control endpoint [ 554.424672][ T2342] pvrusb2: Invalid write control endpoint [ 554.430380][ T2342] pvrusb2: Invalid write control endpoint [ 554.487685][ T2342] pvrusb2: Invalid write control endpoint [ 554.496056][ T10] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.541525][ T10] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 554.553058][ T2342] pvrusb2: Invalid write control endpoint [ 554.558818][ T2342] pvrusb2: Invalid write control endpoint [ 554.563721][ T3611] usb 2-1: Using ep0 maxpacket: 16 [ 554.582650][ T10] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 554.595675][ T5904] usb 4-1: USB disconnect, device number 7 [ 554.618967][ T2342] pvrusb2: Invalid write control endpoint [ 554.649372][ T2342] pvrusb2: Invalid write control endpoint [ 554.659373][ T10] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 554.681596][ T10] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 554.699413][ T2342] pvrusb2: Invalid write control endpoint [ 554.699863][ T3611] usb 2-1: unable to get BOS descriptor or descriptor too short [ 554.712974][ T2342] pvrusb2: Invalid write control endpoint [ 554.750236][ T10] usb 5-1: Manufacturer: syz [ 554.755012][ T2342] pvrusb2: Invalid write control endpoint [ 554.769408][ T10] usb 5-1: SerialNumber: syz [ 554.780365][ T2342] pvrusb2: Invalid write control endpoint [ 554.847237][ T3611] usb 2-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.857321][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 554.911047][ T3611] usb 2-1: config 1 interface 0 has no altsetting 0 [ 554.952404][ T3611] usb 2-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.40 [ 554.961957][ T3611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.970293][ T3611] usb 2-1: Product: ᠎ [ 555.043643][ T10] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 555.068785][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input55 [ 555.096394][ T2342] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 555.143231][ T2342] pvrusb2: Invalid write control endpoint [ 555.155613][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 555.162633][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 555.163562][ T2342] pvrusb2: Invalid write control endpoint [ 555.169781][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 555.182659][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 555.189676][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 555.196673][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 555.206382][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 555.213503][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 555.220266][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 555.313099][ T10] usb 5-1: USB disconnect, device number 11 [ 555.369503][ T2342] pvrusb2: Invalid write control endpoint [ 555.401313][ T2342] pvrusb2: Invalid write control endpoint [ 555.411169][T11883] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1765'. [ 555.420737][ T5904] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 555.438667][ T2342] pvrusb2: Invalid write control endpoint [ 555.538530][ T2342] pvrusb2: Invalid write control endpoint [ 555.573308][ T5904] usb 4-1: device descriptor read/64, error -71 [ 555.600355][ T2342] pvrusb2: Invalid write control endpoint [ 555.664882][ T2342] pvrusb2: Invalid write control endpoint [ 555.671353][T11885] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 555.681456][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 555.708457][ T2342] pvrusb2: Invalid write control endpoint [ 555.732427][T11885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.741547][ T2342] pvrusb2: Invalid write control endpoint [ 555.761207][T11886] bond1: (slave ip6gretap1): making interface the new active one [ 555.776255][T11886] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 555.790550][ T2342] pvrusb2: Invalid write control endpoint [ 555.823097][ T5904] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 555.857842][ T2342] pvrusb2: Invalid write control endpoint [ 555.875005][ T10] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.887348][ T10] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 555.902835][ T10] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 555.918598][ T10] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 555.928869][ T10] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 555.942542][ T10] usb 5-1: Manufacturer: syz [ 555.947712][ T10] usb 5-1: SerialNumber: syz [ 555.952689][ T2342] pvrusb2: Invalid write control endpoint [ 555.976544][ T2342] pvrusb2: Invalid write control endpoint [ 555.983146][ T5904] usb 4-1: device descriptor read/64, error -71 [ 556.000942][ T2342] pvrusb2: Invalid write control endpoint [ 556.011102][ T2342] pvrusb2: Invalid write control endpoint [ 556.094150][ T2342] pvrusb2: Invalid write control endpoint [ 556.100167][ T5904] usb usb4-port1: attempt power cycle [ 556.127397][ T2342] pvrusb2: Invalid write control endpoint [ 556.133388][ T2342] pvrusb2: Invalid write control endpoint [ 556.170660][ T10] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 556.188091][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input56 [ 556.233235][ T2342] pvrusb2: Invalid write control endpoint [ 556.303103][ T5886] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 556.303141][ T2342] pvrusb2: Invalid write control endpoint [ 556.331357][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 556.415837][ T2342] pvrusb2: Invalid write control endpoint [ 556.436987][ T2342] pvrusb2: Invalid write control endpoint [ 556.448378][ T2342] pvrusb2: Invalid write control endpoint [ 556.456087][ T5904] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 556.474581][ T2342] pvrusb2: Invalid write control endpoint [ 556.480784][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 556.505609][ T5904] usb 4-1: device descriptor read/8, error -71 [ 556.520004][ T2342] pvrusb2: Device being rendered inoperable [ 556.528464][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 556.552018][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 556.672258][ T2342] pvrusb2: Invalid write control endpoint [ 556.717805][ T5886] usb 3-1: config 0 has no interfaces? [ 556.743698][ T5904] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 556.806759][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 556.816119][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.832341][ T5886] usb 3-1: Product: syz [ 556.864207][ T5904] usb 4-1: device descriptor read/8, error -71 [ 556.872020][ T5886] usb 3-1: Manufacturer: syz [ 556.894314][ T5886] usb 3-1: SerialNumber: syz [ 556.917581][ T5886] usb 3-1: config 0 descriptor?? [ 556.934084][ T2342] pvrusb2: Invalid write control endpoint [ 556.960351][ T2342] pvrusb2: Invalid write control endpoint [ 556.990783][ T2342] pvrusb2: Invalid write control endpoint [ 557.010828][ T2342] pvrusb2: Invalid write control endpoint [ 557.015052][ T5904] usb usb4-port1: unable to enumerate USB device [ 557.077194][ T3611] usbhid 2-1:1.0: can't add hid device: -71 [ 557.103023][ T2342] pvrusb2: Invalid write control endpoint [ 557.123050][ T2342] pvrusb2: Invalid write control endpoint [ 557.134262][ T3611] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 557.168174][ T2342] pvrusb2: Invalid write control endpoint [ 557.194998][ T2342] pvrusb2: Invalid write control endpoint [ 557.200811][ T2342] pvrusb2: Invalid write control endpoint [ 557.226129][ T3611] usb 2-1: USB disconnect, device number 9 [ 557.231841][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 557.239485][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 557.246539][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 557.253547][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 557.260522][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 557.267528][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 557.274812][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 557.281799][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 557.288602][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 557.309720][ T5904] usb 5-1: USB disconnect, device number 12 [ 557.343185][ T2342] pvrusb2: Invalid write control endpoint [ 557.349399][ T2342] pvrusb2: Invalid write control endpoint [ 557.355793][ T2342] pvrusb2: Invalid write control endpoint [ 557.361897][ T2342] pvrusb2: Invalid write control endpoint [ 557.392062][ T2342] pvrusb2: Invalid write control endpoint [ 557.415585][ T2342] pvrusb2: Invalid write control endpoint [ 557.426936][ T2342] pvrusb2: Invalid write control endpoint [ 557.455588][ T2342] pvrusb2: Invalid write control endpoint [ 557.475420][ T2342] pvrusb2: Invalid write control endpoint [ 557.528061][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 557.543336][ T2342] pvrusb2: Invalid write control endpoint [ 557.552751][T11897] fuse: Unknown parameter '0xffffffffffffffff' [ 557.576774][ T2342] pvrusb2: Invalid write control endpoint [ 557.590404][ T2342] pvrusb2: Invalid write control endpoint [ 557.629426][ T2342] pvrusb2: Invalid write control endpoint [ 557.659031][ T2342] pvrusb2: Invalid write control endpoint [ 557.682118][ T2342] pvrusb2: Invalid write control endpoint [ 557.733121][ T2342] pvrusb2: Invalid write control endpoint [ 557.746132][ T2342] pvrusb2: Invalid write control endpoint [ 557.752226][ T2342] pvrusb2: Invalid write control endpoint [ 557.758658][ T2342] pvrusb2: Invalid write control endpoint [ 557.775545][ T2342] pvrusb2: Invalid write control endpoint [ 557.781713][ T2342] pvrusb2: Invalid write control endpoint [ 557.787671][ T2342] pvrusb2: Invalid write control endpoint [ 557.794310][ T2342] pvrusb2: Invalid write control endpoint [ 557.800829][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 557.850930][ T2342] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 557.859752][ T2342] pvrusb2: Invalid write control endpoint [ 557.867527][ T2342] pvrusb2: Invalid write control endpoint [ 557.877714][ T2342] pvrusb2: Invalid write control endpoint [ 557.884741][ T2342] pvrusb2: Invalid write control endpoint [ 557.890793][ T2342] pvrusb2: Invalid write control endpoint [ 557.897007][ T2342] pvrusb2: Invalid write control endpoint [ 557.903298][ T2342] pvrusb2: Invalid write control endpoint [ 557.909258][ T2342] pvrusb2: Invalid write control endpoint [ 557.915507][ T2342] pvrusb2: Invalid write control endpoint [ 557.921411][ T2342] pvrusb2: Invalid write control endpoint [ 557.927730][ T2342] pvrusb2: Invalid write control endpoint [ 557.933902][ T2342] pvrusb2: Invalid write control endpoint [ 557.939987][ T2342] pvrusb2: Invalid write control endpoint [ 557.951726][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1774'. [ 557.951945][ T2342] pvrusb2: Invalid write control endpoint [ 557.967078][ T2342] pvrusb2: Invalid write control endpoint [ 557.974244][ T2342] pvrusb2: Invalid write control endpoint [ 557.980402][ T2342] pvrusb2: Invalid write control endpoint [ 557.986631][ T2342] pvrusb2: Invalid write control endpoint [ 557.992655][ T2342] pvrusb2: Invalid write control endpoint [ 557.999923][ T2342] pvrusb2: Invalid write control endpoint [ 558.005788][ T3611] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 558.015126][ T2342] pvrusb2: Invalid write control endpoint [ 558.021264][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 558.101680][ T2342] pvrusb2: Invalid write control endpoint [ 558.108815][ T2342] pvrusb2: Invalid write control endpoint [ 558.117309][ T2342] pvrusb2: Invalid write control endpoint [ 558.130131][ T2342] pvrusb2: Invalid write control endpoint [ 558.136892][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 558.154456][ T3611] usb 2-1: device descriptor read/64, error -71 [ 558.161216][ T2342] pvrusb2: Device being rendered inoperable [ 558.168225][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 558.181552][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 558.363714][T11924] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1776'. [ 558.393153][ T3611] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 558.543030][ T3611] usb 2-1: device descriptor read/64, error -71 [ 558.583006][ T5882] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 558.653258][ T3611] usb usb2-port1: attempt power cycle [ 558.736958][ T5882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.747856][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.761153][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.770529][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.778601][ T5882] usb 1-1: Product: syz [ 558.783113][ T5882] usb 1-1: Manufacturer: syz [ 558.787722][ T5882] usb 1-1: SerialNumber: syz [ 558.800775][ T5882] usb 1-1: selecting invalid altsetting 1 [ 558.999897][ T5882] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 559.008161][T11933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 559.009770][ T3611] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 559.018387][T11933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 559.027628][ T5882] cdc_ncm 1-1:1.0: bind() failure [ 559.064907][ T3611] usb 2-1: device descriptor read/8, error -71 [ 559.095341][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1780'. [ 559.207560][ T5904] usb 1-1: USB disconnect, device number 104 [ 559.314843][ T3611] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 559.353128][ T5882] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 559.362024][ T3611] usb 2-1: device descriptor read/8, error -71 [ 559.491719][ T3611] usb usb2-port1: unable to enumerate USB device [ 559.576814][T11937] xt_socket: unknown flags 0x4 [ 559.603117][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 559.626104][ T5882] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 559.634443][ T5882] usb 5-1: config 0 has no interface number 0 [ 559.642455][ T5882] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 559.663063][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.671242][ T5882] usb 5-1: Product: syz [ 559.678398][ T5882] usb 5-1: Manufacturer: syz [ 559.683344][ T5882] usb 5-1: SerialNumber: syz [ 559.700805][ T5882] usb 5-1: config 0 descriptor?? [ 559.708318][ T5882] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 559.754499][ T5904] usb 3-1: USB disconnect, device number 120 [ 559.913661][ T5882] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 559.928544][ T5882] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 560.130427][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 10 [ 560.233039][ T5904] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 560.379626][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 560.387642][ T5882] usb 5-1: USB disconnect, device number 13 [ 560.396245][ T5882] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 560.437882][ T5882] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 560.443045][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 560.465918][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.469638][ T5882] quatech2 5-1:0.51: device disconnected [ 560.500386][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.541466][ T5904] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 560.553703][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.568590][ T5904] usb 3-1: config 0 descriptor?? [ 560.733121][ T3611] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 560.785799][T11948] FAULT_INJECTION: forcing a failure. [ 560.785799][T11948] name failslab, interval 1, probability 0, space 0, times 0 [ 560.802554][T11948] CPU: 1 UID: 0 PID: 11948 Comm: syz.1.1786 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 560.802580][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 560.802590][T11948] Call Trace: [ 560.802598][T11948] [ 560.802605][T11948] dump_stack_lvl+0x241/0x360 [ 560.802636][T11948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.802659][T11948] ? __pfx__printk+0x10/0x10 [ 560.802686][T11948] ? __pfx___might_resched+0x10/0x10 [ 560.802709][T11948] should_fail_ex+0x424/0x570 [ 560.802731][T11948] should_failslab+0xac/0x100 [ 560.802755][T11948] __kmalloc_noprof+0xdf/0x4d0 [ 560.802776][T11948] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 560.802794][T11948] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 560.802816][T11948] tomoyo_realpath_from_path+0xcf/0x5e0 [ 560.802843][T11948] tomoyo_path_number_perm+0x245/0x790 [ 560.802862][T11948] ? tomoyo_path_number_perm+0x215/0x790 [ 560.802884][T11948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 560.802914][T11948] ? ksys_write+0x24e/0x2d0 [ 560.802937][T11948] ? __lock_acquire+0xad5/0xd80 [ 560.802969][T11948] ? __fget_files+0x2a/0x420 [ 560.802980][T11948] ? __fget_files+0x2a/0x420 [ 560.802994][T11948] ? __fget_files+0x2a/0x420 [ 560.803010][T11948] security_file_ioctl+0xc6/0x2a0 [ 560.803026][T11948] __se_sys_ioctl+0x46/0x160 [ 560.803047][T11948] do_syscall_64+0xf3/0x230 [ 560.803066][T11948] ? clear_bhb_loop+0x45/0xa0 [ 560.803085][T11948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.803100][T11948] RIP: 0033:0x7fbd46b8d169 [ 560.803113][T11948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.803127][T11948] RSP: 002b:00007fbd47916038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.803145][T11948] RAX: ffffffffffffffda RBX: 00007fbd46da5fa0 RCX: 00007fbd46b8d169 [ 560.803158][T11948] RDX: 0000200000000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 560.803168][T11948] RBP: 00007fbd47916090 R08: 0000000000000000 R09: 0000000000000000 [ 560.803179][T11948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.803189][T11948] R13: 0000000000000000 R14: 00007fbd46da5fa0 R15: 00007fbd46ecfa28 [ 560.803217][T11948] [ 561.032583][T11948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.045644][ T5904] savu 0003:1E7D:2D5A.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 561.100664][T11950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1787'. [ 561.113786][ T3611] usb 1-1: Using ep0 maxpacket: 16 [ 561.120513][ T3611] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.129166][ T3611] usb 1-1: config 0 has no interface number 0 [ 561.138172][ T3611] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 561.147514][ T3611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.155624][ T5883] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 561.163710][ T3611] usb 1-1: Product: syz [ 561.168262][ T3611] usb 1-1: Manufacturer: syz [ 561.174001][ T3611] usb 1-1: SerialNumber: syz [ 561.181813][ T3611] usb 1-1: config 0 descriptor?? [ 561.189723][ T3611] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 561.265660][ T5904] usb 3-1: USB disconnect, device number 121 [ 561.293193][ T5883] usb 4-1: device descriptor read/64, error -71 [ 561.342862][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1790'. [ 561.415428][T11959] set match dimension is over the limit! [ 561.543052][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 561.602102][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.622468][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.693416][ T5883] usb 4-1: device descriptor read/64, error -71 [ 561.814012][ T5883] usb usb4-port1: attempt power cycle [ 562.253529][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 562.281105][ T3611] gspca_spca1528: reg_w err -71 [ 562.286991][ T5883] usb 4-1: device descriptor read/8, error -71 [ 562.313078][ T3611] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 562.340392][ T3611] usb 1-1: USB disconnect, device number 105 [ 562.534757][ T5883] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 562.583135][ T5883] usb 4-1: device descriptor read/8, error -71 [ 562.663356][ T5882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 562.704187][ T5883] usb usb4-port1: unable to enumerate USB device [ 562.845118][T11980] FAULT_INJECTION: forcing a failure. [ 562.845118][T11980] name failslab, interval 1, probability 0, space 0, times 0 [ 562.859910][T11980] CPU: 0 UID: 0 PID: 11980 Comm: syz.0.1794 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 562.859936][T11980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.859947][T11980] Call Trace: [ 562.859954][T11980] [ 562.859962][T11980] dump_stack_lvl+0x241/0x360 [ 562.859993][T11980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.860017][T11980] ? __pfx__printk+0x10/0x10 [ 562.860038][T11980] ? __lock_acquire+0xad5/0xd80 [ 562.860067][T11980] should_fail_ex+0x424/0x570 [ 562.860090][T11980] should_failslab+0xac/0x100 [ 562.860115][T11980] kmem_cache_alloc_noprof+0x78/0x390 [ 562.860137][T11980] ? skb_clone+0x20c/0x390 [ 562.860159][T11980] skb_clone+0x20c/0x390 [ 562.860180][T11980] __netlink_deliver_tap+0x3c4/0x7f0 [ 562.860213][T11980] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.860233][T11980] netlink_deliver_tap+0x19d/0x1b0 [ 562.860255][T11980] netlink_unicast+0x7c6/0x9a0 [ 562.860283][T11980] ? __pfx_netlink_unicast+0x10/0x10 [ 562.860304][T11980] ? skb_put+0x114/0x1f0 [ 562.860324][T11980] netlink_sendmsg+0x8c3/0xcd0 [ 562.860358][T11980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.860384][T11980] ? aa_sock_msg_perm+0x91/0x160 [ 562.860412][T11980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.860432][T11980] __sock_sendmsg+0x221/0x270 [ 562.860455][T11980] ____sys_sendmsg+0x523/0x860 [ 562.860481][T11980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.860496][T11980] ? __fget_files+0x2a/0x420 [ 562.860516][T11980] ? __fget_files+0x2a/0x420 [ 562.860540][T11980] __sys_sendmsg+0x271/0x360 [ 562.860563][T11980] ? __pfx___sys_sendmsg+0x10/0x10 [ 562.860634][T11980] ? do_syscall_64+0xb6/0x230 [ 562.860657][T11980] do_syscall_64+0xf3/0x230 [ 562.860675][T11980] ? clear_bhb_loop+0x45/0xa0 [ 562.860695][T11980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.860711][T11980] RIP: 0033:0x7f3cb198d169 [ 562.860726][T11980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.860740][T11980] RSP: 002b:00007f3cb2770038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.860759][T11980] RAX: ffffffffffffffda RBX: 00007f3cb1ba5fa0 RCX: 00007f3cb198d169 [ 562.860771][T11980] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000003 [ 562.860783][T11980] RBP: 00007f3cb2770090 R08: 0000000000000000 R09: 0000000000000000 [ 562.860793][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.860803][T11980] R13: 0000000000000000 R14: 00007f3cb1ba5fa0 R15: 00007f3cb1ccfa28 [ 562.860835][T11980] [ 562.923460][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 563.083493][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.139381][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.252490][ T5882] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 563.262472][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.280717][ T5882] usb 5-1: Product: syz [ 563.290108][T11987] vivid-007: ================= START STATUS ================= [ 563.298055][T11987] vivid-007: Enable Output Cropping: true [ 563.307105][T11987] vivid-007: Enable Output Composing: true [ 563.315281][T11987] vivid-007: Enable Output Scaler: true [ 563.324462][ T5882] usb 5-1: Manufacturer: syz [ 563.329247][ T5882] usb 5-1: SerialNumber: syz [ 563.336853][T11987] vivid-007: Tx RGB Quantization Range: Automatic [ 563.343557][T11987] vivid-007: Transmit Mode: HDMI [ 563.348668][T11987] vivid-007: Hotplug Present: 0x00000000 [ 563.358690][ T5882] usb 5-1: config 0 descriptor?? [ 563.369531][T11987] [ 563.371884][T11987] vivid-007: RxSense Present: 0x00000000 [ 563.385874][T11987] vivid-007: EDID Present: 0x00000000 [ 563.391416][T11987] vivid-007: ================== END STATUS ================== [ 563.626368][ T5882] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 563.637601][T11993] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1798'. [ 563.703800][ T5883] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 563.891773][T12000] FAULT_INJECTION: forcing a failure. [ 563.891773][T12000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.906220][T12000] CPU: 1 UID: 0 PID: 12000 Comm: syz.3.1799 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 563.906246][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 563.906257][T12000] Call Trace: [ 563.906265][T12000] [ 563.906273][T12000] dump_stack_lvl+0x241/0x360 [ 563.906307][T12000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.906331][T12000] ? __pfx__printk+0x10/0x10 [ 563.906367][T12000] should_fail_ex+0x424/0x570 [ 563.906390][T12000] _copy_from_user+0x2d/0xb0 [ 563.906415][T12000] kstrtouint_from_user+0xce/0x1a0 [ 563.906438][T12000] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 563.906461][T12000] ? __lock_acquire+0xad5/0xd80 [ 563.906490][T12000] proc_fail_nth_write+0xac/0x2d0 [ 563.906509][T12000] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 563.906532][T12000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.906556][T12000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.906576][T12000] vfs_write+0x2bc/0xd10 [ 563.906601][T12000] ? fdget_pos+0x247/0x310 [ 563.906622][T12000] ? __pfx_vfs_write+0x10/0x10 [ 563.906644][T12000] ? __fget_files+0x2a/0x420 [ 563.906661][T12000] ? __fget_files+0x39d/0x420 [ 563.906675][T12000] ? __fget_files+0x2a/0x420 [ 563.906701][T12000] ksys_write+0x19d/0x2d0 [ 563.906723][T12000] ? __pfx_ksys_write+0x10/0x10 [ 563.906749][T12000] ? do_syscall_64+0xb6/0x230 [ 563.906772][T12000] do_syscall_64+0xf3/0x230 [ 563.906797][T12000] ? clear_bhb_loop+0x45/0xa0 [ 563.906818][T12000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.906834][T12000] RIP: 0033:0x7ff6b3f8bc1f [ 563.906850][T12000] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 563.906865][T12000] RSP: 002b:00007ff6b4eb5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 563.906884][T12000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff6b3f8bc1f [ 563.906897][T12000] RDX: 0000000000000001 RSI: 00007ff6b4eb50a0 RDI: 0000000000000004 [ 563.906908][T12000] RBP: 00007ff6b4eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 563.906919][T12000] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 563.906929][T12000] R13: 0000000000000000 R14: 00007ff6b41a5fa0 R15: 00007ff6b42cfa28 [ 563.906958][T12000] [ 564.393092][ T5883] usb 1-1: config 0 has no interfaces? [ 564.670642][ T5882] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 564.713771][ T5882] usb 5-1: USB disconnect, device number 14 [ 564.857067][ T5883] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 564.866268][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.895358][ T5883] usb 1-1: Product: syz [ 564.905494][ T5883] usb 1-1: Manufacturer: syz [ 564.912323][ T5883] usb 1-1: SerialNumber: syz [ 564.955215][ T5883] usb 1-1: config 0 descriptor?? [ 565.365269][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 565.833498][ T5903] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 565.983040][ T5903] usb 4-1: device descriptor read/64, error -71 [ 566.023296][ T5904] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 566.036667][T12030] [ 566.039022][T12030] ====================================================== [ 566.046024][T12030] WARNING: possible circular locking dependency detected [ 566.053036][T12030] 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 Not tainted [ 566.059778][T12030] ------------------------------------------------------ [ 566.066798][T12030] syz.4.1811/12030 is trying to acquire lock: [ 566.072842][T12030] ffffffff900fc808 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0xa9a/0x3680 [ 566.081975][T12030] [ 566.081975][T12030] but task is already holding lock: [ 566.089328][T12030] ffff888073dd8aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 566.099417][T12030] [ 566.099417][T12030] which lock already depends on the new lock. [ 566.099417][T12030] [ 566.109805][T12030] [ 566.109805][T12030] the existing dependency chain (in reverse order) is: [ 566.118806][T12030] [ 566.118806][T12030] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 566.127405][T12030] lock_acquire+0x116/0x2f0 [ 566.132417][T12030] __mutex_lock+0x1a5/0x10c0 [ 566.137516][T12030] smc_switch_to_fallback+0x35/0xda0 [ 566.143307][T12030] smc_sendmsg+0x11f/0x530 [ 566.148230][T12030] __sock_sendmsg+0x221/0x270 [ 566.153417][T12030] __sys_sendto+0x365/0x4c0 [ 566.158430][T12030] __x64_sys_sendto+0xde/0x100 [ 566.163705][T12030] do_syscall_64+0xf3/0x230 [ 566.168715][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.175120][T12030] [ 566.175120][T12030] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 566.182759][T12030] lock_acquire+0x116/0x2f0 [ 566.187773][T12030] lock_sock_nested+0x48/0x100 [ 566.193047][T12030] do_ip_setsockopt+0x17e9/0x39c0 [ 566.198581][T12030] ip_setsockopt+0x63/0x100 [ 566.203591][T12030] do_sock_setsockopt+0x3b1/0x710 [ 566.209129][T12030] __x64_sys_setsockopt+0x1ee/0x280 [ 566.214830][T12030] do_syscall_64+0xf3/0x230 [ 566.219846][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.226250][T12030] [ 566.226250][T12030] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 566.233453][T12030] validate_chain+0xa69/0x24e0 [ 566.238729][T12030] __lock_acquire+0xad5/0xd80 [ 566.243913][T12030] lock_acquire+0x116/0x2f0 [ 566.248923][T12030] __mutex_lock+0x1a5/0x10c0 [ 566.254023][T12030] do_ipv6_setsockopt+0xa9a/0x3680 [ 566.259645][T12030] ipv6_setsockopt+0x5d/0x170 [ 566.264835][T12030] smc_setsockopt+0x25c/0xd50 [ 566.270026][T12030] do_sock_setsockopt+0x3b1/0x710 [ 566.275561][T12030] __x64_sys_setsockopt+0x1ee/0x280 [ 566.281265][T12030] do_syscall_64+0xf3/0x230 [ 566.286275][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.292672][T12030] [ 566.292672][T12030] other info that might help us debug this: [ 566.292672][T12030] [ 566.302976][T12030] Chain exists of: [ 566.302976][T12030] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 566.302976][T12030] [ 566.316542][T12030] Possible unsafe locking scenario: [ 566.316542][T12030] [ 566.323975][T12030] CPU0 CPU1 [ 566.329322][T12030] ---- ---- [ 566.334670][T12030] lock(&smc->clcsock_release_lock); [ 566.340030][T12030] lock(sk_lock-AF_INET); [ 566.346957][T12030] lock(&smc->clcsock_release_lock); [ 566.354838][T12030] lock(rtnl_mutex); [ 566.358810][T12030] [ 566.358810][T12030] *** DEADLOCK *** [ 566.358810][T12030] [ 566.366958][T12030] 1 lock held by syz.4.1811/12030: [ 566.372071][T12030] #0: ffff888073dd8aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 566.382602][T12030] [ 566.382602][T12030] stack backtrace: [ 566.388478][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.4.1811 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 566.388495][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.388505][T12030] Call Trace: [ 566.388513][T12030] [ 566.388520][T12030] dump_stack_lvl+0x241/0x360 [ 566.388541][T12030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.388564][T12030] ? __pfx__printk+0x10/0x10 [ 566.388582][T12030] ? print_lock+0x171/0x1a0 [ 566.388599][T12030] print_circular_bug+0x2e1/0x300 [ 566.388617][T12030] check_noncircular+0x142/0x160 [ 566.388636][T12030] validate_chain+0xa69/0x24e0 [ 566.388654][T12030] ? __pfx___switch_to+0x10/0x10 [ 566.388678][T12030] __lock_acquire+0xad5/0xd80 [ 566.388693][T12030] lock_acquire+0x116/0x2f0 [ 566.388706][T12030] ? do_ipv6_setsockopt+0xa9a/0x3680 [ 566.388727][T12030] __mutex_lock+0x1a5/0x10c0 [ 566.388742][T12030] ? do_ipv6_setsockopt+0xa9a/0x3680 [ 566.388759][T12030] ? __lock_acquire+0xad5/0xd80 [ 566.388773][T12030] ? do_ipv6_setsockopt+0xa9a/0x3680 [ 566.388789][T12030] ? __pfx___mutex_lock+0x10/0x10 [ 566.388810][T12030] do_ipv6_setsockopt+0xa9a/0x3680 [ 566.388828][T12030] ? register_lock_class+0x54/0x330 [ 566.388842][T12030] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 566.388859][T12030] ? __lock_acquire+0xad5/0xd80 [ 566.388872][T12030] ? __mutex_trylock_common+0x184/0x2e0 [ 566.388891][T12030] ? __pfx___mutex_trylock_common+0x10/0x10 [ 566.388908][T12030] ? rcu_is_watching+0x15/0xb0 [ 566.388924][T12030] ? trace_contention_end+0x3c/0x120 [ 566.388940][T12030] ? __mutex_lock+0x380/0x10c0 [ 566.388958][T12030] ? smc_setsockopt+0x1b2/0xd50 [ 566.388972][T12030] ? __pfx___mutex_lock+0x10/0x10 [ 566.388989][T12030] ipv6_setsockopt+0x5d/0x170 [ 566.389006][T12030] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 566.389024][T12030] smc_setsockopt+0x25c/0xd50 [ 566.389038][T12030] ? __pfx_aa_sk_perm+0x10/0x10 [ 566.389055][T12030] ? __pfx_smc_setsockopt+0x10/0x10 [ 566.389068][T12030] ? aa_sock_opt_perm+0x79/0x120 [ 566.389086][T12030] ? __pfx_smc_setsockopt+0x10/0x10 [ 566.389098][T12030] do_sock_setsockopt+0x3b1/0x710 [ 566.389120][T12030] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 566.389138][T12030] ? __fget_files+0x2a/0x420 [ 566.389151][T12030] ? __fget_files+0x39d/0x420 [ 566.389161][T12030] ? __fget_files+0x2a/0x420 [ 566.389174][T12030] __x64_sys_setsockopt+0x1ee/0x280 [ 566.389189][T12030] do_syscall_64+0xf3/0x230 [ 566.389203][T12030] ? clear_bhb_loop+0x45/0xa0 [ 566.389217][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.389231][T12030] RIP: 0033:0x7f0340b8d169 [ 566.389244][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.389256][T12030] RSP: 002b:00007f03419d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 566.389271][T12030] RAX: ffffffffffffffda RBX: 00007f0340da5fa0 RCX: 00007f0340b8d169 [ 566.389281][T12030] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 566.389289][T12030] RBP: 00007f0340c0e2a0 R08: 0000000000000014 R09: 0000000000000000 [ 566.389298][T12030] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 566.389307][T12030] R13: 0000000000000000 R14: 00007f0340da5fa0 R15: 00007f0340ecfa28 [ 566.389322][T12030] [ 566.816585][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 566.825502][ T5904] usb 3-1: config 182 has an invalid interface number: 132 but max is 0 [ 566.834107][ T5904] usb 3-1: config 182 has no interface number 0 [ 566.840602][ T5904] usb 3-1: config 182 interface 132 has no altsetting 0 [ 566.849288][ T5904] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=a9.a2 [ 566.858711][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.866937][ T5903] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 566.874682][ T5904] usb 3-1: Product: 뷝譱˼뎌ࣿ⽴ꖼ娊⠾л‡ߟ能爄襝험鑂䙲見☗媭矇﬋냽痏酥ℑ죶⳯鏲ዄけ␴Ꮽ⡗ᔷ猅අ⸽雴⺿ꂅ켡锑녚䟄ᙟ竝迖皳᤟໷ᩢ땸ﱄ恟﷔碼ꨟ㶘噠ࠂ朾伶᯶䔅ᬣ଄ਲ਼裭؈⬍깃∸ఌ빜ڎ䟶돏ꏛ깸沨봹ᖦᨘ纜⭮ㅰ㔙脾䥜샅๐蓇녅隿둳鎕ᔔ讏縺ⳬ﷧ଅ篚홈 [ 566.910413][ T5904] usb 3-1: Manufacturer: Д [ 566.915170][ T5904] usb 3-1: SerialNumber: syz [ 566.958059][ T120] usb 1-1: USB disconnect, device number 106 [ 567.033159][ T5903] usb 4-1: device descriptor read/64, error -71 [ 567.129357][ T5904] usb 3-1: USB disconnect, device number 122 [ 567.143264][ T5903] usb usb4-port1: attempt power cycle [ 567.482966][ T5903] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 567.503368][ T5903] usb 4-1: device descriptor read/8, error -71 [ 567.762975][ T5903] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 567.783416][ T5903] usb 4-1: device descriptor read/8, error -71 [ 567.903314][ T5903] usb usb4-port1: unable to enumerate USB device