last executing test programs: 9.597351134s ago: executing program 1 (id=751): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xb}, {0xfff9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x2a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e1050003c086ddffff1144ee163c", 0x1f}], 0x1}, 0x10) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r7, &(0x7f0000000600), 0x15, 0x1ff, 0x0, 0x0) 8.747645864s ago: executing program 1 (id=755): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x5885, 0x8245, 0x1, 0x235}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x13) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = eventfd2(0x100211, 0x80000) r12 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000300)={r12, 0x0, 0x2, r12}) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000140)={r11, 0x6, 0x2, r11}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181701, 0x0) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r13, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) 7.415649778s ago: executing program 4 (id=762): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010600000000a6ff00000700"], 0x18}], 0x1}, 0x0) 7.393183732s ago: executing program 2 (id=763): socket$qrtr(0x2a, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x6) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x200000, 0x2, 0x334e8b}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000021c0)=[0x0], 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r9, 0x0, 0x10001, 0x0, 0x2, 0x2c06cf, 0x282e23}) close_range(r6, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r8, 0x0, &(0x7f00008ac000/0x2000)=nil, 0x2000, 0x6}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r11], 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7.249983929s ago: executing program 4 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="001c0900fba7f0b2665c6bf85fbc61fa0351f16400", @ANYRES16=r1, @ANYBLOB="0700000000080000000005000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) 7.05927291s ago: executing program 4 (id=767): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000280)={0x2, 'veth1_macvtap\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'xfrm0\x00', 0x2}, 0x18) 6.804625173s ago: executing program 4 (id=769): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x6, 0x4) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r3, 0x0, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1a) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r3, 0x5502) 5.588317383s ago: executing program 1 (id=770): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000180)={{r1}, 0x0, 0x18, @inherit={0x58, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x2, {0x10, 0x0, 0x2, 0x3, 0xb517}, [0x9, 0x2]}}, @name="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"}) 5.427615305s ago: executing program 3 (id=771): ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000100)={0x7, "b512f0368f0a7d094a9cae7919c9d07ce00ca5754589e58aa3ef3ca1a4ff100a", 0x8, 0x4, 0x8, 0x10, 0x2}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0xa, 0x2, @name="538374ee71cf43e3a0b4a690aa9113bd641768f58ba515e92867bf88ab3cac9a"}) epoll_create1(0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xd) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x180, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xf0, 0x40, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xb, 0x7, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0xfb, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x3, 0x7, 0x2, 0x20, 0x1a}, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="5eb3ffc0a69f0503050000"]}) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x0, 0xa4e, 0xd9, 0x8, 0x7, 0x8, 0xc, {0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x5, 0xf85, 0x2, 0x2}}, &(0x7f0000000100)=0xb0) 4.589221737s ago: executing program 3 (id=772): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x4008010, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) 4.319752324s ago: executing program 2 (id=773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060102000000000000000000000800140007800800120000060000080013400000140011000300686173683a69702c6d61726b000a0000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) 4.241687554s ago: executing program 3 (id=774): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001a80)={'#! ', './file1/../file0', [{0x20, '\xeb)\'-!'}, {}, {0x20, '-*.\x1f'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '&/&'}]}, 0x9a) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 4.239320729s ago: executing program 0 (id=775): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@gettaction={0x48, 0x32, 0x1, 0x72bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x1001, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, 0x0) kexec_load(0x3, 0x2, &(0x7f0000000300)=[{&(0x7f0000000680)="610c5af85df530fa2d984c5a7041845b1fbff5c396078336ba0940e868248dc683da18513933a7ac27f0594a2cd54a60ab0fd2abce287b51fa5a318ea9d60819e79c624f418cdae79248bbb59480f121409091ffbbc78af40842085cdc597fdb38abd28c5be190d2957e4cc9a8949042109980713e1f66f4ba8a2cfab631fb5222478ed9f0d47f21584cc9df64699f8d889b5a3f6139d5c39eb0d664501f866cca33b2041c7aaccdc252c5bfe391d902c8dfeab12ace95f769", 0xb9, 0x5, 0xfff}, {&(0x7f0000000740)="c35051d40707cfd960b503504e78f42f55eea3236106ec0f7ad005949b8aa091ed03ffc731a9796800a972328f1f66fcb14676cc651971033415625dea062b06cdbc14c1b767d29c16f10df49f5cd113f20d855bb4837e378fd6e98eebf3752040829c193e0fa0bc37855347cacd7afa3d0c562ea477ed2fa2c9571a8d86e2023ff4a562edc9bea0e5552dff1d3c095a8cec4beaad3abe365777fe6edff19e8b2524f99a9767dbc96f9a5f404f651c9f3a770e2017ab5011cc8b16fc91254a0fe809", 0xc2, 0x100000000, 0xffffffffffffe67d}], 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x20000800) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r7, {0x6, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_SCTP_SRC={0xfefa}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x3f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0xf}, 0x94) 4.046677835s ago: executing program 2 (id=776): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003fc0)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x858, 0x2, [@TCA_CGROUP_POLICE={0x854, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8079}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4a2a, 0xfff, 0x1, 0x55ed, 0x700, 0xd, 0x98, 0x6, 0x9, 0x400, 0x3, 0x3c1, 0x1, 0x4, 0x7, 0x5, 0x13b231df, 0x3, 0x5, 0x2, 0x3, 0x1, 0x8, 0x4, 0x8, 0x401, 0x3, 0x1000, 0x3, 0xa, 0xfffffff7, 0x6, 0xf41, 0xeea4, 0x7, 0x5, 0x2, 0x10, 0x8, 0xfffffff7, 0x42e7, 0x4, 0x1f, 0xfff, 0xb, 0xb1, 0x7, 0x401, 0x2, 0x0, 0x3, 0xacb, 0x4, 0x81, 0xd, 0x80000000, 0x9, 0xe, 0x4, 0x24, 0x9, 0x80000001, 0x9, 0x4, 0x2, 0x3, 0xba, 0xfffffff9, 0x6, 0x7, 0x5104, 0x5, 0xb, 0x2, 0xf, 0x0, 0x0, 0x7, 0x46, 0x40, 0xc, 0x2, 0x7, 0x4, 0x3, 0x7, 0x2add, 0x9, 0xbf7, 0xfffffffd, 0x2, 0x8, 0x44265c61, 0x9, 0xc9, 0x200, 0x80000000, 0x5, 0x4, 0x5, 0x4, 0x3, 0x80000000, 0x3, 0x401, 0x8000, 0x1, 0x1, 0xbc, 0x5, 0x2, 0x800, 0x281e, 0x0, 0xa, 0xf1, 0x7, 0x2, 0x400, 0x6, 0x2, 0x2, 0x98, 0x6, 0xae1, 0x80000000, 0x7, 0x8, 0x1ff, 0x11df, 0x5, 0x1000, 0x116, 0x8, 0x3eae, 0x3, 0x2, 0x7, 0x3e601135, 0xd5, 0xab8, 0x5, 0x8080000, 0x4, 0x36, 0xe5a2, 0x437, 0x5, 0x7, 0x2, 0x3cf, 0x9, 0x7fffffff, 0x1, 0x5, 0x8, 0x4, 0x48ab, 0x55e1, 0x7, 0xa, 0x3, 0x7, 0x8, 0xb, 0x0, 0xffff460b, 0x6, 0x9, 0x1, 0xfffffff7, 0x7f, 0x0, 0x42b, 0x6, 0x7, 0xd, 0x1, 0x1, 0x0, 0x7ff, 0x306, 0x0, 0xffff, 0x4, 0x31f, 0x8, 0x6, 0x2, 0x5, 0x7a7f, 0x9c, 0x401, 0x2068, 0x1, 0x5, 0x9, 0x7, 0x2d7, 0x8, 0x8, 0x7, 0x3, 0x5, 0x2, 0x7, 0x108e, 0x47, 0x0, 0x2a, 0x0, 0xa60, 0xb8, 0x2a, 0x2, 0x4, 0x6, 0x9, 0x897, 0x9, 0x95, 0xcf5, 0x7, 0x4, 0x2, 0xac34, 0x0, 0x3, 0xfffffffd, 0x0, 0x6, 0xa7bf, 0xffff, 0xfffffff7, 0x8e06, 0x6, 0xa, 0xec52, 0x1, 0x7ff, 0x0, 0x7, 0x7, 0x73c, 0x1, 0x0, 0x4a, 0x3, 0xb, 0xf, 0x1, 0x2, 0xf5, 0x100, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x7fff, 0x3, 0x10, 0x2b0, 0x80000000, 0x80000000, 0x1, 0x0, 0xa00000, 0x9, 0x2, 0x0, 0x8, 0x8, 0x8001, 0xfffffffb, 0x5, 0xa, 0x401, 0x81, 0xffffffff, 0x1, 0x6, 0xfffffff9, 0x40, 0x5, 0x77d1, 0x200, 0x7f, 0x401, 0x1, 0x800, 0x1ff, 0x31b, 0x8, 0xb, 0x4, 0x6, 0x5, 0x3, 0x1, 0xfffffffa, 0x86e, 0x1, 0xa36c, 0x2, 0x1, 0x8, 0x9, 0x1, 0x5, 0x3, 0x1, 0x9, 0x4, 0x5, 0x3, 0x8, 0x8, 0x0, 0x98, 0x4, 0x9, 0x3, 0x2, 0x5, 0x80, 0xd, 0x1, 0x4, 0x6, 0xc465, 0x7fffffff, 0x0, 0xfffffff5, 0xee1d, 0x88, 0x3, 0x4, 0x0, 0x62, 0x6, 0x8000, 0x9, 0x3, 0x0, 0xf, 0x2, 0xf, 0x0, 0x1, 0x9, 0x2e0, 0xd72, 0x4, 0x200, 0xf, 0x0, 0x10000, 0x8, 0x40, 0x3, 0x3, 0x1, 0x1, 0x9, 0x9f, 0x80, 0xfffffffc, 0x7fffffff, 0x3, 0x7, 0x0, 0xd3b, 0x42cb, 0x3a34, 0x0, 0x8000, 0x2, 0x5, 0x0, 0x7, 0x8, 0x8000, 0x8, 0x5, 0x7, 0x7fffffff, 0x72e4, 0x4, 0xb1, 0x1, 0xd, 0xf, 0xf, 0x7f, 0x885e, 0x3ff, 0x1ff, 0x7, 0x3, 0x9, 0x800000, 0x7, 0x2a2, 0x9, 0x2, 0x8, 0x2, 0x1, 0x6, 0x2, 0x8, 0x9, 0x0, 0x0, 0x4, 0xfffffff8, 0x800, 0x8, 0x3, 0x8, 0x2, 0xa, 0x40, 0x0, 0x3, 0x4, 0xfffffbff, 0x7, 0x3, 0x7, 0x8001, 0x1, 0x1, 0x8001, 0x5, 0x1, 0x7, 0x4000000, 0xe, 0x45be835a, 0x0, 0x4, 0x4, 0x3ff, 0x6, 0x4, 0x7ff, 0xfffffc00, 0x0, 0x72b, 0x3ff, 0x8, 0x9, 0xfff, 0x209f, 0x6, 0x40, 0x37a, 0x4, 0xffffffcd, 0x10001, 0x800000, 0xd4, 0xfff, 0x42, 0x2, 0x80000000, 0x80000000, 0x10001, 0x8, 0x6, 0x1, 0x5, 0x3, 0x0, 0x5c, 0x8, 0x1, 0x81800000, 0xa, 0x4, 0x8000, 0xfffffff0, 0xd8d, 0x1, 0x56c, 0x0, 0x1f, 0x3, 0x8001, 0xac7, 0x8, 0x5, 0xfff, 0x1, 0x5, 0x2, 0x1, 0x1, 0x1, 0x2, 0x7, 0x1, 0x169, 0x9, 0x5, 0x9, 0xc, 0x7, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x600, 0xe, 0x5049d79a, {0x8, 0x0, 0x1, 0x1950, 0x9, 0x3}, {0x9, 0x1, 0x8, 0xc, 0x6, 0x7}, 0x7, 0x6, 0xfffffffb}}]}]}}]}, 0x888}}, 0x2000c800) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.944843063s ago: executing program 3 (id=777): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2}, 0x3}], 0x2, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000002940)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r3, @ANYBLOB="01f6366b8a1bae235e7bfc80000008000316ca3cf4b325db655a3c82a98fe31ec412be4c502cd33591724775cc", @ANYRES32=r8, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r9, 0x0, 0x0, 0x800) 3.856513049s ago: executing program 2 (id=778): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x21, &(0x7f00000001c0)=ANY=[@ANYBLOB="2103160d5093c7b6a6c05251472daf51ce0756fa343e8caa0150aed5b4a855bea95dbbb4f7e25f7af4357a41819154b6c4fb01634258e1406ae4347a151f61427041695ea0a25768fcb3fc7ad01117ce46fab8ac80910bc964986bd58c978ddbfa534e8b162cf43a362f4f77d4e064c2770726d1"]}]}) syz_usb_control_io(r0, 0x0, 0x0) 3.668445772s ago: executing program 1 (id=779): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x4, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000c40)='Y', 0x1}], 0x1}, 0xffffff91}], 0x1, 0x20080058) 3.556986395s ago: executing program 1 (id=780): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x5885, 0x8245, 0x1, 0x235}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x13) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = eventfd2(0x100211, 0x80000) r12 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000300)={r12, 0x0, 0x2, r12}) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000000140)={r11, 0x6, 0x2, r11}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181701, 0x0) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r13, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) 2.998946446s ago: executing program 0 (id=781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000380)={0x11, 0x8, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x0, 0xfe80}}}, 0x24}}, 0x0) 2.891121853s ago: executing program 4 (id=782): ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000100)={0x7, "b512f0368f0a7d094a9cae7919c9d07ce00ca5754589e58aa3ef3ca1a4ff100a", 0x8, 0x4, 0x8, 0x10, 0x2}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0xa, 0x2, @name="538374ee71cf43e3a0b4a690aa9113bd641768f58ba515e92867bf88ab3cac9a"}) epoll_create1(0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xd) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x180, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xf0, 0x40, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xb, 0x7, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0xfb, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x3, 0x7, 0x2, 0x20, 0x1a}, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="5eb3ffc0a69f0503050000"]}) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x0, 0xa4e, 0xd9, 0x8, 0x7, 0x8, 0xc, {0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x5, 0xf85, 0x2, 0x2}}, &(0x7f0000000100)=0xb0) 2.746286883s ago: executing program 3 (id=783): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000002940)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r3, @ANYBLOB="01f6366b8a1bae235e7bfc80000008000316ca3cf4b325db655a3c82a98fe31ec412be4c502cd33591724775cc0791fbc99c7b", @ANYRES32=r8, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r9, 0x0, 0x0, 0x800) 2.224077792s ago: executing program 0 (id=784): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 2.040249543s ago: executing program 0 (id=785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0xfffffe00, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 1.955691742s ago: executing program 2 (id=786): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000002940)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r2, @ANYBLOB="01f6366b8a1bae235e7bfc80000008000316ca3cf4b325db655a3c82a98fe31ec412be4c502cd3", @ANYRES32=r7, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 1.356905319s ago: executing program 0 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 1.072443369s ago: executing program 0 (id=788): socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x1a00, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2}) 901.177286ms ago: executing program 4 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0x22d2, 0x1, [{0x0, 0x1}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1a) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000200)="e3dcda2500d6cc7e5c66434c4bfc3936412120db53e4cb1bc38cf223fe616c2ca5e883cd31b42c539c67214fcfcd165c90abc681faa326de97024a7626c81deea5c5117ed876837461abdebb228db899f2cd0729f9b6923e3a6b9afddd30d23b0149c4d90bc624b82c59438ad24ddb783fa273cfff2a355c633b53360f738dee8fcfe6cb7b0913aa1fd1a469aee5e98d1572f3af27405b272bc131d7c5378c4b7d1de04d94cda7162e280bd4262ec5ffe42753", 0xb3, 0x4000800, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2a, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000300)={0x10, 0xc34, 0x4, 0x25ff}, 0x10) pipe(&(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 721.706526ms ago: executing program 3 (id=790): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x95) 539.233227ms ago: executing program 2 (id=791): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f00000022c0)=""/4096, 0x0, 0x1000, 0x1, 0xbc78}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x1b, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380), &(0x7f0000000200)) (async) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=792): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect$uac1(0x5, 0xde, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x3, 0xa0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x96a, 0x6}, [@selector_unit={0xb, 0x24, 0x5, 0x3, 0x0, "2d5163034cde"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x3, 0x7f, 0x17b4, 0x5, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x80, 0x9, "7ec847c4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x2, 0x2, 0x5, "6190d19fa3310a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0xa7, "", 'hY5'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x8, 0x7, "93c1189d478866"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7, 0x8c}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x8c, 0x5, "a3a855"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x0, 0xff, {0x7, 0x25, 0x1, 0x0, 0x10, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x3, 0x1, "24a83673fe"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x2, {0x7, 0x25, 0x1, 0x1d578ccc3d4d7191, 0x40, 0x3}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x310, 0xe, 0x8, 0x85, 0x8, 0x81}, 0x12, &(0x7f0000000540)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7, 0x2, 0x798}]}, 0x9, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}, {0xa7, &(0x7f00000005c0)=@string={0xa7, 0x3, "7f40becb2af81c75bc41530b9f42da14ba1654bbc5b4d22e26e6e827970644f5088aaf17db4f4bcf8c11e7a36e3a86c732f19c81c5301554ba1aef2dd0fc773e3b52cb4a6565dccb430daca316e6a5aa9519e472717c5d94bae2ebf1ba17489383f9bd1779ed7a049730f0b9d35c8fdc8c70ab625f17372018e89919d0f5834d7eed088f06cc4a1c57ab088b867eed2ff271bf189e7441332b1528c3a6839220c749317a1f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1401}}, {0xc1, &(0x7f00000006c0)=@string={0xc1, 0x3, "8718d97300260037c40e1295695d68db3e4c88742678e6977afe9ce06a1fbe214e67e6180c00d082b81e874519a2196f82f1c6568332fea1210903709a93b0c2f8e3626379e760219f1ab6011cb837b56cee2e34ef51edf87a1c2da817e952c4dbbb2b659c5032e595d4e6d18968899fdafca482b8ffb09ad2c5b64f4f9bff2576571fdbf890b1dba02bb418aec33b09a28a620cf09b94e9ee0d98ada17624f9bcbffd4587b92640a1d67505d86903eaa8617625c20aa28a0a0bc366e9ba6b"}}, {0xa4, &(0x7f00000007c0)=@string={0xa4, 0x3, "a0e068bb48c7fe5856a34b3ec0ca4b43bd8d490c989b571c41ef96f39f265d21b08383959e38397ac2b439aa4e414bbc29017a561c86d2cbffea273a76974dc1cbcd316be521e00856aa41d368662223738606c66ccc49138c9b933649826196bb49eb624b581d6c0405f9fb9aa68d2f0be4b7c5463ffc166946da67b132166f8cf630674377dd884218ea5e63dc1f2b90b0dda8ee0118e61893f3375f93e0d6e686"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x412}}, {0x12, &(0x7f0000000940)=@string={0x12, 0x3, "6b440d76410741225adac532c36272af"}}]}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$isdn(0xffffffffffffffff, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) read(r0, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000c00)=[{0x63, 0x2000, 0x0, 0x0}, {0x1, 0xc011, 0x0, 0x0}], 0x2}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/199, 0xc7}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000140)=0x6e, 0x1800) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xc436, 0x5b, 0x7f, 0x7f}, {0x800, 0x52, 0x3, 0x8}, {0x10, 0x6, 0x6, 0x8}, {0x1, 0x5, 0x7, 0xe}]}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x106, 0xa}}, 0x20) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x8000000000000000]}}) kernel console output (not intermixed with test programs): 4135][ T5877] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 149.789726][ T6816] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.807357][ T5877] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.835292][ T5877] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.896221][ T5877] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.935571][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.967901][ T5877] usb 1-1: config 0 descriptor?? [ 149.991998][ T5877] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 150.358051][ T6812] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 150.688403][ T5877] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 150.932312][ T5877] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.965486][ T5890] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.994754][ T5877] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 151.037079][ T5877] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.098736][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.161199][ T6831] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 151.165724][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 151.185202][ T5890] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 151.195667][ T5890] usb 3-1: config 0 has no interface number 0 [ 151.207393][ T5877] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.208670][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.289474][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 151.320723][ T5890] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.423795][ T5890] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 151.541292][ T5890] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.613636][ T5890] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 151.655050][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.722364][ T5890] usb 3-1: config 0 descriptor?? [ 151.746994][ T5890] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 151.997829][ T5890] usb 3-1: USB disconnect, device number 7 [ 152.004325][ T5877] usb 1-1: USB disconnect, device number 11 [ 152.030616][ T5890] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 152.054018][ T5877] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 152.150697][ T6846] netlink: 'syz.1.256': attribute type 12 has an invalid length. [ 152.194086][ T6846] netlink: 'syz.1.256': attribute type 29 has an invalid length. [ 152.223512][ T6846] netlink: 148 bytes leftover after parsing attributes in process `syz.1.256'. [ 152.649606][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 152.649625][ T30] audit: type=1326 audit(1769617465.617:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.2.262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04dfd9aeb9 code=0x0 [ 152.916295][ T6868] loop8: detected capacity change from 0 to 8 [ 152.934700][ T5841] Dev loop8: unable to read RDB block 8 [ 152.940780][ T5841] loop8: unable to read partition table [ 152.955057][ T5841] loop8: partition table beyond EOD, truncated [ 152.985050][ T6868] Dev loop8: unable to read RDB block 8 [ 153.002324][ T6868] loop8: unable to read partition table [ 153.018852][ T6868] loop8: partition table beyond EOD, truncated [ 153.048753][ T6872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.060395][ T6868] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 153.505617][ T10] usb 5-1: USB disconnect, device number 10 [ 153.543435][ T6878] netlink: 592 bytes leftover after parsing attributes in process `syz.1.266'. [ 153.701018][ T6880] syzkaller0: entered promiscuous mode [ 153.707925][ T6880] syzkaller0: entered allmulticast mode [ 153.784870][ T6882] netlink: 'syz.1.268': attribute type 12 has an invalid length. [ 153.803025][ T6882] netlink: 'syz.1.268': attribute type 29 has an invalid length. [ 153.821569][ T6882] netlink: 148 bytes leftover after parsing attributes in process `syz.1.268'. [ 154.201219][ T6898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 154.415594][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.575567][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 154.583224][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 154.593350][ T9] usb 1-1: config 0 has no interface number 0 [ 154.600231][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.611718][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 154.624830][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.636991][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 154.647582][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.662761][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 154.672411][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.686956][ T9] usb 1-1: config 0 descriptor?? [ 154.709302][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 154.926774][ T6896] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90 [ 154.986507][ T5890] usb 1-1: USB disconnect, device number 12 [ 155.030982][ T5890] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 155.211855][ T6934] FAULT_INJECTION: forcing a failure. [ 155.211855][ T6934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.230794][ T6934] CPU: 0 UID: 0 PID: 6934 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT(full) [ 155.230824][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 155.230837][ T6934] Call Trace: [ 155.230846][ T6934] [ 155.230855][ T6934] dump_stack_lvl+0xe8/0x150 [ 155.230890][ T6934] should_fail_ex+0x412/0x560 [ 155.230922][ T6934] _copy_from_user+0x2d/0xb0 [ 155.230955][ T6934] ___sys_sendmsg+0x1c6/0x360 [ 155.230983][ T6934] ? __lock_acquire+0x6b5/0x2cf0 [ 155.231017][ T6934] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.231081][ T6934] ? __fget_files+0x2a/0x420 [ 155.231104][ T6934] ? __fget_files+0x3a0/0x420 [ 155.231138][ T6934] __x64_sys_sendmsg+0x1bd/0x2a0 [ 155.231170][ T6934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.231207][ T6934] ? __pfx_ksys_write+0x10/0x10 [ 155.231246][ T6934] do_syscall_64+0xe2/0xf80 [ 155.231268][ T6934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.231288][ T6934] ? trace_irq_disable+0x37/0x100 [ 155.231308][ T6934] ? clear_bhb_loop+0x60/0xb0 [ 155.231333][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.231354][ T6934] RIP: 0033:0x7f72a599aeb9 [ 155.231371][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.231388][ T6934] RSP: 002b:00007f72a6804028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.231411][ T6934] RAX: ffffffffffffffda RBX: 00007f72a5c15fa0 RCX: 00007f72a599aeb9 [ 155.231427][ T6934] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 155.231440][ T6934] RBP: 00007f72a6804090 R08: 0000000000000000 R09: 0000000000000000 [ 155.231453][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.231466][ T6934] R13: 00007f72a5c16038 R14: 00007f72a5c15fa0 R15: 00007f72a5d3fa48 [ 155.231500][ T6934] [ 155.427786][ T6936] netlink: 592 bytes leftover after parsing attributes in process `syz.4.278'. [ 155.513066][ T9] IPVS: starting estimator thread 0... [ 155.610107][ T6944] gtp0: entered promiscuous mode [ 155.615368][ T6940] IPVS: using max 38 ests per chain, 91200 per kthread [ 155.623495][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 155.705839][ T5890] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.907931][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.927930][ T5890] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.960256][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.994179][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.030330][ T6937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.074210][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.196782][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 156.227620][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 156.274922][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 156.411614][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.432741][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.448622][ T6968] loop4: detected capacity change from 0 to 8 [ 156.460000][ T5841] Dev loop4: unable to read RDB block 8 [ 156.466091][ T5841] loop4: unable to read partition table [ 156.482707][ T5841] loop4: partition table beyond EOD, truncated [ 156.491599][ T6968] Dev loop4: unable to read RDB block 8 [ 156.498736][ T6968] loop4: unable to read partition table [ 156.520050][ T6968] loop4: partition table beyond EOD, truncated [ 156.526975][ T6968] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 156.559413][ T5841] Dev loop4: unable to read RDB block 8 [ 156.565244][ T5841] loop4: unable to read partition table [ 156.578045][ T5841] loop4: partition table beyond EOD, truncated [ 156.605877][ T6975] Dev loop4: unable to read RDB block 8 [ 156.617414][ T6976] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.290'. [ 156.648131][ T6975] loop4: unable to read partition table [ 156.684043][ T6975] loop4: partition table beyond EOD, truncated [ 156.711590][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.713316][ T6975] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 156.783707][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.915556][ T5890] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 157.051941][ T6989] tipc: Failed to obtain node identity [ 157.058165][ T6989] tipc: Enabling of bearer rejected, failed to enable media [ 157.097179][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 157.104764][ T5890] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 157.113767][ T5890] usb 5-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 157.124555][ T5890] usb 5-1: config 0 has no interface number 0 [ 157.130757][ T5890] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 157.142832][ T5890] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 157.154728][ T5890] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 157.167046][ T5890] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 24979, setting to 1024 [ 157.183567][ T5890] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 157.193948][ T5890] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.207534][ T5890] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 157.216741][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.237498][ T5890] usb 5-1: config 0 descriptor?? [ 157.244564][ T6968] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.253932][ T6968] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.289170][ T5890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.478876][ T5890] usb 5-1: USB disconnect, device number 11 [ 158.163862][ T7010] CUSE: unknown device info "" [ 158.174554][ T7010] CUSE: unknown device info "" [ 158.212293][ T7010] CUSE: unknown device info "" [ 158.245317][ T7010] CUSE: zero length info key specified [ 158.284558][ T24] usb 2-1: USB disconnect, device number 11 [ 158.468375][ T7004] netlink: 'syz.3.303': attribute type 11 has an invalid length. [ 158.560029][ T7023] netlink: 7 bytes leftover after parsing attributes in process `syz.1.308'. [ 158.579796][ T7023] netlink: 7 bytes leftover after parsing attributes in process `syz.1.308'. [ 158.612127][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 159.005487][ T798] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.019986][ T7025] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 159.057745][ T7031] netlink: 'syz.4.309': attribute type 12 has an invalid length. [ 159.082700][ T7031] netlink: 'syz.4.309': attribute type 29 has an invalid length. [ 159.189632][ T798] usb 2-1: Using ep0 maxpacket: 8 [ 159.201020][ T798] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 159.225289][ T798] usb 2-1: config 0 has no interface number 0 [ 159.251937][ T798] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.283658][ T798] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.319673][ T798] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.350957][ T7042] FAULT_INJECTION: forcing a failure. [ 159.350957][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 159.373889][ T798] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 159.386497][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.4.312 Not tainted syzkaller #0 PREEMPT(full) [ 159.386524][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 159.386545][ T7042] Call Trace: [ 159.386552][ T7042] [ 159.386559][ T7042] dump_stack_lvl+0xe8/0x150 [ 159.386582][ T7042] should_fail_ex+0x412/0x560 [ 159.386604][ T7042] should_failslab+0xa8/0x100 [ 159.386623][ T7042] __kmalloc_cache_noprof+0x83/0x6e0 [ 159.386637][ T7042] ? __pfx_stack_trace_save+0x10/0x10 [ 159.386655][ T7042] ? rtnl_newlink+0x136/0x1be0 [ 159.386676][ T7042] rtnl_newlink+0x136/0x1be0 [ 159.386693][ T7042] ? kasan_save_track+0x4f/0x80 [ 159.386705][ T7042] ? kasan_save_track+0x3e/0x80 [ 159.386716][ T7042] ? kasan_save_free_info+0x46/0x50 [ 159.386734][ T7042] ? __kasan_slab_free+0x5c/0x80 [ 159.386746][ T7042] ? kmem_cache_free+0x195/0x610 [ 159.386760][ T7042] ? __dev_queue_xmit+0x168f/0x3850 [ 159.386780][ T7042] ? __netlink_deliver_tap+0x5ad/0x850 [ 159.386794][ T7042] ? netlink_deliver_tap+0x19c/0x1b0 [ 159.386807][ T7042] ? netlink_unicast+0x7e3/0x9b0 [ 159.386826][ T7042] ? netlink_sendmsg+0x813/0xb40 [ 159.386841][ T7042] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.386856][ T7042] ? do_syscall_64+0xe2/0xf80 [ 159.386870][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.386908][ T7042] ? kasan_quarantine_put+0xbb/0x1f0 [ 159.386930][ T7042] ? lockdep_hardirqs_on+0x7a/0x110 [ 159.386948][ T7042] ? kmem_cache_free+0x195/0x610 [ 159.386961][ T7042] ? nlmon_xmit+0xb0/0x100 [ 159.386983][ T7042] ? __lock_acquire+0x6b5/0x2cf0 [ 159.387010][ T7042] ? __local_bh_enable_ip+0xd0/0x130 [ 159.387023][ T7042] ? lockdep_hardirqs_on+0x7a/0x110 [ 159.387036][ T7042] ? __dev_queue_xmit+0x274/0x3850 [ 159.387056][ T7042] ? __local_bh_enable_ip+0xd0/0x130 [ 159.387067][ T7042] ? __dev_queue_xmit+0x274/0x3850 [ 159.387092][ T7042] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 159.387118][ T7042] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.387134][ T7042] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 159.387152][ T7042] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 159.387168][ T7042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.387183][ T7042] ? ref_tracker_free+0x693/0x840 [ 159.387199][ T7042] ? __copy_skb_header+0xa3/0x4a0 [ 159.387220][ T7042] ? __pfx_ref_tracker_free+0x10/0x10 [ 159.387245][ T7042] netlink_rcv_skb+0x232/0x4b0 [ 159.387261][ T7042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.387278][ T7042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.387300][ T7042] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.387320][ T7042] netlink_unicast+0x80f/0x9b0 [ 159.387348][ T7042] ? __pfx_netlink_unicast+0x10/0x10 [ 159.387368][ T7042] ? __alloc_skb+0x193/0x390 [ 159.387385][ T7042] ? netlink_sendmsg+0x650/0xb40 [ 159.387398][ T7042] ? skb_put+0x11b/0x210 [ 159.387418][ T7042] netlink_sendmsg+0x813/0xb40 [ 159.387451][ T7042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.387477][ T7042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 159.387496][ T7042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.387513][ T7042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.387527][ T7042] ____sys_sendmsg+0xa68/0xad0 [ 159.387551][ T7042] ? __might_fault+0xaf/0x130 [ 159.387583][ T7042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.387614][ T7042] ? import_iovec+0x73/0xa0 [ 159.387639][ T7042] ___sys_sendmsg+0x2a5/0x360 [ 159.387661][ T7042] ? __lock_acquire+0x6b5/0x2cf0 [ 159.387684][ T7042] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.387712][ T7042] ? kstrtouint+0x6e/0xe0 [ 159.387747][ T7042] ? __fget_files+0x2a/0x420 [ 159.387762][ T7042] ? __fget_files+0x3a0/0x420 [ 159.387785][ T7042] __sys_sendmmsg+0x27c/0x4e0 [ 159.387812][ T7042] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.387830][ T7042] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 159.387864][ T7042] ? ksys_write+0x242/0x270 [ 159.387887][ T7042] ? __pfx_ksys_write+0x10/0x10 [ 159.387912][ T7042] __x64_sys_sendmmsg+0xa0/0xc0 [ 159.387934][ T7042] do_syscall_64+0xe2/0xf80 [ 159.387954][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.387967][ T7042] ? trace_irq_disable+0x37/0x100 [ 159.387981][ T7042] ? clear_bhb_loop+0x60/0xb0 [ 159.387998][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.388013][ T7042] RIP: 0033:0x7f4b9b39aeb9 [ 159.388026][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.388038][ T7042] RSP: 002b:00007f4b9c2d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.388053][ T7042] RAX: ffffffffffffffda RBX: 00007f4b9b615fa0 RCX: 00007f4b9b39aeb9 [ 159.388064][ T7042] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000f [ 159.388074][ T7042] RBP: 00007f4b9c2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 159.388082][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.388090][ T7042] R13: 00007f4b9b616038 R14: 00007f4b9b615fa0 R15: 00007f4b9b73fa48 [ 159.388113][ T7042] [ 159.409047][ T798] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.207490][ T798] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 160.229793][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.363283][ T798] usb 2-1: config 0 descriptor?? [ 160.435526][ T798] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 160.625783][ T7034] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 160.636236][ T9] usb 2-1: USB disconnect, device number 12 [ 160.683129][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 160.885363][ T798] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 161.056504][ T7063] __nla_validate_parse: 1 callbacks suppressed [ 161.056524][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 161.074763][ T798] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.089368][ T798] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.110165][ T798] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.132463][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.209659][ T7055] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 161.241338][ T798] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.719334][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.753673][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.784040][ T7073] netlink: 182 bytes leftover after parsing attributes in process `syz.3.321'. [ 162.100869][ T7076] netlink: 'syz.2.322': attribute type 12 has an invalid length. [ 162.114527][ T7076] netlink: 'syz.2.322': attribute type 29 has an invalid length. [ 162.124078][ T7076] netlink: 148 bytes leftover after parsing attributes in process `syz.2.322'. [ 162.295791][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.327841][ T7082] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 162.336567][ T7082] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 162.435863][ T10] usb 2-1: device descriptor read/64, error -71 [ 162.475312][ T798] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.672957][ T7090] netlink: 'syz.2.327': attribute type 3 has an invalid length. [ 162.705932][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 162.715295][ T798] usb 1-1: Using ep0 maxpacket: 16 [ 162.725676][ T798] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 162.735454][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.752225][ T798] usb 1-1: Product: syz [ 162.763031][ T798] usb 1-1: Manufacturer: syz [ 162.774687][ T798] usb 1-1: SerialNumber: syz [ 162.846009][ T10] usb 2-1: device descriptor read/64, error -71 [ 162.956040][ T10] usb usb2-port1: attempt power cycle [ 162.998411][ T798] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 163.053986][ T798] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.113812][ T798] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 163.123154][ T798] usb 1-1: media controller created [ 163.322324][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 163.370879][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.383150][ T10] usb 2-1: device descriptor read/8, error -71 [ 163.398090][ T798] zl10353_read_register: readreg error (reg=127, ret==-71) [ 163.563720][ T9] usb 5-1: USB disconnect, device number 12 [ 163.574526][ T798] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 163.586545][ T798] usb 1-1: USB disconnect, device number 13 [ 163.635269][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 163.686870][ T10] usb 2-1: device descriptor read/8, error -71 [ 163.865994][ T10] usb usb2-port1: unable to enumerate USB device [ 164.116262][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.149188][ T7103] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000011' [ 164.285518][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 164.322381][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 164.430252][ T9] usb 5-1: config 0 has no interface number 0 [ 164.461568][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.503693][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 164.510299][ T7108] loop8: detected capacity change from 0 to 8 [ 164.516447][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.532666][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 164.581325][ T7108] Dev loop8: unable to read RDB block 8 [ 164.607935][ T7108] loop8: unable to read partition table [ 164.626729][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.673581][ T7108] loop8: partition table beyond EOD, truncated [ 164.693503][ T7108] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 164.724674][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 164.773682][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.807436][ T9] usb 5-1: config 0 descriptor?? [ 164.841637][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 165.039772][ T7096] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 165.056072][ T24] usb 5-1: USB disconnect, device number 13 [ 165.075929][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 165.416803][ T7125] netlink: 100 bytes leftover after parsing attributes in process `syz.0.337'. [ 165.966266][ T7144] x_tables: ip_tables: osf match: only valid for protocol 6 [ 166.395590][ T5916] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 166.593907][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.627396][ T5916] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 166.733640][ T7158] syzkaller1: entered promiscuous mode [ 166.733665][ T7158] syzkaller1: entered allmulticast mode [ 166.750930][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.756274][ T5916] usb 2-1: config 0 descriptor?? [ 167.165276][ T5897] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 167.168126][ T5916] aquacomputer_d5next 0003:0C70:F00B.0004: hidraw1: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0 [ 167.368868][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.403897][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.414071][ T5916] usb 2-1: USB disconnect, device number 17 [ 167.458663][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.504231][ T5897] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 167.536928][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.624670][ T7168] fido_id[7168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 167.665889][ T5897] usb 1-1: config 0 descriptor?? [ 168.278620][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.290589][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.424584][ T5897] ntrig 0003:1B96:0009.0005: item fetching failed at offset 2/5 [ 168.456002][ T5897] ntrig 0003:1B96:0009.0005: parse failed [ 168.461906][ T5897] ntrig 0003:1B96:0009.0005: probe with driver ntrig failed with error -22 [ 168.785023][ T7180] input: syz0 as /devices/virtual/input/input9 [ 169.042170][ T7178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.352'. [ 169.042224][ T7178] netlink: 'syz.1.352': attribute type 6 has an invalid length. [ 169.042257][ T7178] netlink: 'syz.1.352': attribute type 5 has an invalid length. [ 169.604605][ T7194] bridge_slave_0: left allmulticast mode [ 169.611697][ T7194] bridge_slave_0: left promiscuous mode [ 169.617819][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.630499][ T7194] bridge_slave_1: left allmulticast mode [ 169.715796][ T7194] bridge_slave_1: left promiscuous mode [ 169.721897][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.768983][ T5897] usb 1-1: USB disconnect, device number 14 [ 169.904225][ T7194] bond0: (slave bond_slave_0): Releasing backup interface [ 170.288593][ T7194] bond0: (slave bond_slave_1): Releasing backup interface [ 170.379907][ T7194] team0: Port device team_slave_0 removed [ 170.410813][ T7194] team0: Port device team_slave_1 removed [ 170.450981][ T7194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.471056][ T7194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.510637][ T7194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.545262][ T7194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.581528][ T7194] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.684846][ T7199] syzkaller0: entered promiscuous mode [ 170.721129][ T7199] syzkaller0: entered allmulticast mode [ 170.950966][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 170.975799][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 171.181401][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 171.246911][ T7211] macsec1: entered promiscuous mode [ 171.252324][ T7211] team0: entered promiscuous mode [ 171.260154][ T7211] macsec1: entered allmulticast mode [ 171.341108][ T7211] team0: entered allmulticast mode [ 171.366734][ T7211] team0: left allmulticast mode [ 171.372268][ T7211] team0: left promiscuous mode [ 171.927535][ T7223] netlink: 39 bytes leftover after parsing attributes in process `syz.4.364'. [ 171.938615][ T30] audit: type=1326 audit(1769617484.887:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 172.205879][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 172.247607][ T7223] netlink: 1 bytes leftover after parsing attributes in process `syz.4.364'. [ 172.258938][ T30] audit: type=1326 audit(1769617484.887:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 172.330814][ T30] audit: type=1326 audit(1769617484.887:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 172.606882][ T7223] tipc: Started in network mode [ 172.613277][ T7223] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 172.624055][ T7223] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 172.633537][ T7223] tipc: Enabled bearer , priority 10 [ 172.666835][ T30] audit: type=1326 audit(1769617484.887:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 172.885078][ T30] audit: type=1326 audit(1769617484.887:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 173.034240][ T7237] FAULT_INJECTION: forcing a failure. [ 173.034240][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 173.083254][ T7237] CPU: 1 UID: 0 PID: 7237 Comm: syz.1.366 Not tainted syzkaller #0 PREEMPT(full) [ 173.083277][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 173.083287][ T7237] Call Trace: [ 173.083293][ T7237] [ 173.083300][ T7237] dump_stack_lvl+0xe8/0x150 [ 173.083333][ T7237] should_fail_ex+0x412/0x560 [ 173.083355][ T7237] should_failslab+0xa8/0x100 [ 173.083374][ T7237] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 173.083396][ T7237] ? look_up_lock_class+0x57/0x110 [ 173.083416][ T7237] ? __d_alloc+0x37/0x6f0 [ 173.083438][ T7237] __d_alloc+0x37/0x6f0 [ 173.083456][ T7237] ? __lock_acquire+0x6b5/0x2cf0 [ 173.083480][ T7237] d_alloc_parallel+0xe6/0x1610 [ 173.083502][ T7237] ? look_up_lock_class+0x57/0x110 [ 173.083518][ T7237] ? register_lock_class+0x31/0x2e0 [ 173.083536][ T7237] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 173.083559][ T7237] ? __lock_acquire+0x6b5/0x2cf0 [ 173.083583][ T7237] ? __pfx_d_alloc_parallel+0x10/0x10 [ 173.083601][ T7237] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.083621][ T7237] ? __raw_spin_lock_init+0x45/0x100 [ 173.083639][ T7237] ? __init_waitqueue_head+0xa9/0x150 [ 173.083660][ T7237] __lookup_slow+0x137/0x410 [ 173.083680][ T7237] ? __pfx___lookup_slow+0x10/0x10 [ 173.083707][ T7237] ? down_read+0x272/0x2e0 [ 173.083727][ T7237] lookup_slow+0x53/0x70 [ 173.083745][ T7237] path_lookupat+0x3f5/0x8c0 [ 173.083773][ T7237] filename_lookup+0x256/0x5d0 [ 173.083794][ T7237] ? __pfx_filename_lookup+0x10/0x10 [ 173.083809][ T7237] ? __lock_acquire+0x6b5/0x2cf0 [ 173.083846][ T7237] ? __might_fault+0xaf/0x130 [ 173.083868][ T7237] ? __might_fault+0xaf/0x130 [ 173.083894][ T7237] do_linkat+0x126/0x5b0 [ 173.083914][ T7237] ? __pfx_do_linkat+0x10/0x10 [ 173.083926][ T7237] ? strncpy_from_user+0x150/0x2b0 [ 173.083944][ T7237] ? getname_flags+0x1e4/0x540 [ 173.083962][ T7237] __x64_sys_link+0x82/0x90 [ 173.083977][ T7237] do_syscall_64+0xe2/0xf80 [ 173.083992][ T7237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.084006][ T7237] ? trace_irq_disable+0x37/0x100 [ 173.084020][ T7237] ? clear_bhb_loop+0x60/0xb0 [ 173.084037][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.084052][ T7237] RIP: 0033:0x7f901819aeb9 [ 173.084065][ T7237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.084078][ T7237] RSP: 002b:00007f9019073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 173.084093][ T7237] RAX: ffffffffffffffda RBX: 00007f9018416090 RCX: 00007f901819aeb9 [ 173.084104][ T7237] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000100 [ 173.084114][ T7237] RBP: 00007f9019073090 R08: 0000000000000000 R09: 0000000000000000 [ 173.084138][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.084147][ T7237] R13: 00007f9018416128 R14: 00007f9018416090 R15: 00007f901853fa48 [ 173.084170][ T7237] [ 173.098369][ T30] audit: type=1326 audit(1769617484.887:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 173.098407][ T30] audit: type=1326 audit(1769617484.887:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 173.098436][ T30] audit: type=1326 audit(1769617484.887:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 173.098465][ T30] audit: type=1326 audit(1769617484.887:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 173.098493][ T30] audit: type=1326 audit(1769617484.887:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b9b39aeb9 code=0x7ffc0000 [ 173.747005][ T5890] tipc: Node number set to 1 [ 174.459781][ T5890] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 174.625241][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 174.632471][ T5890] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 174.806132][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 175.206114][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.216763][ T5890] usb 1-1: config 0 has no interface number 0 [ 175.230403][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 175.240249][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.250553][ T7259] netlink: 104 bytes leftover after parsing attributes in process `syz.3.375'. [ 175.260828][ T5890] usb 1-1: Product: syz [ 175.269494][ T5890] usb 1-1: Manufacturer: syz [ 175.285711][ T5890] usb 1-1: SerialNumber: syz [ 175.306531][ T5890] usb 1-1: config 0 descriptor?? [ 175.309029][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 175.321040][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 175.339530][ T5890] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 175.350106][ T5890] uvcvideo 1-1:0.105: No valid video chain found. [ 175.756245][ T799] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 175.962206][ T799] usb 5-1: Using ep0 maxpacket: 16 [ 176.012720][ T799] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 176.041372][ T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.065608][ T799] usb 5-1: Product: syz [ 176.147864][ T799] usb 5-1: Manufacturer: syz [ 176.183128][ T799] usb 5-1: SerialNumber: syz [ 176.458507][ T799] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 176.497157][ T799] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.512862][ T799] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 176.549346][ T799] usb 5-1: media controller created [ 176.636435][ T799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.774360][ T799] zl10353_read_register: readreg error (reg=127, ret==-71) [ 176.965990][ T9] usb 1-1: USB disconnect, device number 15 [ 177.024025][ T799] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 177.038563][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 177.038582][ T30] audit: type=1326 audit(1769617490.007:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 177.147574][ T30] audit: type=1326 audit(1769617490.117:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 177.221711][ T5890] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 177.467195][ T30] audit: type=1326 audit(1769617490.417:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 177.528640][ T30] audit: type=1326 audit(1769617490.417:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 177.615628][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 177.718515][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.720713][ T799] usb 5-1: USB disconnect, device number 14 [ 177.751727][ T5890] usb 3-1: config 1 has no interfaces? [ 177.765223][ T30] audit: type=1326 audit(1769617490.417:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 177.798239][ T5890] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 177.828394][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.851950][ T30] audit: type=1326 audit(1769617490.487:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 177.972848][ T30] audit: type=1326 audit(1769617490.597:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 178.065985][ T30] audit: type=1326 audit(1769617490.597:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 178.095540][ T30] audit: type=1326 audit(1769617490.687:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 178.125577][ T30] audit: type=1326 audit(1769617490.687:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.2.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dfd9ab4b code=0x7ffc0000 [ 178.214969][ T5890] usb 3-1: string descriptor 0 read error: -32 [ 179.642414][ T7310] netlink: 308 bytes leftover after parsing attributes in process `syz.3.387'. [ 179.689469][ T7311] misc userio: Begin command sent, but we're already running [ 179.833700][ T5890] usb 3-1: USB disconnect, device number 8 [ 180.485553][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 180.668066][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 180.690035][ T10] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 180.710527][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.726351][ T10] usb 3-1: Product: syz [ 180.730584][ T10] usb 3-1: Manufacturer: syz [ 180.744739][ T10] usb 3-1: SerialNumber: syz [ 180.967097][ T10] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 180.969478][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 180.969814][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 180.969866][ T10] usb 3-1: media controller created [ 180.986366][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.168692][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 181.213117][ T7343] warning: `syz.0.399' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.269735][ T7345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.308386][ T10] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 181.327678][ T10] usb 3-1: USB disconnect, device number 9 [ 181.495307][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 181.613815][ T7348] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.681958][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 181.702781][ T24] usb 1-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 181.723960][ T24] usb 1-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.748869][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 181.762312][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.791862][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.808184][ T24] usb 1-1: Product: Ë憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓êŠÝœã„¿â†¦è£ŒèŽ¡ê‰³îµ°å’†çº¥ã‰¸å¾žà®´è®§ê±¿â¨”亓뉭얄슀葋ä¤ë¹—馿㞘톷注栴享◗◧報ꓨèŽè—·â¢žë¥ï¯•ì¢¢ë–¸æž±å˜¯ë–¦æ‘µï¹§ê²¥éˆáœ‡ä¤¬îªŠîŒ¹æ¼³ [ 181.870819][ T24] usb 1-1: SerialNumber: syz [ 181.888013][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 182.057399][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 182.068091][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.085459][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.106847][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.130317][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.138464][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.155313][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.172646][ T10] usb 2-1: Product: syz [ 182.178700][ T24] cdc_ether 1-1:1.0: skipping garbage [ 182.187058][ T24] cdc_ether 1-1:1.0: skipping garbage [ 182.193615][ T10] usb 2-1: Manufacturer: syz [ 182.199924][ T10] usb 2-1: SerialNumber: syz [ 182.206715][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 182.230108][ T24] usb 1-1: USB disconnect, device number 16 [ 182.589048][ T10] usb 2-1: 0:2 : does not exist [ 182.603905][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 182.634401][ T10] usb 2-1: USB disconnect, device number 18 [ 182.646365][ T5890] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.711936][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.836959][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.844714][ T5890] usb 5-1: too many configurations: 187, using maximum allowed: 8 [ 182.882483][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 182.897058][ T5890] usb 5-1: can't read configurations, error -61 [ 183.045275][ T5890] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 183.295317][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.303179][ T5890] usb 5-1: too many configurations: 187, using maximum allowed: 8 [ 183.330055][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 183.339124][ T5890] usb 5-1: can't read configurations, error -61 [ 183.373911][ T5890] usb usb5-port1: attempt power cycle [ 183.486709][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 183.745561][ T5890] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 183.780450][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 183.805098][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.813059][ T5890] usb 5-1: too many configurations: 187, using maximum allowed: 8 [ 183.871351][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 183.898514][ T5890] usb 5-1: can't read configurations, error -61 [ 184.106745][ T5890] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.199885][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.212935][ T5890] usb 5-1: too many configurations: 187, using maximum allowed: 8 [ 184.241085][ T5890] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 184.258102][ T5890] usb 5-1: can't read configurations, error -61 [ 184.291826][ T5890] usb usb5-port1: unable to enumerate USB device [ 184.481275][ T7402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.295634][ T5890] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 185.498353][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 185.526143][ T5890] usb 1-1: config 1 interface 0 altsetting 55 bulk endpoint 0x82 has invalid maxpacket 1023 [ 185.569654][ T5890] usb 1-1: config 1 interface 0 altsetting 55 bulk endpoint 0x3 has invalid maxpacket 64 [ 185.621586][ T5890] usb 1-1: config 1 interface 0 has no altsetting 0 [ 185.641581][ T5890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.663174][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.682966][ T5890] usb 1-1: Product: syz [ 185.692797][ T5890] usb 1-1: Manufacturer: syz [ 185.704634][ T5890] usb 1-1: SerialNumber: syz [ 185.748350][ T7410] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.774174][ T7410] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 186.198393][ T7426] sch_tbf: burst 25 is lower than device syzkaller0 mtu (1500) ! [ 186.249368][ T5890] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 186.300952][ T5890] usb 1-1: USB disconnect, device number 17 [ 187.866323][ T7448] capability: warning: `syz.0.434' uses deprecated v2 capabilities in a way that may be insecure [ 187.938821][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 187.938840][ T30] audit: type=1326 audit(1769617500.907:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.1.437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f901819aeb9 code=0x0 [ 187.982816][ T7455] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 188.157022][ T7464] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 188.241980][ T7464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.891455][ T5890] IPVS: starting estimator thread 0... [ 188.995824][ T7483] IPVS: using max 38 ests per chain, 91200 per kthread [ 189.866772][ T7491] input: syz1 as /devices/virtual/input/input11 [ 189.897777][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.447'. [ 190.295593][ T5916] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.473582][ T7498] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 190.535068][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 190.549815][ T5916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 190.573190][ T5916] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 190.585370][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.598322][ T5916] usb 3-1: Product: syz [ 190.605599][ T5916] usb 3-1: Manufacturer: syz [ 190.610252][ T5916] usb 3-1: SerialNumber: syz [ 190.621019][ T5916] usb 3-1: config 0 descriptor?? [ 190.636289][ T7494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.640258][ T7498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.643922][ T7494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.707460][ T7501] vlan0: entered allmulticast mode [ 190.749832][ T7501] bond1: (slave vlan0): making interface the new active one [ 190.824912][ T7501] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 190.870391][ T7494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.886268][ T7494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.179391][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 191.220764][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 191.255861][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 191.332930][ T5916] Error reading MAC address [ 191.430913][ T7519] FAULT_INJECTION: forcing a failure. [ 191.430913][ T7519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.444692][ T7519] CPU: 0 UID: 0 PID: 7519 Comm: syz.1.456 Not tainted syzkaller #0 PREEMPT(full) [ 191.444720][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 191.444734][ T7519] Call Trace: [ 191.444742][ T7519] [ 191.444751][ T7519] dump_stack_lvl+0xe8/0x150 [ 191.444784][ T7519] should_fail_ex+0x412/0x560 [ 191.444813][ T7519] _copy_from_user+0x2d/0xb0 [ 191.444846][ T7519] ___sys_sendmsg+0x1c6/0x360 [ 191.444873][ T7519] ? __lock_acquire+0x6b5/0x2cf0 [ 191.444910][ T7519] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.444972][ T7519] ? __fget_files+0x2a/0x420 [ 191.444994][ T7519] ? __fget_files+0x3a0/0x420 [ 191.445027][ T7519] __x64_sys_sendmsg+0x1bd/0x2a0 [ 191.445059][ T7519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.445097][ T7519] ? __pfx_ksys_write+0x10/0x10 [ 191.445137][ T7519] do_syscall_64+0xe2/0xf80 [ 191.445159][ T7519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.445178][ T7519] ? trace_irq_disable+0x37/0x100 [ 191.445199][ T7519] ? clear_bhb_loop+0x60/0xb0 [ 191.445222][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.445243][ T7519] RIP: 0033:0x7f901819aeb9 [ 191.445261][ T7519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.445279][ T7519] RSP: 002b:00007f9019094028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.445301][ T7519] RAX: ffffffffffffffda RBX: 00007f9018415fa0 RCX: 00007f901819aeb9 [ 191.445317][ T7519] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 191.445330][ T7519] RBP: 00007f9019094090 R08: 0000000000000000 R09: 0000000000000000 [ 191.445343][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.445363][ T7519] R13: 00007f9018416038 R14: 00007f9018415fa0 R15: 00007f901853fa48 [ 191.445396][ T7519] [ 191.910965][ T7532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 192.026829][ T5897] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.215507][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 192.240809][ T5897] usb 5-1: config 10 has an invalid interface number: 211 but max is 0 [ 192.254008][ T5897] usb 5-1: config 10 has no interface number 0 [ 192.260687][ T5897] usb 5-1: config 10 interface 211 has no altsetting 0 [ 192.280063][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice=99.7e [ 192.291308][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.314611][ T5897] usb 5-1: Product: syz [ 192.319814][ T5897] usb 5-1: Manufacturer: syz [ 192.326206][ T5897] usb 5-1: SerialNumber: syz [ 192.549441][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.559926][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.585238][ T5916] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 192.725244][ T5916] usb 1-1: device descriptor read/64, error -71 [ 192.791753][ T5897] appletouch 5-1:10.211: Could not find int-in endpoint [ 192.799160][ T5897] appletouch 5-1:10.211: probe with driver appletouch failed with error -5 [ 192.834586][ T5897] usbhid 5-1:10.211: couldn't find an input interrupt endpoint [ 192.997840][ T5916] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 193.026962][ T5897] usb 5-1: USB disconnect, device number 19 [ 193.135568][ T5916] usb 1-1: device descriptor read/64, error -71 [ 193.142750][ T798] usb 3-1: USB disconnect, device number 10 [ 193.189824][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 193.264295][ T5916] usb usb1-port1: attempt power cycle [ 193.370214][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 193.380315][ T7559] netlink: 344 bytes leftover after parsing attributes in process `syz.1.472'. [ 193.635589][ T5916] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 193.676261][ T5916] usb 1-1: device descriptor read/8, error -71 [ 193.951758][ T5916] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 193.998377][ T5916] usb 1-1: device descriptor read/8, error -71 [ 194.116033][ T5916] usb usb1-port1: unable to enumerate USB device [ 195.224512][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.299002][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.646092][ T5836] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 195.727170][ T7557] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.867088][ T7592] syzkaller0: entered promiscuous mode [ 195.873354][ T7592] syzkaller0: entered allmulticast mode [ 196.018438][ T5916] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 196.182286][ T5916] usb 5-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.232655][ T5916] usb 5-1: config 1 interface 0 has no altsetting 0 [ 196.261166][ T5916] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 196.285347][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.344696][ T5916] usb 5-1: Product: syz [ 196.371159][ T5916] usb 5-1: Manufacturer: syz [ 196.395515][ T5916] usb 5-1: SerialNumber: syz [ 196.748567][ T5916] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 196.774704][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.817185][ T5916] usb 5-1: USB disconnect, device number 20 [ 196.857400][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.867785][ T5916] usblp0: removed [ 196.891136][ T7605] capability: warning: `syz.3.485' uses 32-bit capabilities (legacy support in use) [ 197.645644][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 197.856683][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.973731][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.069301][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.127237][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.229840][ T7614] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 198.288087][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.783445][ T7635] IPVS: stopping backup sync thread 7639 ... [ 198.791468][ T7639] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 198.850276][ T7640] xt_hashlimit: size too large, truncated to 1048576 [ 198.899964][ T7640] xt_hashlimit: overflow, try lower: 8/0 [ 199.501005][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.507667][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.873656][ T7661] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 200.905933][ T5836] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 201.030898][ T10] usb 1-1: USB disconnect, device number 22 [ 201.219713][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.255470][ T5890] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 201.299092][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.475898][ T5890] usb 3-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.502845][ T5890] usb 3-1: config 1 interface 0 has no altsetting 0 [ 201.528421][ T5890] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 201.556601][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.564667][ T5890] usb 3-1: Product: syz [ 201.591005][ T5890] usb 3-1: Manufacturer: syz [ 201.604970][ T5890] usb 3-1: SerialNumber: syz [ 201.675374][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 201.834584][ T7663] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 201.835491][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 201.845985][ T7663] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 201.906206][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.917538][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 201.924533][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 201.955873][ T5890] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 201.985659][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.023908][ T24] usb 1-1: config 0 descriptor?? [ 202.032475][ T5890] usb 3-1: USB disconnect, device number 11 [ 202.118138][ T5890] usblp0: removed [ 202.379718][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.390635][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.498965][ T24] nzxt-smart2 0003:1E71:2009.0006: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 202.698518][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 202.711835][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 202.720858][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 202.865555][ T9] usb 5-1: device descriptor read/64, error -71 [ 202.965632][ T24] usb 1-1: USB disconnect, device number 23 [ 203.165885][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 203.326057][ T9] usb 5-1: device descriptor read/64, error -71 [ 203.446533][ T9] usb usb5-port1: attempt power cycle [ 203.795705][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 203.838174][ T9] usb 5-1: device descriptor read/8, error -71 [ 204.116249][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 204.207425][ T9] usb 5-1: device descriptor read/8, error -71 [ 204.329888][ T9] usb usb5-port1: unable to enumerate USB device [ 204.568511][ T5836] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 204.792544][ T7728] loop8: detected capacity change from 0 to 8 [ 204.815403][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 204.879681][ T7728] Dev loop8: unable to read RDB block 8 [ 204.885762][ T7728] loop8: unable to read partition table [ 204.891608][ T7728] loop8: partition table beyond EOD, truncated [ 204.921451][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 204.955775][ T7728] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 205.009995][ T9] usb 3-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.035217][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 205.083886][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 205.093531][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.106792][ T9] usb 3-1: Product: syz [ 205.112077][ T9] usb 3-1: Manufacturer: syz [ 205.121509][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 205.133124][ T9] usb 3-1: SerialNumber: syz [ 205.211561][ T7735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.458296][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 205.517495][ T9] usb 3-1: USB disconnect, device number 12 [ 205.551114][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.606437][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.680842][ T9] usblp0: removed [ 206.060449][ T30] audit: type=1326 audit(1769617519.027:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.4.528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f4b9b394cd7 code=0x0 [ 206.506629][ T7759] program syz.1.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.935090][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 207.787069][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 208.419387][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.435767][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.997586][ T30] audit: type=1326 audit(1769617521.967:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.0.545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f6f5c194cd7 code=0x0 [ 209.017108][ T5890] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 209.305256][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 209.321926][ T5890] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 209.333023][ T5890] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 209.357299][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.375195][ T5890] usb 2-1: Product: syz [ 209.418006][ T5890] usb 2-1: Manufacturer: syz [ 209.463759][ T5890] usb 2-1: SerialNumber: syz [ 209.492029][ T5890] usb 2-1: config 0 descriptor?? [ 209.543319][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.609940][ T7823] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 209.634416][ T5890] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 209.644251][ T5890] usb 2-1: setting power ON [ 209.651414][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.664657][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 209.717431][ T7823] bond1 (unregistering): Released all slaves [ 209.756960][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.788389][ T5890] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 209.923011][ T7831] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 209.931741][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.954082][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.971711][ T7831] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 209.985338][ T5890] usb 2-1: media controller created [ 209.996168][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.032945][ T7809] dvb-usb: bulk message failed: -22 (3/0) [ 210.054894][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.069167][ T7809] dvb-usb: bulk message failed: -22 (4/0) [ 210.083177][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.092796][ T7809] cxusb: i2c read failed [ 210.153017][ T7823] program syz.3.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.205927][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 210.235720][ T5890] usb 2-1: selecting invalid altsetting 6 [ 210.241760][ T5890] usb 2-1: digital interface selection failed (-22) [ 210.271170][ T5890] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 210.306335][ T5890] usb 2-1: setting power OFF [ 210.318890][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 210.345663][ T5890] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 210.371041][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 210.383537][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 210.408902][ T5890] (NULL device *): no alternate interface [ 210.422728][ T24] usb 1-1: config 179 has no interface number 0 [ 210.465463][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 210.498538][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 210.541860][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 210.567526][ T5890] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 210.613219][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 210.646367][ T5890] usb 2-1: USB disconnect, device number 19 [ 210.683972][ T24] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 210.748656][ T24] usb 1-1: config 179 interface 65 has no altsetting 0 [ 210.772493][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 210.812742][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.925432][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input13 [ 211.025814][ T5180] input input13: unable to receive magic message: -110 [ 211.096776][ T5180] input input13: unable to receive magic message: -32 [ 211.152100][ T5180] input input13: unable to receive magic message: -32 [ 211.201845][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 211.241833][ T5180] input input13: unable to receive magic message: -32 [ 211.251008][ T7836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.550'. [ 211.270459][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 211.415910][ T24] usb 1-1: USB disconnect, device number 24 [ 211.421929][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 211.422183][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 211.484675][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 211.822457][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 211.829134][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.830954][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 211.836112][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 211.841831][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 212.095589][ T799] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 212.116486][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 212.277681][ T799] usb 5-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.307333][ T799] usb 5-1: config 1 interface 0 has no altsetting 0 [ 212.326950][ T799] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 212.342323][ T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.359857][ T799] usb 5-1: Product: syz [ 212.373806][ T30] audit: type=1326 audit(1769617525.337:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f6f5c194cd7 code=0x0 [ 212.405376][ T799] usb 5-1: Manufacturer: syz [ 212.410087][ T799] usb 5-1: SerialNumber: syz [ 212.671632][ T799] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 212.722501][ T799] usb 5-1: USB disconnect, device number 25 [ 212.766328][ T799] usblp0: removed [ 213.358315][ T7898] FAULT_INJECTION: forcing a failure. [ 213.358315][ T7898] name failslab, interval 1, probability 0, space 0, times 0 [ 213.394069][ T7898] CPU: 1 UID: 0 PID: 7898 Comm: syz.4.567 Not tainted syzkaller #0 PREEMPT(full) [ 213.394096][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 213.394106][ T7898] Call Trace: [ 213.394113][ T7898] [ 213.394121][ T7898] dump_stack_lvl+0xe8/0x150 [ 213.394152][ T7898] should_fail_ex+0x412/0x560 [ 213.394177][ T7898] should_failslab+0xa8/0x100 [ 213.394198][ T7898] __kmalloc_cache_noprof+0x83/0x6e0 [ 213.394216][ T7898] ? fuse_lookup_name+0x1d0/0x8b0 [ 213.394238][ T7898] fuse_lookup_name+0x1d0/0x8b0 [ 213.394261][ T7898] ? __pfx_fuse_lookup_name+0x10/0x10 [ 213.394278][ T7898] ? fuse_lock_inode+0xd3/0x120 [ 213.394307][ T7898] ? d_alloc_parallel+0x366/0x1610 [ 213.394339][ T7898] fuse_lookup+0x213/0x4e0 [ 213.394355][ T7898] ? look_up_lock_class+0x57/0x110 [ 213.394378][ T7898] ? __pfx_fuse_lookup+0x10/0x10 [ 213.394408][ T7898] ? __raw_spin_lock_init+0x45/0x100 [ 213.394430][ T7898] ? __init_waitqueue_head+0xa9/0x150 [ 213.394454][ T7898] __lookup_slow+0x2b7/0x410 [ 213.394478][ T7898] ? __pfx___lookup_slow+0x10/0x10 [ 213.394509][ T7898] ? down_read+0x272/0x2e0 [ 213.394532][ T7898] lookup_slow+0x53/0x70 [ 213.394553][ T7898] path_lookupat+0x3f5/0x8c0 [ 213.394585][ T7898] filename_lookup+0x256/0x5d0 [ 213.394610][ T7898] ? __pfx_filename_lookup+0x10/0x10 [ 213.394627][ T7898] ? __lock_acquire+0x6b5/0x2cf0 [ 213.394676][ T7898] ? __might_fault+0xaf/0x130 [ 213.394703][ T7898] ? __might_fault+0xaf/0x130 [ 213.394731][ T7898] do_linkat+0x126/0x5b0 [ 213.394756][ T7898] ? __pfx_do_linkat+0x10/0x10 [ 213.394770][ T7898] ? strncpy_from_user+0x150/0x2b0 [ 213.394793][ T7898] ? getname_flags+0x1e4/0x540 [ 213.394813][ T7898] __x64_sys_link+0x82/0x90 [ 213.394838][ T7898] do_syscall_64+0xe2/0xf80 [ 213.394855][ T7898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.394872][ T7898] ? trace_irq_disable+0x37/0x100 [ 213.394888][ T7898] ? clear_bhb_loop+0x60/0xb0 [ 213.394908][ T7898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.394926][ T7898] RIP: 0033:0x7f4b9b39aeb9 [ 213.394942][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.394957][ T7898] RSP: 002b:00007f4b9c2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 213.394978][ T7898] RAX: ffffffffffffffda RBX: 00007f4b9b616090 RCX: 00007f4b9b39aeb9 [ 213.394993][ T7898] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000100 [ 213.395008][ T7898] RBP: 00007f4b9c2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 213.395021][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.395033][ T7898] R13: 00007f4b9b616128 R14: 00007f4b9b616090 R15: 00007f4b9b73fa48 [ 213.395065][ T7898] [ 214.218566][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.566'. [ 214.585300][ T5916] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 214.739800][ T5916] usb 5-1: device descriptor read/64, error -71 [ 214.995559][ T5916] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 215.125284][ T5916] usb 5-1: device descriptor read/64, error -71 [ 215.238540][ T5916] usb usb5-port1: attempt power cycle [ 215.468484][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 215.615701][ T5916] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 215.656110][ T5916] usb 5-1: device descriptor read/8, error -71 [ 215.788758][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.895415][ T798] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 215.978861][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.030746][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.068696][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.105577][ T5916] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 216.146707][ T5916] usb 5-1: device descriptor read/8, error -71 [ 216.181930][ T798] usb 3-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.213929][ T7935] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 216.245492][ T798] usb 3-1: config 1 interface 0 has no altsetting 0 [ 216.255845][ T5916] usb usb5-port1: unable to enumerate USB device [ 216.275645][ T798] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 216.305362][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.331560][ T798] usb 3-1: Product: syz [ 216.346674][ T798] usb 3-1: Manufacturer: syz [ 216.361219][ T798] usb 3-1: SerialNumber: syz [ 216.593320][ T7930] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 216.600720][ T7930] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 216.631472][ T798] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 216.662145][ T798] usb 3-1: USB disconnect, device number 13 [ 216.720335][ T798] usblp0: removed [ 216.743528][ T30] audit: type=1326 audit(1769617529.707:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.1.578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f9018194cd7 code=0x0 [ 217.435085][ T7961] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 217.443251][ T7961] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 218.258863][ T7972] netlink: 'syz.2.582': attribute type 10 has an invalid length. [ 218.331643][ T7972] team0: Port device netdevsim0 added [ 218.353320][ T7973] netlink: 'syz.2.582': attribute type 10 has an invalid length. [ 219.261917][ T7973] team0: Port device netdevsim0 removed [ 219.317429][ T7973] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 219.390562][ T7982] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 220.087612][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 220.188611][ T5899] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 220.355247][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 220.367612][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 220.389643][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.411935][ T5899] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.422830][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.440379][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.450083][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.607800][ T798] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 220.685821][ T5899] usb 2-1: GET_CAPABILITIES returned 0 [ 220.691721][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 220.822169][ T8008] input: syz1 as /devices/virtual/input/input14 [ 220.910381][ T5899] usb 2-1: USB disconnect, device number 20 [ 221.055424][ T798] usb 3-1: device descriptor read/64, error -71 [ 221.145945][ T8016] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 221.265747][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 221.318883][ T798] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 221.445209][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 221.469159][ T24] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 221.491548][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 221.511992][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.532335][ T798] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 221.553843][ T24] usb 5-1: Product: syz [ 221.562928][ T24] usb 5-1: Manufacturer: syz [ 221.576520][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 221.595697][ T24] usb 5-1: SerialNumber: syz [ 221.617359][ T798] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 221.656718][ T798] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 221.686909][ T798] usb 3-1: Manufacturer: syz [ 221.706563][ T798] usb 3-1: config 0 descriptor?? [ 221.737428][ T798] smsusb:smsusb_probe: board id=9, interface number 0 [ 221.767249][ T798] smsusb:smsusb_probe: Device initialized with return code -19 [ 221.870714][ T24] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 221.913362][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.937574][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 221.967625][ T5916] usb 3-1: USB disconnect, device number 15 [ 221.996761][ T24] usb 5-1: media controller created [ 222.050053][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.161555][ T799] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 222.301333][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 222.308465][ T8025] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.358394][ T24] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 222.376641][ T799] usb 2-1: Using ep0 maxpacket: 16 [ 222.383920][ T24] usb 5-1: USB disconnect, device number 30 [ 222.396384][ T799] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 222.421497][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 222.436776][ T799] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 222.450374][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.492272][ T799] usb 2-1: Product: syz [ 222.497243][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.514281][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.538090][ T799] usb 2-1: Manufacturer: syz [ 222.542732][ T799] usb 2-1: SerialNumber: syz [ 222.575956][ T799] usb 2-1: config 0 descriptor?? [ 222.603612][ T799] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 222.616143][ T799] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 222.811553][ T8032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.232376][ T799] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 223.257326][ T799] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 223.658720][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.687786][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.881558][ T8061] loop8: detected capacity change from 0 to 8 [ 223.897003][ T799] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 223.897527][ T8061] Dev loop8: unable to read RDB block 8 [ 223.911161][ T799] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 223.920833][ T8061] loop8: unable to read partition table [ 223.939643][ T8061] loop8: partition table beyond EOD, truncated [ 223.951396][ T8061] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 224.249317][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 224.810438][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 225.012446][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.023301][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.103729][ T799] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 225.145700][ T799] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 225.166219][ T799] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 225.213712][ T799] usb 2-1: USB disconnect, device number 21 [ 225.320258][ T8086] tipc: Enabling of bearer rejected, failed to enable media [ 225.351677][ T8094] FAULT_INJECTION: forcing a failure. [ 225.351677][ T8094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.396688][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.3.621 Not tainted syzkaller #0 PREEMPT(full) [ 225.396718][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 225.396732][ T8094] Call Trace: [ 225.396740][ T8094] [ 225.396749][ T8094] dump_stack_lvl+0xe8/0x150 [ 225.396781][ T8094] should_fail_ex+0x412/0x560 [ 225.396811][ T8094] _copy_from_user+0x2d/0xb0 [ 225.396844][ T8094] ___sys_recvmsg+0x175/0x590 [ 225.396871][ T8094] ? get_pid_task+0x20/0x1f0 [ 225.396892][ T8094] ? get_pid_task+0x20/0x1f0 [ 225.396918][ T8094] ? __pfx____sys_recvmsg+0x10/0x10 [ 225.396952][ T8094] ? __fget_files+0x2a/0x420 [ 225.396992][ T8094] ? __fget_files+0x3a0/0x420 [ 225.397036][ T8094] __x64_sys_recvmsg+0x1ba/0x2a0 [ 225.397067][ T8094] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 225.397104][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 225.397146][ T8094] do_syscall_64+0xe2/0xf80 [ 225.397164][ T8094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.397180][ T8094] ? trace_irq_disable+0x37/0x100 [ 225.397196][ T8094] ? clear_bhb_loop+0x60/0xb0 [ 225.397216][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.397232][ T8094] RIP: 0033:0x7f72a599aeb9 [ 225.397247][ T8094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.397261][ T8094] RSP: 002b:00007f72a67e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 225.397281][ T8094] RAX: ffffffffffffffda RBX: 00007f72a5c16090 RCX: 00007f72a599aeb9 [ 225.397293][ T8094] RDX: 0000000000000142 RSI: 0000200000001980 RDI: 0000000000000003 [ 225.397303][ T8094] RBP: 00007f72a67e3090 R08: 0000000000000000 R09: 0000000000000000 [ 225.397314][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.397323][ T8094] R13: 00007f72a5c16128 R14: 00007f72a5c16090 R15: 00007f72a5d3fa48 [ 225.397349][ T8094] [ 225.656875][ T8099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.755406][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.151645][ T8125] FAULT_INJECTION: forcing a failure. [ 227.151645][ T8125] name failslab, interval 1, probability 0, space 0, times 0 [ 227.174770][ T8125] CPU: 0 UID: 0 PID: 8125 Comm: syz.1.631 Not tainted syzkaller #0 PREEMPT(full) [ 227.174792][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 227.174801][ T8125] Call Trace: [ 227.174808][ T8125] [ 227.174815][ T8125] dump_stack_lvl+0xe8/0x150 [ 227.174840][ T8125] should_fail_ex+0x412/0x560 [ 227.174863][ T8125] should_failslab+0xa8/0x100 [ 227.174882][ T8125] __kvmalloc_node_noprof+0x166/0x8d0 [ 227.174912][ T8125] ? alloc_netdev_mqs+0xa6/0x11b0 [ 227.174944][ T8125] alloc_netdev_mqs+0xa6/0x11b0 [ 227.174965][ T8125] ? __pfx_macvlan_setup+0x10/0x10 [ 227.174987][ T8125] rtnl_create_link+0x31f/0xd70 [ 227.175014][ T8125] rtnl_newlink_create+0x277/0xb70 [ 227.175032][ T8125] ? __pfx___nla_validate_parse+0x10/0x10 [ 227.175058][ T8125] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 227.175079][ T8125] ? __pfx___mutex_lock+0x10/0x10 [ 227.175124][ T8125] ? ns_capable+0x89/0xe0 [ 227.175157][ T8125] rtnl_newlink+0x1666/0x1be0 [ 227.175193][ T8125] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.175218][ T8125] ? do_syscall_64+0xe2/0xf80 [ 227.175232][ T8125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.175272][ T8125] ? kasan_quarantine_put+0xbb/0x1f0 [ 227.175294][ T8125] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.175312][ T8125] ? kmem_cache_free+0x195/0x610 [ 227.175325][ T8125] ? nlmon_xmit+0xb0/0x100 [ 227.175347][ T8125] ? __lock_acquire+0x6b5/0x2cf0 [ 227.175374][ T8125] ? __local_bh_enable_ip+0xd0/0x130 [ 227.175387][ T8125] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.175400][ T8125] ? __dev_queue_xmit+0x274/0x3850 [ 227.175420][ T8125] ? __local_bh_enable_ip+0xd0/0x130 [ 227.175431][ T8125] ? __dev_queue_xmit+0x274/0x3850 [ 227.175475][ T8125] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 227.175510][ T8125] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.175526][ T8125] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 227.175545][ T8125] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 227.175574][ T8125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.175595][ T8125] ? ref_tracker_free+0x693/0x840 [ 227.175636][ T8125] ? __copy_skb_header+0xa3/0x4a0 [ 227.175666][ T8125] ? __pfx_ref_tracker_free+0x10/0x10 [ 227.175700][ T8125] netlink_rcv_skb+0x232/0x4b0 [ 227.175725][ T8125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.175743][ T8125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.175766][ T8125] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.175787][ T8125] netlink_unicast+0x80f/0x9b0 [ 227.175817][ T8125] ? __pfx_netlink_unicast+0x10/0x10 [ 227.175838][ T8125] ? __alloc_skb+0x193/0x390 [ 227.175856][ T8125] ? netlink_sendmsg+0x650/0xb40 [ 227.175870][ T8125] ? skb_put+0x11b/0x210 [ 227.175890][ T8125] netlink_sendmsg+0x813/0xb40 [ 227.175913][ T8125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.175931][ T8125] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.175955][ T8125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.175973][ T8125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.175987][ T8125] ____sys_sendmsg+0xa68/0xad0 [ 227.176007][ T8125] ? __might_fault+0xaf/0x130 [ 227.176034][ T8125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.176060][ T8125] ? import_iovec+0x73/0xa0 [ 227.176085][ T8125] ___sys_sendmsg+0x2a5/0x360 [ 227.176104][ T8125] ? __lock_acquire+0x6b5/0x2cf0 [ 227.176127][ T8125] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.176151][ T8125] ? kstrtouint+0x6e/0xe0 [ 227.176188][ T8125] ? __fget_files+0x2a/0x420 [ 227.176204][ T8125] ? __fget_files+0x3a0/0x420 [ 227.176228][ T8125] __sys_sendmmsg+0x27c/0x4e0 [ 227.176251][ T8125] ? __pfx___sys_sendmmsg+0x10/0x10 [ 227.176270][ T8125] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 227.176305][ T8125] ? ksys_write+0x242/0x270 [ 227.176327][ T8125] ? __pfx_ksys_write+0x10/0x10 [ 227.176354][ T8125] __x64_sys_sendmmsg+0xa0/0xc0 [ 227.176375][ T8125] do_syscall_64+0xe2/0xf80 [ 227.176390][ T8125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.176404][ T8125] ? trace_irq_disable+0x37/0x100 [ 227.176418][ T8125] ? clear_bhb_loop+0x60/0xb0 [ 227.176435][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.176450][ T8125] RIP: 0033:0x7f901819aeb9 [ 227.176464][ T8125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.176477][ T8125] RSP: 002b:00007f9019073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 227.176493][ T8125] RAX: ffffffffffffffda RBX: 00007f9018416090 RCX: 00007f901819aeb9 [ 227.176504][ T8125] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000010 [ 227.176514][ T8125] RBP: 00007f9019073090 R08: 0000000000000000 R09: 0000000000000000 [ 227.176523][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.176532][ T8125] R13: 00007f9018416128 R14: 00007f9018416090 R15: 00007f901853fa48 [ 227.176555][ T8125] [ 227.927222][ T8124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.131702][ T8124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.535619][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 228.706664][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 228.724652][ T9] usb 1-1: config 7 interface 0 has no altsetting 0 [ 228.750170][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0310, bcdDevice=58.70 [ 228.770369][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.796416][ T9] usb 1-1: Product: syz [ 228.801081][ T9] usb 1-1: Manufacturer: syz [ 228.827454][ T9] usb 1-1: SerialNumber: syz [ 229.070575][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.114438][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.161803][ T8127] netlink: 9 bytes leftover after parsing attributes in process `syz.0.633'. [ 229.253834][ T9] pwc: Philips PCVC730K (ToUCam Fun)/PCVC830 (ToUCam II) USB webcam detected. [ 229.298524][ T9] pwc: Failed to set LED on/off time (-71) [ 229.309119][ T9] pwc: send_video_command error -71 [ 229.314378][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 229.326125][ T9] Philips webcam 1-1:7.0: probe with driver Philips webcam failed with error -71 [ 229.343534][ T9] usb 1-1: USB disconnect, device number 25 [ 229.620629][ T8155] usb usb8: usbfs: process 8155 (syz.2.644) did not claim interface 0 before use [ 231.325288][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 231.359017][ T8176] batman_adv: batadv0: Adding interface: dummy0 [ 231.367529][ T8176] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.402876][ T8176] batman_adv: batadv0: Interface activated: dummy0 [ 231.486985][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.516510][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 231.553037][ T8176] batadv0: mtu less than device minimum [ 231.576368][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 231.597305][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.609059][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.620425][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.631726][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.643039][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.654344][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.665692][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.677515][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.688841][ T8176] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.710019][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.731139][ T8167] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 231.747097][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.003534][ T8180] team0 (unregistering): left promiscuous mode [ 232.025558][ T8180] team_slave_0: left promiscuous mode [ 232.043988][ T8180] team_slave_1: left promiscuous mode [ 232.084927][ T8180] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 232.136023][ T8180] team0 (unregistering): Port device team_slave_0 removed [ 232.163641][ T8180] team0 (unregistering): Failed to send options change via netlink (err -105) [ 232.208672][ T8180] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 232.244671][ T8180] team0 (unregistering): Port device team_slave_1 removed [ 232.687993][ T5890] usb 1-1: USB disconnect, device number 26 [ 233.045587][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 233.218224][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.229794][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.241482][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.251105][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.275342][ T8195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.289057][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.524237][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.671558][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.748861][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.785216][ T798] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 233.811339][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.880012][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.916814][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.198052][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.663'. [ 235.467599][ T8234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.666'. [ 235.886908][ T8239] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 235.900376][ T8239] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 235.985268][ T5890] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 236.206754][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.244880][ T5890] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.275646][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.284755][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.353984][ T8236] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 236.378236][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.395695][ T798] usb 5-1: USB disconnect, device number 31 [ 236.517402][ T8248] bridge_slave_0: left allmulticast mode [ 236.594369][ T8248] bridge_slave_0: left promiscuous mode [ 236.610239][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.632462][ T8250] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 236.680216][ T8248] bridge_slave_1: left allmulticast mode [ 236.696242][ T8254] net_ratelimit: 10 callbacks suppressed [ 236.696266][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.769218][ T8248] bridge_slave_1: left promiscuous mode [ 236.799341][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.887096][ T8248] bond0: (slave bond_slave_0): Releasing backup interface [ 236.950365][ T8248] bond0: (slave bond_slave_1): Releasing backup interface [ 236.975472][ T5890] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 237.003179][ T8248] team0: Port device team_slave_0 removed [ 237.039587][ T8248] team0: Port device team_slave_1 removed [ 237.060743][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.073138][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.083924][ T8248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.097293][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.117793][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.128203][ T8248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.135998][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 237.151326][ T8248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.167849][ T5890] usb 1-1: config 0 has no interfaces? [ 237.185065][ T5890] usb 1-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=b2.9d [ 237.199570][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.211904][ T8248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.233305][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.261471][ T5890] usb 1-1: Product: syz [ 237.267429][ T5890] usb 1-1: Manufacturer: syz [ 237.272089][ T5890] usb 1-1: SerialNumber: syz [ 237.283831][ T8250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.286288][ T5890] usb 1-1: config 0 descriptor?? [ 237.308223][ T798] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 237.341073][ T799] usb 2-1: USB disconnect, device number 23 [ 237.367720][ T8250] team0: Device bond0 failed to register rx_handler [ 237.489751][ T798] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 237.507945][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.557708][ T798] usb 5-1: Product: syz [ 237.569229][ T798] usb 5-1: Manufacturer: syz [ 237.580690][ T798] usb 5-1: SerialNumber: syz [ 237.604287][ T798] usb 5-1: config 0 descriptor?? [ 237.621105][ T798] ch341 5-1:0.0: ch341-uart converter detected [ 237.819286][ T798] usb 5-1: failed to receive control message: -71 [ 237.833328][ T798] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 237.845482][ T799] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 237.861113][ T798] usb 5-1: USB disconnect, device number 32 [ 237.886692][ T798] ch341 5-1:0.0: device disconnected [ 238.018000][ T799] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.044256][ T799] usb 2-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 238.069666][ T799] usb 2-1: config 66 interface 0 has no altsetting 0 [ 238.086562][ T799] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 238.103011][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.111471][ T799] usb 2-1: Product: syz [ 238.116194][ T799] usb 2-1: Manufacturer: syz [ 238.120845][ T799] usb 2-1: SerialNumber: syz [ 238.153432][ T8261] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 238.387880][ T8278] xt_hashlimit: size too large, truncated to 1048576 [ 238.394757][ T8278] xt_hashlimit: overflow, try lower: 8/0 [ 238.529882][ T8261] xt_l2tp: missing protocol rule (udp|l2tpip) [ 238.682250][ T8283] binder: 8282:8283 ioctl c018620b 0 returned -14 [ 238.691763][ T799] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 238.740297][ T799] usb 2-1: USB disconnect, device number 24 [ 239.765334][ T798] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 240.402736][ T798] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.473573][ T798] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 240.497562][ T5890] usb 1-1: USB disconnect, device number 27 [ 240.505495][ T798] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.525143][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.610636][ T8301] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 240.675695][ T798] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.509585][ T798] usb 2-1: USB disconnect, device number 25 [ 242.929402][ T8339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.922250][ T30] audit: type=1326 audit(1769617556.847:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.030332][ T30] audit: type=1326 audit(1769617556.847:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.138676][ T30] audit: type=1326 audit(1769617556.847:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.182348][ T798] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 244.195038][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.239264][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.275398][ T30] audit: type=1326 audit(1769617556.857:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.314468][ T30] audit: type=1326 audit(1769617556.857:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.365349][ T30] audit: type=1326 audit(1769617556.857:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.463475][ T30] audit: type=1326 audit(1769617556.857:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.528688][ T798] usb 3-1: Using ep0 maxpacket: 32 [ 244.541516][ T798] usb 3-1: config 0 has an invalid interface number: 145 but max is 1 [ 244.551761][ T798] usb 3-1: config 0 has an invalid interface number: 43 but max is 1 [ 244.579142][ T30] audit: type=1326 audit(1769617556.857:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.924321][ T30] audit: type=1326 audit(1769617556.857:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 244.955356][ T798] usb 3-1: config 0 has no interface number 0 [ 244.975521][ T798] usb 3-1: config 0 has no interface number 1 [ 245.014306][ T798] usb 3-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 245.034484][ T30] audit: type=1326 audit(1769617556.857:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f04dfd9aeb9 code=0x7ffc0000 [ 245.233451][ T798] usb 3-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 245.253514][ T798] usb 3-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 245.276767][ T798] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 245.312321][ T798] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 245.356566][ T798] usb 3-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.400178][ T798] usb 3-1: config 0 interface 145 has no altsetting 0 [ 245.417943][ T798] usb 3-1: config 0 interface 43 has no altsetting 0 [ 245.445529][ T799] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 245.474493][ T798] usb 3-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 245.497238][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.528092][ T798] usb 3-1: Product: syz [ 245.545252][ T798] usb 3-1: Manufacturer: syz [ 245.573284][ T798] usb 3-1: SerialNumber: syz [ 245.616904][ T799] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.637485][ T799] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.679125][ T799] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.680848][ T798] usb 3-1: config 0 descriptor?? [ 245.729173][ T799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.790809][ T8375] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 245.804918][ T799] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.011949][ T8360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 247.686623][ T798] keyspan_pda 3-1:0.145: required endpoints missing [ 247.713759][ T798] keyspan_pda 3-1:0.43: Keyspan PDA converter detected [ 247.806291][ T5916] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 247.828887][ T798] usb 3-1: Keyspan PDA converter now attached to ttyUSB0 [ 247.917064][ T798] usb 3-1: USB disconnect, device number 16 [ 248.165937][ T798] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 248.180023][ T798] keyspan_pda 3-1:0.43: device disconnected [ 248.206018][ T5916] usb 2-1: not running at top speed; connect to a high speed hub [ 248.254672][ T5916] usb 2-1: config 1 has an invalid interface number: 74 but max is 0 [ 248.299831][ T5916] usb 2-1: config 1 has no interface number 0 [ 248.361064][ T5890] usb 1-1: USB disconnect, device number 28 [ 248.478243][ T5916] usb 2-1: config 1 interface 74 has no altsetting 0 [ 248.537375][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=22.be [ 248.558914][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.837549][ T5916] usb 2-1: Product: syz [ 248.853352][ T5916] usb 2-1: Manufacturer: syz [ 248.867995][ T5916] usb 2-1: SerialNumber: syz [ 249.433874][ T798] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 249.797408][ T798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.826649][ T798] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 249.855728][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.891122][ T798] usb 5-1: config 0 descriptor?? [ 249.932736][ T798] pwc: Askey VC010 type 2 USB webcam detected. [ 250.138678][ T5916] usb 2-1: unknown interface protocol 0x55, assuming v1 [ 250.151277][ T798] pwc: recv_control_msg error -32 req 02 val 2b00 [ 250.159249][ T798] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.167035][ T798] pwc: recv_control_msg error -32 req 02 val 2c00 [ 250.175179][ T798] pwc: recv_control_msg error -32 req 04 val 1000 [ 250.182274][ T5916] usb 2-1: cannot find UAC_HEADER [ 250.183484][ T798] pwc: recv_control_msg error -32 req 04 val 1300 [ 250.199078][ T798] pwc: recv_control_msg error -32 req 04 val 1400 [ 250.221086][ T798] pwc: recv_control_msg error -32 req 02 val 2000 [ 250.229126][ T798] pwc: recv_control_msg error -32 req 02 val 2100 [ 250.237019][ T798] pwc: recv_control_msg error -32 req 04 val 1500 [ 250.251553][ T798] pwc: recv_control_msg error -32 req 02 val 2500 [ 250.280992][ T798] pwc: recv_control_msg error -32 req 02 val 2400 [ 250.295746][ T798] pwc: recv_control_msg error -71 req 02 val 2600 [ 250.313021][ T798] pwc: recv_control_msg error -71 req 02 val 2900 [ 250.373132][ T5916] snd-usb-audio 2-1:1.74: probe with driver snd-usb-audio failed with error -22 [ 250.379438][ T798] pwc: recv_control_msg error -71 req 02 val 2800 [ 250.405670][ T5916] usb 2-1: USB disconnect, device number 26 [ 250.436127][ T798] pwc: recv_control_msg error -71 req 04 val 1100 [ 250.467640][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.470117][ T798] pwc: recv_control_msg error -71 req 04 val 1200 [ 250.551828][ T798] pwc: Registered as video103. [ 250.586335][ T798] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 250.630644][ T798] usb 5-1: USB disconnect, device number 33 [ 251.286999][ T798] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 251.465240][ T798] usb 2-1: Using ep0 maxpacket: 16 [ 251.474430][ T798] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 251.488021][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.500586][ T798] usb 2-1: Product: syz [ 251.515211][ T798] usb 2-1: Manufacturer: syz [ 251.525193][ T798] usb 2-1: SerialNumber: syz [ 251.758585][ T798] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 251.791997][ T798] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.818883][ T798] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 251.835669][ T798] usb 2-1: media controller created [ 251.905925][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.996530][ T798] zl10353_read_register: readreg error (reg=127, ret==-71) [ 252.143610][ T798] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 252.219211][ T798] usb 2-1: USB disconnect, device number 27 [ 252.915218][ T798] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 253.152394][ T798] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.163845][ T798] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 253.344544][ T8470] netlink: 75 bytes leftover after parsing attributes in process `syz.1.735'. [ 253.755572][ T798] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.805437][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.865936][ T8454] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.901972][ T798] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.092480][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 256.235251][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 256.316041][ T799] usb 3-1: USB disconnect, device number 17 [ 256.484039][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 256.496841][ T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 256.535293][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.555249][ T9] usb 2-1: Product: syz [ 256.560615][ T9] usb 2-1: Manufacturer: syz [ 256.580920][ T9] usb 2-1: SerialNumber: syz [ 256.830721][ T9] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 256.863091][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 256.904607][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 256.925619][ T9] usb 2-1: media controller created [ 256.963228][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.036415][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 257.153992][ T9] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 257.214717][ T9] usb 2-1: USB disconnect, device number 28 [ 257.575225][ T798] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 257.701717][ T8523] syzkaller0: entered promiscuous mode [ 257.707584][ T8523] syzkaller0: entered allmulticast mode [ 257.737335][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 257.744698][ T798] usb 5-1: config index 0 descriptor too short (expected 32786, got 18) [ 257.763896][ T798] usb 5-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config [ 257.783276][ T798] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.805905][ T798] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 257.821541][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.839266][ T798] usb 5-1: Product: syz [ 257.849130][ T798] usb 5-1: Manufacturer: syz [ 257.859210][ T798] usb 5-1: SerialNumber: syz [ 257.892591][ T798] usb 5-1: config 0 descriptor?? [ 257.917250][ T8529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.754'. [ 257.949870][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.963960][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.985668][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 258.000738][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.013368][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.135202][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 258.148191][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.168168][ T799] usb 5-1: USB disconnect, device number 34 [ 258.175149][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.192134][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.224006][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.235249][ T24] usb 3-1: Product: syz [ 258.245515][ T24] usb 3-1: Manufacturer: Й [ 258.250090][ T24] usb 3-1: SerialNumber: syz [ 258.484576][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.493668][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.512700][ T24] usb 3-1: 0:2 : does not exist [ 258.546742][ T24] usb 3-1: USB disconnect, device number 18 [ 258.708540][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.769267][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.796079][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.845257][ T5890] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 259.056920][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.105329][ T5890] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 259.155551][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 259.164667][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.209784][ T8534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.274423][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.543083][ T8544] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xaa [ 259.589643][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.599055][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.911087][ T8554] netlink: 'syz.0.764': attribute type 12 has an invalid length. [ 259.919134][ T8554] netlink: 'syz.0.764': attribute type 29 has an invalid length. [ 259.927788][ T8554] netlink: 148 bytes leftover after parsing attributes in process `syz.0.764'. [ 260.022442][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 260.022463][ T30] audit: type=1800 audit(1769617572.987:313): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.766" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 260.186184][ T8563] netlink: 'syz.2.763': attribute type 10 has an invalid length. [ 260.240387][ T8563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.286924][ T8563] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 260.372305][ T8571] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 261.017341][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.023952][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.345285][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 261.505432][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 261.516119][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.541667][ T5890] usb 2-1: USB disconnect, device number 29 [ 261.560159][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.580540][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.592274][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.600884][ T24] usb 3-1: Product: syz [ 261.605594][ T24] usb 3-1: Manufacturer: syz [ 261.610330][ T24] usb 3-1: SerialNumber: syz [ 261.837124][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.848076][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.871268][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 261.994208][ T8552] bond0: (slave batadv0): Releasing backup interface [ 262.057337][ T5890] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 262.119458][ T24] usb 3-1: 0:2 : does not exist [ 262.134506][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 262.172846][ T24] usb 3-1: USB disconnect, device number 19 [ 262.226839][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 262.242570][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.268769][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.324706][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.338687][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.382688][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.413508][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.436336][ T5890] usb 2-1: config 0 descriptor?? [ 262.651386][ T5890] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 262.676441][ T5890] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 262.748235][ T5890] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input16 [ 262.869517][ T5890] microsoft 0003:045E:07DA.0007: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 263.021668][ T5890] usb 2-1: USB disconnect, device number 30 [ 263.054772][ T8597] loop8: detected capacity change from 0 to 8 [ 263.080077][ T8597] Dev loop8: unable to read RDB block 8 [ 263.100004][ T8597] loop8: unable to read partition table [ 263.117651][ T8597] loop8: partition table beyond EOD, truncated [ 263.126941][ T8592] fido_id[8592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 263.142449][ T8597] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 263.164769][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 263.685219][ T5890] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 263.835304][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 263.843224][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.863070][ T5890] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 263.883099][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.046556][ T5890] usb 3-1: config 0 descriptor?? [ 264.072222][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 264.305263][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.329693][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 264.333062][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.359396][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.368687][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.415576][ T8613] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 264.448119][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.551648][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 264.626084][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 264.632164][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 264.820765][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 264.856198][ T5890] usb 3-1: USB disconnect, device number 20 [ 264.987407][ T10] usb 5-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.022019][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 265.050415][ T10] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 265.072573][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.095753][ T10] usb 5-1: Product: syz [ 265.107388][ T10] usb 5-1: Manufacturer: syz [ 265.121707][ T10] usb 5-1: SerialNumber: syz [ 265.194387][ T8626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.235797][ T8626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.351875][ T8617] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 265.359540][ T8617] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 265.388150][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 265.416271][ T10] usb 5-1: USB disconnect, device number 35 [ 265.436764][ T10] usblp0: removed [ 266.525219][ T5890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 266.685195][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 266.693061][ T5890] usb 1-1: config 0 has an invalid interface number: 76 but max is 0 [ 266.702043][ T5890] usb 1-1: config 0 has no interface number 0 [ 266.725264][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 266.731358][ T5890] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 266.953277][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.962054][ T5890] usb 1-1: Product: syz [ 266.968321][ T5890] usb 1-1: Manufacturer: syz [ 266.973235][ T5890] usb 1-1: SerialNumber: syz [ 267.017501][ T5890] usb 1-1: config 0 descriptor?? [ 267.057808][ T5890] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 267.084573][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 267.094176][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.098687][ T5890] dw2102: su3000_power_ctrl: 1, initialized 0 [ 267.165890][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 267.175859][ T799] usb 2-1: USB disconnect, device number 31 [ 267.201629][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.229143][ T5890] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 267.269793][ T8635] dvb-usb: bulk message failed: -22 (1/0) [ 267.272201][ T10] usb 5-1: config 0 descriptor?? [ 267.298755][ T8635] dw2102: i2c transfer failed. [ 267.306940][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 267.350460][ T8635] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 267.362421][ T8635] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 267.370892][ T8635] CPU: 1 UID: 0 PID: 8635 Comm: syz.0.788 Not tainted syzkaller #0 PREEMPT(full) [ 267.380116][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 267.390232][ T8635] RIP: 0010:su3000_i2c_transfer+0x2e3/0xfd0 [ 267.396183][ T8635] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 3a df 47 fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 7c 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 267.415841][ T8635] RSP: 0018:ffffc9000b387bb0 EFLAGS: 00010202 [ 267.421954][ T8635] RAX: 0000000000000002 RBX: 0000000000000010 RCX: cbcaa6030c261f00 [ 267.429957][ T8635] RDX: ffffc90004a33000 RSI: 000000000000260a RDI: 000000000000260b [ 267.437980][ T8635] RBP: 0000000000000000 R08: ffffc9000b387927 R09: 1ffff92001670f24 [ 267.445994][ T8635] R10: dffffc0000000000 R11: fffff52001670f25 R12: 0000000000000002 [ 267.454023][ T8635] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff8880743ef048 [ 267.462026][ T8635] FS: 00007f6f5d0766c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 267.471005][ T8635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.477613][ T8635] CR2: 00007f2a5c019cd8 CR3: 0000000078154000 CR4: 00000000003526f0 [ 267.485622][ T8635] Call Trace: [ 267.488929][ T8635] [ 267.491884][ T8635] __i2c_transfer+0x79a/0x1ee0 [ 267.496689][ T8635] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 267.502545][ T8635] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 267.508395][ T8635] ? i2c_transfer+0xc8/0x2d0 [ 267.513036][ T8635] i2c_transfer+0x1cc/0x2d0 [ 267.517583][ T8635] i2cdev_ioctl_rdwr+0x460/0x740 [ 267.522591][ T8635] i2cdev_ioctl+0x6a5/0x880 [ 267.527123][ T8635] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 267.532198][ T8635] ? __fget_files+0x3a0/0x420 [ 267.536905][ T8635] ? __fget_files+0x2a/0x420 [ 267.541547][ T8635] ? bpf_lsm_file_ioctl+0x9/0x20 [ 267.546520][ T8635] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 267.551591][ T8635] __se_sys_ioctl+0xfc/0x170 [ 267.556228][ T8635] do_syscall_64+0xe2/0xf80 [ 267.560761][ T8635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.566861][ T8635] ? clear_bhb_loop+0x60/0xb0 [ 267.571563][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.577483][ T8635] RIP: 0033:0x7f6f5c19aeb9 [ 267.581933][ T8635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.601574][ T8635] RSP: 002b:00007f6f5d076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.610028][ T8635] RAX: ffffffffffffffda RBX: 00007f6f5c415fa0 RCX: 00007f6f5c19aeb9 [ 267.618018][ T8635] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000005 [ 267.626014][ T8635] RBP: 00007f6f5c208c1f R08: 0000000000000000 R09: 0000000000000000 [ 267.634044][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.642048][ T8635] R13: 00007f6f5c416038 R14: 00007f6f5c415fa0 R15: 00007f6f5c53fa48 [ 267.650102][ T8635] [ 267.653166][ T8635] Modules linked in: [ 267.658276][ T8635] ---[ end trace 0000000000000000 ]--- [ 267.673286][ T5890] usb 1-1: media controller created [ 267.703119][ T8635] RIP: 0010:su3000_i2c_transfer+0x2e3/0xfd0 [ 267.715443][ T8635] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 3a df 47 fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 7c 08 00 00 41 88 1e 48 8b 44 24 48 42 [ 267.735483][ T8635] RSP: 0018:ffffc9000b387bb0 EFLAGS: 00010202 [ 267.741698][ T8635] RAX: 0000000000000002 RBX: 0000000000000010 RCX: cbcaa6030c261f00 [ 267.761538][ T8635] RDX: ffffc90004a33000 RSI: 000000000000260a RDI: 000000000000260b [ 267.769759][ T8635] RBP: 0000000000000000 R08: ffffc9000b387927 R09: 1ffff92001670f24 [ 267.810179][ T8635] R10: dffffc0000000000 R11: fffff52001670f25 R12: 0000000000000002 [ 267.834040][ T8637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.845248][ T8635] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff8880743ef048 [ 267.862525][ T8635] FS: 00007f6f5d0766c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 267.881979][ T8635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.896923][ T8635] CR2: 00002000002c4030 CR3: 0000000078154000 CR4: 00000000003526f0 [ 267.915557][ T799] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 267.924308][ T8635] Kernel panic - not syncing: Fatal exception [ 267.931038][ T8635] Kernel Offset: disabled [ 267.935388][ T8635] Rebooting in 86400 seconds..