last executing test programs: 2m58.677129328s ago: executing program 1 (id=1235): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x80) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2010}, 0x4001) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x2000000}, {0xfffffffffffffffc}], 0x2, 0x100000c01, 0x38, 0x0, 0x70, 0x6e}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000004c0)={0x7, 0x7fff, 0x7, 0x6e5f, 0x74, 0x8, 0xb9, 0xe}, &(0x7f0000000500)={0x8, 0x0, 0xffff, 0x1, 0x6, 0x7, 0x0, 0x1000}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m58.454298541s ago: executing program 1 (id=1241): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x20008001) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000280)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) writev(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x0, 0x101, 0xc53}) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000200)={'raw\x00', 0x0, [0x8, 0x1, 0x1, 0xd47, 0xb7]}, &(0x7f0000000000)=0x54) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0004110004c8f86d83235e3500000000bfcfef47000000000100000000000000000000ffff7f000001ff020000000000000000000000000001042088be000000030c000800050086dd88a888be97000002160906060100000000000010080022eb000000002004f0080200000000000002000494030800655800000004a8fb20ac589348ff433a9bdd3759f8af62a368fb64a6229685eb67f1790a31b089710179fb9822e0239594bb792f05a0253d4a64bdfd7003f4e37fdcc5f673bcc56e7887d9380a13bdfc016a77f408d904ab47394f7c41614ca4b51bc0bd7bed"], 0x7a) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="da560000aaaaffffffffffff08004500003c007200000006907800000000e000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a010000090780004131200e1eef20000000000000000000080000000"], 0x0) 2m58.247122125s ago: executing program 1 (id=1242): r0 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000b0000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000000000000000000004000", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6e) 2m58.041115403s ago: executing program 1 (id=1243): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0xdeff, 0x0, 0x0, 0x100000000}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001e00)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r3, &(0x7f0000000440)={0x130, 0xfffffffffffffffe, r4, {0xfff0000000000000, 0x5, 0x0, '\x00', {0x1000, 0xfff, 0x8, 0x7, r5, 0xee01, 0x6000, '\x00', 0x7fffffffffffffff, 0x8f, 0xfff, 0x4, {0x0, 0xd699}, {0xfffffffffffffff8, 0x3}, {0xf, 0x80000000}, {0x8, 0x8}, 0x1, 0x9, 0x800, 0x1}}}, 0x130) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 2m57.034994588s ago: executing program 1 (id=1249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xffffffe8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1000002, 0x29}, @fda={0x66646185, 0x200005, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4010005}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f00000034c0)={0x2020}, 0xcac) 2m56.367333174s ago: executing program 1 (id=1253): r0 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000b0000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000001fe00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6e) 2m55.918564727s ago: executing program 32 (id=1253): r0 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000b0000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000001fe00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6e) 4.563176213s ago: executing program 2 (id=2052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="e801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b002000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000002000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f00040000000a0010000000000000000000e10003006c7a73"], 0x1e8}}, 0x4810) 4.40306483s ago: executing program 2 (id=2053): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5e, &(0x7f0000000780)={&(0x7f0000002740)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xc, 0xd}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000d40), 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000240)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r4, &(0x7f0000000080)="cd", 0x1) write$dsp(r4, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54) close(r4) recvmmsg(r3, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) 4.304389921s ago: executing program 4 (id=2054): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffef}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000010000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000027f00000100"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.186055265s ago: executing program 4 (id=2055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe80000000000000000000000000001700000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x40044) 4.075044948s ago: executing program 4 (id=2056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027dabfc54c2c0e1f532d95a1a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e0300"/200], 0x18c) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) unlinkat(r9, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unshare(0x1e028180) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) ioctl$TCSETS(r4, 0x5402, 0x0) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x191, 0x140, 0xa0, 0x3f, 0x8, 0x1, 0x20, 0x0, {}, {0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x6, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 3.552657626s ago: executing program 2 (id=2057): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x80}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c800}, 0x44) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000037000100ffff050096"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) write(r3, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) close_range(r1, 0xffffffffffffffff, 0x0) 3.174855105s ago: executing program 5 (id=2059): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000d00)={{@my=0x0}, {@hyper, 0x800000}, 0x400, "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"}, 0x418}) (async, rerun: 32) r0 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x101842) (rerun: 32) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000001080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) fcntl$setown(r1, 0x8, r3) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x2) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x32, 0x0, 0x0, 0xfffff024}, {0x6, 0x4, 0x4, 0x401}, {0x8, 0x6e, 0x9, 0x422e9340}]}, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x5}}, 0x8, 0x4, 0x800, 0xf, 0xf}, &(0x7f0000000300)=0x98) (async) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/120, 0x78}], 0x1, 0x5, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x140b, 0x4, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2.738488397s ago: executing program 5 (id=2060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.434993502s ago: executing program 2 (id=2061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x58, 0x0, 0x9, 0x0, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x2, 0x1, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0xfffffffc, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x1000, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x0, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0xc9d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x4, 0x0, 0x20000, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100)='lo\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) 2.420936853s ago: executing program 3 (id=2063): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) (fail_nth: 3) 2.36880487s ago: executing program 4 (id=2064): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="89d678", 0x3}], 0x1}}], 0x2, 0x8008800) 2.049449797s ago: executing program 5 (id=2065): rt_sigaction(0x7, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000000, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef64, 0x4}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xc0, 0xba, 0x1, 0x0, 0x0, [{{}, 0x200}]}) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4601) 2.021733257s ago: executing program 4 (id=2066): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffef}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000010000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000037f00000100"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.969947889s ago: executing program 3 (id=2067): unshare(0x22020600) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x6766, 0x40, 0x3}, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x5e2, &(0x7f0000000600)={0x0, 0x0, 0x864, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.903028497s ago: executing program 5 (id=2068): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x75f5395aab1513ea, 0xf9) 1.851384336s ago: executing program 3 (id=2069): set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.841153767s ago: executing program 4 (id=2070): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRESDEC=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xc5a, r1, 0x4}, 0x38) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x44, 0xf8, &(0x7f0000000040)="56f265ea07a5043d4c73f75e7c3d62bc96b1fc527d85cb5e31a2facd93f62ebecaf5e602f1b4502f6a3ffd6a7e6bd7acc8c6fd5f482cc0d2a5269e182a77279fd5018987", &(0x7f00000000c0)=""/248, 0x5, 0x0, 0xd3, 0x17, &(0x7f00000001c0)="5d6b6128371c0fc84d725a9c47491855bb047295ef00764dc98a9060195d35461f1905f57dc8bcbe8c2e8c06e74c8b4e2110ad5d797bb0ac7c7efa2afe1403a1e7afde11e77c3d6aa4a7a9af306cdf21f2f827bbfc45ecb79a752a9140406b1a2109d9ba1bf42a01da31a044fdcf0f3ef89ab488c5bfe27a2760f0d5550cc055b6f07494eeccdef6c7fbb2c8f5690145771e2135eb4cb00f7930a288d6dec9a1199d41f158e4e9d4e901a773aebc99dc7ab25231eded6bb22f430a8a72ad6ef42ef2e8d39d4a1aa8e282950c4ce5156db5c66b", &(0x7f00000002c0)="fa32a4909f2c6208e8b4791927643afb6d00cb681cb04c", 0x1, 0x0, 0x3b}, 0x50) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.726973947s ago: executing program 5 (id=2071): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="00002cbd7000ffdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c00cf01582f757263655f6d618162e0770dddc8e174696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x90) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x3}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {0xf}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 1.703295757s ago: executing program 3 (id=2072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) (rerun: 32) r4 = dup3(r3, r1, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000480)=""/140, 0x0, 0x0, 0x7, 0x1}, 0x20) (async) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x20000, 0x56}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x3e}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async, rerun: 32) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) syz_fuse_handle_req(r3, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x140008, 0x0, 0xfffe, 0x1, 0xe67b, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r8, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x4000000}}, 0x50) (async, rerun: 64) syz_fuse_handle_req(r8, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x200000000001, 0x0, 0x4, 0x100000001, 0x0, 0x10000000, 0x2, 0x0, 0x0, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(r8, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, r10, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(r3, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x100000001, {0xc, 0x7, 0x0, {0x5, 0xa, 0x9, 0x6c, 0x7, 0x40000000000a, 0x3, 0xfffff2dc, 0x101, 0x4000, 0xffffff7e, r10, 0xffffffffffffffff, 0x7, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r11 = inotify_init1(0x800) inotify_add_watch(r11, &(0x7f0000000240)='./file0\x00', 0xc0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r12}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 1.631565879s ago: executing program 5 (id=2073): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) pselect6(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2102020a0020003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201"], 0x0) 1.546749651s ago: executing program 3 (id=2074): ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf4a5, 0x208000) r1 = eventfd(0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x0, 0xe9db, 0x6}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xd, 0x10}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r3, 0x2000, 0x7, [0xd50, 0x8, 0x8, 0x5, 0x1, 0x7, 0x7]}, 0x16) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000140), 0x10) recvfrom$inet(r2, &(0x7f0000000180)=""/124, 0x7c, 0x2000, &(0x7f0000000200)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) eventfd(0x3) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000240)="3f6bde1b47870f471ebec0ccd5cc7a9317b6d8a87c813daa40a59d940cdee608b86c6b66a7c11fccb83f20dbaec23cf613c4d4eb5a9fe37557d414bce0e0fc77e07b4347f85732eeb69bfb52a34edccf909834e746d00841210a6369eaca718d8108a30c2147274fe2075090b50675079b9ec54cd7409c3590077107820995f872b04d17f61266894b0c139816c9ab21b8775ee341973059ff14f22bacf3ad89008dca5021137698bcde0e515920af31e06fefd64168b33cc5756df1d3e2883c08a5125bf292baf57724428ef3cf344aa9cced1b268032910008a74732a9504e80", 0xe1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000340)=0x7) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x74a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7a50b9f, 0x10000]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xae4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x12080, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x4, 0x1, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x67, 0x0, 0x0, 0xeab4f73632bd3fdf, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0x2, [{@multicast2, 0x97da}, {@rand_addr=0x64010100, 0x80}, {@multicast1, 0x301}]}, @timestamp_addr={0x44, 0x3c, 0xcb, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x41}}, {@multicast1, 0x37}, {@rand_addr=0x64010101, 0xb6}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x523}, {@local, 0x7}]}]}}}}}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000680)={0xffffffffffffffff, 0x1, 0x6, r5, 0x10001}, 0xc) r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)="2dcc764ee4595b1f6f1e826e327ee2f89db2e5ced3e84c7cf7bbc65df289d777b4551e7181fb0f5a6e6355fd8c87cd75a6e39f1b6fe4c722cc64c2fdc794c3973839ed6bb5de9a611d3165d87e77977502fee6fe9681b4710c09450037c9404e5c9d2850d202056917cfc87b8f93230ef8384b789aa3aa8a60ac510af09f5de450bddd9c87594b6224c7067c97a946962fdda15d118098b99b603f4e98d3fe1ded5f241b15ee152ceb0b0a5521fa5a5221f3b61919d9693c7e", 0xb9, r6) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000880)={'security\x00', 0x0, [0x5, 0x3, 0x4, 0xffff, 0x2]}, &(0x7f0000000900)=0x54) r8 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000940)) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14) keyctl$invalidate(0x15, r7) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000980)=0x2, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000009c0)={0x0, 0x0}) sched_setattr(r9, &(0x7f0000000a40)={0x38, 0x3, 0x0, 0x14, 0x3, 0x4, 0x101, 0xe, 0x4, 0x2}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000a80)={0x1, 0x2}) r10 = syz_open_dev$loop(&(0x7f0000000ac0), 0x4, 0x0) ioctl$LOOP_GET_STATUS64(r10, 0x4c05, &(0x7f0000000b00)) prlimit64(r9, 0x6, &(0x7f0000000c00)={0x9, 0xf}, 0x0) 1.510317796s ago: executing program 3 (id=2075): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x1, 0x2, 0x5, &(0x7f0000000300)={0x2, "ba56b4f76c1147713bbb79931987e92352124c3f58f98e3897d9f1948f4e2cc33a"}}) (fail_nth: 5) 1.178440052s ago: executing program 2 (id=2076): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="89d678", 0x3}], 0x1}}], 0x2, 0x8008800) 1.088724804s ago: executing program 2 (id=2077): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000000c0)={0x200, 0xc, 0x4, 0x2000, 0x1ff, {0x77359400}, {0x1, 0x2, 0x7, 0x9, 0x31, 0x0, "241b9c19"}, 0x2, 0x4, {}, 0x3}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) get_mempolicy(0x0, 0x0, 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000180)=0xc, 0x4) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "0df63fc9f04c63846c12018960a9b3bf8bb08f8316e891e6", "88cd1d881f2218bac789d645829c5fc329b78a5f9cc7ec026cbc711ece32c29f"}}}}}}, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x4, @empty, 0x3}], 0x2c) r6 = syz_open_dev$I2C(&(0x7f0000000700), 0x1, 0x800) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0x18, 0x8, &(0x7f00000004c0)={0x0, "a52422ffd60775c221c4021d467d664800ff0000002200"}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) 743.281292ms ago: executing program 0 (id=2079): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = dup2(r2, r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x8) sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4840) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580100001000130400000000edffffffe0000002000000000000008fd90000002001e6329de4a31b198d2f6104cbb01c0000000000000000000000000002fffd00004e2400090200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002232000000fe8000000000000000000000000000bb0000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff04000000000000000600000000000000000000000000000003000000010000000800000000000000cc0000000000000000000000000000000d0000000000000000000000000000000000000002000001080000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000060"], 0x158}}, 0x4804) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 487.146994ms ago: executing program 0 (id=2080): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffef}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000010000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa00000000000000000000000a7f00000100"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 461.464922ms ago: executing program 0 (id=2081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000000000000000fe80000000000000000000000000001700000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000010000000300000000000000000000000000000000000000000000000000000000000000001d000000000000007f00000000000000990c0000000000000000000000000000dd020000000000000000000000000000000100020000000084010500ac141439000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc0200000000000000000000000000000000000032"], 0x23c}}, 0x40044) 405.943633ms ago: executing program 0 (id=2082): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x3ff, @empty, 0x1}, 0x1c) poll(&(0x7f0000000000)=[{r1, 0x616}], 0x1, 0x100) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xa) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMGET(r4, 0x5415, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x38}}, 0x90) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 63.05703ms ago: executing program 0 (id=2083): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 0s ago: executing program 0 (id=2084): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000840)={0xc}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) unshare(0x22020400) inotify_init1(0x0) dup3(r2, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002208000000fd"], 0x0}, 0x0) r4 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x70, 0x4, [{{0x9, 0x4, 0x0, 0xdc, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0xb}}, [{{0x9, 0x5, 0x82, 0x2, 0x420, 0xca, 0x8, 0x1}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x9, 0x5, 0x10, 0x6}, 0x87, &(0x7f00000005c0)={0x5, 0xf, 0x87, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x8, 0x0, 0xd, 0x9}, @generic={0x74, 0x10, 0xb, "ee2ff21b5c9093e76d20550fedc9b3df4c35789c2063d050eb98a3ad89f316ea9658fbc524b0f20dae7bead23b92773829402eff5f54193260fa895f4be0e6470a01d30f87c2d3b48a4bc73916a5d2c89d1bf71c908f062a550cd220e66bdf4a84fec21097d209da3344f426d36f5c6261"}]}, 0x3, [{0x5c, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x455}}, {0x6c, &(0x7f00000006c0)=@lang_id={0x0, 0x3, 0x480a}}, {0x8c, &(0x7f0000000d00)=@string={0x8c, 0x3, "fee7490aad31bd41507e765ea4d89567e24e9be62659512ff9f32d0cc9997e4147eb65fe69b8ef3e01c7204d8bd83caa8a7b3a075618234bd71e1f830f40d98d65380f813c70281ababb17940bb31534ba3ff902e7f388106f12fe857d26d972985f1787b3436c4c2665191ce12f98c6b7755cec85f4c0d47a3afd62743b68c7f88bc3c08d262dc3fa56"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000a00)={0x14, &(0x7f0000000900)={0x0, 0x1, 0x2, {0x2, 0xa17f5842c9862fb9}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000cc0)={0x34, &(0x7f0000000a40)={0x40, 0x6, 0xe5, "504b335472e400e669d6744b3776782d04632eb7ad535b1ee0135938fe77eb02a50fb04b56d1682ec67f9e71b02b3f0c085a1588c650cc9506e0c072356acc9e06329c3f41c1a9b0c89db81cc762269f6441f54c175b6033c526006ba515b7d678bc86bfbf7a3df725afed4b8a6a53479af583e43fc028f662e45f0160a2a6049f551c70074e2d35a06a68ef3e92c47996a0011cffcd2e26220a4f456253f805ecd21641c59d5bd4882e72acfc545324b6fcf43cb09b4cc31b5cadae5200cd18d00ecc7637b957edf95877008e5a1117d2ea7db437791a839e07490400b43e2f18b52de2e6"}, &(0x7f0000000b40)={0x0, 0xa, 0x1}, &(0x7f0000000b80)={0x0, 0x8, 0x1}, &(0x7f0000000c00)={0x20, 0x0, 0x33, {0x31, "6ad1197cf9fedb271ea94df57bf65176a436c9ee2f2c7aed79cd0fe03d9b8153b9a3d504d542123aa6704dbaa150eea014"}}, &(0x7f0000000c40)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000c80)={0x20, 0x0, 0x1, 0xff}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0) kernel console output (not intermixed with test programs): 6][ T43] usb 5-1: config 0 has no interface number 0 [ 448.977900][ T5199] Dev loop2: unable to read RDB block 7 [ 448.989108][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 449.006648][ T5199] loop2: unable to read partition table [ 449.016101][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.025265][ T5199] loop2: partition table beyond EOD, truncated [ 449.032078][ T43] usb 5-1: Product: syz [ 449.038857][ T43] usb 5-1: Manufacturer: syz [ 449.051185][ T43] usb 5-1: SerialNumber: syz [ 449.067907][ T43] usb 5-1: config 0 descriptor?? [ 449.126367][ T43] smsc95xx v2.0.0 [ 449.227206][T11989] geneve2: entered promiscuous mode [ 449.232964][T11989] geneve2: entered allmulticast mode [ 449.321403][T10083] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 449.519984][T10083] usb 1-1: Using ep0 maxpacket: 16 [ 449.529699][T10083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.530432][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 449.552458][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 449.653005][T10083] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.795477][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 449.809361][ T43] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 449.896534][T10083] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 449.960461][T10083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.979514][T10083] usb 1-1: config 0 descriptor?? [ 450.186399][T12002] gre1: entered allmulticast mode [ 450.513028][T10083] wacom 0003:056A:0084.0024: unbalanced delimiter at end of report description [ 450.546041][T10083] wacom 0003:056A:0084.0024: parse failed [ 450.606288][T10083] wacom 0003:056A:0084.0024: probe with driver wacom failed with error -22 [ 450.737895][ T1219] usb 1-1: USB disconnect, device number 85 [ 450.926261][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'. [ 450.936612][T12009] netlink: 121 bytes leftover after parsing attributes in process `syz.2.1704'. [ 451.227160][T12015] QAT: failed to copy from user. [ 451.318942][T12004] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1703'. [ 451.458109][T12018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1706'. [ 451.534457][T12020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.083506][ T1219] usb 5-1: USB disconnect, device number 75 [ 452.602143][T12034] loop2: detected capacity change from 0 to 7 [ 452.629162][ T5840] Dev loop2: unable to read RDB block 7 [ 452.635173][ T5840] loop2: unable to read partition table [ 452.646967][ T5840] loop2: partition table beyond EOD, truncated [ 452.671343][T12034] Dev loop2: unable to read RDB block 7 [ 452.677599][T12034] loop2: unable to read partition table [ 452.690189][T12034] loop2: partition table beyond EOD, truncated [ 452.711300][T12034] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.028955][ T1219] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 453.192079][ T1219] usb 5-1: config 4 has an invalid interface number: 88 but max is 0 [ 453.207622][ T1219] usb 5-1: config 4 has no interface number 0 [ 453.214247][ T1219] usb 5-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 453.240991][ T1219] usb 5-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 453.279900][ T1219] usb 5-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 1024 [ 453.335685][ T1219] usb 5-1: config 4 interface 88 altsetting 119 bulk endpoint 0x85 has invalid maxpacket 1024 [ 453.369352][ T1219] usb 5-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 453.406895][ T1219] usb 5-1: config 4 interface 88 has no altsetting 0 [ 453.437065][ T1219] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 453.488599][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.506143][ T1219] usb 5-1: Product: syz [ 453.510761][ T1219] usb 5-1: Manufacturer: syz [ 453.515366][ T1219] usb 5-1: SerialNumber: syz [ 453.526199][T12031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 453.750612][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 453.856851][T12063] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1719'. [ 453.939906][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 453.948948][ T9] usb 1-1: no configurations [ 453.958429][ T9] usb 1-1: can't read configurations, error -22 [ 454.190389][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 454.380383][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 454.386072][ T9] usb 1-1: no configurations [ 454.391498][ T9] usb 1-1: can't read configurations, error -22 [ 454.398021][ T9] usb usb1-port1: attempt power cycle [ 454.470215][ T1219] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 454.570604][ T43] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 454.581573][T12085] loop2: detected capacity change from 0 to 7 [ 454.588736][T12085] Dev loop2: unable to read RDB block 7 [ 454.594761][T12085] loop2: unable to read partition table [ 454.600762][T12085] loop2: partition table beyond EOD, truncated [ 454.607091][T12085] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.622204][ T1219] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.639232][ T1219] usb 3-1: config 0 has no interface number 0 [ 454.652210][ T1219] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.672279][ T1219] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.683213][ T1219] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 454.698553][ T1219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.713370][ T1219] usb 3-1: config 0 descriptor?? [ 454.731521][ T43] usb 4-1: config 4 has an invalid interface number: 142 but max is 0 [ 454.743721][ T43] usb 4-1: config 4 has no interface number 0 [ 454.755878][ T43] usb 4-1: config 4 interface 142 has no altsetting 0 [ 454.765874][ T43] usb 4-1: New USB device found, idVendor=0403, idProduct=f06f, bcdDevice=3c.7c [ 454.770967][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 454.775476][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.791254][ T43] usb 4-1: Product: syz [ 454.795464][ T43] usb 4-1: Manufacturer: syz [ 454.802623][ T43] usb 4-1: SerialNumber: syz [ 454.810875][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 454.819288][ T9] usb 1-1: no configurations [ 454.824036][ T9] usb 1-1: can't read configurations, error -22 [ 454.959948][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 454.980038][T10083] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 454.988891][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 454.994920][ T9] usb 1-1: no configurations [ 454.999548][ T9] usb 1-1: can't read configurations, error -22 [ 455.006164][ T9] usb usb1-port1: unable to enumerate USB device [ 455.031137][ T43] ftdi_sio 4-1:4.142: FTDI USB Serial Device converter detected [ 455.044030][ T43] ftdi_sio ttyUSB0: unknown device type: 0x3c7c [ 455.055141][ T43] usb 4-1: USB disconnect, device number 64 [ 455.070794][ T43] ftdi_sio 4-1:4.142: device disconnected [ 455.134568][T10083] usb 6-1: config 0 has no interfaces? [ 455.159240][T10083] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 455.179396][T10083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.192167][T10083] usb 6-1: Product: syz [ 455.196352][T10083] usb 6-1: Manufacturer: syz [ 455.201811][T10083] usb 6-1: SerialNumber: syz [ 455.209238][T10083] usb 6-1: config 0 descriptor?? [ 455.227310][T12094] loop2: detected capacity change from 0 to 7 [ 455.231865][ T5930] usb 5-1: USB disconnect, device number 76 [ 455.239335][T12094] Dev loop2: unable to read RDB block 7 [ 455.255177][T12094] loop2: unable to read partition table [ 455.263980][T12094] loop2: partition table beyond EOD, truncated [ 455.277845][T12094] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.331507][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 455.344006][ T1219] usbhid 3-1:0.1: can't add hid device: -71 [ 455.355547][ T1219] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 455.378343][ T1219] usb 3-1: USB disconnect, device number 65 [ 455.497729][T12098] QAT: failed to copy from user. [ 455.848925][ T5930] usb 6-1: USB disconnect, device number 18 [ 456.107443][T12107] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 456.216872][T12107] bond6: entered promiscuous mode [ 456.331012][T12113] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1736'. [ 456.352032][T12107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 456.524390][T12115] loop2: detected capacity change from 0 to 7 [ 456.555092][ T5840] Dev loop2: unable to read RDB block 7 [ 456.565314][ T5840] loop2: unable to read partition table [ 456.576177][ T5840] loop2: partition table beyond EOD, truncated [ 456.601395][T12115] Dev loop2: unable to read RDB block 7 [ 456.612598][T12115] loop2: unable to read partition table [ 456.626940][T12115] loop2: partition table beyond EOD, truncated [ 456.646358][T12115] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 456.648184][T12119] input: syz1 as /devices/virtual/input/input32 [ 457.049964][ T43] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 457.817804][ T43] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 457.827689][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.863436][ T43] usb 3-1: config 0 descriptor?? [ 457.884237][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 458.290501][ T43] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 458.805107][T12119] netlink: 'syz.2.1737': attribute type 12 has an invalid length. [ 458.820192][T12119] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1737'. [ 458.899538][ T43] gspca_cpia1: usb_control_msg 02, error -71 [ 458.918071][ T43] gspca_cpia1: usb_control_msg 05, error -71 [ 459.019945][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 459.039924][ T43] cpia1 3-1:0.0: unexpected systemstate: 00 [ 459.064618][ T43] usb 3-1: USB disconnect, device number 66 [ 459.090064][T10083] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 459.202256][ T9] usb 5-1: config 4 has an invalid interface number: 88 but max is 0 [ 459.210816][ T9] usb 5-1: config 4 has no interface number 0 [ 459.217133][ T9] usb 5-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 459.229516][ T9] usb 5-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 459.247438][ T9] usb 5-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 1024 [ 459.263940][ T9] usb 5-1: config 4 interface 88 altsetting 119 bulk endpoint 0x85 has invalid maxpacket 1024 [ 459.282121][ T9] usb 5-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.296028][ T9] usb 5-1: config 4 interface 88 has no altsetting 0 [ 459.307281][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 459.358439][T10083] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 459.369224][T10083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.381684][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.389779][T10083] usb 6-1: Product: syz [ 459.394416][T10083] usb 6-1: Manufacturer: syz [ 459.399136][ T9] usb 5-1: Product: syz [ 459.403695][T10083] usb 6-1: SerialNumber: syz [ 459.408567][ T9] usb 5-1: Manufacturer: syz [ 459.414387][ T9] usb 5-1: SerialNumber: syz [ 459.419676][T10083] usb 6-1: config 0 descriptor?? [ 459.431525][T12130] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 459.601771][T12144] fuse: Invalid rootmode [ 460.142461][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 460.519619][T12167] FAULT_INJECTION: forcing a failure. [ 460.519619][T12167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.604018][T12167] CPU: 0 UID: 0 PID: 12167 Comm: syz.2.1753 Not tainted syzkaller #0 PREEMPT(full) [ 460.604047][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.604058][T12167] Call Trace: [ 460.604064][T12167] [ 460.604070][T12167] dump_stack_lvl+0x189/0x250 [ 460.604092][T12167] ? __pfx____ratelimit+0x10/0x10 [ 460.604111][T12167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.604127][T12167] ? __pfx__printk+0x10/0x10 [ 460.604141][T12167] ? __might_fault+0xb0/0x130 [ 460.604166][T12167] should_fail_ex+0x414/0x560 [ 460.604189][T12167] _copy_from_user+0x2d/0xb0 [ 460.604214][T12167] ___sys_recvmsg+0x12e/0x510 [ 460.604234][T12167] ? __pfx____sys_recvmsg+0x10/0x10 [ 460.604270][T12167] ? __might_fault+0xb0/0x130 [ 460.604290][T12167] do_recvmmsg+0x307/0x770 [ 460.604310][T12167] ? __pfx_do_recvmmsg+0x10/0x10 [ 460.604333][T12167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 460.604363][T12167] __x64_sys_recvmmsg+0x190/0x240 [ 460.604379][T12167] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 460.604397][T12167] ? do_syscall_64+0xbe/0xfa0 [ 460.604417][T12167] do_syscall_64+0xfa/0xfa0 [ 460.604433][T12167] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.604449][T12167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.604463][T12167] ? clear_bhb_loop+0x60/0xb0 [ 460.604480][T12167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.604493][T12167] RIP: 0033:0x7f90b198f6c9 [ 460.604505][T12167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.604517][T12167] RSP: 002b:00007f90b2853038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 460.604532][T12167] RAX: ffffffffffffffda RBX: 00007f90b1be6180 RCX: 00007f90b198f6c9 [ 460.604542][T12167] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 460.604550][T12167] RBP: 00007f90b2853090 R08: 0000000000000000 R09: 0000000000000000 [ 460.604559][T12167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.604567][T12167] R13: 00007f90b1be6218 R14: 00007f90b1be6180 R15: 00007f90b1d0fa28 [ 460.604589][T12167] [ 460.605617][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.669438][ T5900] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 460.901043][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.913600][ T43] usb 4-1: Product: syz [ 460.920473][ T43] usb 4-1: Manufacturer: syz [ 460.928847][ T43] usb 4-1: SerialNumber: syz [ 460.943050][ T43] usb 4-1: config 0 descriptor?? [ 461.265429][ T9] usb 5-1: USB disconnect, device number 77 [ 461.564241][ T5900] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 461.575768][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.597561][T10083] usb 6-1: USB disconnect, device number 19 [ 461.626124][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.656480][T12169] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1754'. [ 461.864610][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 461.898213][ T5900] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 461.907532][ T5900] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 461.915784][ T5900] usb 1-1: Manufacturer: syz [ 461.931207][ T5900] usb 1-1: config 0 descriptor?? [ 462.386348][ T5900] appleir 0003:05AC:8243.0025: item fetching failed at offset 0/1 [ 462.395409][ T5900] appleir 0003:05AC:8243.0025: parse failed [ 462.421637][ T5900] appleir 0003:05AC:8243.0025: probe with driver appleir failed with error -22 [ 462.509373][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1757'. [ 462.531341][T12177] netlink: 'syz.5.1757': attribute type 2 has an invalid length. [ 462.592006][T12163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.605265][T12163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.896583][T12182] fuse: Bad value for 'rootmode' [ 462.900450][ T43] usb 4-1: USB disconnect, device number 65 [ 463.013600][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 463.157382][ T1219] usb 1-1: USB disconnect, device number 90 [ 463.255486][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1761'. [ 463.620522][T12200] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1765'. [ 463.682618][ T1219] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 463.931469][ T1219] usb 6-1: Using ep0 maxpacket: 8 [ 464.106421][ T1219] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 464.116576][ T1219] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 464.126507][ T1219] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.137102][ T1219] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.345328][ T1219] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.531473][ T1219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.597890][T10083] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 465.125725][ T1219] usb 6-1: GET_CAPABILITIES returned 0 [ 465.125756][ T1219] usbtmc 6-1:16.0: can't read capabilities [ 465.277631][T10083] usb 1-1: config 4 has an invalid interface number: 88 but max is 0 [ 465.289592][T10083] usb 1-1: config 4 has no interface number 0 [ 465.296399][T10083] usb 1-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 465.331412][T10083] usb 1-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 465.346630][T10083] usb 1-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 1024 [ 465.359703][T10083] usb 1-1: config 4 interface 88 altsetting 119 bulk endpoint 0x85 has invalid maxpacket 1024 [ 465.371389][T10083] usb 1-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 465.385462][T10083] usb 1-1: config 4 interface 88 has no altsetting 0 [ 465.445826][T10083] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 465.455399][T10083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.463685][T10083] usb 1-1: Product: syz [ 465.470157][T10083] usb 1-1: Manufacturer: syz [ 465.474973][T10083] usb 1-1: SerialNumber: syz [ 465.504511][T12202] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 465.529924][ T1219] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 465.703267][T10083] usb 6-1: USB disconnect, device number 20 [ 465.914479][ T1219] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 465.926610][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.934904][ T1219] usb 3-1: Product: syz [ 465.939094][ T1219] usb 3-1: Manufacturer: syz [ 465.944147][ T1219] usb 3-1: SerialNumber: syz [ 465.954517][ T1219] usb 3-1: config 0 descriptor?? [ 466.102081][T12224] fuse: Bad value for 'rootmode' [ 466.170854][T12226] FAULT_INJECTION: forcing a failure. [ 466.170854][T12226] name failslab, interval 1, probability 0, space 0, times 0 [ 466.183916][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.4.1771 Not tainted syzkaller #0 PREEMPT(full) [ 466.183939][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.183950][T12226] Call Trace: [ 466.183958][T12226] [ 466.183966][T12226] dump_stack_lvl+0x189/0x250 [ 466.183992][T12226] ? __pfx____ratelimit+0x10/0x10 [ 466.184014][T12226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.184036][T12226] ? __pfx__printk+0x10/0x10 [ 466.184060][T12226] ? __pfx___might_resched+0x10/0x10 [ 466.184078][T12226] ? fs_reclaim_acquire+0x7d/0x100 [ 466.184099][T12226] should_fail_ex+0x414/0x560 [ 466.184128][T12226] should_failslab+0xa8/0x100 [ 466.184148][T12226] kmem_cache_alloc_node_noprof+0x77/0x710 [ 466.184169][T12226] ? __alloc_skb+0x112/0x2d0 [ 466.184184][T12226] ? netlink_autobind+0xdb/0x300 [ 466.184205][T12226] __alloc_skb+0x112/0x2d0 [ 466.184224][T12226] netlink_sendmsg+0x5c6/0xb30 [ 466.184249][T12226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.184269][T12226] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.184295][T12226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.184312][T12226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.184330][T12226] __sock_sendmsg+0x21c/0x270 [ 466.184354][T12226] ____sys_sendmsg+0x505/0x830 [ 466.184378][T12226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.184404][T12226] ? import_iovec+0x74/0xa0 [ 466.184429][T12226] ___sys_sendmsg+0x21f/0x2a0 [ 466.184450][T12226] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.184502][T12226] ? __fget_files+0x2a/0x420 [ 466.184518][T12226] ? __fget_files+0x3a0/0x420 [ 466.184544][T12226] __x64_sys_sendmsg+0x19b/0x260 [ 466.184566][T12226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.184594][T12226] ? __pfx_ksys_write+0x10/0x10 [ 466.184621][T12226] ? do_syscall_64+0xbe/0xfa0 [ 466.184657][T12226] do_syscall_64+0xfa/0xfa0 [ 466.184678][T12226] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.184701][T12226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.184719][T12226] ? clear_bhb_loop+0x60/0xb0 [ 466.184740][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.184757][T12226] RIP: 0033:0x7f0789d8f6c9 [ 466.184773][T12226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.184790][T12226] RSP: 002b:00007f078ac5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.184811][T12226] RAX: ffffffffffffffda RBX: 00007f0789fe5fa0 RCX: 00007f0789d8f6c9 [ 466.184823][T12226] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000006 [ 466.184835][T12226] RBP: 00007f078ac5c090 R08: 0000000000000000 R09: 0000000000000000 [ 466.184847][T12226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.184857][T12226] R13: 00007f0789fe6038 R14: 00007f0789fe5fa0 R15: 00007f078a10fa28 [ 466.184887][T12226] [ 466.459890][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.649106][ T1219] usb 3-1: USB disconnect, device number 67 [ 466.657909][T12233] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 466.806901][ T5930] usb 1-1: USB disconnect, device number 91 [ 466.961816][T12238] veth9: entered promiscuous mode [ 466.978736][T12238] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 467.556742][T12255] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1778'. [ 467.808553][T12263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.879742][ T5900] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 467.903185][T10083] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 468.039940][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 468.113644][T10083] usb 3-1: Using ep0 maxpacket: 16 [ 468.128854][T10083] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.142935][ T5900] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 468.164807][T10083] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.187186][T10083] usb 3-1: config 0 interface 0 has no altsetting 0 [ 468.214969][T10083] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 468.230760][ T5900] usb 1-1: language id specifier not provided by device, defaulting to English [ 468.311136][T12272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1782'. [ 468.332218][T10083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.397664][T10083] usb 3-1: config 0 descriptor?? [ 468.409037][ T5900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.552835][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.580152][ T5900] usb 1-1: Manufacturer: Г [ 468.584861][ T5900] usb 1-1: SerialNumber: syz [ 468.652599][T10083] usbhid 3-1:0.0: can't add hid device: -71 [ 468.666491][T10083] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 468.751293][T10083] usb 3-1: USB disconnect, device number 68 [ 469.253436][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1785'. [ 469.900143][T10083] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 470.097312][T10083] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.106597][T10083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.115907][T10083] usb 3-1: Product: syz [ 470.121364][T10083] usb 3-1: Manufacturer: syz [ 470.142238][T10083] usb 3-1: SerialNumber: syz [ 470.177572][T10083] usb 3-1: config 0 descriptor?? [ 470.582395][ T1219] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 470.743506][ T1219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.754386][T12300] loop9: detected capacity change from 0 to 7 [ 470.776498][ T1219] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 470.801332][T12300] Dev loop9: unable to read RDB block 7 [ 470.820522][T12300] loop9: unable to read partition table [ 470.846694][ T1219] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 470.855840][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.863951][ T1219] usb 4-1: Product: syz [ 470.871835][ T1219] usb 4-1: Manufacturer: syz [ 470.879697][T12300] loop9: partition table beyond EOD, truncated [ 470.898330][ T1219] usb 4-1: SerialNumber: syz [ 470.931035][ T1219] usb 4-1: config 0 descriptor?? [ 470.941564][T12300] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 470.958205][ T5900] cdc_ncm 1-1:1.0: bind() failure [ 470.966387][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 471.150050][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 471.219169][ T10] usb 6-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 471.240763][ T5900] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 471.253814][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.266484][ T5900] cdc_ncm 1-1:1.1: bind() failure [ 471.290403][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.303616][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.313099][ T5900] usb 1-1: USB disconnect, device number 92 [ 471.329955][ T1219] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 471.335767][ T10] usb 6-1: Product: syz [ 471.358781][ T10] usb 6-1: Manufacturer: syz [ 471.371500][ T10] usb 6-1: SerialNumber: syz [ 471.492136][ T1219] usb 5-1: config 0 has no interfaces? [ 471.499678][ T1219] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 471.509210][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.520466][ T1219] usb 5-1: Product: syz [ 471.527640][ T1219] usb 5-1: Manufacturer: syz [ 471.538035][ T1219] usb 5-1: SerialNumber: syz [ 471.561739][ T1219] usb 5-1: config 0 descriptor?? [ 471.719928][ T5900] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 471.889924][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 471.952887][ T5900] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 471.984898][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.996764][ T5900] usb 1-1: config 0 descriptor?? [ 472.017271][ T5900] gspca_main: sunplus-2.14.0 probing 041e:400b [ 472.417300][ T10] usb 6-1: 0:2 : does not exist [ 472.422341][T10083] usb 3-1: USB disconnect, device number 69 [ 472.511798][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 472.533795][ T10] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 472.549815][ T10] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 472.563517][ T10] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5) [ 472.662073][ T10] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 472.678143][ T10] usb 6-1: USB disconnect, device number 21 [ 472.785285][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.077487][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 473.080433][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 473.276640][ T1219] usb 4-1: USB disconnect, device number 66 [ 473.381427][ T5886] usb 5-1: USB disconnect, device number 78 [ 473.394568][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 473.403702][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.428529][ T10] usb 6-1: Product: syz [ 473.433395][ T10] usb 6-1: Manufacturer: syz [ 473.447501][ T10] usb 6-1: SerialNumber: syz [ 473.460785][ T10] usb 6-1: config 0 descriptor?? [ 473.567812][ T5900] gspca_sunplus: reg_w_riv err -71 [ 473.576796][ T5900] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 473.591765][ T5900] usb 1-1: USB disconnect, device number 93 [ 473.688579][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 473.688597][ T30] audit: type=1326 audit(1762919675.189:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 473.731172][ T30] audit: type=1326 audit(1762919675.189:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 473.760028][ T30] audit: type=1326 audit(1762919675.229:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 473.831192][ T30] audit: type=1326 audit(1762919675.239:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 473.854570][ T30] audit: type=1326 audit(1762919675.239:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 473.877475][ T30] audit: type=1326 audit(1762919675.259:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 473.900654][T12325] fuse: Bad value for 'group_id' [ 473.905653][T12325] fuse: Bad value for 'group_id' [ 473.913897][ T30] audit: type=1326 audit(1762919675.269:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 473.946742][ T30] audit: type=1326 audit(1762919675.269:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 474.040255][T10083] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 474.062735][ T30] audit: type=1326 audit(1762919675.289:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 474.094623][ T30] audit: type=1326 audit(1762919675.289:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12322 comm="syz.3.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b72b8f6c9 code=0x7ffc0000 [ 474.212347][T10083] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 474.212366][T10083] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 474.212401][T10083] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 474.212413][T10083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.235308][T10083] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 474.529549][T12334] bridge2: entered promiscuous mode [ 474.547381][T10083] gspca_sn9c2028: read1 error -71 [ 474.595106][T12334] bridge3: entered promiscuous mode [ 474.610711][T10083] gspca_sn9c2028: read1 error -71 [ 474.620037][T10083] gspca_sn9c2028: read1 error -71 [ 474.620141][T10083] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 474.638605][T10083] usb 4-1: USB disconnect, device number 67 [ 474.822935][ T10] usb 6-1: USB disconnect, device number 22 [ 474.841493][T12339] loop9: detected capacity change from 0 to 7 [ 474.842378][T12339] Dev loop9: unable to read RDB block 7 [ 474.842421][T12339] loop9: unable to read partition table [ 474.842620][T12339] loop9: partition table beyond EOD, truncated [ 474.842639][T12339] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 474.883149][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.529949][T10083] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 475.705875][T10083] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 475.715174][T10083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.750203][T10083] usb 1-1: Product: syz [ 475.754390][T10083] usb 1-1: Manufacturer: syz [ 475.758977][T10083] usb 1-1: SerialNumber: syz [ 475.819258][T10083] usb 1-1: config 0 descriptor?? [ 475.834183][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 475.993066][T12378] QAT: failed to copy from user. [ 476.061262][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 476.063655][T12380] loop2: detected capacity change from 0 to 7 [ 476.074218][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 476.074254][ T10] usb 5-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 476.074277][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 476.074576][T12380] Dev loop2: unable to read RDB block 7 [ 476.074815][T12380] loop2: unable to read partition table [ 476.075018][T12380] loop2: partition table beyond EOD, truncated [ 476.075040][T12380] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 476.078269][ T10] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 476.078320][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.078340][ T10] usb 5-1: Product: syz [ 476.078356][ T10] usb 5-1: Manufacturer: syz [ 476.078370][ T10] usb 5-1: SerialNumber: syz [ 476.081666][ T10] usb 5-1: config 0 descriptor?? [ 476.501143][T12388] FAULT_INJECTION: forcing a failure. [ 476.501143][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 476.501180][T12388] CPU: 0 UID: 0 PID: 12388 Comm: syz.5.1819 Not tainted syzkaller #0 PREEMPT(full) [ 476.501192][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.501199][T12388] Call Trace: [ 476.501204][T12388] [ 476.501208][T12388] dump_stack_lvl+0x189/0x250 [ 476.501229][T12388] ? __pfx____ratelimit+0x10/0x10 [ 476.501244][T12388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.501256][T12388] ? __pfx__printk+0x10/0x10 [ 476.501269][T12388] ? __pfx___might_resched+0x10/0x10 [ 476.501280][T12388] ? fs_reclaim_acquire+0x7d/0x100 [ 476.501292][T12388] should_fail_ex+0x414/0x560 [ 476.501310][T12388] should_failslab+0xa8/0x100 [ 476.501320][T12388] __kmalloc_noprof+0xcb/0x7f0 [ 476.501333][T12388] ? sock_kmalloc+0xd6/0x160 [ 476.501343][T12388] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 476.501357][T12388] sock_kmalloc+0xd6/0x160 [ 476.501369][T12388] hash_recvmsg+0x1d4/0x840 [ 476.501385][T12388] ? __pfx_hash_recvmsg+0x10/0x10 [ 476.501397][T12388] sock_recvmsg_nosec+0x186/0x1c0 [ 476.501413][T12388] ____sys_recvmsg+0x3aa/0x460 [ 476.501429][T12388] ? __pfx_____sys_recvmsg+0x10/0x10 [ 476.501448][T12388] ? import_iovec+0x74/0xa0 [ 476.501461][T12388] ___sys_recvmsg+0x1b5/0x510 [ 476.501475][T12388] ? __pfx____sys_recvmsg+0x10/0x10 [ 476.501501][T12388] ? __might_fault+0xb0/0x130 [ 476.501517][T12388] do_recvmmsg+0x307/0x770 [ 476.501532][T12388] ? __pfx_do_recvmmsg+0x10/0x10 [ 476.501549][T12388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.501572][T12388] __x64_sys_recvmmsg+0x190/0x240 [ 476.501584][T12388] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 476.501597][T12388] ? do_syscall_64+0xbe/0xfa0 [ 476.501612][T12388] do_syscall_64+0xfa/0xfa0 [ 476.501624][T12388] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.501636][T12388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.501645][T12388] ? clear_bhb_loop+0x60/0xb0 [ 476.501657][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.501666][T12388] RIP: 0033:0x7fdcf3d8f6c9 [ 476.501677][T12388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.501686][T12388] RSP: 002b:00007fdcf1fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 476.501697][T12388] RAX: ffffffffffffffda RBX: 00007fdcf3fe6180 RCX: 00007fdcf3d8f6c9 [ 476.501705][T12388] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 476.501711][T12388] RBP: 00007fdcf1fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 476.501717][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.501723][T12388] R13: 00007fdcf3fe6218 R14: 00007fdcf3fe6180 R15: 00007fdcf410fa28 [ 476.501739][T12388] [ 476.545055][ T1219] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 476.933683][ T1219] usb 4-1: device descriptor read/64, error -71 [ 477.179929][ T1219] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 477.385388][ T1219] usb 4-1: device descriptor read/64, error -71 [ 477.500528][ T1219] usb usb4-port1: attempt power cycle [ 477.524247][ T10] usb 5-1: cannot find UAC_HEADER [ 477.542405][T10083] usb 1-1: USB disconnect, device number 94 [ 477.702515][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 477.743651][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.752431][ T10] usb 5-1: USB disconnect, device number 79 [ 477.784044][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 477.867735][ T1219] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 477.910739][ T1219] usb 4-1: device descriptor read/8, error -71 [ 478.161903][ T1219] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 478.190782][ T1219] usb 4-1: device descriptor read/8, error -71 [ 478.300371][ T1219] usb usb4-port1: unable to enumerate USB device [ 478.832226][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 479.011124][ T10] usb 5-1: too many configurations: 99, using maximum allowed: 8 [ 479.020179][ T10] usb 5-1: config index 0 descriptor too short (expected 65020, got 114) [ 479.028820][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.040791][ T10] usb 5-1: config index 1 descriptor too short (expected 65020, got 114) [ 479.049503][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.074483][ T10] usb 5-1: config index 2 descriptor too short (expected 65020, got 114) [ 479.083229][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.099619][ T10] usb 5-1: config index 3 descriptor too short (expected 65020, got 114) [ 479.108925][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.121525][ T10] usb 5-1: config index 4 descriptor too short (expected 65020, got 114) [ 479.130159][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.151416][ T10] usb 5-1: config index 5 descriptor too short (expected 65020, got 114) [ 479.160055][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.181954][ T10] usb 5-1: config index 6 descriptor too short (expected 65020, got 114) [ 479.193002][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.205887][ T10] usb 5-1: config index 7 descriptor too short (expected 65020, got 114) [ 479.215461][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.228537][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 479.240545][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.248651][ T10] usb 5-1: Product: syz [ 479.253189][ T10] usb 5-1: Manufacturer: syz [ 479.258025][ T10] usb 5-1: SerialNumber: syz [ 479.274414][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 479.322974][T10083] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 479.710728][T12436] fuse: Unknown parameter 'user_i00000000000000000000' [ 479.751482][ T1219] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 479.775104][ T10] usb 5-1: USB disconnect, device number 80 [ 479.921676][T12440] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1837'. [ 479.932022][T12429] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 479.939509][ T5879] IPVS: starting estimator thread 0... [ 480.001819][ T1219] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.021280][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.049953][T12441] IPVS: using max 33 ests per chain, 79200 per kthread [ 480.074406][ T1219] usb 4-1: Product: syz [ 480.095463][ T1219] usb 4-1: Manufacturer: syz [ 480.105244][ T1219] usb 4-1: SerialNumber: syz [ 480.159247][ T1219] usb 4-1: config 0 descriptor?? [ 480.205662][T12448] loop2: detected capacity change from 0 to 7 [ 480.214820][ T5840] Dev loop2: unable to read RDB block 7 [ 480.221128][ T5840] loop2: unable to read partition table [ 480.235773][ T5840] loop2: partition table beyond EOD, truncated [ 480.243413][T12448] Dev loop2: unable to read RDB block 7 [ 480.266822][T12448] loop2: unable to read partition table [ 480.275940][T12448] loop2: partition table beyond EOD, truncated [ 480.288729][T12448] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.431197][T10083] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 480.714855][T12455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.904888][T10083] ath9k_htc: Failed to initialize the device [ 480.926875][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 481.007109][T12462] loop2: detected capacity change from 0 to 7 [ 481.023987][T12462] Dev loop2: unable to read RDB block 7 [ 481.056102][T12462] loop2: unable to read partition table [ 481.080639][T12462] loop2: partition table beyond EOD, truncated [ 481.093749][T12464] QAT: failed to copy from user. [ 481.277355][T12462] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.052366][ T5900] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 482.281765][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.346076][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.385719][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.420653][ T5900] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.439414][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.191067][ T5900] usb 6-1: config 0 descriptor?? [ 483.191087][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 483.690124][ T1219] usb 4-1: USB disconnect, device number 72 [ 483.811868][T12491] FAULT_INJECTION: forcing a failure. [ 483.811868][T12491] name failslab, interval 1, probability 0, space 0, times 0 [ 483.844208][ T5900] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 483.892464][T12491] CPU: 0 UID: 0 PID: 12491 Comm: syz.3.1854 Not tainted syzkaller #0 PREEMPT(full) [ 483.892488][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.892499][T12491] Call Trace: [ 483.892507][T12491] [ 483.892515][T12491] dump_stack_lvl+0x189/0x250 [ 483.892542][T12491] ? __pfx____ratelimit+0x10/0x10 [ 483.892564][T12491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.892586][T12491] ? __pfx__printk+0x10/0x10 [ 483.892610][T12491] ? __pfx___might_resched+0x10/0x10 [ 483.892634][T12491] should_fail_ex+0x414/0x560 [ 483.892664][T12491] should_failslab+0xa8/0x100 [ 483.892685][T12491] kmem_cache_alloc_node_noprof+0x77/0x710 [ 483.892708][T12491] ? __alloc_skb+0x112/0x2d0 [ 483.892731][T12491] __alloc_skb+0x112/0x2d0 [ 483.892751][T12491] netlink_ack+0x146/0xa50 [ 483.892773][T12491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.892796][T12491] ? ref_tracker_free+0x63a/0x7d0 [ 483.892813][T12491] ? __asan_memcpy+0x40/0x70 [ 483.892834][T12491] ? __pfx_ref_tracker_free+0x10/0x10 [ 483.892861][T12491] netlink_rcv_skb+0x28c/0x470 [ 483.892884][T12491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.892910][T12491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.892946][T12491] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.892970][T12491] netlink_unicast+0x82f/0x9e0 [ 483.893002][T12491] ? __pfx_netlink_unicast+0x10/0x10 [ 483.893026][T12491] ? netlink_sendmsg+0x642/0xb30 [ 483.893040][T12491] ? skb_put+0x11b/0x210 [ 483.893061][T12491] netlink_sendmsg+0x805/0xb30 [ 483.893084][T12491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.893105][T12491] ? aa_sock_msg_perm+0xf1/0x1d0 [ 483.893131][T12491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.893148][T12491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.893166][T12491] __sock_sendmsg+0x21c/0x270 [ 483.893192][T12491] ____sys_sendmsg+0x505/0x830 [ 483.893216][T12491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.893244][T12491] ? import_iovec+0x74/0xa0 [ 483.893268][T12491] ___sys_sendmsg+0x21f/0x2a0 [ 483.893289][T12491] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.893348][T12491] ? __fget_files+0x2a/0x420 [ 483.893365][T12491] ? __fget_files+0x3a0/0x420 [ 483.893392][T12491] __x64_sys_sendmsg+0x19b/0x260 [ 483.893413][T12491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.893442][T12491] ? __pfx_ksys_write+0x10/0x10 [ 483.893468][T12491] ? do_syscall_64+0xbe/0xfa0 [ 483.893495][T12491] do_syscall_64+0xfa/0xfa0 [ 483.893516][T12491] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.893537][T12491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.893555][T12491] ? clear_bhb_loop+0x60/0xb0 [ 483.893575][T12491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.893592][T12491] RIP: 0033:0x7f9b72b8f6c9 [ 483.893608][T12491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.893623][T12491] RSP: 002b:00007f9b73947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.893642][T12491] RAX: ffffffffffffffda RBX: 00007f9b72de5fa0 RCX: 00007f9b72b8f6c9 [ 483.893656][T12491] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000006 [ 483.893667][T12491] RBP: 00007f9b73947090 R08: 0000000000000000 R09: 0000000000000000 [ 483.893679][T12491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.893690][T12491] R13: 00007f9b72de6038 R14: 00007f9b72de5fa0 R15: 00007f9b72f0fa28 [ 483.893720][T12491] [ 484.250196][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1847'. [ 484.361423][ T5930] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 484.430380][ T5900] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 484.529906][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 484.543847][ T5930] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 484.580403][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.619940][ T5930] usb 1-1: Product: syz [ 484.628645][ T5930] usb 1-1: Manufacturer: syz [ 484.642641][ T5930] usb 1-1: SerialNumber: syz [ 484.660911][ T5930] usb 1-1: config 0 descriptor?? [ 484.680216][T12511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1859'. [ 484.694517][T12511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.701823][T12511] IPv6: NLM_F_CREATE should be set when creating new route [ 484.721200][T12511] fuse: Bad value for 'user_id' [ 484.726107][T12511] fuse: Bad value for 'user_id' [ 484.939261][ T5930] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 485.055984][T12521] syz_tun: entered allmulticast mode [ 485.112449][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 485.123924][T12520] bridge_slave_1: left allmulticast mode [ 485.130015][T12520] bridge_slave_1: left promiscuous mode [ 485.136103][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.150761][T12520] bridge_slave_0: left allmulticast mode [ 485.156525][T12520] bridge_slave_0: left promiscuous mode [ 485.162541][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.172822][T12522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.439190][T12517] syz_tun: left allmulticast mode [ 485.480038][ T5900] usb 6-1: USB disconnect, device number 23 [ 486.109999][ T5900] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 486.266327][ T5900] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 486.291875][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.316234][ T5900] usb 6-1: Product: syz [ 486.323529][ T5900] usb 6-1: Manufacturer: syz [ 486.333259][ T5900] usb 6-1: SerialNumber: syz [ 486.373429][ T5900] usb 6-1: config 0 descriptor?? [ 486.445315][ T5930] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 486.457903][ T5930] usb 1-1: USB disconnect, device number 95 [ 487.166121][T12550] gre1: entered allmulticast mode [ 487.980044][ T5886] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 488.130049][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 488.183048][ T5886] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 488.192082][ T5886] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 488.200993][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 488.216765][ T5886] usb 1-1: config 1 has no interface number 0 [ 488.231895][ T5886] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.263492][ T5886] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 488.291223][ T5886] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 488.312744][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.356124][ T5886] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 488.613037][ T5886] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 488.900108][T12564] xt_CT: No such helper "pptp" [ 489.493744][ T5900] usb 6-1: USB disconnect, device number 24 [ 489.633060][ T5886] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 489.837524][T12584] FAULT_INJECTION: forcing a failure. [ 489.837524][T12584] name failslab, interval 1, probability 0, space 0, times 0 [ 489.854090][T12584] CPU: 1 UID: 0 PID: 12584 Comm: syz.3.1881 Not tainted syzkaller #0 PREEMPT(full) [ 489.854114][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.854125][T12584] Call Trace: [ 489.854132][T12584] [ 489.854141][T12584] dump_stack_lvl+0x189/0x250 [ 489.854167][T12584] ? __pfx____ratelimit+0x10/0x10 [ 489.854189][T12584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.854214][T12584] ? __pfx__printk+0x10/0x10 [ 489.854228][T12584] ? __sock_sendmsg+0x21c/0x270 [ 489.854250][T12584] ? do_syscall_64+0xfa/0xfa0 [ 489.854283][T12584] should_fail_ex+0x414/0x560 [ 489.854312][T12584] should_failslab+0xa8/0x100 [ 489.854332][T12584] kmem_cache_alloc_noprof+0x74/0x6e0 [ 489.854356][T12584] ? skb_clone+0x212/0x3a0 [ 489.854381][T12584] skb_clone+0x212/0x3a0 [ 489.854403][T12584] __netlink_deliver_tap+0x404/0x850 [ 489.854432][T12584] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.854449][T12584] netlink_deliver_tap+0x19c/0x1b0 [ 489.854468][T12584] netlink_sendskb+0x68/0x140 [ 489.854493][T12584] netlink_unicast+0x397/0x9e0 [ 489.854521][T12584] ? __asan_memcpy+0x40/0x70 [ 489.854551][T12584] ? __pfx_netlink_unicast+0x10/0x10 [ 489.854585][T12584] netlink_rcv_skb+0x28c/0x470 [ 489.854603][T12584] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 489.854627][T12584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.854664][T12584] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.854689][T12584] netlink_unicast+0x82f/0x9e0 [ 489.854721][T12584] ? __pfx_netlink_unicast+0x10/0x10 [ 489.854747][T12584] ? netlink_sendmsg+0x642/0xb30 [ 489.854762][T12584] ? skb_put+0x11b/0x210 [ 489.854783][T12584] netlink_sendmsg+0x805/0xb30 [ 489.854809][T12584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.854830][T12584] ? aa_sock_msg_perm+0xf1/0x1d0 [ 489.854856][T12584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.854873][T12584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.854890][T12584] __sock_sendmsg+0x21c/0x270 [ 489.854915][T12584] ____sys_sendmsg+0x505/0x830 [ 489.854938][T12584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.854967][T12584] ? import_iovec+0x74/0xa0 [ 489.854992][T12584] ___sys_sendmsg+0x21f/0x2a0 [ 489.855013][T12584] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.855073][T12584] ? __fget_files+0x2a/0x420 [ 489.855089][T12584] ? __fget_files+0x3a0/0x420 [ 489.855117][T12584] __x64_sys_sendmsg+0x19b/0x260 [ 489.855139][T12584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.855168][T12584] ? __pfx_ksys_write+0x10/0x10 [ 489.855195][T12584] ? do_syscall_64+0xbe/0xfa0 [ 489.855220][T12584] do_syscall_64+0xfa/0xfa0 [ 489.855240][T12584] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.855263][T12584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.855280][T12584] ? clear_bhb_loop+0x60/0xb0 [ 489.855301][T12584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.855318][T12584] RIP: 0033:0x7f9b72b8f6c9 [ 489.855334][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.855349][T12584] RSP: 002b:00007f9b73947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.855368][T12584] RAX: ffffffffffffffda RBX: 00007f9b72de5fa0 RCX: 00007f9b72b8f6c9 [ 489.855381][T12584] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000006 [ 489.855393][T12584] RBP: 00007f9b73947090 R08: 0000000000000000 R09: 0000000000000000 [ 489.855404][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.855415][T12584] R13: 00007f9b72de6038 R14: 00007f9b72de5fa0 R15: 00007f9b72f0fa28 [ 489.855446][T12584] [ 489.920234][ T5900] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 490.390208][ T5900] usb 6-1: config 4 has an invalid interface number: 156 but max is 0 [ 490.398618][ T5900] usb 6-1: config 4 has no interface number 0 [ 490.415450][ T5900] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 490.424881][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.434857][ T5900] usb 6-1: Product: syz [ 490.439033][ T5900] usb 6-1: Manufacturer: syz [ 490.446616][ T5900] usb 6-1: SerialNumber: syz [ 490.470909][ T5900] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 490.480363][ T5900] usb 6-1: setting power ON [ 490.484884][ T5900] dvb-usb: bulk message failed: -22 (2/0) [ 490.502265][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 490.515697][ T5930] usb 1-1: USB disconnect, device number 96 [ 490.534848][ T5930] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 490.570100][ T5886] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 490.571737][ T5900] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 490.598507][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 490.598522][ T30] audit: type=1326 audit(1762919692.099:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.0.1886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f787358f6c9 code=0x0 [ 490.640786][ T5900] dvb_usb_cxusb 6-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 490.732794][ T5886] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 490.748740][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.760838][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1879'. [ 490.773152][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.786497][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 490.805525][ T5930] usb 6-1: USB disconnect, device number 25 [ 490.822529][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 490.836783][ T5886] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 490.855484][ T5886] usb 5-1: Manufacturer: syz [ 490.863302][ T5886] usb 5-1: config 0 descriptor?? [ 490.929955][ T5823] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 491.073090][ T5900] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 491.079929][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 491.089059][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.100340][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.111961][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 491.122493][ T5823] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 491.132290][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.147248][ T5823] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 491.156471][ T5823] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 491.165121][ T5823] usb 3-1: Manufacturer: syz [ 491.189312][ T5823] usb 3-1: config 0 descriptor?? [ 491.240010][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 491.247026][ T5900] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.269487][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.279894][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.295129][ T5886] appleir 0003:05AC:8243.0027: item fetching failed at offset 0/1 [ 491.303299][ T5900] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.343823][ T5900] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.364844][ T5886] appleir 0003:05AC:8243.0027: parse failed [ 491.384231][ T5886] appleir 0003:05AC:8243.0027: probe with driver appleir failed with error -22 [ 491.428885][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.507428][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.517981][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.677278][ T5900] usb 4-1: GET_CAPABILITIES returned 0 [ 491.708999][ T5900] usbtmc 4-1:16.0: can't read capabilities [ 491.729923][ T5823] rc_core: IR keymap rc-hauppauge not found [ 491.753974][ T5823] Registered IR keymap rc-empty [ 491.759501][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 491.780100][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 491.841005][ T5823] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 491.888760][T12608] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 491.904921][ T5886] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 491.924511][ T5823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 491.944681][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 491.960009][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 491.980010][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 492.001449][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 492.019991][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 492.066508][ T5900] usb 5-1: USB disconnect, device number 81 [ 492.090010][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 492.138712][ T5886] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 492.151106][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.177559][ T5886] usb 6-1: Product: syz [ 492.181973][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 492.211710][ T5886] usb 6-1: Manufacturer: syz [ 492.220046][ T5886] usb 6-1: SerialNumber: syz [ 492.242801][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 492.262921][ T5886] usb 6-1: config 0 descriptor?? [ 492.270134][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 492.300320][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 492.396663][ T5823] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 492.406055][ T5823] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 492.425115][ T5823] usb 3-1: USB disconnect, device number 70 [ 492.990025][ T5879] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 493.154190][ T5879] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.163600][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.175510][ T5879] usb 3-1: Product: syz [ 493.187995][ T5879] usb 3-1: Manufacturer: syz [ 493.260220][ T5879] usb 3-1: SerialNumber: syz [ 493.329864][ T5879] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 493.387451][ T5900] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 493.549377][ T5886] usb 6-1: USB disconnect, device number 26 [ 493.594742][ T9172] udevd[9172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.748622][ T1219] usb 4-1: USB disconnect, device number 73 [ 493.782724][T12624] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1892'. [ 493.831862][ T5823] usb 3-1: USB disconnect, device number 71 [ 493.920109][T12629] loop2: detected capacity change from 0 to 7 [ 493.927286][T12629] Dev loop2: unable to read RDB block 7 [ 493.970923][T12629] loop2: unable to read partition table [ 493.997138][T12629] loop2: partition table beyond EOD, truncated [ 494.009208][T12629] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 494.158658][T12639] ip6gre1: entered promiscuous mode [ 494.172670][T12639] ip6gre1: entered allmulticast mode [ 494.331460][T12646] FAULT_INJECTION: forcing a failure. [ 494.331460][T12646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.364929][T12646] CPU: 0 UID: 0 PID: 12646 Comm: syz.5.1897 Not tainted syzkaller #0 PREEMPT(full) [ 494.364953][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.364960][T12646] Call Trace: [ 494.364965][T12646] [ 494.364970][T12646] dump_stack_lvl+0x189/0x250 [ 494.364988][T12646] ? __pfx____ratelimit+0x10/0x10 [ 494.365001][T12646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.365013][T12646] ? __pfx__printk+0x10/0x10 [ 494.365024][T12646] ? __might_fault+0xb0/0x130 [ 494.365045][T12646] should_fail_ex+0x414/0x560 [ 494.365065][T12646] _copy_from_user+0x2d/0xb0 [ 494.365078][T12646] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 494.365100][T12646] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 494.365115][T12646] ? rcu_is_watching+0x15/0xb0 [ 494.365127][T12646] ? trace_kmalloc+0x1f/0xd0 [ 494.365139][T12646] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 494.365154][T12646] ip_generic_getfrag+0x12f/0x2b0 [ 494.365169][T12646] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.365183][T12646] ? skb_put+0x11b/0x210 [ 494.365194][T12646] __ip_append_data+0x3260/0x40c0 [ 494.365217][T12646] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.365241][T12646] ? __pfx___ip_append_data+0x10/0x10 [ 494.365265][T12646] ? __local_bh_enable_ip+0x12d/0x1c0 [ 494.365284][T12646] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.365307][T12646] ip_append_data+0x10e/0x190 [ 494.365340][T12646] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.365363][T12646] udp_sendmsg+0x541/0x2170 [ 494.365383][T12646] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 494.365413][T12646] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.365437][T12646] ? __pfx_udp_sendmsg+0x10/0x10 [ 494.365456][T12646] ? __lock_acquire+0xab9/0xd20 [ 494.365496][T12646] ? __pfx_aa_sk_perm+0x10/0x10 [ 494.365516][T12646] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 494.365542][T12646] ? __fget_files+0x2a/0x420 [ 494.365557][T12646] ? sock_rps_record_flow+0x19/0x410 [ 494.365583][T12646] ? inet_sendmsg+0x29c/0x370 [ 494.365598][T12646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.365618][T12646] __sock_sendmsg+0x19c/0x270 [ 494.365643][T12646] __sys_sendto+0x3bd/0x520 [ 494.365662][T12646] ? __pfx___sys_sendto+0x10/0x10 [ 494.365677][T12646] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 494.365712][T12646] ? __fget_files+0x3a0/0x420 [ 494.365739][T12646] ? ksys_write+0x22a/0x250 [ 494.365763][T12646] ? __pfx_ksys_write+0x10/0x10 [ 494.365788][T12646] __x64_sys_sendto+0xde/0x100 [ 494.365808][T12646] do_syscall_64+0xfa/0xfa0 [ 494.365829][T12646] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.365850][T12646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.365867][T12646] ? clear_bhb_loop+0x60/0xb0 [ 494.365887][T12646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.365903][T12646] RIP: 0033:0x7fdcf3d8f6c9 [ 494.365920][T12646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.365934][T12646] RSP: 002b:00007fdcf1ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 494.365953][T12646] RAX: ffffffffffffffda RBX: 00007fdcf3fe6090 RCX: 00007fdcf3d8f6c9 [ 494.365965][T12646] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000007 [ 494.365976][T12646] RBP: 00007fdcf1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 494.365986][T12646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.365996][T12646] R13: 00007fdcf3fe6128 R14: 00007fdcf3fe6090 R15: 00007fdcf410fa28 [ 494.366019][T12646] [ 494.713078][ T5900] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 494.720169][ T5900] ath9k_htc: Failed to initialize the device [ 494.726670][ T5823] usb 3-1: ath9k_htc: USB layer deinitialized [ 494.950014][ T1219] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 495.103001][ T1219] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 495.112500][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.145484][ T1219] usb 5-1: config 0 descriptor?? [ 495.179448][ T1219] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 495.272467][T12660] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 495.322284][T12660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 495.588401][T12648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1898'. [ 496.235636][T12660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.242974][T12660] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 496.393915][ T1219] gspca_cpia1: usb_control_msg 01, error -71 [ 496.396983][T12660] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 496.404963][ T1219] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 496.518889][ T1219] usb 5-1: USB disconnect, device number 82 [ 496.571415][T12670] gretap1: entered promiscuous mode [ 496.581974][T12670] bond7: (slave gretap1): making interface the new active one [ 496.590192][T12670] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 497.249213][T12686] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1907'. [ 497.695676][ T5150] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 497.706682][ T5150] CPU: 0 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 497.706707][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.706714][ T5150] Workqueue: hci0 hci_rx_work [ 497.706731][ T5150] Call Trace: [ 497.706736][ T5150] [ 497.706742][ T5150] dump_stack_lvl+0x189/0x250 [ 497.706759][ T5150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.706772][ T5150] ? __pfx__printk+0x10/0x10 [ 497.706786][ T5150] ? kernfs_path_from_node+0x250/0x290 [ 497.706798][ T5150] ? kernfs_path_from_node+0x2f/0x290 [ 497.706813][ T5150] sysfs_create_dir_ns+0x259/0x280 [ 497.706826][ T5150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 497.706839][ T5150] ? do_raw_spin_unlock+0x122/0x240 [ 497.706855][ T5150] kobject_add_internal+0x59f/0xb40 [ 497.706873][ T5150] kobject_add+0x155/0x220 [ 497.706904][ T5150] ? __pfx_kobject_add+0x10/0x10 [ 497.706940][ T5150] ? _raw_spin_unlock+0x28/0x50 [ 497.706966][ T5150] ? get_device_parent+0x366/0x3a0 [ 497.706991][ T5150] device_add+0x408/0xb50 [ 497.707006][ T5150] hci_conn_add_sysfs+0xd5/0x1e0 [ 497.707019][ T5150] le_conn_complete_evt+0xf39/0x1500 [ 497.707040][ T5150] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 497.707053][ T5150] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 497.707067][ T5150] ? __asan_memcpy+0x40/0x70 [ 497.707082][ T5150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.707094][ T5150] ? skb_pull_data+0xfb/0x200 [ 497.707108][ T5150] hci_le_enh_conn_complete_evt+0x189/0x470 [ 497.707122][ T5150] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 497.707138][ T5150] hci_event_packet+0x78f/0x1200 [ 497.707151][ T5150] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 497.707165][ T5150] ? __pfx_hci_event_packet+0x10/0x10 [ 497.707177][ T5150] ? kcov_remote_start+0x4d3/0x7f0 [ 497.707186][ T5150] ? local_clock_noinstr+0xe0/0xe0 [ 497.707200][ T5150] ? hci_send_to_monitor+0xe2/0x570 [ 497.707216][ T5150] hci_rx_work+0x46a/0xe80 [ 497.707231][ T5150] ? process_scheduled_works+0x9ef/0x17b0 [ 497.707243][ T5150] process_scheduled_works+0xae1/0x17b0 [ 497.707269][ T5150] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.707289][ T5150] worker_thread+0x8a0/0xda0 [ 497.707301][ T5150] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 497.707318][ T5150] ? __kthread_parkme+0x7b/0x200 [ 497.707334][ T5150] kthread+0x711/0x8a0 [ 497.707348][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 497.707358][ T5150] ? __pfx_kthread+0x10/0x10 [ 497.707372][ T5150] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.707384][ T5150] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.707395][ T5150] ? __pfx_kthread+0x10/0x10 [ 497.707408][ T5150] ret_from_fork+0x4bc/0x870 [ 497.707420][ T5150] ? __pfx_ret_from_fork+0x10/0x10 [ 497.707434][ T5150] ? __switch_to_asm+0x39/0x70 [ 497.707442][ T5150] ? __switch_to_asm+0x33/0x70 [ 497.707449][ T5150] ? __pfx_kthread+0x10/0x10 [ 497.707462][ T5150] ret_from_fork_asm+0x1a/0x30 [ 497.707480][ T5150] [ 497.707505][ T5150] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 498.001619][ T5150] Bluetooth: hci0: failed to register connection device [ 498.621198][ T5823] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 498.670208][ T5900] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 498.802935][ T5823] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 498.816110][ T5823] usb 3-1: New USB device strings: Mfr=49, Product=9, SerialNumber=3 [ 498.834986][ T5823] usb 3-1: Product: syz [ 498.838869][T12722] loop2: detected capacity change from 0 to 7 [ 498.847682][ T5823] usb 3-1: Manufacturer: syz [ 498.848605][T12722] Dev loop2: unable to read RDB block 7 [ 498.859933][T12722] loop2: unable to read partition table [ 498.867803][ T5823] usb 3-1: SerialNumber: syz [ 498.868639][T12722] loop2: partition table beyond EOD, [ 498.937177][ T5900] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 498.956056][ T5823] usb 3-1: config 0 descriptor?? [ 498.969015][ T5823] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 498.980397][ T5823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 498.990140][T12722] truncated [ 498.993412][T12722] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 499.009685][ T5823] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 499.020057][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.031571][ T5823] usb 3-1: media controller created [ 499.082221][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 499.119642][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.136332][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.164768][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.201027][T12714] netlink: 'syz.2.1915': attribute type 21 has an invalid length. [ 499.258628][ T5900] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 499.275795][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 499.286578][ T5900] usb 5-1: Product: syz [ 499.290936][ T5900] usb 5-1: Manufacturer: syz [ 499.334233][ T5900] cdc_wdm 5-1:1.0: skipping garbage [ 499.356217][ T5900] cdc_wdm 5-1:1.0: skipping garbage [ 499.366370][ T5823] DVB: Unable to find symbol mt352_attach() [ 499.373821][ T5900] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 499.380302][ T5900] cdc_wdm 5-1:1.0: Unknown control protocol [ 499.533218][T12718] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 499.542051][T12718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.551807][T12718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.572020][ T5900] usb 5-1: USB disconnect, device number 83 [ 499.613294][ T5823] DVB: Unable to find symbol nxt6000_attach() [ 499.627856][ T5823] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 499.713535][ T5823] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 499.750062][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 499.759259][ T5823] dvb-usb: schedule remote query interval to 1000 msecs. [ 499.789022][ T5823] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 499.807168][ T5823] dvb-usb: bulk message failed: -22 (7/0) [ 499.839643][ T5823] dvb-usb: bulk message failed: -22 (7/0) [ 500.550865][T12737] QAT: failed to copy from user. [ 500.633764][T12739] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1922'. [ 500.840576][ T5886] dvb-usb: bulk message failed: -22 (7/0) [ 500.846405][ T5886] dvb-usb: error while querying for an remote control event. [ 500.885272][T12742] loop2: detected capacity change from 0 to 7 [ 500.896795][T12742] Dev loop2: unable to read RDB block 7 [ 500.902880][T12742] loop2: unable to read partition table [ 500.909356][T12742] loop2: partition table beyond EOD, truncated [ 500.918762][T12742] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.209939][ T5886] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 501.387461][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 501.410275][ T5886] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 501.438542][ T5886] usb 5-1: config 179 has no interface number 0 [ 501.476228][ T5886] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 501.518015][ T5886] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 501.587066][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.594122][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.661393][ T5886] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 501.674043][ T5886] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 501.691537][ T5886] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 501.708437][T10083] usb 3-1: USB disconnect, device number 72 [ 501.710270][ T5886] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 501.734615][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.750227][T12746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 501.790644][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 501.911049][T10083] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 502.119400][ T5886] usb 5-1: USB disconnect, device number 84 [ 502.119456][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 502.133672][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 502.364770][T12768] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1931'. [ 502.724032][T12771] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.731302][T12771] bridge0: port 2(bridge_slave_1) entered listening state [ 502.739696][T12771] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.746836][T12771] bridge0: port 1(bridge_slave_0) entered listening state [ 503.080219][ T5900] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 503.087884][T12771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.279966][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 503.287727][ T5900] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.305962][T12769] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 503.349864][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.411508][ T5900] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 503.452660][ T5900] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.512061][ T5900] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 503.521413][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.749275][ T5900] usb 4-1: GET_CAPABILITIES returned 0 [ 503.766484][ T5900] usbtmc 4-1:16.0: can't read capabilities [ 503.861411][T12790] loop2: detected capacity change from 0 to 7 [ 503.902167][ T5969] Dev loop2: unable to read RDB block 7 [ 503.919998][ T5969] loop2: unable to read partition table [ 503.970000][T12770] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 503.994581][ T5969] loop2: partition table beyond EOD, truncated [ 503.996908][T12790] Dev loop2: unable to read RDB block 7 [ 503.996955][T12790] loop2: unable to read partition table [ 503.997068][T12790] loop2: partition table beyond EOD, truncated [ 503.997078][T12790] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 504.748057][T12797] team0: Device gtp0 is of different type [ 505.021200][T12803] QAT: failed to copy from user. [ 505.872140][ T5900] usb 4-1: USB disconnect, device number 74 [ 506.023210][T12817] loop9: detected capacity change from 0 to 7 [ 506.030187][T12817] Dev loop9: unable to read RDB block 7 [ 506.036726][T12817] loop9: unable to read partition table [ 506.060678][T12817] loop9: partition table beyond EOD, truncated [ 506.148433][T12817] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 506.210318][ T5886] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 506.380247][ T5886] usb 6-1: device descriptor read/64, error -71 [ 506.690026][ T5886] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 506.765874][T12832] could not allocate digest TFM handle hmac(streebog512) [ 506.860094][ T5886] usb 6-1: device descriptor read/64, error -71 [ 506.981073][ T5886] usb usb6-port1: attempt power cycle [ 507.249965][ T1219] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 507.319943][ T5886] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 507.340405][ T5886] usb 6-1: device descriptor read/8, error -71 [ 507.412178][ T1219] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 507.420184][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 507.421749][ T1219] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 507.439171][ T1219] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 507.452431][ T1219] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 507.464336][ T1219] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 507.478119][ T1219] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 507.493079][ T1219] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 507.503355][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 507.511666][ T1219] usb 4-1: Product: syz [ 507.516053][ T1219] usb 4-1: Manufacturer: syz [ 507.526462][T12849] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 507.535671][ T1219] cdc_wdm 4-1:1.0: skipping garbage [ 507.541500][ T1219] cdc_wdm 4-1:1.0: skipping garbage [ 507.548798][ T1219] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 507.555764][ T1219] cdc_wdm 4-1:1.0: Unknown control protocol [ 507.580988][ T5886] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 507.590424][T12857] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1957'. [ 507.602312][ T10] usb 3-1: config 0 has no interfaces? [ 507.610688][ T5886] usb 6-1: device descriptor read/8, error -71 [ 507.617801][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 507.628250][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.642870][ T10] usb 3-1: Product: syz [ 507.648040][ T10] usb 3-1: Manufacturer: syz [ 507.653313][ T10] usb 3-1: SerialNumber: syz [ 507.663437][ T10] usb 3-1: config 0 descriptor?? [ 507.682130][T12859] loop9: detected capacity change from 0 to 7 [ 507.689154][T12859] Dev loop9: unable to read RDB block 7 [ 507.696364][T12859] loop9: unable to read partition table [ 507.702457][T12859] loop9: partition table beyond EOD, truncated [ 507.708737][T12859] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 507.721361][ T5886] usb usb6-port1: unable to enumerate USB device [ 507.761060][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.767868][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.774268][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.780867][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.787259][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.793941][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.800299][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.806900][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.813612][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.820213][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.828708][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.835319][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.843292][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.849896][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.856827][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.863429][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.870123][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.876717][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.884428][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 507.891038][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 507.973496][T12864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1960'. [ 508.382727][ T10] usb 4-1: USB disconnect, device number 75 [ 508.526745][T12880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1963'. [ 508.618566][T12882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.629984][ T5886] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 508.780146][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 508.791798][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.813181][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.832871][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.846454][ T5886] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 508.847412][ T10] usb 3-1: USB disconnect, device number 73 [ 508.856019][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.885818][ T5886] usb 1-1: config 0 descriptor?? [ 509.009318][T12890] netlink: 'syz.5.1965': attribute type 1 has an invalid length. [ 509.313217][ T5886] nzxt-kraken2 0003:1E71:170E.0028: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.0-1/input0 [ 509.526129][ T10] usb 1-1: USB disconnect, device number 97 [ 509.563722][T12903] loop2: detected capacity change from 0 to 7 [ 509.592615][T12903] Dev loop2: unable to read RDB block 7 [ 509.619022][T12903] loop2: unable to read partition table [ 509.643054][T12903] loop2: partition table beyond EOD, truncated [ 509.649777][T12903] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.742539][T12909] loop9: detected capacity change from 0 to 7 [ 509.754412][T12909] Dev loop9: unable to read RDB block 7 [ 509.765522][T12909] loop9: unable to read partition table [ 509.776231][T12909] loop9: partition table beyond EOD, truncated [ 509.784776][T12909] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 510.322305][T12917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.965084][ T5900] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 511.141737][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.149421][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.182253][ T5900] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.192608][ T5900] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.206301][ T5900] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 511.215675][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 511.228295][ T5900] usb 1-1: SerialNumber: syz [ 511.390742][T12932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.461818][ T5900] usb 1-1: 0:2 : does not exist [ 511.469186][ T5900] usb 1-1: unit 5: unexpected type 0x0a [ 511.484836][T12932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.531925][ T5900] usb 1-1: USB disconnect, device number 98 [ 511.617157][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.641854][ T5930] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 511.702836][T12943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1980'. [ 511.761886][T12932] veth3: left promiscuous mode [ 511.777468][T12945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.789486][T12932] veth5: left promiscuous mode [ 511.806958][ T5930] usb 5-1: device descriptor read/64, error -71 [ 511.828041][T12932] veth7: left promiscuous mode [ 511.840199][T12932] veth9: left promiscuous mode [ 511.846003][T12932] ip6tnl1: left allmulticast mode [ 511.861210][ T1112] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.870591][ T1112] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.900443][ T1112] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.916903][ T1112] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.070830][ T5930] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 512.143354][T12952] loop9: detected capacity change from 0 to 7 [ 512.180306][T12952] Dev loop9: unable to read RDB block 7 [ 512.199936][ T5930] usb 5-1: device descriptor read/64, error -71 [ 512.200016][T12952] loop9: unable to read partition table [ 512.253218][T12952] loop9: partition table beyond EOD, truncated [ 512.283753][T12952] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 512.320175][ T5930] usb usb5-port1: attempt power cycle [ 512.569493][T12959] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 512.699957][ T5930] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 512.848238][ T5930] usb 5-1: device descriptor read/8, error -71 [ 512.856190][ T10] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 513.090443][ T5930] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 513.121816][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 513.133853][T12973] FAULT_INJECTION: forcing a failure. [ 513.133853][T12973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.147030][T12973] CPU: 0 UID: 0 PID: 12973 Comm: syz.4.1987 Not tainted syzkaller #0 PREEMPT(full) [ 513.147044][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.147051][T12973] Call Trace: [ 513.147057][T12973] [ 513.147062][T12973] dump_stack_lvl+0x189/0x250 [ 513.147080][T12973] ? __pfx____ratelimit+0x10/0x10 [ 513.147093][T12973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.147105][T12973] ? __pfx__printk+0x10/0x10 [ 513.147116][T12973] ? __might_fault+0xb0/0x130 [ 513.147136][T12973] should_fail_ex+0x414/0x560 [ 513.147154][T12973] _copy_from_user+0x2d/0xb0 [ 513.147167][T12973] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 513.147189][T12973] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 513.147204][T12973] ? rcu_is_watching+0x15/0xb0 [ 513.147216][T12973] ? trace_kmalloc+0x1f/0xd0 [ 513.147228][T12973] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 513.147243][T12973] ip_generic_getfrag+0x12f/0x2b0 [ 513.147258][T12973] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 513.147272][T12973] ? skb_put+0x11b/0x210 [ 513.147284][T12973] __ip_append_data+0x3260/0x40c0 [ 513.147307][T12973] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 513.147330][T12973] ? __pfx___ip_append_data+0x10/0x10 [ 513.147345][T12973] ? __local_bh_enable_ip+0x12d/0x1c0 [ 513.147356][T12973] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.147372][T12973] ip_append_data+0x10e/0x190 [ 513.147386][T12973] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 513.147399][T12973] udp_sendmsg+0x541/0x2170 [ 513.147412][T12973] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 513.147429][T12973] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 513.147443][T12973] ? __pfx_udp_sendmsg+0x10/0x10 [ 513.147454][T12973] ? __lock_acquire+0xab9/0xd20 [ 513.147484][T12973] ? __pfx_aa_sk_perm+0x10/0x10 [ 513.147496][T12973] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 513.147512][T12973] ? __fget_files+0x2a/0x420 [ 513.147521][T12973] ? sock_rps_record_flow+0x19/0x410 [ 513.147537][T12973] ? inet_sendmsg+0x29c/0x370 [ 513.147545][T12973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.147557][T12973] __sock_sendmsg+0x19c/0x270 [ 513.147572][T12973] __sys_sendto+0x3bd/0x520 [ 513.147583][T12973] ? __pfx___sys_sendto+0x10/0x10 [ 513.147591][T12973] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 513.147611][T12973] ? __fget_files+0x3a0/0x420 [ 513.147626][T12973] ? ksys_write+0x22a/0x250 [ 513.147640][T12973] ? __pfx_ksys_write+0x10/0x10 [ 513.147655][T12973] __x64_sys_sendto+0xde/0x100 [ 513.147666][T12973] do_syscall_64+0xfa/0xfa0 [ 513.147678][T12973] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.147691][T12973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.147700][T12973] ? clear_bhb_loop+0x60/0xb0 [ 513.147712][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.147721][T12973] RIP: 0033:0x7f0789d8f6c9 [ 513.147731][T12973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.147740][T12973] RSP: 002b:00007f078ac3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 513.147751][T12973] RAX: ffffffffffffffda RBX: 00007f0789fe6090 RCX: 00007f0789d8f6c9 [ 513.147758][T12973] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000007 [ 513.147765][T12973] RBP: 00007f078ac3b090 R08: 0000000000000000 R09: 0000000000000000 [ 513.147771][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.147776][T12973] R13: 00007f0789fe6128 R14: 00007f0789fe6090 R15: 00007f078a10fa28 [ 513.147793][T12973] [ 513.485715][ T5930] usb 5-1: device not accepting address 88, error -71 [ 513.527013][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.545568][ T10] usb 1-1: Product: syz [ 513.549755][ T10] usb 1-1: Manufacturer: syz [ 513.554399][ T10] usb 1-1: SerialNumber: syz [ 513.582225][ T10] usb 1-1: config 0 descriptor?? [ 513.586115][ T5930] usb usb5-port1: unable to enumerate USB device [ 513.820803][ T1219] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 514.008736][T12990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1993'. [ 514.019917][ T1219] usb 4-1: not running at top speed; connect to a high speed hub [ 514.050065][ T1219] usb 4-1: config 108 interface 0 has no altsetting 0 [ 514.076995][ T1219] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=b8.27 [ 514.096840][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.112938][ T1219] usb 4-1: Product: syz [ 514.144309][ T1219] usb 4-1: Manufacturer: syz [ 514.167711][ T1219] usb 4-1: SerialNumber: syz [ 514.168833][T12992] loop9: detected capacity change from 0 to 7 [ 514.187907][ T6142] Dev loop9: unable to read RDB block 7 [ 514.194931][ T6142] loop9: unable to read partition table [ 514.221503][ T6142] loop9: partition table beyond EOD, truncated [ 514.228648][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1995'. [ 514.240527][T12992] Dev loop9: unable to read RDB block 7 [ 514.248928][T12992] loop9: unable to read partition table [ 514.263692][T12992] loop9: partition table beyond EOD, truncated [ 514.284560][T12992] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 514.327888][T12996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.413296][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.422493][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.497991][ T1219] usb 4-1: USB disconnect, device number 76 [ 515.311431][ T5879] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 515.492205][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 515.505063][ T5879] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 515.515526][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.548864][ T5879] usb 4-1: Product: syz [ 515.568262][ T5879] usb 4-1: Manufacturer: syz [ 515.577715][ T5879] usb 4-1: SerialNumber: syz [ 515.616537][ T5879] usb 4-1: config 0 descriptor?? [ 515.680122][ T10] usb 1-1: USB disconnect, device number 99 [ 516.012046][ T1219] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 516.048063][ T5879] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 516.057774][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 516.068076][ T5879] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 516.076317][ T5879] usb 4-1: media controller created [ 516.100114][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 516.117145][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.169984][ T1219] usb 5-1: Using ep0 maxpacket: 8 [ 516.182089][ T1219] usb 5-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 516.207088][ T1219] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 516.242139][ T1219] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 516.262993][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 516.276491][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.277873][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.295979][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.310015][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 516.312869][ T1219] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 516.328660][T13041] loop2: detected capacity change from 0 to 7 [ 516.333387][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.341762][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 516.356796][T13041] Dev loop2: unable to read RDB block 7 [ 516.362444][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 516.370729][T13041] loop2: unable to read partition table [ 516.376981][T13041] loop2: partition table beyond EOD, truncated [ 516.385965][ T10] usb 1-1: Manufacturer: syz [ 516.410064][T13041] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 516.432115][ T10] usb 1-1: config 0 descriptor?? [ 516.447741][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 516.456086][ T1219] usb 5-1: Manufacturer: syz [ 516.460857][ T1219] usb 5-1: SerialNumber: syz [ 516.469693][ T1219] usb 5-1: config 0 descriptor?? [ 516.482298][ T1219] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 516.562936][T13043] netlink: 212924 bytes leftover after parsing attributes in process `syz.5.2012'. [ 516.657319][T13045] netlink: 'syz.2.2014': attribute type 4 has an invalid length. [ 516.669217][T13045] fuse: Unknown parameter 'ft' [ 516.677797][ T5879] zl10353_read_register: readreg error (reg=127, ret==0) [ 516.689223][T13047] loop2: detected capacity change from 0 to 7 [ 516.689363][ T5879] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 516.709749][T13047] Dev loop2: unable to read RDB block 7 [ 516.718184][T13047] loop2: unable to read partition table [ 516.724132][T13047] loop2: partition table beyond EOD, truncated [ 516.729259][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 516.738988][T13047] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 516.779680][ T5879] usb 4-1: USB disconnect, device number 77 [ 516.858982][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 516.883866][ T10] appleir 0003:05AC:8243.0029: item fetching failed at offset 0/1 [ 516.903133][ T10] appleir 0003:05AC:8243.0029: parse failed [ 516.915451][ T10] appleir 0003:05AC:8243.0029: probe with driver appleir failed with error -22 [ 517.029659][T13058] team0: Device ipip0 is of different type [ 517.131478][T13028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.141564][T13028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.460322][T13064] fuse: Bad value for 'user_id' [ 517.467020][T13064] fuse: Bad value for 'user_id' [ 517.883754][T13074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.198891][ T1219] usb 1-1: USB disconnect, device number 100 [ 518.687968][T13084] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2025'. [ 518.790376][ T1219] usb 5-1: USB disconnect, device number 89 [ 518.880291][ T5879] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 519.033838][ T5879] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 519.043480][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.058037][ T5879] usb 4-1: Product: syz [ 519.067514][ T5879] usb 4-1: Manufacturer: syz [ 519.078806][T13094] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2027'. [ 519.140965][ T5879] usb 4-1: SerialNumber: syz [ 519.643854][ T30] audit: type=1326 audit(1762919721.109:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 519.765062][ T30] audit: type=1326 audit(1762919721.109:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 519.971805][ T30] audit: type=1326 audit(1762919721.109:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 519.971898][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 520.015546][ T30] audit: type=1326 audit(1762919721.109:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 520.125523][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 520.140022][ T30] audit: type=1326 audit(1762919721.109:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 520.163185][ T30] audit: type=1326 audit(1762919721.109:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 520.286586][ T30] audit: type=1326 audit(1762919721.109:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 520.382654][ T30] audit: type=1326 audit(1762919721.109:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 520.438664][ T30] audit: type=1326 audit(1762919721.109:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 520.629597][ T30] audit: type=1326 audit(1762919721.109:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13090 comm="syz.2.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90b198f6c9 code=0x7ffc0000 [ 521.011092][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 521.032464][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 521.147919][ T5879] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 521.165667][ T5879] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 521.361810][ T5879] usb 4-1: USB disconnect, device number 78 [ 521.871215][T13124] input: syz0 as /devices/virtual/input/input36 [ 522.124194][T13127] loop9: detected capacity change from 0 to 7 [ 522.131492][T13127] Dev loop9: unable to read RDB block 7 [ 522.137132][T13127] loop9: unable to read partition table [ 522.163317][T13127] loop9: partition table beyond EOD, truncated [ 522.182888][T13127] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 522.790227][ T1219] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 522.903754][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 522.940145][ T1219] usb 6-1: Using ep0 maxpacket: 16 [ 522.958000][ T1219] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 522.967427][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.975771][ T43] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 523.057546][ T1219] usb 6-1: Product: syz [ 523.083755][ T1219] usb 6-1: Manufacturer: syz [ 523.088464][ T1219] usb 6-1: SerialNumber: syz [ 523.098462][ T1219] usb 6-1: config 0 descriptor?? [ 523.162378][T13156] loop2: detected capacity change from 0 to 7 [ 523.173133][ T5969] Dev loop2: unable to read RDB block 7 [ 523.178986][ T5969] loop2: unable to read partition table [ 523.185636][ T5969] loop2: partition table beyond EOD, truncated [ 523.194290][T13156] Dev loop2: unable to read RDB block 7 [ 523.208132][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 523.217633][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.261649][T13156] loop2: unable to read partition table [ 523.267951][ T43] usb 5-1: Product: syz [ 523.279237][ T43] usb 5-1: Manufacturer: syz [ 523.283697][T13156] loop2: partition table beyond EOD, truncated [ 523.291182][ T43] usb 5-1: SerialNumber: syz [ 523.307238][ T43] usb 5-1: config 0 descriptor?? [ 523.335469][T13156] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 523.445507][ T5199] Dev loop2: unable to read RDB block 7 [ 523.451428][ T5199] loop2: unable to read partition table [ 523.457240][ T5199] loop2: partition table beyond EOD, truncated [ 523.530022][ T1219] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 523.574099][ T1219] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 523.619132][ T1219] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 523.692614][ T1219] usb 6-1: media controller created [ 523.733300][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.744023][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.014421][ T1219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.082322][ T1219] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 524.131540][ T1219] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 524.309922][ T5879] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 524.387634][T13169] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2048'. [ 524.484765][ T5879] usb 3-1: config 4 has an invalid interface number: 88 but max is 0 [ 524.493232][ T5879] usb 3-1: config 4 has no interface number 0 [ 524.499513][ T5879] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 524.548564][ T5879] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 524.568781][ T5879] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 1024 [ 524.597086][ T5879] usb 3-1: config 4 interface 88 altsetting 119 bulk endpoint 0x85 has invalid maxpacket 1024 [ 524.608844][ T5879] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.622672][ T5879] usb 3-1: config 4 interface 88 has no altsetting 0 [ 524.659407][ T5879] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 524.669511][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.678978][ T5879] usb 3-1: Product: syz [ 524.687778][ T5879] usb 3-1: Manufacturer: syz [ 524.713596][ T5879] usb 3-1: SerialNumber: syz [ 524.738478][T13165] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 524.792112][ T1219] usb 6-1: USB disconnect, device number 31 [ 524.894808][ T1219] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 524.930333][ T5900] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 524.965575][ T5879] usb 3-1: USB disconnect, device number 74 [ 525.060031][ T5900] usb 1-1: device descriptor read/64, error -71 [ 525.101202][ T5930] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 525.259906][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 525.271635][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.283751][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.299593][ T5930] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 525.300738][ T5900] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 525.313197][ T43] usb 5-1: USB disconnect, device number 90 [ 525.322777][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.347384][ T5930] usb 4-1: config 0 descriptor?? [ 525.378204][T13177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.460528][ T5900] usb 1-1: device descriptor read/64, error -71 [ 525.570704][ T5900] usb usb1-port1: attempt power cycle [ 525.669917][ T10] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 525.819545][ T5930] cypress 0003:04B4:0001.002A: hidraw0: USB HID v0.05 Device [HID 04b4:0001] on usb-dummy_hcd.3-1/input0 [ 525.844162][ T10] usb 6-1: config 0 interface 0 altsetting 66 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.870260][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.876968][ T10] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 525.893382][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.909322][ T10] usb 6-1: config 0 descriptor?? [ 525.921116][ T5900] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 525.940652][ T5900] usb 1-1: device descriptor read/8, error -71 [ 526.019266][T13177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.032484][T13177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.164603][T13196] QAT: failed to copy from user. [ 526.180287][ T10] cypress 0003:04B4:0001.002B: hidraw1: USB HID v0.01 Device [HID 04b4:0001] on usb-dummy_hcd.5-1/input0 [ 526.238889][ T5900] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 526.252371][ T5930] usb 4-1: USB disconnect, device number 79 [ 526.263872][ T5900] usb 1-1: device descriptor read/8, error -71 [ 526.330854][ T43] usb 6-1: USB disconnect, device number 32 [ 526.374683][ T5900] usb usb1-port1: unable to enumerate USB device [ 526.655620][T13201] netlink: 'syz.2.2057': attribute type 58 has an invalid length. [ 526.667098][T13201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2057'. [ 527.828562][T13221] FAULT_INJECTION: forcing a failure. [ 527.828562][T13221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.859067][T13221] CPU: 1 UID: 0 PID: 13221 Comm: syz.3.2063 Not tainted syzkaller #0 PREEMPT(full) [ 527.859091][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.859102][T13221] Call Trace: [ 527.859110][T13221] [ 527.859118][T13221] dump_stack_lvl+0x189/0x250 [ 527.859146][T13221] ? __pfx____ratelimit+0x10/0x10 [ 527.859168][T13221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.859191][T13221] ? __pfx__printk+0x10/0x10 [ 527.859221][T13221] should_fail_ex+0x414/0x560 [ 527.859252][T13221] _copy_to_user+0x31/0xb0 [ 527.859276][T13221] simple_read_from_buffer+0xe1/0x170 [ 527.859306][T13221] proc_fail_nth_read+0x1b3/0x220 [ 527.859331][T13221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.859356][T13221] ? rw_verify_area+0x2a6/0x4d0 [ 527.859377][T13221] ? __lock_acquire+0xab9/0xd20 [ 527.859394][T13221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.859417][T13221] vfs_read+0x200/0xa30 [ 527.859438][T13221] ? fdget_pos+0x247/0x320 [ 527.859459][T13221] ? __pfx___mutex_lock+0x10/0x10 [ 527.859484][T13221] ? __pfx_vfs_read+0x10/0x10 [ 527.859508][T13221] ? __fget_files+0x2a/0x420 [ 527.859529][T13221] ? __fget_files+0x3a0/0x420 [ 527.859545][T13221] ? __fget_files+0x2a/0x420 [ 527.859570][T13221] ksys_read+0x145/0x250 [ 527.859594][T13221] ? __pfx_ksys_read+0x10/0x10 [ 527.859621][T13221] ? do_syscall_64+0xbe/0xfa0 [ 527.859648][T13221] do_syscall_64+0xfa/0xfa0 [ 527.859669][T13221] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.859691][T13221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.859710][T13221] ? clear_bhb_loop+0x60/0xb0 [ 527.859731][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.859748][T13221] RIP: 0033:0x7f9b72b8e0dc [ 527.859764][T13221] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 527.859779][T13221] RSP: 002b:00007f9b73947030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.859803][T13221] RAX: ffffffffffffffda RBX: 00007f9b72de5fa0 RCX: 00007f9b72b8e0dc [ 527.859814][T13221] RDX: 000000000000000f RSI: 00007f9b739470a0 RDI: 0000000000000004 [ 527.859824][T13221] RBP: 00007f9b73947090 R08: 0000000000000000 R09: 0000000000000000 [ 527.859835][T13221] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000001 [ 527.859846][T13221] R13: 00007f9b72de6038 R14: 00007f9b72de5fa0 R15: 00007f9b72f0fa28 [ 527.859881][T13221] [ 528.091798][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.279927][ T5930] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 528.440098][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 528.447626][ T5930] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 528.459911][ T5930] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 528.476766][ T5930] usb 1-1: config 0 has no interface number 0 [ 528.484063][ T5930] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.499358][ T5930] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 528.509635][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 528.529981][ T5930] usb 1-1: Product: syz [ 528.534175][ T5930] usb 1-1: SerialNumber: syz [ 528.548479][ T5930] usb 1-1: config 0 descriptor?? [ 528.558775][ T5930] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 528.629983][ T43] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 528.789941][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 528.800777][ T43] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 528.815364][ T43] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 528.827225][ T5823] usb 1-1: USB disconnect, device number 105 [ 528.839391][ T43] usb 5-1: config 0 has no interface number 0 [ 528.845638][ T5930] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 528.858563][ T43] usb 5-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.872873][ T43] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 528.884424][ T43] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 528.892934][ T43] usb 5-1: Product: syz [ 528.897109][ T43] usb 5-1: Manufacturer: syz [ 528.910158][ T43] usb 5-1: config 0 descriptor?? [ 528.940277][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 529.032462][ T5930] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 529.047384][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.055666][ T5930] usb 6-1: Product: syz [ 529.063458][ T5930] usb 6-1: Manufacturer: syz [ 529.068046][ T5930] usb 6-1: SerialNumber: syz [ 529.079050][ T5930] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 529.092356][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 529.105891][ T5823] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 529.116305][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 529.126531][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.134700][ T10] usb 4-1: Product: syz [ 529.139010][ T10] usb 4-1: Manufacturer: syz [ 529.144048][ T10] usb 4-1: SerialNumber: syz [ 529.160692][ T10] usb 4-1: config 0 descriptor?? [ 529.279909][ T5900] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 529.378281][ T5879] usb 6-1: USB disconnect, device number 33 [ 529.433622][ T5900] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 529.446533][ T5900] usb 3-1: config 0 has no interface number 0 [ 529.456691][ T5900] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 529.467856][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.476497][ T5900] usb 3-1: Product: syz [ 529.481766][ T5900] usb 3-1: Manufacturer: syz [ 529.486419][ T5900] usb 3-1: SerialNumber: syz [ 529.495000][ T5900] usb 3-1: config 0 descriptor?? [ 529.497092][T13261] usb usb8: usbfs: process 13261 (syz.0.2079) did not claim interface 0 before use [ 529.515094][T13261] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2079'. [ 529.570577][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 529.584394][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 529.599600][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 529.608201][ T10] usb 4-1: media controller created [ 529.641398][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.714043][T13256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.725393][T13256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.776064][T13252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.785011][T13252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.799435][ T5900] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 529.811268][ T5900] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 529.822252][ T5900] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 529.831577][ T5900] usb 3-1: media controller created [ 529.857950][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.069062][T13276] loop2: detected capacity change from 0 to 7 [ 530.077214][T13276] Dev loop2: unable to read RDB block 7 [ 530.083263][T13276] loop2: unable to read partition table [ 530.091078][T13276] loop2: partition table beyond EOD, truncated [ 530.097823][T13276] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.200559][ T5823] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 530.206620][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 530.211819][ T5823] ath9k_htc: Failed to initialize the device [ 530.224579][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 530.232873][T13252] FAULT_INJECTION: forcing a failure. [ 530.232873][T13252] name failslab, interval 1, probability 0, space 0, times 0 [ 530.248787][ T5879] usb 6-1: ath9k_htc: USB layer deinitialized [ 530.250106][T13252] CPU: 1 UID: 0 PID: 13252 Comm: syz.3.2075 Not tainted syzkaller #0 PREEMPT(full) [ 530.250127][T13252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.250139][T13252] Call Trace: [ 530.250146][T13252] [ 530.250154][T13252] dump_stack_lvl+0x189/0x250 [ 530.250180][T13252] ? __pfx____ratelimit+0x10/0x10 [ 530.250203][T13252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.250224][T13252] ? __pfx__printk+0x10/0x10 [ 530.250247][T13252] ? __pfx___might_resched+0x10/0x10 [ 530.250271][T13252] should_fail_ex+0x414/0x560 [ 530.250300][T13252] should_failslab+0xa8/0x100 [ 530.250319][T13252] __kmalloc_cache_noprof+0x6f/0x6f0 [ 530.250343][T13252] ? usb_control_msg+0x73/0x3e0 [ 530.250371][T13252] usb_control_msg+0x73/0x3e0 [ 530.250394][T13252] ? msleep+0x39/0x100 [ 530.250416][T13252] dtv5100_i2c_msg+0x250/0x330 [ 530.250446][T13252] dtv5100_i2c_xfer+0x269/0x3c0 [ 530.250481][T13252] __i2c_transfer+0x874/0x2170 [ 530.250521][T13252] ? __pfx___i2c_transfer+0x10/0x10 [ 530.250540][T13252] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 530.250562][T13252] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 530.250591][T13252] __i2c_smbus_xfer+0xfb0/0x1e50 [ 530.250622][T13252] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 530.250646][T13252] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 530.250663][T13252] ? __lock_acquire+0xab9/0xd20 [ 530.250680][T13252] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 530.250721][T13252] ? rt_mutex_lock_nested+0x172/0x1e0 [ 530.250743][T13252] i2c_smbus_xfer+0x275/0x3c0 [ 530.250770][T13252] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 530.250793][T13252] ? __lock_acquire+0xab9/0xd20 [ 530.250816][T13252] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 530.250844][T13252] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 530.250880][T13252] i2cdev_ioctl+0x5d3/0x7f0 [ 530.250900][T13252] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 530.250925][T13252] ? __fget_files+0x2a/0x420 [ 530.250945][T13252] ? bpf_lsm_file_ioctl+0x9/0x20 [ 530.250964][T13252] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 530.250984][T13252] __se_sys_ioctl+0xfc/0x170 [ 530.251007][T13252] do_syscall_64+0xfa/0xfa0 [ 530.251026][T13252] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.251047][T13252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.251064][T13252] ? clear_bhb_loop+0x60/0xb0 [ 530.251084][T13252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.251101][T13252] RIP: 0033:0x7f9b72b8f6c9 [ 530.251115][T13252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.251129][T13252] RSP: 002b:00007f9b73947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.251147][T13252] RAX: ffffffffffffffda RBX: 00007f9b72de5fa0 RCX: 00007f9b72b8f6c9 [ 530.251160][T13252] RDX: 0000200000000580 RSI: 0000000000000720 RDI: 0000000000000004 [ 530.251172][T13252] RBP: 00007f9b73947090 R08: 0000000000000000 R09: 0000000000000000 [ 530.251183][T13252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.251194][T13252] R13: 00007f9b72de6038 R14: 00007f9b72de5fa0 R15: 00007f9b72f0fa28 [ 530.251224][T13252] [ 530.270035][T13269] ------------[ cut here ]------------ [ 530.274636][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 530.277956][T13269] usb 4-1: BOGUS control dir, pipe 80005080 doesn't match bRequestType c0 [ 530.300651][ T10] usb 4-1: USB disconnect, device number 80 [ 530.345391][T13269] WARNING: CPU: 1 PID: 13269 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 530.596265][T13269] Modules linked in: [ 530.600611][T13269] CPU: 1 UID: 0 PID: 13269 Comm: syz.2.2077 Not tainted syzkaller #0 PREEMPT(full) [ 530.610343][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.620863][T13269] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 530.626542][T13269] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 40 14 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 84 08 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 530.639982][ T5879] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 530.646276][T13269] RSP: 0018:ffffc9001c5df540 EFLAGS: 00010246 [ 530.660121][T13269] RAX: 676a38885f6eae00 RBX: ffff888146b03200 RCX: 0000000000080000 [ 530.668099][T13269] RDX: ffffc9000d34d000 RSI: 00000000000456cd RDI: 00000000000456ce [ 530.676698][T13269] RBP: 1ffff1100afa4094 R08: ffffffff8f7ce777 R09: 1ffffffff1ef9cee [ 530.684872][T13269] R10: dffffc0000000000 R11: fffffbfff1ef9cef R12: ffff8880212ee100 [ 530.692910][T13269] R13: ffff888057d204a0 R14: 0000000080005080 R15: ffff8880570ee540 [ 530.700928][T13269] FS: 00007f90b28746c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 530.710100][T13269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.716898][T13269] CR2: 00007f78735729e0 CR3: 0000000065dd4000 CR4: 00000000003526f0 [ 530.724988][T13269] Call Trace: [ 530.728278][T13269] [ 530.731283][T13269] usb_start_wait_urb+0x114/0x4c0 [ 530.736329][T13269] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 530.741974][T13269] usb_control_msg+0x232/0x3e0 [ 530.746760][T13269] dtv5100_i2c_msg+0x250/0x330 [ 530.751798][T13269] dtv5100_i2c_xfer+0x269/0x3c0 [ 530.756698][T13269] __i2c_transfer+0x874/0x2170 [ 530.761959][T13269] ? __pfx___i2c_transfer+0x10/0x10 [ 530.767172][T13269] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 530.773187][T13269] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 530.779481][T13269] __i2c_smbus_xfer+0xfb0/0x1e50 [ 530.784528][T13269] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 530.790106][T13269] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 530.795579][T13269] ? __lock_acquire+0xab9/0xd20 [ 530.799986][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 530.800695][T13269] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 530.810982][T13269] ? __lock_acquire+0xab9/0xd20 [ 530.814829][ T5879] usb 6-1: no configurations [ 530.816071][T13269] ? rt_mutex_lock_nested+0x172/0x1e0 [ 530.826608][T13269] ? __might_fault+0xb0/0x130 [ 530.826956][ T5879] usb 6-1: can't read configurations, error -22 [ 530.831726][T13269] i2c_smbus_xfer+0x275/0x3c0 [ 530.842475][T13269] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 530.847704][T13269] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 530.852976][T13269] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 530.858592][T13269] i2cdev_ioctl+0x5d3/0x7f0 [ 530.863619][T13269] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 530.870148][T13269] ? bpf_lsm_file_ioctl+0x9/0x20 [ 530.875157][T13269] ? __sanitizer_cov_trace_pc+0x3c/0x70 [ 530.880784][T13269] ? bpf_lsm_file_ioctl+0x9/0x20 [ 530.886115][T13269] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 530.891247][T13269] __se_sys_ioctl+0xfc/0x170 [ 530.895857][T13269] do_syscall_64+0xfa/0xfa0 [ 530.900474][T13269] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.905690][T13269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.910352][ T5900] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 530.912045][T13269] ? clear_bhb_loop+0x60/0xb0 [ 530.923128][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.929042][T13269] RIP: 0033:0x7f90b198f6c9 [ 530.933520][T13269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.953251][T13269] RSP: 002b:00007f90b2874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.963738][T13269] RAX: ffffffffffffffda RBX: 00007f90b1be6090 RCX: 00007f90b198f6c9 [ 530.971808][T13269] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000009 [ 530.982291][T13269] RBP: 00007f90b1a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 530.990369][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.998705][T13269] R13: 00007f90b1be6128 R14: 00007f90b1be6090 R15: 00007f90b1d0fa28 [ 531.003350][ T5879] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 531.006787][T13269] [ 531.018008][T13269] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 531.025280][T13269] CPU: 1 UID: 0 PID: 13269 Comm: syz.2.2077 Not tainted syzkaller #0 PREEMPT(full) [ 531.034636][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.044676][T13269] Call Trace: [ 531.047944][T13269] [ 531.050862][T13269] dump_stack_lvl+0x99/0x250 [ 531.055446][T13269] ? __asan_memcpy+0x40/0x70 [ 531.060024][T13269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.065210][T13269] ? __pfx__printk+0x10/0x10 [ 531.069796][T13269] vpanic+0x237/0x6d0 [ 531.073773][T13269] ? __pfx_vpanic+0x10/0x10 [ 531.078270][T13269] panic+0xb9/0xc0 [ 531.081978][T13269] ? __pfx_panic+0x10/0x10 [ 531.086393][T13269] __warn+0x31b/0x4b0 [ 531.090361][T13269] ? usb_submit_urb+0x114d/0x18b0 [ 531.095372][T13269] ? usb_submit_urb+0x114d/0x18b0 [ 531.100382][T13269] report_bug+0x2be/0x4f0 [ 531.104697][T13269] ? usb_submit_urb+0x114d/0x18b0 [ 531.109706][T13269] ? usb_submit_urb+0x114d/0x18b0 [ 531.114714][T13269] ? usb_submit_urb+0x114f/0x18b0 [ 531.119724][T13269] handle_bug+0x84/0x160 [ 531.123956][T13269] exc_invalid_op+0x1a/0x50 [ 531.128445][T13269] asm_exc_invalid_op+0x1a/0x20 [ 531.133279][T13269] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 531.138898][T13269] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 40 14 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 84 08 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 531.158486][T13269] RSP: 0018:ffffc9001c5df540 EFLAGS: 00010246 [ 531.164540][T13269] RAX: 676a38885f6eae00 RBX: ffff888146b03200 RCX: 0000000000080000 [ 531.172495][T13269] RDX: ffffc9000d34d000 RSI: 00000000000456cd RDI: 00000000000456ce [ 531.180447][T13269] RBP: 1ffff1100afa4094 R08: ffffffff8f7ce777 R09: 1ffffffff1ef9cee [ 531.188404][T13269] R10: dffffc0000000000 R11: fffffbfff1ef9cef R12: ffff8880212ee100 [ 531.196358][T13269] R13: ffff888057d204a0 R14: 0000000080005080 R15: ffff8880570ee540 [ 531.204339][T13269] usb_start_wait_urb+0x114/0x4c0 [ 531.209364][T13269] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 531.214917][T13269] usb_control_msg+0x232/0x3e0 [ 531.219674][T13269] dtv5100_i2c_msg+0x250/0x330 [ 531.224433][T13269] dtv5100_i2c_xfer+0x269/0x3c0 [ 531.229299][T13269] __i2c_transfer+0x874/0x2170 [ 531.234081][T13269] ? __pfx___i2c_transfer+0x10/0x10 [ 531.239280][T13269] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 531.244824][T13269] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 531.250715][T13269] __i2c_smbus_xfer+0xfb0/0x1e50 [ 531.255651][T13269] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 531.260755][T13269] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 531.266201][T13269] ? __lock_acquire+0xab9/0xd20 [ 531.271040][T13269] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 531.276458][T13269] ? __lock_acquire+0xab9/0xd20 [ 531.281400][T13269] ? rt_mutex_lock_nested+0x172/0x1e0 [ 531.286756][T13269] ? __might_fault+0xb0/0x130 [ 531.291427][T13269] i2c_smbus_xfer+0x275/0x3c0 [ 531.296098][T13269] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 531.301293][T13269] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 531.306316][T13269] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 531.311866][T13269] i2cdev_ioctl+0x5d3/0x7f0 [ 531.316354][T13269] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 531.321369][T13269] ? bpf_lsm_file_ioctl+0x9/0x20 [ 531.326307][T13269] ? __sanitizer_cov_trace_pc+0x3c/0x70 [ 531.331847][T13269] ? bpf_lsm_file_ioctl+0x9/0x20 [ 531.336771][T13269] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 531.341784][T13269] __se_sys_ioctl+0xfc/0x170 [ 531.346366][T13269] do_syscall_64+0xfa/0xfa0 [ 531.350858][T13269] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.356042][T13269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.362091][T13269] ? clear_bhb_loop+0x60/0xb0 [ 531.366752][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.372627][T13269] RIP: 0033:0x7f90b198f6c9 [ 531.377030][T13269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.396618][T13269] RSP: 002b:00007f90b2874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.405059][T13269] RAX: ffffffffffffffda RBX: 00007f90b1be6090 RCX: 00007f90b198f6c9 [ 531.413028][T13269] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000009 [ 531.420987][T13269] RBP: 00007f90b1a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 531.428949][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.436912][T13269] R13: 00007f90b1be6128 R14: 00007f90b1be6090 R15: 00007f90b1d0fa28 [ 531.444894][T13269] [ 531.448207][T13269] Kernel Offset: disabled [ 531.452521][T13269] Rebooting in 86400 seconds..