last executing test programs: 9.086918295s ago: executing program 1 (id=6967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x8003, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0xc2, 0x0, 0x0, 0x8, {[@md5sig={0x1d, 0x12, "400053e0c9d32076c99dd6cea46c5d7b"}]}}}}}}}}, 0x0) (fail_nth: 4) 9.086673615s ago: executing program 1 (id=6968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0, 0x12f4c4729364eade, 0x1}) io_uring_enter(r4, 0x3516, 0xa00100, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070696d726567310000000000000000001400010070696d72656731"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x8880) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) syz_usb_connect$hid(0x1, 0xfffffffffffffe97, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xfe, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x3, 0x4, {0x9, 0x21, 0xcf1b, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xa, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xd, 0xb, 0xd7}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r7) 6.814921938s ago: executing program 3 (id=6978): socket$inet_tcp(0x2, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) (async) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) rename(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00') ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) mremap(&(0x7f00007ca000/0x800000)=nil, 0x800000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x10800, 0x0) (async) openat$fb0(0xffffffffffffff9c, 0x0, 0x101800, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) 6.682045262s ago: executing program 0 (id=6979): r0 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef, 0x0, r0}, 0x0, &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x5, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000a80)) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) 6.024454214s ago: executing program 3 (id=6980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8080000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0xb, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x25, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x87}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x1, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.898800647s ago: executing program 1 (id=6981): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000002240)={r4, 0x5, 0x10, 0xf1}, &(0x7f00000001c0)=0x18) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) (async) r5 = socket$kcm(0x1e, 0x5, 0x0) syz_io_uring_setup(0x5111, &(0x7f00000001c0)={0x0, 0xbf7c, 0x8000, 0xffffffff, 0xe1}, &(0x7f0000000080), &(0x7f00000000c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) recvmmsg(r5, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000ac0)=""/8, 0x8}, 0xe}], 0x1, 0x40002080, 0x0) 5.525233467s ago: executing program 1 (id=6983): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) semop(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000051779ee28acaec043756f54d17da20a85ccbd40161890cb0b1398287f2fe09cd926ca86d72f493e426e4f008af742dcd9c016a3a7a47fb9944cc846cf5b7c19f86c8712619a1334634cf24dbeae338e66d06c623950c918989bd68c0424d7f139d69e47b4faacdc8593cff571116be11bc0032fd2262b1f575c916cb7d7cb95aa50059ea3f84d0cbb58b06c246291ec7183047c045b25424060a8d8d52868007f89d6bb30c7e8682f75b127f2259e74c989a76972ce9ef27bf313dd5beca236259f9afa168e48d28b32a76101f896d0c2e1a01fa96b00ce90f1dacdd22f7ad9395607f2111eb818822b9549a51803c6ec613cb9537be3be9a523f6ca70981beed929e5409f8ae0a7730ecae70a0de395ef116a56c02a9928285ef8350c9293d4827cba1214578c8ef0f5e53f5002efb889a3c0e1f743b25967224176cef63365ea4d470566f3605552a692a2665d61d5e23f69c5c926ad3fd2a291ee0d8703c581ea295eb9323666988fc6782f427ec7077d21e10f48eaf86b99bf99d1c8aa87e5f8556c17", @ANYRES8=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r6, &(0x7f0000000680)='.\x00', 0x1000, 0x400, &(0x7f0000002180)) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 5.450827246s ago: executing program 4 (id=6984): socket(0x28, 0x5, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read(r1, &(0x7f0000000080)=""/152, 0x98) read(r1, &(0x7f0000001140)=""/212, 0xd4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)={0x6c, r4, 0x4c1dad3e3d6a7499, 0x70bd24, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x48}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 5.042647701s ago: executing program 3 (id=6988): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0x0, r0}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4.957313918s ago: executing program 3 (id=6989): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xfffd, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x6}, 0x8) 4.830292323s ago: executing program 3 (id=6990): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x802, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) 4.374990972s ago: executing program 0 (id=6992): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) socket$inet6(0xa, 0x800, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000080)=0xe, 0x4) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r5, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000122, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffffffff2a00000008005800000000000e0001006e657464657673696d0000000f0002"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v1={0x1000000, [{0x7, 0x1}]}, 0xc, 0x7) move_pages(0x0, 0x9, &(0x7f0000000040)=[&(0x7f0000b30000/0x4000)=nil, &(0x7f0000911000/0x1000)=nil, &(0x7f0000815000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000344000/0x2000)=nil, &(0x7f000069d000/0x2000)=nil, &(0x7f000083e000/0x4000)=nil, &(0x7f0000024000/0x2000)=nil, &(0x7f0000a53000/0x1000)=nil], &(0x7f00000000c0)=[0x4], &(0x7f0000000100)=[0x0], 0x814d3f24370b4780) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x3554000) close(r6) 3.52617983s ago: executing program 4 (id=6996): socket(0x92ea811828740add, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00\xf4l\xed\x1c\xe4\xa0bi\xd9\xe9\xe6X\xa4@\xf8\xfcZH\x94\xd1\xb4\xbb\'\xfbM\x8a\a\x00\x00\x00h\x11\x1ft\xf1\xdc*T\xa7\xb3\xf2\x8cK\xa4y\x88\xe6\x92\x0f\xbdUS,2\xc5\xff\x83~\xa7\xb8\x9a\xa1\x9e\xf5\xbc_\x8b.\xb0\xd0\x82\xce1\xcd\xfe\b\xcf\t\xf7Jf,<.)F[\f%\x00\xca5\x06\x84J\x05\xcdo<\xcf\x98rK\xf6\x97Tk\x827Q\xb1\rnL\xd7\xb5/:\xab5\xf8\xc7\x13\xf7\xe6\xf1\xdd\xac\x93\xb0\x80\xe1\x92GUr>\x0f\x96\x83\xbd\xcf\xfe\xb3\xe2r\t*G.\xf5]\xdc\x9c\xd80\xd1\x1a\xedh\x1b\xfc\xd1\x9dQ0\x1c\xbd\x183\xe4\x00\xca\x19\xbd9h\x9b\xf1O\x03\xc8\xea\xe7@\x91&\xe6\xd9\xe9\x87@\xaby\xb8\xfc\xbbL~\x0e\xe7,\xa3\xe9\xb9\x8f@\x04\x981w?\xd8zx\x84)\r\xc4\xc2?o\'\xcag\xc7\x00\xfe\xff\xff\xff\xff\xff\xff\xb3\xe5\xb5\xc6\xae\x00\x00\x00', 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000006, 0x11, r2, 0x0) splice(r2, 0x0, r2, &(0x7f0000000100)=0x4, 0x613, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0xc000, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5, 0x1}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x78, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0x2, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfe, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x16, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x2, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) pipe2$9p(&(0x7f0000000340), 0x80) 3.191575557s ago: executing program 2 (id=7000): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0x40000000, &(0x7f0000000180)={0x4, @raw_data="829b545515f7fdadbaa1375d27e13bfbe8808afc2456883e55b9e4371336ee368aa9e148b7693a8ef30665353d190a5632e59e164c7c97b52a353ea53d02911e2cb95934dd7e58f6b5f252cd0b9f78cb6b6a3410e8b20a5915c2cef11a343088cd37e0b8fc8ba7d96d0b666d7de34e0f8ab4db3a5be3d009c020e81d89a97011152b090ab8b6d61a7d45016faa9f4360f125d51d96d0fe3e5c6ec09d398842393e5a98faedc1757bd8c778cbf32d462af40fd863e69820007b3e81693e54e92f7bfb7e00"}) 3.023112618s ago: executing program 2 (id=7001): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="02", 0x1}], 0x1}}], 0x1, 0x8005) 2.854630586s ago: executing program 2 (id=7002): r0 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef, 0x0, r0}, 0x0, &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x5, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000a80)) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) 2.708374017s ago: executing program 0 (id=7003): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7aa, &(0x7f00000002c0)={{@my=0x0, 0x2}, @host, 0x7, 0x4, 0x40000, 0xcf1, 0x7ffffffffffffffc, 0x0, 0x9}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r2 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x2000}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r4, 0x1, 0xffffffff, 0x1, 0x0, 0x0) flistxattr(r3, &(0x7f0000000180)=""/18, 0x12) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') 2.548082531s ago: executing program 0 (id=7004): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x44cc1, 0x10) eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)) r1 = epoll_create(0x7ff40000) epoll_wait(r0, 0x0, 0x0, 0x9) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000280)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r4}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000005c0)={0x0, 0x0, r5}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x7, 0x4, 0x3d0, 0x110, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000180), {[{{@arp={@broadcast, @multicast1, 0xffffff00, 0xffffffff, 0xe, 0xc, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x4, 0x4, 0xf5, 0x4, 0x0, 0x400, 'macvlan1\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x20b}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @multicast2, @multicast2, 0xf, 0x1}}}, {{@arp={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x10, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x7, 0x1, 0x0, 0x6, 0x2, 'wg2\x00', 'wg2\x00', {0xff}, {0xbd2070bcf84403ba}, 0x0, 0xc3}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x6, 0x8}}}, {{@arp={@empty, @loopback, 0xff000000, 0x0, 0x10, 0x5, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xe, 0x4, 0x7ff, 0x807, 0x40, 0x9, 'veth0_to_batadv\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/profiling', 0x149a82, 0x50) write$cgroup_int(r6, &(0x7f0000000000)=0x2b00, 0x12) syz_fuse_handle_req(r2, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000440)={0x0, @reserved}) syz_fuse_handle_req(r2, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x8, 0x201, 0x6dc6, 0x7651, 0xa442, 0x7, 0xe000, 0x601d824b499141fd, 0xcd36, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000010e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0x0, r7, {0x9eab}}, 0x18) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8040, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1) writev(r8, 0x0, 0x0) r10 = eventfd(0x7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r10, &(0x7f0000000080)={0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 2.146851019s ago: executing program 0 (id=7005): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x802, 0x0, 0x2}, 0x20) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000001, 0xfffffffe, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001", @ANYRES8=r5], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x20008040) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x4004013, 0xffffffffffffffff, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x800) socket$nl_route(0x10, 0x3, 0x0) 1.266907235s ago: executing program 1 (id=7006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000001c0)=0xffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 832.677559ms ago: executing program 1 (id=7007): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x250d28}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 769.669965ms ago: executing program 0 (id=7008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r1, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(0x0, 0x0, &(0x7f0000000880)={[&(0x7f0000000300)='\xa2\xbc\xb4\xd0t\xee\xb5\xbe\xc6\xa1\n\xb7\x91\xa9YG\xc0M\x93-\xaf\xba\x88L\xb8Qwf\xae\xe9 \x0fH\xee\v\x90Q\xb8\xf7\f\xddP}\x15)\x9e\xdd\x11\x87#\x89>\x1a\xc2sH\xcc[y\xcd\x94\xa0\xd9\x105\b\xc2\xfe\x91\x88U\x1d\xc4\xa5\xe9]\x959%\xd3\xc9\xc3\xa9\xda\xd3\x17al_\x1f\xab\x01Xg\x0fb\x91\x97|\x04e37\xd9E\xaaH2\\\x7f0\xac\x8dA7\x1c\xfa\x82v\xce\xf4^\x87\xa6\x99}\x8aW4\'#\xc8\xab*\x004j\xb9\xfbRK(\xb0\xeb(k}\x81H\xc7\x7fz9q\xed\x8adU\x0f\xdf\x9b>\xb3V\x0f\xca\xf3j\xa7K|`\xa9\xcf>\xdd9\x94\xee\t\xc9(\xc5O+\x99\xce\x81\x7f\x8dGc\x88_:\x97\xcf\t\x18\xedpo\xc6/\xefq&v\xb28\xbc]B\\CQi\xfdg|\xb4\xba\xe7\xdc-g\x1a\xe4B\xbf\x03eu\xbfC\xbb\x15\xb1\xaa\xad,a\r\xc8\xc1!\x1f\x88r\x19\x913\x0e*\x17|\xdddZ\r\xfd\\\x9eG\xba\xad\xc1\x87a\x96p\xc3\xdd3\x86\xd5\xe7gx:\xfd\x1c\fI2\xc7\x11\xbc\x17\xc3X\xfa8\x9aA6\x8eE\xb6\x02\x89(Z)\xa0\xd053\xa8T\x02\xc45\x1c&\xc4\xbb-\xba\x80\xa9\xb5\xec0U\xe0\x101r/|\x1eg>cu\xb2\x98\xfc\xe7\xab\xc2\x91[\x1fb\xfa\'&\xf8\xf9\x10\xd6\xab\x1e\xed\xc0\x14\x8f\x9b\x17!!\'9h[\x06\xa8\x83\xed\xc2\xc4\xd3\xc5|\xc3\x905\xcf3L\xb9kCz\x00@\x11(!\xcef\x8a\x82\xc0a\xe8\xf3hB\xd4\x1b\x98X\xc8,)\xff\xda\xb9\x15\x00\xd4\xe1\xdf3b\xd6t=\t<\x80Z\"\x84\x13\xd3\xa5\x15W\xc0\xc9\x18s\x820gq\x98\x8eE\bs\x8bn5\xc58\xcc\xbe\xdc\x86\x0e\xfc\xc8\xae:\x98\xab(\xc9\x9b\xea\xf5\xdaE\x01m\xfexNICp./\xee\x89\xba\n[\xd3\xc2B1\xe2\xa7I\xfa\x19\x8f4\x1aA~\x9ao\x95\xf0\xd6:\x98:\x92\xfb>U\x85F\xe7\xdcy\xb2_\xdf\xdf\x8c\xa9\tAI\xe4+u5\xd9\xbe\xba\xb3?\xd0\xa7\xfa\x0f\x14\xcbJ<\xa3\xda\xdeC\xdd\xf58\x1e\xb4z\\\xf6\xa7\'\x01b|`\xba\xd3\x8f\xb3\xd8\x04\xe6\xb4\x81\x82<\xee\xdfY\xcd\xe2Q2\xce\xca\xcc\x12\xeb\xdd\x03\x15]\x04\x97])\x88\v2#\x9f\x93M%\xf2\\\xf0\xd2\x10\xd2U\x11?\xc9\x8da &\xe4\xc9\xff\xef\x89j\xba\x1b\xdc\xf6\xd1\xc5\xba\\\xd6\xc5&\xd9']}) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = syz_io_uring_setup(0xde8, &(0x7f0000000140)={0x0, 0x9a29, 0x800, 0x13, 0x358}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r9, 0x40045431, 0x0) getegid() r10 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x13, 0x6, 0x3, 0x9, 0x1, r10, 0x9, '\x00', r11, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) preadv(r10, &(0x7f00000009c0), 0x0, 0x43, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) r12 = syz_open_dev$vcsa(0x0, 0x0, 0x515800) ioctl$PIO_FONTRESET(r12, 0x4b6d, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 719.82196ms ago: executing program 3 (id=7009): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000100)={0xff2c, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000040)=@string={0x0, 0x3, "21578468366cb820d312ac8d0a55ecf1ae328cbb919d1a09b518b836d4f3c8efc66b539158a45261eab482a8d9c41a580f3b3fc71bfe9df3be53de0482bbe68baad4c20ad200f0eb431484616f427fa6f1dc2260ae73375d851e7834f31c072d172eace22e1283df722e1bf64f0f7cc283aa289c7d9ddefe2c996d603fb1ce59cd4c2d12946462bd96b7ec16868a"}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 452.905595ms ago: executing program 2 (id=7010): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0x0, r0}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 386.608976ms ago: executing program 2 (id=7011): openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4100, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x6395, 0xd389b78da71568, 0x3, 0x40000333, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}, {0x0}], 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) unshare(0x22020400) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0x7, 0x1, 0x129, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0x80000000, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10003, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcd, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000201, 0x0, 0xfffffffd, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffff966, 0xfb5, 0x2, 0x4, 0x9550, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x10001, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x10000, 0x100, 0x6, 0x10000, 0x1306, 0x800, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x8, 0xfffffff8, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x4, 0x5, 0x2, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x1, 0x2, 0xfff, 0x6, 0x9, 0x7c83, 0xd, 0x1, 0x2, 0xd, 0x81, 0x47, 0x8000007, 0x0, 0x11, 0x3, 0xb5, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x2, 0x40, 0x1, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x4, 0xc41f, 0x3e1e, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1003, 0x10, 0xd, 0x6, 0x8000, 0x53, 0xf, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xa, 0x400, 0x8, 0x0, 0x8, 0x100007, 0x9a33247, 0x8, 0x0, 0x1, 0x8005, 0xfffffff7, 0x5]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 355.09297ms ago: executing program 4 (id=7012): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="02", 0x1}], 0x1}}], 0x1, 0x8005) 324.614704ms ago: executing program 2 (id=7013): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) socket$inet6(0xa, 0x800, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000080)=0xe, 0x4) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r5, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000122, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffffffff2a00000008005800000000000e0001006e657464657673696d0000000f0002"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v1={0x1000000, [{0x7, 0x1}]}, 0xc, 0x7) move_pages(0x0, 0x9, &(0x7f0000000040)=[&(0x7f0000b30000/0x4000)=nil, &(0x7f0000911000/0x1000)=nil, &(0x7f0000815000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000344000/0x2000)=nil, &(0x7f000069d000/0x2000)=nil, &(0x7f000083e000/0x4000)=nil, &(0x7f0000024000/0x2000)=nil, &(0x7f0000a53000/0x1000)=nil], &(0x7f00000000c0)=[0x4], &(0x7f0000000100)=[0x0], 0x814d3f24370b4780) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x3554000) close(0xffffffffffffffff) 261.434317ms ago: executing program 4 (id=7014): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) (fail_nth: 3) 138.44798ms ago: executing program 4 (id=7015): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000001c0)=0xfffffffa) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x91, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r1 = getpid() socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36a, &(0x7f0000000b00)=ANY=[@ANYBLOB="e727dc071f80ffffffffffff86dd609907a603342c03cb697a653e336f000000500000000000ff0200000000000000000000000000016200002e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x2a) unshare(0x2a020480) r3 = socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff00001207, 0x0, 0x0) syz_pidfd_open(r1, 0x0) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f00000000c0)={0x2, 0x2, 0x40, 0x6, 0x3}) pipe2$watch_queue(&(0x7f0000000040), 0x80) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_clone(0x26b40080, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x14, 0x2032, 0x0, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x24044010) 0s ago: executing program 4 (id=7016): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000480)=0xffffffffffffffff) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="8285", 0x2}], 0x1}, 0x400c9c1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000680)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x2000c041}, 0x240000c4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa) r4 = accept4(r0, 0x0, 0x0, 0x800) r5 = dup3(0xffffffffffffffff, r4, 0x0) write$P9_RMKNOD(r5, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x8, 0x0, 0x5}}, 0x14) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x61) kernel console output (not intermixed with test programs): ] R13: 00007f8acade6038 R14: 00007f8acade5fa0 R15: 00007f8acaf0fa28 [ 1116.733290][T26982] [ 1116.961161][ T5904] usb 2-1: USB disconnect, device number 63 [ 1116.966257][ T5834] usb 5-1: SerialNumber: syz [ 1116.995759][ T5904] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1117.005377][ T5834] usb 5-1: config 0 descriptor?? [ 1117.017071][ T5834] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 1117.023716][ T5834] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 1117.252141][T26973] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6738'. [ 1117.281560][T26973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.294538][T26988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6744'. [ 1117.305408][T26973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.379184][ T5904] usb 5-1: USB disconnect, device number 97 [ 1117.402371][T27001] CUSE: info not properly terminated [ 1117.741886][ T5977] usb usb40-port1: attempt power cycle [ 1117.858416][ T5834] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1117.962042][T27021] : renamed from bond_slave_0 (while UP) [ 1118.013832][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053c12400: rx timeout, send abort [ 1118.089731][T27011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.106864][T27011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.117061][T27012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.126936][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.168192][T27013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.198617][T27013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.220006][T27011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.257464][T27011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.279943][T18500] usb 1-1: USB disconnect, device number 51 [ 1118.340318][ T5977] usb usb40-port1: unable to enumerate USB device [ 1118.469017][ T5834] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1118.476603][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055769c00: rx timeout, send abort [ 1118.498876][ T5834] usb 4-1: can't read configurations, error -71 [ 1118.525169][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053c12400: abort rx timeout. Force session deactivation [ 1118.967275][ T5977] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1118.976693][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055769c00: abort rx timeout. Force session deactivation [ 1119.059871][T27056] geneve2: entered promiscuous mode [ 1119.065214][T27056] geneve2: entered allmulticast mode [ 1119.138124][ T5977] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1119.139056][ T5977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1119.139094][ T5977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1119.139114][ T5977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.141548][ T5977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1119.141577][ T5977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1119.141589][ T5977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.142957][ T5977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1119.142996][ T5977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1119.143018][ T5977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.144243][ T5977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1119.144285][ T5977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1119.144358][ T5977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.145550][ T5977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1119.145633][ T5977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1119.145655][ T5977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.146486][ T5977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1119.146523][ T5977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1119.146544][ T5977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.150300][ T5977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1119.150341][ T5977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1119.150361][ T5977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.164446][ T5977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1119.164473][ T5977] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1119.164485][ T5977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1119.178709][ T5977] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1119.178736][ T5977] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1119.178754][ T5977] usb 2-1: Product: syz [ 1119.178766][ T5977] usb 2-1: Manufacturer: syz [ 1119.178778][ T5977] usb 2-1: SerialNumber: syz [ 1119.181568][ T5977] usb 2-1: config 0 descriptor?? [ 1119.187095][ T5977] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1119.200927][T27054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6761'. [ 1119.675699][ T5977] usb 2-1: USB disconnect, device number 64 [ 1119.684254][ T5977] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1120.264167][T27086] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1120.276634][T27086] fuse: Unknown parameter 'al' [ 1120.379304][T27093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6771'. [ 1120.503734][T27100] batadv_slave_0: entered promiscuous mode [ 1120.527279][ T5977] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1120.557805][T27102] bridge0: entered promiscuous mode [ 1120.581160][T27098] batadv_slave_0: left promiscuous mode [ 1120.702160][ T5977] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1120.718304][ T5977] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1120.745902][ T5977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1120.768276][ T5977] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1120.810161][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1120.841717][ T5977] usb 4-1: Product: syz [ 1120.851686][ T5977] usb 4-1: Manufacturer: syz [ 1120.868997][ T5977] usb 4-1: SerialNumber: syz [ 1120.894578][ T5977] usb 4-1: config 0 descriptor?? [ 1120.921253][ T5977] hub 4-1:0.0: bad descriptor, ignoring hub [ 1120.940675][ T5977] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1120.979302][ T5977] usb 4-1: selecting invalid altsetting 0 [ 1121.583255][T27117] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 1121.648888][T27117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1122.024082][ T5977] usb 4-1: USB disconnect, device number 95 [ 1122.036905][T27085] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1122.424133][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6777'. [ 1122.577274][ T5977] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1122.739720][ T5977] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1122.781706][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1122.811239][ T5977] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1122.839715][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1122.866659][ T5977] usb 1-1: Product: syz [ 1122.887779][ T5977] usb 1-1: Manufacturer: syz [ 1122.904917][ T5977] usb 1-1: SerialNumber: syz [ 1122.924631][ T5977] usb 1-1: config 0 descriptor?? [ 1122.946083][ T5977] usb 1-1: selecting invalid altsetting 0 [ 1122.967347][T18500] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1123.128386][T18500] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1123.150065][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1123.161806][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1123.168934][ T5904] usb 1-1: USB disconnect, device number 52 [ 1123.181569][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.194576][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1123.209110][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1123.226833][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.236920][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1123.246727][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1123.259502][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.267005][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1123.278037][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1123.290336][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.298100][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1123.307399][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1123.320153][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.340982][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1123.352528][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1123.364197][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.371402][T27149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.380957][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1123.392026][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1123.405054][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.418443][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1123.428032][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1123.437603][ T5977] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1123.439626][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.455609][T18500] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1123.465188][T18500] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1123.473586][T18500] usb 4-1: Product: syz [ 1123.477957][T18500] usb 4-1: Manufacturer: syz [ 1123.483065][T18500] usb 4-1: SerialNumber: syz [ 1123.489600][T18500] usb 4-1: config 0 descriptor?? [ 1123.498014][T18500] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1123.601460][ T5977] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1123.610647][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.619689][ T5977] usb 2-1: Product: syz [ 1123.623873][ T5977] usb 2-1: Manufacturer: syz [ 1123.628520][ T5977] usb 2-1: SerialNumber: syz [ 1123.637442][T24994] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1123.637765][ T5977] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1123.663433][ T5904] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1123.705623][T18500] usb 4-1: USB disconnect, device number 96 [ 1123.715189][T18500] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1123.797298][T24994] usb 5-1: Using ep0 maxpacket: 32 [ 1123.804278][T24994] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1123.813124][T24994] usb 5-1: config 0 has no interface number 0 [ 1123.821964][T24994] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1123.831144][T24994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.839563][T24994] usb 5-1: Product: syz [ 1123.843750][T24994] usb 5-1: Manufacturer: syz [ 1123.848385][T24994] usb 5-1: SerialNumber: syz [ 1123.855018][T24994] usb 5-1: config 0 descriptor?? [ 1123.862475][T24994] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1123.997678][ T5834] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1124.070796][T24994] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1124.100871][T24994] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1124.174702][ T5834] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 1124.184296][ T5834] usb 1-1: config 0 has no interface number 0 [ 1124.190534][ T5834] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1124.209441][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.232833][ T5834] usb 1-1: config 0 descriptor?? [ 1124.476233][ T5834] usb 1-1: string descriptor 0 read error: -71 [ 1124.484750][ T5977] usb 2-1: USB disconnect, device number 65 [ 1124.506521][T27149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.531590][ T5834] usb-storage 1-1:0.168: USB Mass Storage device detected [ 1124.542404][T27149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.561688][ T5834] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 1124.584104][T27160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.609635][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1124.621678][T24994] usb 5-1: USB disconnect, device number 98 [ 1124.644701][ T5834] usb 1-1: USB disconnect, device number 53 [ 1124.672302][T24994] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1124.703503][T24994] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1124.719420][ T5904] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1124.743528][ T5904] ath9k_htc: Failed to initialize the device [ 1124.763305][T24994] quatech2 5-1:0.51: device disconnected [ 1124.763779][ T5977] usb 2-1: ath9k_htc: USB layer deinitialized [ 1125.065071][T27169] loop5: detected capacity change from 0 to 7 [ 1125.196011][T26775] Dev loop5: unable to read RDB block 7 [ 1125.214377][T26775] loop5: unable to read partition table [ 1125.221353][T26775] loop5: partition table beyond EOD, truncated [ 1125.281481][T27169] Dev loop5: unable to read RDB block 7 [ 1125.300491][T27169] loop5: unable to read partition table [ 1125.319362][T27169] loop5: partition table beyond EOD, truncated [ 1125.349241][T27169] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1125.747389][ T5834] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1125.839147][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6794'. [ 1126.449012][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1126.449029][ T30] audit: type=1326 audit(1764695295.744:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.488426][T27198] netdevsim netdevsim3: Direct firmware load for . [ 1126.488426][T27198] failed with error -2 [ 1126.499725][T27198] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1126.499725][T27198] [ 1126.531746][T27207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6800'. [ 1126.547636][ T30] audit: type=1326 audit(1764695295.744:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.601196][ T30] audit: type=1326 audit(1764695295.744:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.624396][ T30] audit: type=1326 audit(1764695295.744:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.651930][ T30] audit: type=1326 audit(1764695295.754:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.676917][ T30] audit: type=1326 audit(1764695295.754:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.700625][ T30] audit: type=1326 audit(1764695295.754:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.724063][ T5977] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1126.727001][ T30] audit: type=1326 audit(1764695295.754:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.755123][ T5834] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1126.765238][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.773336][ T5834] usb 2-1: Product: syz [ 1126.777653][T24994] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1126.785876][ T5834] usb 2-1: Manufacturer: syz [ 1126.790960][ T5834] usb 2-1: SerialNumber: syz [ 1126.802663][ T5834] usb 2-1: config 0 descriptor?? [ 1126.819086][ T5834] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1126.845576][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1126.869772][ T30] audit: type=1326 audit(1764695295.754:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1126.897618][ T5834] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1126.915431][ T5834] usb 2-1: media controller created [ 1126.938536][ T5977] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1126.948752][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1126.950243][T24994] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1126.969788][ T5977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1126.979451][ T30] audit: type=1326 audit(1764695295.764:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27201 comm="syz.2.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acab8f749 code=0x7ffc0000 [ 1127.005467][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1127.006026][T24994] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1127.006065][T24994] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.006083][T24994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.019407][T27205] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1127.019463][T27205] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1127.021216][T24994] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1127.085845][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1127.087119][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.087730][ T5977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.087755][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1127.088822][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.088864][ T5977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.088885][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1127.089721][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.089759][ T5977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.089771][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1127.090623][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.090654][ T5977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.090666][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1127.092284][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.092321][ T5977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.092342][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1127.103075][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.103119][ T5977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.103206][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1127.120608][ T5977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.120652][ T5977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.120674][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1127.122696][ T5977] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1127.122713][ T5977] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1127.122722][ T5977] usb 1-1: Product: syz [ 1127.122729][ T5977] usb 1-1: Manufacturer: syz [ 1127.122736][ T5977] usb 1-1: SerialNumber: syz [ 1127.124267][ T5977] usb 1-1: config 0 descriptor?? [ 1127.128847][ T5977] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1127.192373][ T5834] DVB: Unable to find symbol mt352_attach() [ 1127.313699][ T5834] DVB: Unable to find symbol nxt6000_attach() [ 1127.313712][ T5834] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1127.316302][ T5834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71 [ 1127.318039][ T5834] dvb-usb: schedule remote query interval to 1000 msecs. [ 1127.318051][ T5834] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1127.318060][ T5834] dvb-usb: bulk message failed: -22 (7/0) [ 1127.318068][ T5834] dvb-usb: bulk message failed: -22 (7/0) [ 1127.367738][ T5977] usb 1-1: USB disconnect, device number 54 [ 1127.369734][ T5977] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1127.461103][ T5834] usb 5-1: USB disconnect, device number 99 [ 1128.175107][T27221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6806'. [ 1128.236764][T27221] FAULT_INJECTION: forcing a failure. [ 1128.236764][T27221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.308577][T27221] CPU: 0 UID: 0 PID: 27221 Comm: syz.0.6806 Not tainted syzkaller #0 PREEMPT(full) [ 1128.308594][T27221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.308600][T27221] Call Trace: [ 1128.308604][T27221] [ 1128.308609][T27221] dump_stack_lvl+0x189/0x250 [ 1128.308623][T27221] ? __pfx____ratelimit+0x10/0x10 [ 1128.308635][T27221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1128.308643][T27221] ? __pfx__printk+0x10/0x10 [ 1128.308654][T27221] ? __might_fault+0xb0/0x130 [ 1128.308670][T27221] should_fail_ex+0x414/0x560 [ 1128.308683][T27221] _copy_from_user+0x2d/0xb0 [ 1128.308692][T27221] ___sys_sendmsg+0x158/0x2a0 [ 1128.308706][T27221] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.308720][T27221] ? rcu_read_lock_any_held+0xb3/0x120 [ 1128.308740][T27221] ? __fget_files+0x2a/0x420 [ 1128.308749][T27221] ? __fget_files+0x3a0/0x420 [ 1128.308762][T27221] __x64_sys_sendmsg+0x19b/0x260 [ 1128.308774][T27221] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1128.308790][T27221] ? __pfx_ksys_write+0x10/0x10 [ 1128.308803][T27221] ? do_syscall_64+0xbe/0xf80 [ 1128.308812][T27221] do_syscall_64+0xfa/0xf80 [ 1128.308818][T27221] ? lockdep_hardirqs_on+0x98/0x140 [ 1128.308830][T27221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.308838][T27221] ? clear_bhb_loop+0x60/0xb0 [ 1128.308848][T27221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.308855][T27221] RIP: 0033:0x7fb65d98f749 [ 1128.308863][T27221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.308870][T27221] RSP: 002b:00007fb65e800038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.308880][T27221] RAX: ffffffffffffffda RBX: 00007fb65dbe5fa0 RCX: 00007fb65d98f749 [ 1128.308886][T27221] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1128.308891][T27221] RBP: 00007fb65e800090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.308896][T27221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.308901][T27221] R13: 00007fb65dbe6038 R14: 00007fb65dbe5fa0 R15: 00007fb65dd0fa28 [ 1128.308914][T27221] [ 1128.310371][ T5834] usb 2-1: USB disconnect, device number 66 [ 1128.527604][T24994] dvb-usb: bulk message failed: -22 (7/0) [ 1128.557291][T24994] dvb-usb: error while querying for an remote control event. [ 1128.815611][ T5834] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1129.087476][T24994] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1129.197322][T18500] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1129.334467][T24994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1129.362319][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6812'. [ 1129.377825][T18500] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1129.386024][T24994] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1129.411413][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1129.425925][T24994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.427325][ T5920] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1129.456161][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1129.469723][T24994] usb 4-1: Product: syz [ 1129.483090][T24994] usb 4-1: Manufacturer: syz [ 1129.501257][T24994] usb 4-1: SerialNumber: syz [ 1129.510764][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1129.530622][T24994] usb 4-1: config 0 descriptor?? [ 1129.545653][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1129.600472][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1129.648010][ T5920] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1129.655726][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1129.683115][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1129.703977][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1129.735828][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1129.753506][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1129.774218][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1129.793668][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1129.797366][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1129.855073][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1129.869247][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1129.886550][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1129.886884][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1129.947095][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1129.955811][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1129.985871][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.005767][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.034271][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1130.049231][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.077261][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.080629][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.097230][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1130.153394][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.187540][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.207301][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1130.223074][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.259706][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.291029][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1130.310066][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1130.330285][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.332472][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.380101][ T5920] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.404060][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1130.422033][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.459184][ T5920] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1130.469150][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1130.491199][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.491454][ T5920] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1130.542181][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.553375][ T5920] usb 5-1: Product: syz [ 1130.553393][ T5920] usb 5-1: Manufacturer: syz [ 1130.553405][ T5920] usb 5-1: SerialNumber: syz [ 1130.555577][ T5920] usb 5-1: config 0 descriptor?? [ 1130.604177][T27265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6819'. [ 1130.616917][ T5920] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1130.617094][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1130.679398][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.715754][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.760772][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1130.786772][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1130.805401][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1130.850793][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1130.871157][ T5920] usb 5-1: USB disconnect, device number 100 [ 1130.886607][ T5920] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1130.901108][T18500] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1130.933526][T18500] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1130.976433][T18500] usb 3-1: Product: syz [ 1130.991295][T18500] usb 3-1: Manufacturer: syz [ 1131.006890][T18500] usb 3-1: SerialNumber: syz [ 1131.029913][T18500] usb 3-1: config 0 descriptor?? [ 1131.057240][T18500] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1131.207363][ T5927] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1131.234189][T27274] FAULT_INJECTION: forcing a failure. [ 1131.234189][T27274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.288276][T27274] CPU: 0 UID: 0 PID: 27274 Comm: syz.1.6823 Not tainted syzkaller #0 PREEMPT(full) [ 1131.288298][T27274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1131.288311][T27274] Call Trace: [ 1131.288317][T27274] [ 1131.288324][T27274] dump_stack_lvl+0x189/0x250 [ 1131.288345][T27274] ? __pfx____ratelimit+0x10/0x10 [ 1131.288364][T27274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1131.288378][T27274] ? __pfx__printk+0x10/0x10 [ 1131.288397][T27274] ? __might_fault+0xb0/0x130 [ 1131.288426][T27274] should_fail_ex+0x414/0x560 [ 1131.288460][T27274] _copy_from_user+0x2d/0xb0 [ 1131.288470][T27274] kstrtouint_from_user+0xc4/0x170 [ 1131.288482][T27274] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1131.288493][T27274] ? gfs2_parse_param+0x460/0xf90 [ 1131.288507][T27274] proc_fail_nth_write+0x88/0x200 [ 1131.288523][T27274] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1131.288545][T27274] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1131.288565][T27274] vfs_write+0x27e/0xb30 [ 1131.288588][T27274] ? lockdep_hardirqs_on+0x98/0x140 [ 1131.288611][T27274] ? __pfx_vfs_write+0x10/0x10 [ 1131.288630][T27274] ? do_sys_openat2+0x15a/0x200 [ 1131.288645][T27274] ? __asan_memset+0x22/0x50 [ 1131.288657][T27274] ? __x64_sys_sendmsg+0x1b4/0x260 [ 1131.288674][T27274] ksys_write+0x145/0x250 [ 1131.288687][T27274] ? __pfx_ksys_write+0x10/0x10 [ 1131.288699][T27274] ? do_syscall_64+0xbe/0xf80 [ 1131.288708][T27274] do_syscall_64+0xfa/0xf80 [ 1131.288715][T27274] ? lockdep_hardirqs_on+0x98/0x140 [ 1131.288726][T27274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.288734][T27274] ? clear_bhb_loop+0x60/0xb0 [ 1131.288744][T27274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.288751][T27274] RIP: 0033:0x7f1bd878e1ff [ 1131.288759][T27274] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1131.288766][T27274] RSP: 002b:00007f1bd958c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1131.288775][T27274] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bd878e1ff [ 1131.288782][T27274] RDX: 0000000000000001 RSI: 00007f1bd958c0a0 RDI: 0000000000000008 [ 1131.288787][T27274] RBP: 00007f1bd958c090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.288792][T27274] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1131.288796][T27274] R13: 00007f1bd89e6038 R14: 00007f1bd89e5fa0 R15: 00007f1bd8b0fa28 [ 1131.288810][T27274] [ 1131.291315][ T5920] usb 3-1: USB disconnect, device number 95 [ 1131.544579][ T5920] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1131.617286][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 1131.624551][ T5927] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1131.633040][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.671701][ T5927] usb 1-1: config 0 has no interface number 0 [ 1131.685200][ T5927] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1131.702318][ T5927] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.719865][ T5927] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1131.735369][ T5927] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1131.747479][ T5927] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1131.756766][ T5927] usb 1-1: Manufacturer: syz [ 1131.798967][ T5927] usb 1-1: config 0 descriptor?? [ 1131.843897][ T5927] hub 1-1:0.52: bad descriptor, ignoring hub [ 1131.868315][ T5927] hub 1-1:0.52: probe with driver hub failed with error -5 [ 1131.952235][T24994] usb 4-1: USB disconnect, device number 97 [ 1132.031440][ T5920] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1132.070011][ T5927] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input72 [ 1132.147471][T18500] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1132.175529][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1132.311246][T18500] usb 3-1: Using ep0 maxpacket: 8 [ 1132.326216][T18500] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 1132.355168][T18500] usb 3-1: config 0 has no interface number 0 [ 1132.368454][T18500] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1132.387623][T18500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.405642][T18500] usb 3-1: Product: syz [ 1132.407610][ T5927] usb 1-1: USB disconnect, device number 55 [ 1132.415755][T18500] usb 3-1: Manufacturer: syz [ 1132.427323][ T5920] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1132.463821][T18500] usb 3-1: SerialNumber: syz [ 1132.490971][T18500] usb 3-1: config 0 descriptor?? [ 1132.514713][T18500] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1132.542671][T18500] pctv452e: pctv452e_power_ctrl: 1 [ 1132.542671][T18500] [ 1132.570718][T18500] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1132.570718][T18500] [ 1132.594658][ T5920] usb 2-1: device descriptor read/64, error -71 [ 1132.606262][T18500] dvb-usb: bulk message failed: -22 (5/0) [ 1132.634670][T18500] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1132.671742][T18500] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1132.694762][T18500] usb 3-1: media controller created [ 1132.709016][ T5920] usb usb2-port1: attempt power cycle [ 1132.715081][T18500] dvb-usb: bulk message failed: -22 (8/0) [ 1132.736958][T18500] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1132.765594][T27294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1132.779410][T18500] dvb-usb: MAC address reading failed. [ 1132.841649][T18500] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1133.025792][T18500] DVB: Unable to find symbol stb0899_attach() [ 1133.048712][T18500] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1133.097959][ T5920] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1133.159177][ T5920] usb 2-1: device descriptor read/8, error -71 [ 1133.217239][T18500] rc_core: IR keymap rc-tt-1500 not found [ 1133.247410][T18500] Registered IR keymap rc-empty [ 1133.286539][T18500] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1133.360381][T18500] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input73 [ 1133.387676][T18500] dvb-usb: schedule remote query interval to 100 msecs. [ 1133.435760][T18500] pctv452e: pctv452e_power_ctrl: 0 [ 1133.435760][T18500] [ 1133.447271][ T5920] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1133.480071][T18500] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1133.514071][ T5920] usb 2-1: device descriptor read/8, error -71 [ 1133.537294][T24994] dvb-usb: bulk message failed: -22 (4/0) [ 1133.551389][T18500] usb 3-1: USB disconnect, device number 96 [ 1133.567343][T24994] dvb-usb: error -22 while querying for an remote control event. [ 1133.648434][ T5920] usb usb2-port1: unable to enumerate USB device [ 1133.725203][T18500] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1133.987405][T24994] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1134.081560][T18500] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1134.187936][T24994] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1134.269064][T24994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1134.278355][T24994] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1134.333897][T24994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.353073][T24994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1134.370139][T18500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.394462][T24994] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1134.411412][T18500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.428912][T24994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.446226][T18500] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1134.465571][T18500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.474946][T24994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1134.487000][T18500] usb 3-1: config 0 descriptor?? [ 1134.493893][T24994] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1134.507219][T24994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.518561][T24994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1134.529953][T24994] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1134.542649][T24994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.550847][T24994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1134.568055][T24994] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1134.581771][T24994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.596345][T24994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1134.615665][T24994] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1134.652998][T24994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.686813][T24994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1134.737303][T24994] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1134.781188][T24994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.809697][T24994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1134.846155][T24994] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1134.886790][T24994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.908573][T24994] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1134.912652][T27337] FAULT_INJECTION: forcing a failure. [ 1134.912652][T27337] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.952847][T27337] CPU: 1 UID: 0 PID: 27337 Comm: syz.1.6842 Not tainted syzkaller #0 PREEMPT(full) [ 1134.952866][T27337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.952873][T27337] Call Trace: [ 1134.952878][T27337] [ 1134.952884][T27337] dump_stack_lvl+0x189/0x250 [ 1134.952901][T27337] ? __pfx____ratelimit+0x10/0x10 [ 1134.952917][T27337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1134.952929][T27337] ? __pfx__printk+0x10/0x10 [ 1134.952947][T27337] ? __pfx___might_resched+0x10/0x10 [ 1134.952961][T27337] should_fail_ex+0x414/0x560 [ 1134.952978][T27337] should_failslab+0xa8/0x100 [ 1134.952993][T27337] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1134.953009][T27337] ? __pmd_alloc+0xc2/0x540 [ 1134.953027][T27337] __pmd_alloc+0xc2/0x540 [ 1134.953045][T27337] __handle_mm_fault+0x9ad/0x53a0 [ 1134.953070][T27337] ? __pfx___handle_mm_fault+0x10/0x10 [ 1134.953097][T27337] ? find_vma+0xe7/0x160 [ 1134.953111][T27337] ? __pfx_find_vma+0x10/0x10 [ 1134.953126][T27337] handle_mm_fault+0x40a/0x8e0 [ 1134.953147][T27337] do_user_addr_fault+0x764/0x1380 [ 1134.953176][T27337] exc_page_fault+0x82/0x100 [ 1134.953195][T27337] asm_exc_page_fault+0x26/0x30 [ 1134.953207][T27337] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1134.953221][T27337] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 3a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1134.953230][T27337] RSP: 0018:ffffc9000bef7dd8 EFLAGS: 00050246 [ 1134.953242][T27337] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 1134.953249][T27337] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffff888074dfc8e0 [ 1134.953256][T27337] RBP: 000000000000007f R08: ffff888074dfc8e7 R09: 1ffff1100e9bf91c [ 1134.953264][T27337] R10: dffffc0000000000 R11: ffffed100e9bf91d R12: 0000200000000080 [ 1134.953272][T27337] R13: ffff888076f7bd40 R14: ffff888074dfc8e0 R15: 0000200000000080 [ 1134.953291][T27337] _copy_from_user+0x7a/0xb0 [ 1134.953304][T27337] sctp_setsockopt+0x19f/0x1200 [ 1134.953316][T27337] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1134.953331][T27337] do_sock_setsockopt+0x17c/0x1b0 [ 1134.953350][T27337] __x64_sys_setsockopt+0x13f/0x1b0 [ 1134.953369][T27337] do_syscall_64+0xfa/0xf80 [ 1134.953378][T27337] ? lockdep_hardirqs_on+0x98/0x140 [ 1134.953393][T27337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.953404][T27337] ? clear_bhb_loop+0x60/0xb0 [ 1134.953417][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.953449][T27337] RIP: 0033:0x7f1bd878f749 [ 1134.953460][T27337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.953469][T27337] RSP: 002b:00007f1bd958c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1134.953481][T27337] RAX: ffffffffffffffda RBX: 00007f1bd89e5fa0 RCX: 00007f1bd878f749 [ 1134.953489][T27337] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 1134.953495][T27337] RBP: 00007f1bd958c090 R08: 0000000000000008 R09: 0000000000000000 [ 1134.953502][T27337] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1134.953510][T27337] R13: 00007f1bd89e6038 R14: 00007f1bd89e5fa0 R15: 00007f1bd8b0fa28 [ 1134.953529][T27337] [ 1135.277209][T24994] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1135.367365][T24994] usb 4-1: Product: syz [ 1135.379848][T24994] usb 4-1: Manufacturer: syz [ 1135.394719][T24994] usb 4-1: SerialNumber: syz [ 1135.434601][T24994] usb 4-1: config 0 descriptor?? [ 1135.471613][T24994] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1135.580374][T18500] usbhid 3-1:0.0: can't add hid device: -71 [ 1135.605338][T18500] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1135.659664][T18500] usb 3-1: USB disconnect, device number 97 [ 1135.701874][T24994] usb 4-1: USB disconnect, device number 98 [ 1135.733968][T24994] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1135.935311][T27360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6849'. [ 1136.107247][ T5927] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1136.214391][T27373] syzkaller1: entered promiscuous mode [ 1136.222726][T27373] syzkaller1: entered allmulticast mode [ 1136.288768][ T5927] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1136.317307][ T5927] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1136.344637][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1136.355128][ T5927] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1136.364923][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.373328][ T5927] usb 5-1: Product: syz [ 1136.378574][ T5927] usb 5-1: Manufacturer: syz [ 1136.383415][ T5927] usb 5-1: SerialNumber: syz [ 1136.397959][T27382] FAULT_INJECTION: forcing a failure. [ 1136.397959][T27382] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.412499][T27353] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1136.420360][T27353] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1136.428218][T27382] CPU: 1 UID: 0 PID: 27382 Comm: syz.2.6857 Not tainted syzkaller #0 PREEMPT(full) [ 1136.428239][T27382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1136.428247][T27382] Call Trace: [ 1136.428252][T27382] [ 1136.428256][T27382] dump_stack_lvl+0x189/0x250 [ 1136.428270][T27382] ? __pfx____ratelimit+0x10/0x10 [ 1136.428282][T27382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1136.428294][T27382] ? __pfx__printk+0x10/0x10 [ 1136.428306][T27382] ? __pfx___might_resched+0x10/0x10 [ 1136.428314][T27382] ? fs_reclaim_acquire+0x7d/0x100 [ 1136.428325][T27382] should_fail_ex+0x414/0x560 [ 1136.428337][T27382] should_failslab+0xa8/0x100 [ 1136.428348][T27382] kmem_cache_alloc_node_noprof+0x77/0x700 [ 1136.428359][T27382] ? __alloc_skb+0x112/0x2d0 [ 1136.428370][T27382] ? netlink_autobind+0xdb/0x300 [ 1136.428380][T27382] __alloc_skb+0x112/0x2d0 [ 1136.428392][T27382] netlink_sendmsg+0x5c6/0xb30 [ 1136.428408][T27382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.428421][T27382] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1136.428432][T27382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1136.428441][T27382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.428459][T27382] __sock_sendmsg+0x21c/0x270 [ 1136.428470][T27382] ____sys_sendmsg+0x505/0x820 [ 1136.428484][T27382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.428499][T27382] ? import_iovec+0x74/0xa0 [ 1136.428509][T27382] ___sys_sendmsg+0x21f/0x2a0 [ 1136.428522][T27382] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.428536][T27382] ? rcu_read_lock_any_held+0xb3/0x120 [ 1136.428556][T27382] ? __fget_files+0x2a/0x420 [ 1136.428565][T27382] ? __fget_files+0x3a0/0x420 [ 1136.428578][T27382] __x64_sys_sendmsg+0x19b/0x260 [ 1136.428591][T27382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1136.428606][T27382] ? __pfx_ksys_write+0x10/0x10 [ 1136.428619][T27382] ? do_syscall_64+0xbe/0xf80 [ 1136.428627][T27382] do_syscall_64+0xfa/0xf80 [ 1136.428634][T27382] ? lockdep_hardirqs_on+0x98/0x140 [ 1136.428645][T27382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.428652][T27382] ? clear_bhb_loop+0x60/0xb0 [ 1136.428662][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.428670][T27382] RIP: 0033:0x7f8acab8f749 [ 1136.428678][T27382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.428685][T27382] RSP: 002b:00007f8acb94c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.428695][T27382] RAX: ffffffffffffffda RBX: 00007f8acade5fa0 RCX: 00007f8acab8f749 [ 1136.428703][T27382] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1136.428708][T27382] RBP: 00007f8acb94c090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.428713][T27382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.428718][T27382] R13: 00007f8acade6038 R14: 00007f8acade5fa0 R15: 00007f8acaf0fa28 [ 1136.428731][T27382] [ 1137.157680][T24994] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1137.320291][T24994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.331441][T24994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.351848][T24994] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1137.372332][T24994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.396423][T24994] usb 4-1: config 0 descriptor?? [ 1137.415852][T24994] usbhid 4-1:0.0: can't add hid device: -22 [ 1137.423288][T24994] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1137.437286][ T5834] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1137.447648][T18500] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1137.619641][ T5834] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1137.650614][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.659652][T18500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.678306][T24994] usb 4-1: USB disconnect, device number 99 [ 1137.712066][T18500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.728483][ T5834] usb 2-1: config 0 descriptor?? [ 1137.751778][ T5834] cp210x 2-1:0.0: cp210x converter detected [ 1137.761243][T18500] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1137.777276][T18500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.809857][T18500] usb 3-1: config 0 descriptor?? [ 1137.833790][ T5927] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8e:7c:02:39:ed:86 [ 1137.859898][T27402] dvmrp1: entered allmulticast mode [ 1137.883640][ T5927] rtl8150 5-1:1.0: eth1: rtl8150 is detected [ 1137.901490][ T5927] usb 5-1: USB disconnect, device number 101 [ 1137.964491][ T5834] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1138.240106][T18500] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 1138.252235][T18500] cp2112 0003:10C4:EA90.0044: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1138.417323][ T5927] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1138.438022][T18500] cp2112 0003:10C4:EA90.0044: error requesting version [ 1138.477092][T18500] cp2112 0003:10C4:EA90.0044: probe with driver cp2112 failed with error -32 [ 1138.542024][T18500] usb 3-1: USB disconnect, device number 98 [ 1138.577588][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 1138.632811][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.679850][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.707341][ T5927] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1138.717043][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.751798][ T5927] usb 4-1: config 0 descriptor?? [ 1138.777403][T16221] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1139.187655][T18500] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1139.338990][ T5927] savu 0003:1E7D:2D5A.0045: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1139.358936][T18500] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1139.378435][T18500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.398251][T18500] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.455526][T18500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1139.484113][T18500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.521463][T18500] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.562032][T18500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1139.602986][T18500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.634525][T18500] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.685777][T18500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1139.730526][T18500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.822762][T18500] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1139.847278][ T5834] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1139.905626][T18500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1139.963110][T18500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.991037][T18500] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1140.011162][T18500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1140.085254][T18500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1140.104642][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1140.201685][ T5834] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1140.220301][T18500] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1140.257209][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.271848][T18500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1140.285895][ T5834] usb 3-1: Product: syz [ 1140.293511][T18500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1140.304201][ T5834] usb 3-1: Manufacturer: syz [ 1140.329655][ T5834] usb 3-1: SerialNumber: syz [ 1140.339411][T18500] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1140.382502][ T5834] usb 3-1: config 0 descriptor?? [ 1140.403546][T18500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1140.500232][T18500] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1140.552716][T18500] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1140.590561][ T5891] usb 2-1: USB disconnect, device number 71 [ 1140.623520][T18500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1140.634643][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1140.662783][T18500] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1140.689524][ T5891] cp210x 2-1:0.0: device disconnected [ 1140.736538][T18500] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1140.792215][T18500] usb 1-1: Product: syz [ 1140.812141][T18500] usb 1-1: Manufacturer: syz [ 1140.840389][T18500] usb 1-1: SerialNumber: syz [ 1140.925019][T18500] usb 1-1: config 0 descriptor?? [ 1141.028879][T18500] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 1141.121543][ T5927] usb 4-1: USB disconnect, device number 100 [ 1141.249232][T18500] usb 1-1: USB disconnect, device number 56 [ 1141.312341][T18500] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 1141.737584][ T5891] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1141.821615][T27440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.897326][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1141.904297][ T5891] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1141.913656][ T5891] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1141.926762][ T5891] usb 4-1: config 0 has no interface number 0 [ 1141.935630][ T5891] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1141.945252][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.153629][ T5891] usb 4-1: Product: syz [ 1142.172200][ T5891] usb 4-1: Manufacturer: syz [ 1142.186435][ T5891] usb 4-1: SerialNumber: syz [ 1142.240117][ T5891] usb 4-1: config 0 descriptor?? [ 1142.276518][ T5891] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1142.303268][ T5891] uvcvideo 4-1:0.105: No valid video chain found. [ 1142.467092][ T5891] usb 4-1: USB disconnect, device number 101 [ 1142.840267][T16221] usb 3-1: USB disconnect, device number 99 [ 1142.907584][T27451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6879'. [ 1143.093109][T27456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6880'. [ 1143.280153][T27460] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1143.304509][T27463] FAULT_INJECTION: forcing a failure. [ 1143.304509][T27463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.389806][T27463] CPU: 0 UID: 0 PID: 27463 Comm: syz.3.6883 Not tainted syzkaller #0 PREEMPT(full) [ 1143.389834][T27463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1143.389843][T27463] Call Trace: [ 1143.389849][T27463] [ 1143.389856][T27463] dump_stack_lvl+0x189/0x250 [ 1143.389878][T27463] ? __pfx____ratelimit+0x10/0x10 [ 1143.389898][T27463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1143.389913][T27463] ? __pfx__printk+0x10/0x10 [ 1143.389941][T27463] should_fail_ex+0x414/0x560 [ 1143.389964][T27463] _copy_to_user+0x31/0xb0 [ 1143.389980][T27463] simple_read_from_buffer+0xe1/0x170 [ 1143.390000][T27463] proc_fail_nth_read+0x1b3/0x220 [ 1143.390026][T27463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1143.390048][T27463] ? rw_verify_area+0x2a6/0x4d0 [ 1143.390067][T27463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1143.390088][T27463] vfs_read+0x200/0xa30 [ 1143.390105][T27463] ? fdget_pos+0x247/0x320 [ 1143.390125][T27463] ? __pfx___mutex_lock+0x10/0x10 [ 1143.390139][T27463] ? __pfx_vfs_read+0x10/0x10 [ 1143.390159][T27463] ? __fget_files+0x2a/0x420 [ 1143.390178][T27463] ? __fget_files+0x3a0/0x420 [ 1143.390193][T27463] ? __fget_files+0x2a/0x420 [ 1143.390215][T27463] ksys_read+0x145/0x250 [ 1143.390236][T27463] ? __pfx_ksys_read+0x10/0x10 [ 1143.390258][T27463] ? do_syscall_64+0xbe/0xf80 [ 1143.390274][T27463] do_syscall_64+0xfa/0xf80 [ 1143.390286][T27463] ? lockdep_hardirqs_on+0x98/0x140 [ 1143.390305][T27463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.390320][T27463] ? clear_bhb_loop+0x60/0xb0 [ 1143.390337][T27463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.390351][T27463] RIP: 0033:0x7f7aaf98e15c [ 1143.390363][T27463] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1143.390375][T27463] RSP: 002b:00007f7ab0863030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1143.390390][T27463] RAX: ffffffffffffffda RBX: 00007f7aafbe5fa0 RCX: 00007f7aaf98e15c [ 1143.390401][T27463] RDX: 000000000000000f RSI: 00007f7ab08630a0 RDI: 0000000000000004 [ 1143.390411][T27463] RBP: 00007f7ab0863090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.390420][T27463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.390428][T27463] R13: 00007f7aafbe6038 R14: 00007f7aafbe5fa0 R15: 00007f7aafd0fa28 [ 1143.390454][T27463] [ 1143.733199][T27467] netlink: 'syz.1.6885': attribute type 10 has an invalid length. [ 1143.832566][T27476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1143.945774][T27484] FAULT_INJECTION: forcing a failure. [ 1143.945774][T27484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.962575][T27484] CPU: 1 UID: 0 PID: 27484 Comm: syz.3.6892 Not tainted syzkaller #0 PREEMPT(full) [ 1143.962597][T27484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1143.962606][T27484] Call Trace: [ 1143.962612][T27484] [ 1143.962619][T27484] dump_stack_lvl+0x189/0x250 [ 1143.962637][T27484] ? __pfx____ratelimit+0x10/0x10 [ 1143.962657][T27484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1143.962669][T27484] ? __pfx__printk+0x10/0x10 [ 1143.962696][T27484] should_fail_ex+0x414/0x560 [ 1143.962717][T27484] _copy_to_user+0x31/0xb0 [ 1143.962733][T27484] simple_read_from_buffer+0xe1/0x170 [ 1143.962752][T27484] proc_fail_nth_read+0x1b3/0x220 [ 1143.962775][T27484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1143.962795][T27484] ? rw_verify_area+0x2a6/0x4d0 [ 1143.962813][T27484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1143.962834][T27484] vfs_read+0x200/0xa30 [ 1143.962852][T27484] ? fdget_pos+0x247/0x320 [ 1143.962870][T27484] ? __pfx___mutex_lock+0x10/0x10 [ 1143.962885][T27484] ? __pfx_vfs_read+0x10/0x10 [ 1143.962905][T27484] ? __fget_files+0x2a/0x420 [ 1143.962924][T27484] ? __fget_files+0x3a0/0x420 [ 1143.962939][T27484] ? __fget_files+0x2a/0x420 [ 1143.962962][T27484] ksys_read+0x145/0x250 [ 1143.962983][T27484] ? __pfx_ksys_read+0x10/0x10 [ 1143.963005][T27484] ? do_syscall_64+0xbe/0xf80 [ 1143.963022][T27484] do_syscall_64+0xfa/0xf80 [ 1143.963035][T27484] ? lockdep_hardirqs_on+0x98/0x140 [ 1143.963054][T27484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.963069][T27484] ? clear_bhb_loop+0x60/0xb0 [ 1143.963087][T27484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.963100][T27484] RIP: 0033:0x7f7aaf98e15c [ 1143.963122][T27484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1143.963138][T27484] RSP: 002b:00007f7ab0863030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1143.963154][T27484] RAX: ffffffffffffffda RBX: 00007f7aafbe5fa0 RCX: 00007f7aaf98e15c [ 1143.963165][T27484] RDX: 000000000000000f RSI: 00007f7ab08630a0 RDI: 0000000000000004 [ 1143.963175][T27484] RBP: 00007f7ab0863090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.963184][T27484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.963193][T27484] R13: 00007f7aafbe6038 R14: 00007f7aafbe5fa0 R15: 00007f7aafd0fa28 [ 1143.963219][T27484] [ 1144.228271][T16221] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1144.347437][ T5834] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1144.357360][ T5977] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1144.387964][T16221] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1144.396946][T16221] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1144.406108][T16221] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1144.417408][T16221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1144.435164][T16221] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1144.444765][T16221] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1144.511163][T16221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1144.548435][T16221] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1144.567628][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1144.581674][ T5977] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1144.596317][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.602527][ T5834] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1144.614162][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.622706][ T5834] usb 3-1: Product: syz [ 1144.626973][ T5834] usb 3-1: Manufacturer: syz [ 1144.635359][ T5834] usb 3-1: SerialNumber: syz [ 1144.651191][ T5834] usb 3-1: config 0 descriptor?? [ 1144.680679][T16221] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1144.716624][ T5977] usb 5-1: Product: syz [ 1144.733330][ T5977] usb 5-1: Manufacturer: syz [ 1144.744085][T16221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1144.753566][ T5977] usb 5-1: SerialNumber: syz [ 1144.816636][T16221] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1144.830867][ T5977] usb 5-1: config 0 descriptor?? [ 1144.865188][T16221] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1144.907447][T16221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1145.037689][T16221] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1145.069001][ T5977] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1145.098527][T16221] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1145.147283][T16221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1145.183234][T16221] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1145.219362][T16221] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1145.271050][T16221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1145.298048][T16221] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1145.386450][T16221] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1145.428259][T16221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1145.473428][T16221] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1145.522566][T16221] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1145.572040][T16221] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1145.610987][T16221] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1145.669736][T16221] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1145.697254][ T5834] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1145.718002][T16221] usb 1-1: Product: syz [ 1145.731948][T16221] usb 1-1: Manufacturer: syz [ 1145.755077][T16221] usb 1-1: SerialNumber: syz [ 1145.805067][T16221] usb 1-1: config 0 descriptor?? [ 1145.850337][T16221] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1145.920008][ T5834] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1145.937214][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.956605][ T5834] usb 2-1: Product: syz [ 1145.970342][ T5834] usb 2-1: Manufacturer: syz [ 1145.984523][ T5834] usb 2-1: SerialNumber: syz [ 1146.064497][T18500] usb 1-1: USB disconnect, device number 57 [ 1146.083442][T18500] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1146.443358][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1146.455922][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1146.824103][T27509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6900'. [ 1147.164470][T16221] usb 3-1: USB disconnect, device number 100 [ 1147.977817][ T5977] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1148.233094][T18500] usb 5-1: USB disconnect, device number 103 [ 1148.312250][T27531] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1148.480355][T27536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6908'. [ 1148.622662][T24994] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1148.789173][T24994] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1148.801922][T18500] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1148.810459][T24994] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.824787][T24994] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1148.835551][T24994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.843995][T24994] usb 1-1: Product: syz [ 1148.853976][T24994] usb 1-1: Manufacturer: syz [ 1148.859153][T24994] usb 1-1: SerialNumber: syz [ 1148.870248][T24994] usb 1-1: config 0 descriptor?? [ 1148.892521][T24994] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 1148.899556][T24994] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 1148.979282][T18500] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1148.988854][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.000285][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.013307][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1149.023325][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.040273][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.069320][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1149.078004][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.089180][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.094348][T27533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6907'. [ 1149.121588][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1149.131249][T27533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.147213][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.148764][T27533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.156933][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.176816][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1149.191355][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.200653][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.217954][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1149.229005][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.247428][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.267449][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1149.285475][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.296244][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.327000][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1149.330414][T16221] usb 1-1: USB disconnect, device number 58 [ 1149.345343][T18500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.356260][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -EPROTO [ 1149.371669][T18500] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.384110][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1149.397648][T18500] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1149.404361][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1149.435336][ T5834] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1149.444963][T18500] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1149.454567][T18500] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1149.463534][T18500] usb 4-1: Product: syz [ 1149.465619][ T5834] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1149.489010][T18500] usb 4-1: Manufacturer: syz [ 1149.494378][T18500] usb 4-1: SerialNumber: syz [ 1149.507260][T18500] usb 4-1: config 0 descriptor?? [ 1149.515375][ T5834] usb 2-1: USB disconnect, device number 72 [ 1149.528209][T18500] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1149.729393][T16221] usb 4-1: USB disconnect, device number 102 [ 1149.740340][T16221] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1149.847675][ T5977] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1149.997248][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 1150.005797][ T5977] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 1150.015666][ T5977] usb 3-1: config 0 has no interface number 0 [ 1150.022316][ T5977] usb 3-1: config 0 interface 96 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1150.032708][T27553] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6915'. [ 1150.042039][ T5977] usb 3-1: config 0 interface 96 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1150.076293][ T5977] usb 3-1: New USB device found, idVendor=054c, idProduct=0058, bcdDevice=24.3b [ 1150.090301][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.100478][ T5977] usb 3-1: Product: syz [ 1150.110556][ T5977] usb 3-1: Manufacturer: syz [ 1150.119098][ T5977] usb 3-1: SerialNumber: syz [ 1150.126784][ T5977] usb 3-1: config 0 descriptor?? [ 1150.357535][T16221] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1150.368075][ T5977] usb-storage 3-1:0.96: USB Mass Storage device detected [ 1150.406849][ T5977] usb-storage 3-1:0.96: Quirks match for vid 054c pid 0058: 8 [ 1150.483617][ T5977] usb 3-1: USB disconnect, device number 101 [ 1150.555888][T16221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1150.576903][T16221] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1150.595234][T16221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.612255][T16221] usb 2-1: Product: syz [ 1150.625498][T16221] usb 2-1: Manufacturer: syz [ 1150.639589][T16221] usb 2-1: SerialNumber: syz [ 1150.654980][T16221] usb 2-1: config 0 descriptor?? [ 1151.154328][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6923'. [ 1151.387258][T16221] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1151.547263][T18500] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1151.559087][T16221] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1151.568339][T16221] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.580664][ T5977] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1151.594013][T16221] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1151.604472][T16221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.614310][T16221] usb 1-1: Product: syz [ 1151.618950][T16221] usb 1-1: Manufacturer: syz [ 1151.623647][T16221] usb 1-1: SerialNumber: syz [ 1151.632849][T16221] usb 1-1: config 0 descriptor?? [ 1151.643507][T16221] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 1151.650106][T16221] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 1151.707278][T18500] usb 3-1: Using ep0 maxpacket: 8 [ 1151.716121][T18500] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1151.725553][T18500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.733769][T18500] usb 3-1: Product: syz [ 1151.738171][T18500] usb 3-1: Manufacturer: syz [ 1151.743852][T18500] usb 3-1: SerialNumber: syz [ 1151.750254][T18500] usb 3-1: config 0 descriptor?? [ 1151.768854][ T5977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.779209][ T5977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.790375][ T5977] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1151.799763][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1151.808326][ T5977] usb 4-1: SerialNumber: syz [ 1151.848305][T27577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6922'. [ 1151.859071][T27577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.869241][T27577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.907352][ T5834] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1151.942851][T16221] usb 1-1: USB disconnect, device number 59 [ 1151.965152][T18500] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1152.023560][T27581] netlink: 'syz.3.6924': attribute type 7 has an invalid length. [ 1152.031551][T27581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1152.044617][T27581] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1152.066854][ T5977] usb 4-1: 0:2 : does not exist [ 1152.077971][ T5977] usb 4-1: unit 5 not found! [ 1152.082879][ T5834] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1152.092415][ T5977] usb 4-1: USB disconnect, device number 103 [ 1152.101528][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.113933][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.125760][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.134257][T15075] udevd[15075]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1152.151824][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.162423][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.175873][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.194455][T18500] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1152.209306][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.219219][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.231467][T18500] usb 3-1: USB disconnect, device number 102 [ 1152.238847][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.249879][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.260061][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.272137][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.280447][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.289939][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.302384][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.312914][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.322368][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.333438][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.340946][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.350009][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.363326][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.371191][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1152.380127][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1152.391075][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1152.400276][ T5834] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1152.409478][ T5834] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1152.418514][ T5834] usb 5-1: Product: syz [ 1152.422772][ T5834] usb 5-1: Manufacturer: syz [ 1152.427444][ T5834] usb 5-1: SerialNumber: syz [ 1152.433830][ T5834] usb 5-1: config 0 descriptor?? [ 1152.441841][ T5834] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1152.646098][T18500] usb 5-1: USB disconnect, device number 104 [ 1152.654561][T18500] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1152.767244][ T5834] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 1152.927419][ T5834] usb 1-1: Invalid ep0 maxpacket: 32 [ 1153.020509][T18500] usb 2-1: USB disconnect, device number 73 [ 1153.059830][ T5834] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 1153.104464][T27617] FAULT_INJECTION: forcing a failure. [ 1153.104464][T27617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.130150][T27617] CPU: 0 UID: 0 PID: 27617 Comm: syz.1.6937 Not tainted syzkaller #0 PREEMPT(full) [ 1153.130170][T27617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1153.130178][T27617] Call Trace: [ 1153.130184][T27617] [ 1153.130192][T27617] dump_stack_lvl+0x189/0x250 [ 1153.130211][T27617] ? __pfx____ratelimit+0x10/0x10 [ 1153.130233][T27617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1153.130247][T27617] ? __pfx__printk+0x10/0x10 [ 1153.130264][T27617] ? __might_fault+0xb0/0x130 [ 1153.130291][T27617] should_fail_ex+0x414/0x560 [ 1153.130311][T27617] _copy_from_iter+0x1de/0x1790 [ 1153.130334][T27617] ? rcu_is_watching+0x15/0xb0 [ 1153.130352][T27617] ? __pfx__copy_from_iter+0x10/0x10 [ 1153.130371][T27617] ? __build_skb_around+0x22d/0x3c0 [ 1153.130393][T27617] ? netlink_sendmsg+0x642/0xb30 [ 1153.130409][T27617] ? skb_put+0x11b/0x210 [ 1153.130430][T27617] netlink_sendmsg+0x6b2/0xb30 [ 1153.130455][T27617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.130475][T27617] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1153.130492][T27617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1153.130506][T27617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.130525][T27617] __sock_sendmsg+0x21c/0x270 [ 1153.130544][T27617] ____sys_sendmsg+0x505/0x820 [ 1153.130567][T27617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1153.130592][T27617] ? import_iovec+0x74/0xa0 [ 1153.130609][T27617] ___sys_sendmsg+0x21f/0x2a0 [ 1153.130629][T27617] ? __pfx____sys_sendmsg+0x10/0x10 [ 1153.130652][T27617] ? rcu_read_lock_any_held+0xb3/0x120 [ 1153.130688][T27617] ? __fget_files+0x2a/0x420 [ 1153.130703][T27617] ? __fget_files+0x3a0/0x420 [ 1153.130724][T27617] __x64_sys_sendmsg+0x19b/0x260 [ 1153.130745][T27617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1153.130769][T27617] ? __pfx_ksys_write+0x10/0x10 [ 1153.130792][T27617] ? do_syscall_64+0xbe/0xf80 [ 1153.130808][T27617] do_syscall_64+0xfa/0xf80 [ 1153.130819][T27617] ? lockdep_hardirqs_on+0x98/0x140 [ 1153.130837][T27617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.130852][T27617] ? clear_bhb_loop+0x60/0xb0 [ 1153.130869][T27617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.130882][T27617] RIP: 0033:0x7f1bd878f749 [ 1153.130896][T27617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.130908][T27617] RSP: 002b:00007f1bd958c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.130924][T27617] RAX: ffffffffffffffda RBX: 00007f1bd89e5fa0 RCX: 00007f1bd878f749 [ 1153.130933][T27617] RDX: 0000000000000090 RSI: 0000200000000240 RDI: 0000000000000003 [ 1153.130943][T27617] RBP: 00007f1bd958c090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.130952][T27617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.130959][T27617] R13: 00007f1bd89e6038 R14: 00007f1bd89e5fa0 R15: 00007f1bd8b0fa28 [ 1153.130988][T27617] [ 1153.418960][T27616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6935'. [ 1153.497316][ T5834] usb 1-1: Invalid ep0 maxpacket: 32 [ 1153.502879][ T5834] usb usb1-port1: attempt power cycle [ 1153.847271][ T5834] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 1153.861941][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1153.875636][ T5834] usb 1-1: Invalid ep0 maxpacket: 32 [ 1154.057398][ T5834] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 1154.103140][ T5834] usb 1-1: Invalid ep0 maxpacket: 32 [ 1154.115881][ T5834] usb usb1-port1: unable to enumerate USB device [ 1154.757577][ T5834] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1154.937377][T18500] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1155.138968][T18500] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1155.183291][T18500] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.214695][T18500] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.250266][T18500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1155.272459][T18500] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.298122][T18500] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.336691][T18500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1155.361825][T18500] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.389551][T18500] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.413035][ T5977] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1155.434504][T18500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1155.461795][T18500] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.490351][T18500] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.535385][T18500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1155.558254][T18500] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.593861][T18500] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.597239][ T5977] usb 2-1: Using ep0 maxpacket: 32 [ 1155.639918][ T5977] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1155.669366][T18500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1155.685720][T18500] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.686533][ T5977] usb 2-1: config 0 has no interface number 0 [ 1155.708936][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1155.732701][T18500] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.762652][T18500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1155.786576][ T5834] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1155.799209][T18500] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.809211][ T5977] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1155.834771][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.848362][T18500] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.864435][ T5834] usb 4-1: Product: syz [ 1155.874583][ T5834] usb 4-1: Manufacturer: syz [ 1155.893736][T18500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1155.908382][ T5834] usb 4-1: SerialNumber: syz [ 1155.923208][T18500] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1155.924247][ T5977] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1155.942333][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.961424][ T5977] usb 2-1: Product: syz [ 1155.962241][ T5834] usb 4-1: config 0 descriptor?? [ 1155.965850][ T5977] usb 2-1: Manufacturer: syz [ 1155.976168][ T5977] usb 2-1: SerialNumber: syz [ 1155.991204][T18500] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1155.994331][ T5977] usb 2-1: config 0 descriptor?? [ 1156.033907][T18500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1156.066461][T18500] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1156.209362][T18500] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1156.263808][T27661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.287800][T27661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.309700][T27661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.327253][T18500] usb 5-1: Product: syz [ 1156.348203][T27661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.351354][T18500] usb 5-1: Manufacturer: syz [ 1156.439688][T18500] usb 5-1: SerialNumber: syz [ 1156.470350][ T5977] usb 2-1: USB disconnect, device number 74 [ 1156.490027][T15075] udevd[15075]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1156.512557][T27678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.526855][T27678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.527595][T18500] usb 5-1: config 0 descriptor?? [ 1156.584656][T18500] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1156.607581][ T5920] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 1156.630662][ T5920] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 1156.641694][ T5920] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 1156.650848][ T5920] hid-generic 0003:0004:0000.0046: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1156.737239][ T5834] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1156.785704][T27683] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6957'. [ 1156.797263][T16221] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1156.819908][T27683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6957'. [ 1156.841033][T27681] fido_id[27681]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1156.874172][T18500] usb 5-1: USB disconnect, device number 105 [ 1156.900111][T18500] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1157.161697][T27688] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 1157.616344][ T5834] usb 1-1: device descriptor read/64, error -71 [ 1157.909380][T27714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1157.948735][ T5834] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1158.026452][T27716] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1158.051242][T27714] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1158.082967][T27714] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 1158.173527][ T5834] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1158.185167][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.241738][T27719] FAULT_INJECTION: forcing a failure. [ 1158.241738][T27719] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.255160][ T5834] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1158.264275][T18500] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1158.282719][T24994] usb 4-1: USB disconnect, device number 104 [ 1158.289046][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.311874][T27719] CPU: 0 UID: 0 PID: 27719 Comm: syz.4.6972 Not tainted syzkaller #0 PREEMPT(full) [ 1158.311895][T27719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1158.311904][T27719] Call Trace: [ 1158.311910][T27719] [ 1158.311922][T27719] dump_stack_lvl+0x189/0x250 [ 1158.311942][T27719] ? __pfx____ratelimit+0x10/0x10 [ 1158.311961][T27719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.311979][T27719] ? __pfx__printk+0x10/0x10 [ 1158.312000][T27719] ? __pfx___might_resched+0x10/0x10 [ 1158.312020][T27719] ? fs_reclaim_acquire+0x7d/0x100 [ 1158.312037][T27719] should_fail_ex+0x414/0x560 [ 1158.312058][T27719] should_failslab+0xa8/0x100 [ 1158.312076][T27719] __kmalloc_cache_noprof+0x6f/0x6e0 [ 1158.312094][T27719] ? __genradix_ptr_alloc+0x463/0x4a0 [ 1158.312108][T27719] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1158.312131][T27719] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1158.312158][T27719] sctp_association_new+0x15d3/0x25c0 [ 1158.312186][T27719] sctp_connect_new_asoc+0x2c5/0x690 [ 1158.312204][T27719] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1158.312218][T27719] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1158.312233][T27719] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1158.312247][T27719] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1158.312261][T27719] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1158.312276][T27719] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1158.312298][T27719] sctp_sendmsg+0x155c/0x2810 [ 1158.312322][T27719] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1158.312335][T27719] ? aa_sk_perm+0x160/0x920 [ 1158.312352][T27719] ? aa_sk_perm+0x7f0/0x920 [ 1158.312371][T27719] ? __pfx_aa_sk_perm+0x10/0x10 [ 1158.312388][T27719] ? sock_rps_record_flow+0x19/0x410 [ 1158.312409][T27719] ? inet_sendmsg+0x2f4/0x370 [ 1158.312425][T27719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1158.312441][T27719] __sock_sendmsg+0x19c/0x270 [ 1158.312460][T27719] __sys_sendto+0x3bd/0x520 [ 1158.312480][T27719] ? __pfx___sys_sendto+0x10/0x10 [ 1158.312495][T27719] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1158.312519][T27719] ? __fget_files+0x3a0/0x420 [ 1158.312540][T27719] ? ksys_write+0x22a/0x250 [ 1158.312569][T27719] ? __pfx_ksys_write+0x10/0x10 [ 1158.312590][T27719] __x64_sys_sendto+0xde/0x100 [ 1158.312611][T27719] do_syscall_64+0xfa/0xf80 [ 1158.312623][T27719] ? lockdep_hardirqs_on+0x98/0x140 [ 1158.312642][T27719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.312657][T27719] ? clear_bhb_loop+0x60/0xb0 [ 1158.312673][T27719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.312686][T27719] RIP: 0033:0x7ff132f8f749 [ 1158.312699][T27719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.312711][T27719] RSP: 002b:00007ff133e0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1158.312726][T27719] RAX: ffffffffffffffda RBX: 00007ff1331e5fa0 RCX: 00007ff132f8f749 [ 1158.312737][T27719] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1158.312747][T27719] RBP: 00007ff133e0e090 R08: 0000200000000140 R09: 000000000000001c [ 1158.312756][T27719] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 1158.312765][T27719] R13: 00007ff1331e6038 R14: 00007ff1331e5fa0 R15: 00007ff13330fa28 [ 1158.312790][T27719] [ 1158.633069][ T5834] usb 1-1: Product: syz [ 1158.639709][ T5834] usb 1-1: Manufacturer: syz [ 1158.644321][ T5834] usb 1-1: SerialNumber: syz [ 1158.661783][ T5834] usb 1-1: config 0 descriptor?? [ 1158.674821][ T5834] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 1158.681578][ T5834] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 1158.731479][T18500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1158.742404][T18500] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1158.756370][T18500] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1158.766877][T18500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.784670][T18500] usb 2-1: config 0 descriptor?? [ 1158.797763][T27717] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1158.864651][T27722] FAULT_INJECTION: forcing a failure. [ 1158.864651][T27722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.884549][T27692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6961'. [ 1158.897065][T27692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.906083][T27692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.914592][T27722] CPU: 0 UID: 0 PID: 27722 Comm: syz.4.6974 Not tainted syzkaller #0 PREEMPT(full) [ 1158.914615][T27722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1158.914624][T27722] Call Trace: [ 1158.914631][T27722] [ 1158.914638][T27722] dump_stack_lvl+0x189/0x250 [ 1158.914657][T27722] ? __pfx____ratelimit+0x10/0x10 [ 1158.914677][T27722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.914691][T27722] ? __pfx__printk+0x10/0x10 [ 1158.914708][T27722] ? __might_fault+0xb0/0x130 [ 1158.914735][T27722] should_fail_ex+0x414/0x560 [ 1158.914757][T27722] _copy_from_user+0x2d/0xb0 [ 1158.914773][T27722] ____sys_sendmsg+0x2fe/0x820 [ 1158.914798][T27722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.914823][T27722] ? import_iovec+0x74/0xa0 [ 1158.914840][T27722] ___sys_sendmsg+0x21f/0x2a0 [ 1158.914861][T27722] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.914886][T27722] ? rcu_read_lock_any_held+0xb3/0x120 [ 1158.914923][T27722] ? __fget_files+0x2a/0x420 [ 1158.914938][T27722] ? __fget_files+0x3a0/0x420 [ 1158.914960][T27722] __x64_sys_sendmsg+0x19b/0x260 [ 1158.914982][T27722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.915008][T27722] ? __pfx_ksys_write+0x10/0x10 [ 1158.915031][T27722] ? do_syscall_64+0xbe/0xf80 [ 1158.915047][T27722] do_syscall_64+0xfa/0xf80 [ 1158.915061][T27722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.915075][T27722] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1158.915088][T27722] ? clear_bhb_loop+0x60/0xb0 [ 1158.915103][T27722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.915117][T27722] RIP: 0033:0x7ff132f8f749 [ 1158.915130][T27722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.915141][T27722] RSP: 002b:00007ff133e0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.915156][T27722] RAX: ffffffffffffffda RBX: 00007ff1331e5fa0 RCX: 00007ff132f8f749 [ 1158.915167][T27722] RDX: 0000000020000044 RSI: 00002000000025c0 RDI: 0000000000000003 [ 1158.915176][T27722] RBP: 00007ff133e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.915185][T27722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.915194][T27722] R13: 00007ff1331e6038 R14: 00007ff1331e5fa0 R15: 00007ff13330fa28 [ 1158.915219][T27722] [ 1159.148501][T27712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.157398][T27712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.178658][T18500] usbhid 2-1:0.0: can't add hid device: -71 [ 1159.187358][T18500] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1159.197568][T18500] usb 2-1: USB disconnect, device number 75 [ 1159.255671][ T5834] usb 1-1: USB disconnect, device number 65 [ 1159.361922][T27726] FAULT_INJECTION: forcing a failure. [ 1159.361922][T27726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.405618][T27726] CPU: 1 UID: 0 PID: 27726 Comm: syz.3.6973 Not tainted syzkaller #0 PREEMPT(full) [ 1159.405632][T27726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1159.405637][T27726] Call Trace: [ 1159.405642][T27726] [ 1159.405646][T27726] dump_stack_lvl+0x189/0x250 [ 1159.405660][T27726] ? __pfx____ratelimit+0x10/0x10 [ 1159.405672][T27726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1159.405680][T27726] ? __pfx__printk+0x10/0x10 [ 1159.405691][T27726] ? __might_fault+0xb0/0x130 [ 1159.405709][T27726] should_fail_ex+0x414/0x560 [ 1159.405722][T27726] _copy_from_iter+0x1de/0x1790 [ 1159.405736][T27726] ? rcu_is_watching+0x15/0xb0 [ 1159.405748][T27726] ? __pfx__copy_from_iter+0x10/0x10 [ 1159.405759][T27726] ? __build_skb_around+0x22d/0x3c0 [ 1159.405772][T27726] ? netlink_sendmsg+0x642/0xb30 [ 1159.405783][T27726] ? skb_put+0x11b/0x210 [ 1159.405795][T27726] netlink_sendmsg+0x6b2/0xb30 [ 1159.405810][T27726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.405822][T27726] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1159.405833][T27726] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1159.405841][T27726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.405852][T27726] __sock_sendmsg+0x21c/0x270 [ 1159.405863][T27726] ____sys_sendmsg+0x52d/0x820 [ 1159.405877][T27726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1159.405892][T27726] ? import_iovec+0x74/0xa0 [ 1159.405901][T27726] ___sys_sendmsg+0x21f/0x2a0 [ 1159.405914][T27726] ? __pfx____sys_sendmsg+0x10/0x10 [ 1159.405939][T27726] ? __fget_files+0x2a/0x420 [ 1159.405948][T27726] ? __fget_files+0x3a0/0x420 [ 1159.405961][T27726] __sys_sendmmsg+0x227/0x430 [ 1159.405974][T27726] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1159.405989][T27726] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1159.406005][T27726] ? ksys_write+0x22a/0x250 [ 1159.406017][T27726] ? __pfx_ksys_write+0x10/0x10 [ 1159.406030][T27726] __x64_sys_sendmmsg+0xa0/0xc0 [ 1159.406042][T27726] do_syscall_64+0xfa/0xf80 [ 1159.406049][T27726] ? lockdep_hardirqs_on+0x98/0x140 [ 1159.406060][T27726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.406068][T27726] ? clear_bhb_loop+0x60/0xb0 [ 1159.406078][T27726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.406085][T27726] RIP: 0033:0x7f7aaf98f749 [ 1159.406094][T27726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.406101][T27726] RSP: 002b:00007f7ab0863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1159.406111][T27726] RAX: ffffffffffffffda RBX: 00007f7aafbe5fa0 RCX: 00007f7aaf98f749 [ 1159.406117][T27726] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1159.406122][T27726] RBP: 00007f7ab0863090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.406127][T27726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.406132][T27726] R13: 00007f7aafbe6038 R14: 00007f7aafbe5fa0 R15: 00007f7aafd0fa28 [ 1159.406149][T27726] [ 1159.687361][T18500] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1159.808221][T27729] FAULT_INJECTION: forcing a failure. [ 1159.808221][T27729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.821621][T27729] CPU: 1 UID: 0 PID: 27729 Comm: syz.0.6977 Not tainted syzkaller #0 PREEMPT(full) [ 1159.821645][T27729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1159.821654][T27729] Call Trace: [ 1159.821659][T27729] [ 1159.821666][T27729] dump_stack_lvl+0x189/0x250 [ 1159.821687][T27729] ? __pfx____ratelimit+0x10/0x10 [ 1159.821705][T27729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1159.821719][T27729] ? __pfx__printk+0x10/0x10 [ 1159.821746][T27729] ? __pfx_binder_debug+0x10/0x10 [ 1159.821769][T27729] should_fail_ex+0x414/0x560 [ 1159.821791][T27729] _copy_to_user+0x31/0xb0 [ 1159.821807][T27729] binder_ioctl_write_read+0x9497/0x9f60 [ 1159.821842][T27729] ? __kernel_text_address+0xd/0x40 [ 1159.821861][T27729] ? arch_stack_walk+0xfc/0x150 [ 1159.821885][T27729] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1159.821902][T27729] ? stack_trace_save+0x9c/0xe0 [ 1159.821918][T27729] ? __pfx_stack_trace_save+0x10/0x10 [ 1159.821934][T27729] ? stack_depot_save_flags+0x40/0x850 [ 1159.821951][T27729] ? format_decode+0xd9/0xe10 [ 1159.821967][T27729] ? __lock_acquire+0x6b6/0x2cf0 [ 1159.821986][T27729] ? do_syscall_64+0xfa/0xf80 [ 1159.821996][T27729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.822017][T27729] ? binder_debug+0x13f/0x1b0 [ 1159.822040][T27729] ? __pfx_binder_debug+0x10/0x10 [ 1159.822055][T27729] ? do_raw_spin_lock+0x121/0x290 [ 1159.822085][T27729] ? _raw_spin_unlock+0x28/0x50 [ 1159.822103][T27729] ? binder_get_thread+0x178/0x6d0 [ 1159.822124][T27729] binder_ioctl+0x3d0/0x1980 [ 1159.822144][T27729] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1159.822164][T27729] ? do_vfs_ioctl+0xbe8/0x1430 [ 1159.822183][T27729] ? __pfx_binder_ioctl+0x10/0x10 [ 1159.822201][T27729] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1159.822231][T27729] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1159.822257][T27729] ? __fget_files+0x2a/0x420 [ 1159.822275][T27729] ? __fget_files+0x3a0/0x420 [ 1159.822290][T27729] ? __fget_files+0x2a/0x420 [ 1159.822308][T27729] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1159.822325][T27729] ? __pfx_binder_ioctl+0x10/0x10 [ 1159.822343][T27729] __se_sys_ioctl+0xfc/0x170 [ 1159.822363][T27729] do_syscall_64+0xfa/0xf80 [ 1159.822376][T27729] ? lockdep_hardirqs_on+0x98/0x140 [ 1159.822395][T27729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.822410][T27729] ? clear_bhb_loop+0x60/0xb0 [ 1159.822427][T27729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.822442][T27729] RIP: 0033:0x7fb65d98f749 [ 1159.822456][T27729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.822468][T27729] RSP: 002b:00007fb65e800038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.822484][T27729] RAX: ffffffffffffffda RBX: 00007fb65dbe5fa0 RCX: 00007fb65d98f749 [ 1159.822495][T27729] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000006 [ 1159.822505][T27729] RBP: 00007fb65e800090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.822514][T27729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.822523][T27729] R13: 00007fb65dbe6038 R14: 00007fb65dbe5fa0 R15: 00007fb65dd0fa28 [ 1159.822547][T27729] [ 1159.823314][T27729] binder: 27728:27729 ioctl c0306201 2000000001c0 returned -14 [ 1159.898768][T18500] usb 2-1: Using ep0 maxpacket: 32 [ 1160.297838][ T5920] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1160.395012][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6975'. [ 1160.475151][T18500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1160.491722][ T5920] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1160.518061][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1160.538974][T18500] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1160.538996][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1160.573401][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1160.581825][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1160.591262][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1160.597239][T18500] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1160.617335][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1160.628534][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1160.643817][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1160.657247][T18500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.658254][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1160.674784][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1160.684183][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1160.699056][T18500] usb 2-1: config 0 descriptor?? [ 1160.716550][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1160.788115][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1160.812283][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1160.847228][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1160.863278][T18500] usb 2-1: can't set config #0, error -71 [ 1160.892401][T18500] usb 2-1: USB disconnect, device number 76 [ 1160.915105][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1160.915118][ T30] audit: type=1326 audit(1764695330.244:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27745 comm="syz.3.6980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7aaf98f749 code=0x0 [ 1160.937943][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1160.980766][T27749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1161.007619][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1161.057376][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1161.091136][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1161.112049][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1161.123081][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1161.131968][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1161.146110][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1161.160125][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1161.169407][ T5920] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1161.181380][ T5920] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1161.189823][ T5920] usb 1-1: Product: syz [ 1161.194163][ T5920] usb 1-1: Manufacturer: syz [ 1161.198893][ T5920] usb 1-1: SerialNumber: syz [ 1161.217557][ T5920] usb 1-1: config 0 descriptor?? [ 1161.237518][ T5920] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1161.447832][ T5920] usb 1-1: USB disconnect, device number 66 [ 1161.462905][ T5920] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1161.555547][T27767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6986'. [ 1161.578484][ T5904] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1161.586766][T27767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6986'. [ 1161.597480][ T5977] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1161.710264][T27772] netlink: 'syz.2.6987': attribute type 1 has an invalid length. [ 1161.751206][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 1161.759029][ T5904] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 1161.782116][ T5904] usb 5-1: config 0 has no interface number 0 [ 1161.798814][ T5904] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.845625][ T5904] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1161.866616][T27774] bond2: (slave geneve2): making interface the new active one [ 1161.881723][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.899655][T27774] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1161.912065][ T60] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1161.928955][ T5904] usb 5-1: Product: syz [ 1161.953761][ T5904] usb 5-1: Manufacturer: syz [ 1161.957816][ T60] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1161.970262][ T5904] usb 5-1: SerialNumber: syz [ 1161.975750][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1161.990875][ T60] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1162.001438][ T60] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1162.017967][ T5904] usb 5-1: config 0 descriptor?? [ 1162.056469][T27786] FAULT_INJECTION: forcing a failure. [ 1162.056469][T27786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.070390][T27786] CPU: 0 UID: 0 PID: 27786 Comm: syz.2.6991 Not tainted syzkaller #0 PREEMPT(full) [ 1162.070411][T27786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1162.070421][T27786] Call Trace: [ 1162.070428][T27786] [ 1162.070435][T27786] dump_stack_lvl+0x189/0x250 [ 1162.070455][T27786] ? __pfx____ratelimit+0x10/0x10 [ 1162.070470][T27786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.070479][T27786] ? __pfx__printk+0x10/0x10 [ 1162.070489][T27786] ? __might_fault+0xb0/0x130 [ 1162.070506][T27786] should_fail_ex+0x414/0x560 [ 1162.070519][T27786] _copy_from_iter+0x1de/0x1790 [ 1162.070540][T27786] ? rcu_is_watching+0x15/0xb0 [ 1162.070560][T27786] ? __pfx__copy_from_iter+0x10/0x10 [ 1162.070580][T27786] ? __build_skb_around+0x22d/0x3c0 [ 1162.070603][T27786] ? netlink_sendmsg+0x642/0xb30 [ 1162.070617][T27786] ? skb_put+0x11b/0x210 [ 1162.070629][T27786] netlink_sendmsg+0x6b2/0xb30 [ 1162.070644][T27786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.070656][T27786] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1162.070667][T27786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1162.070679][T27786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.070699][T27786] __sock_sendmsg+0x21c/0x270 [ 1162.070718][T27786] ____sys_sendmsg+0x505/0x820 [ 1162.070741][T27786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1162.070762][T27786] ? import_iovec+0x74/0xa0 [ 1162.070771][T27786] ___sys_sendmsg+0x21f/0x2a0 [ 1162.070783][T27786] ? __pfx____sys_sendmsg+0x10/0x10 [ 1162.070797][T27786] ? rcu_read_lock_any_held+0xb3/0x120 [ 1162.070819][T27786] ? __fget_files+0x2a/0x420 [ 1162.070834][T27786] ? __fget_files+0x3a0/0x420 [ 1162.070858][T27786] __x64_sys_sendmsg+0x19b/0x260 [ 1162.070879][T27786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1162.070903][T27786] ? __pfx_ksys_write+0x10/0x10 [ 1162.070917][T27786] ? do_syscall_64+0xbe/0xf80 [ 1162.070926][T27786] do_syscall_64+0xfa/0xf80 [ 1162.070933][T27786] ? lockdep_hardirqs_on+0x98/0x140 [ 1162.070945][T27786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.070952][T27786] ? clear_bhb_loop+0x60/0xb0 [ 1162.070964][T27786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.070978][T27786] RIP: 0033:0x7f8acab8f749 [ 1162.070992][T27786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.071004][T27786] RSP: 002b:00007f8acb94c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.071020][T27786] RAX: ffffffffffffffda RBX: 00007f8acade5fa0 RCX: 00007f8acab8f749 [ 1162.071031][T27786] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 1162.071041][T27786] RBP: 00007f8acb94c090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.071047][T27786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.071052][T27786] R13: 00007f8acade6038 R14: 00007f8acade5fa0 R15: 00007f8acaf0fa28 [ 1162.071077][T27786] [ 1162.352149][ T5904] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1162.504111][T27792] tipc: New replicast peer: 0.0.0.0 [ 1162.517820][T27792] tipc: Enabled bearer , priority 10 [ 1162.525850][ T5977] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1162.536068][T27792] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:14aa [ 1162.554055][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.577019][ T5977] usb 2-1: Product: syz [ 1162.584005][ T5977] usb 2-1: Manufacturer: syz [ 1162.588981][ T5977] usb 2-1: SerialNumber: syz [ 1162.629903][ T60] usb 5-1: Failed to submit usb control message: -71 [ 1162.637955][ T5904] usb 5-1: USB disconnect, device number 106 [ 1162.644082][ T60] usb 5-1: unable to send the bmi data to the device: -71 [ 1162.662510][ T5977] usb 2-1: config 0 descriptor?? [ 1162.682249][ T60] usb 5-1: unable to get target info from device [ 1162.702039][ T60] usb 5-1: could not get target info (-71) [ 1162.708251][ T60] usb 5-1: could not probe fw (-71) [ 1162.833958][T27799] FAULT_INJECTION: forcing a failure. [ 1162.833958][T27799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.867462][T27799] CPU: 0 UID: 0 PID: 27799 Comm: syz.2.6994 Not tainted syzkaller #0 PREEMPT(full) [ 1162.867484][T27799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1162.867494][T27799] Call Trace: [ 1162.867500][T27799] [ 1162.867508][T27799] dump_stack_lvl+0x189/0x250 [ 1162.867526][T27799] ? __pfx____ratelimit+0x10/0x10 [ 1162.867540][T27799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.867549][T27799] ? __pfx__printk+0x10/0x10 [ 1162.867564][T27799] should_fail_ex+0x414/0x560 [ 1162.867577][T27799] _copy_to_user+0x31/0xb0 [ 1162.867593][T27799] simple_read_from_buffer+0xe1/0x170 [ 1162.867613][T27799] proc_fail_nth_read+0x1b3/0x220 [ 1162.867636][T27799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1162.867658][T27799] ? rw_verify_area+0x2a6/0x4d0 [ 1162.867674][T27799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1162.867686][T27799] vfs_read+0x200/0xa30 [ 1162.867697][T27799] ? fdget_pos+0x247/0x320 [ 1162.867707][T27799] ? __pfx___mutex_lock+0x10/0x10 [ 1162.867716][T27799] ? __pfx_vfs_read+0x10/0x10 [ 1162.867727][T27799] ? __fget_files+0x2a/0x420 [ 1162.867745][T27799] ? __fget_files+0x3a0/0x420 [ 1162.867760][T27799] ? __fget_files+0x2a/0x420 [ 1162.867783][T27799] ksys_read+0x145/0x250 [ 1162.867800][T27799] ? __fget_files+0x2a/0x420 [ 1162.867815][T27799] ? __pfx_ksys_read+0x10/0x10 [ 1162.867827][T27799] ? do_syscall_64+0xbe/0xf80 [ 1162.867837][T27799] do_syscall_64+0xfa/0xf80 [ 1162.867843][T27799] ? lockdep_hardirqs_on+0x98/0x140 [ 1162.867855][T27799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.867862][T27799] ? clear_bhb_loop+0x60/0xb0 [ 1162.867872][T27799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.867884][T27799] RIP: 0033:0x7f8acab8e15c [ 1162.867898][T27799] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1162.867910][T27799] RSP: 002b:00007f8acb94c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1162.867924][T27799] RAX: ffffffffffffffda RBX: 00007f8acade5fa0 RCX: 00007f8acab8e15c [ 1162.867933][T27799] RDX: 000000000000000f RSI: 00007f8acb94c0a0 RDI: 0000000000000006 [ 1162.867941][T27799] RBP: 00007f8acb94c090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.867950][T27799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.867959][T27799] R13: 00007f8acade6038 R14: 00007f8acade5fa0 R15: 00007f8acaf0fa28 [ 1162.867986][T27799] [ 1163.589349][T27813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1163.657454][T18326] tipc: Node number set to 441869129 [ 1164.200783][T18500] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1164.347992][T27829] kernel profiling enabled (shift: 63) [ 1164.363432][T27829] profiling shift: 63 too large [ 1164.373327][T18500] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1164.403632][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1164.428602][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1164.456821][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1164.477397][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1164.490909][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1164.546618][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1164.607500][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1164.648109][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1164.690322][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1164.737481][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1164.771915][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1164.827257][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1164.860100][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1164.884427][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1164.920524][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1164.948437][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1164.979487][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1165.015735][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1165.039921][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1165.068713][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1165.103115][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1165.131793][T18500] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1165.161270][T18500] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1165.199042][T18500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1165.223076][T18500] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1165.256422][T18500] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1165.285456][T18500] usb 3-1: Product: syz [ 1165.298874][T18500] usb 3-1: Manufacturer: syz [ 1165.313816][T18500] usb 3-1: SerialNumber: syz [ 1165.336297][T18500] usb 3-1: config 0 descriptor?? [ 1165.361419][T18500] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1165.392311][ T5977] usb 2-1: USB disconnect, device number 77 [ 1165.586125][T18326] usb 3-1: USB disconnect, device number 104 [ 1165.611558][T18326] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1166.207362][T18326] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1166.307260][ T5977] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1166.362420][T18326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.391863][T18326] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1166.421522][T18326] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1166.431152][T18326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.442757][T18326] usb 2-1: config 0 descriptor?? [ 1166.465519][T18326] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1166.475354][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 1166.485596][ T5977] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1166.508766][ T5977] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.535590][ T5977] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1166.554708][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.577232][ T5977] usb 4-1: Product: syz [ 1166.587401][ T5977] usb 4-1: Manufacturer: syz [ 1166.601364][ T5977] usb 4-1: SerialNumber: syz [ 1166.658106][T27859] usb usb6: usbfs: process 27859 (syz.4.7015) did not claim interface 0 before use [ 1166.823059][ T5977] usb 4-1: Invalid number of CPorts: 0 [ 1166.824831][T18500] usb 2-1: USB disconnect, device number 78 [ 1166.839119][T27862] [ 1166.839855][ T5977] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 1166.841452][T27862] ===================================================== [ 1166.857287][T27862] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1166.864743][T27862] syzkaller #0 Not tainted [ 1166.869134][T27862] ----------------------------------------------------- [ 1166.876047][T27862] syz.4.7016/27862 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1166.883736][T27862] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1166.892425][T27862] [ 1166.892425][T27862] and this task is already holding: [ 1166.899788][T27862] ffff88805c3efca0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1166.908469][T27862] which would create a new lock dependency: [ 1166.914327][T27862] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1166.921871][T27862] [ 1166.921871][T27862] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1166.931291][T27862] (&client->buffer_lock){..-.}-{3:3} [ 1166.931312][T27862] [ 1166.931312][T27862] ... which became SOFTIRQ-irq-safe at: [ 1166.944322][T27862] lock_acquire+0x117/0x340 [ 1166.948894][T27862] _raw_spin_lock+0x2e/0x40 [ 1166.953464][T27862] evdev_pass_values+0xb9/0xbd0 [ 1166.958373][T27862] evdev_events+0x1e6/0x340 [ 1166.962935][T27862] input_pass_values+0x288/0x890 [ 1166.967937][T27862] input_event_dispose+0x3e5/0x6b0 [ 1166.973108][T27862] input_event+0x89/0xe0 [ 1166.977417][T27862] hidinput_hid_event+0x145e/0x1dd0 [ 1166.982685][T27862] hid_process_event+0x4be/0x620 [ 1166.987691][T27862] hid_report_raw_event+0xe91/0x16d0 [ 1166.993036][T27862] hid_input_report+0x43e/0x520 [ 1166.997945][T27862] hid_irq_in+0x47e/0x6d0 [ 1167.002338][T27862] __usb_hcd_giveback_urb+0x376/0x540 [ 1167.007776][T27862] dummy_timer+0x85f/0x44c0 [ 1167.012345][T27862] __hrtimer_run_queues+0x51c/0xc30 [ 1167.017602][T27862] hrtimer_run_softirq+0x187/0x2b0 [ 1167.022773][T27862] handle_softirqs+0x27d/0x850 [ 1167.027598][T27862] __irq_exit_rcu+0xca/0x1f0 [ 1167.032248][T27862] irq_exit_rcu+0x9/0x30 [ 1167.036550][T27862] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1167.042244][T27862] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1167.048283][T27862] vm_area_alloc+0x0/0x140 [ 1167.052760][T27862] mmap_region+0xdcd/0x20f0 [ 1167.057323][T27862] do_mmap+0xc45/0x10d0 [ 1167.061537][T27862] vm_mmap_pgoff+0x2a6/0x4d0 [ 1167.066184][T27862] ksys_mmap_pgoff+0x51f/0x760 [ 1167.071008][T27862] do_syscall_64+0xfa/0xf80 [ 1167.075581][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.081528][T27862] [ 1167.081528][T27862] to a SOFTIRQ-irq-unsafe lock: [ 1167.088514][T27862] (tasklist_lock){.+.+}-{3:3} [ 1167.088533][T27862] [ 1167.088533][T27862] ... which became SOFTIRQ-irq-unsafe at: [ 1167.101110][T27862] ... [ 1167.101115][T27862] lock_acquire+0x117/0x340 [ 1167.108249][T27862] _raw_read_lock+0x36/0x50 [ 1167.112822][T27862] __do_wait+0xde/0x740 [ 1167.117037][T27862] do_wait+0x1e8/0x4f0 [ 1167.121162][T27862] kernel_wait+0xab/0x170 [ 1167.125557][T27862] call_usermodehelper_exec_work+0xbe/0x230 [ 1167.131514][T27862] process_scheduled_works+0xad1/0x1770 [ 1167.137126][T27862] worker_thread+0x8a0/0xda0 [ 1167.141787][T27862] kthread+0x711/0x8a0 [ 1167.145913][T27862] ret_from_fork+0x52d/0xa60 [ 1167.150563][T27862] ret_from_fork_asm+0x1a/0x30 [ 1167.155390][T27862] [ 1167.155390][T27862] other info that might help us debug this: [ 1167.155390][T27862] [ 1167.165586][T27862] Chain exists of: [ 1167.165586][T27862] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1167.165586][T27862] [ 1167.178773][T27862] Possible interrupt unsafe locking scenario: [ 1167.178773][T27862] [ 1167.187063][T27862] CPU0 CPU1 [ 1167.192398][T27862] ---- ---- [ 1167.197733][T27862] lock(tasklist_lock); [ 1167.201949][T27862] local_irq_disable(); [ 1167.208673][T27862] lock(&client->buffer_lock); [ 1167.216029][T27862] lock(&f_owner->lock); [ 1167.222849][T27862] [ 1167.226273][T27862] lock(&client->buffer_lock); [ 1167.231270][T27862] [ 1167.231270][T27862] *** DEADLOCK *** [ 1167.231270][T27862] [ 1167.239384][T27862] 2 locks held by syz.4.7016/27862: [ 1167.244571][T27862] #0: ffff88804708b9d8 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 1167.253072][T27862] #1: ffff88805c3efca0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1167.262180][T27862] [ 1167.262180][T27862] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1167.272584][T27862] -> (&client->buffer_lock){..-.}-{3:3} { [ 1167.278728][T27862] IN-SOFTIRQ-W at: [ 1167.282867][T27862] lock_acquire+0x117/0x340 [ 1167.289345][T27862] _raw_spin_lock+0x2e/0x40 [ 1167.295827][T27862] evdev_pass_values+0xb9/0xbd0 [ 1167.302645][T27862] evdev_events+0x1e6/0x340 [ 1167.309133][T27862] input_pass_values+0x288/0x890 [ 1167.316046][T27862] input_event_dispose+0x3e5/0x6b0 [ 1167.323131][T27862] input_event+0x89/0xe0 [ 1167.329344][T27862] hidinput_hid_event+0x145e/0x1dd0 [ 1167.336515][T27862] hid_process_event+0x4be/0x620 [ 1167.343431][T27862] hid_report_raw_event+0xe91/0x16d0 [ 1167.350689][T27862] hid_input_report+0x43e/0x520 [ 1167.357512][T27862] hid_irq_in+0x47e/0x6d0 [ 1167.363812][T27862] __usb_hcd_giveback_urb+0x376/0x540 [ 1167.371238][T27862] dummy_timer+0x85f/0x44c0 [ 1167.377715][T27862] __hrtimer_run_queues+0x51c/0xc30 [ 1167.384885][T27862] hrtimer_run_softirq+0x187/0x2b0 [ 1167.391963][T27862] handle_softirqs+0x27d/0x850 [ 1167.398703][T27862] __irq_exit_rcu+0xca/0x1f0 [ 1167.405268][T27862] irq_exit_rcu+0x9/0x30 [ 1167.411481][T27862] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1167.419089][T27862] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1167.427040][T27862] vm_area_alloc+0x0/0x140 [ 1167.433426][T27862] mmap_region+0xdcd/0x20f0 [ 1167.439915][T27862] do_mmap+0xc45/0x10d0 [ 1167.446040][T27862] vm_mmap_pgoff+0x2a6/0x4d0 [ 1167.452601][T27862] ksys_mmap_pgoff+0x51f/0x760 [ 1167.459345][T27862] do_syscall_64+0xfa/0xf80 [ 1167.465841][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.473718][T27862] INITIAL USE at: [ 1167.477763][T27862] lock_acquire+0x117/0x340 [ 1167.484235][T27862] _raw_spin_lock+0x2e/0x40 [ 1167.490647][T27862] evdev_pass_values+0xb9/0xbd0 [ 1167.497384][T27862] evdev_events+0x1e6/0x340 [ 1167.503778][T27862] input_pass_values+0x288/0x890 [ 1167.510611][T27862] input_event_dispose+0x330/0x6b0 [ 1167.517611][T27862] input_inject_event+0x1dd/0x340 [ 1167.524533][T27862] evdev_write+0x2fc/0x480 [ 1167.530838][T27862] vfs_write+0x27e/0xb30 [ 1167.536967][T27862] ksys_write+0x145/0x250 [ 1167.543182][T27862] do_syscall_64+0xfa/0xf80 [ 1167.549567][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.557348][T27862] } [ 1167.559998][T27862] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1167.568312][T27862] -> (&new->fa_lock){....}-{3:3} { [ 1167.573495][T27862] INITIAL USE at: [ 1167.577448][T27862] lock_acquire+0x117/0x340 [ 1167.583668][T27862] _raw_write_lock_irq+0xa2/0xf0 [ 1167.590326][T27862] fasync_remove_entry+0xf1/0x1c0 [ 1167.597075][T27862] lease_modify+0x1ca/0x3c0 [ 1167.603295][T27862] locks_remove_file+0x4bf/0xea0 [ 1167.609962][T27862] __fput+0x3ab/0xa70 [ 1167.615660][T27862] fput_close_sync+0x119/0x200 [ 1167.622147][T27862] __x64_sys_close+0x7f/0x110 [ 1167.628549][T27862] do_syscall_64+0xfa/0xf80 [ 1167.634779][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.642404][T27862] INITIAL READ USE at: [ 1167.646806][T27862] lock_acquire+0x117/0x340 [ 1167.653466][T27862] _raw_read_lock_irqsave+0xaf/0x100 [ 1167.660906][T27862] kill_fasync+0x199/0x4d0 [ 1167.667477][T27862] __splice_from_pipe+0x860/0x920 [ 1167.674651][T27862] __se_sys_vmsplice+0x316/0x10d0 [ 1167.681822][T27862] do_syscall_64+0xfa/0xf80 [ 1167.688730][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.696789][T27862] } [ 1167.699695][T27862] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1167.708428][T27862] ... acquired at: [ 1167.712288][T27862] _raw_read_lock_irqsave+0xaf/0x100 [ 1167.717724][T27862] kill_fasync+0x199/0x4d0 [ 1167.722293][T27862] evdev_pass_values+0x627/0xbd0 [ 1167.727376][T27862] evdev_events+0x1e6/0x340 [ 1167.732025][T27862] input_pass_values+0x288/0x890 [ 1167.737111][T27862] input_event_dispose+0x330/0x6b0 [ 1167.742458][T27862] input_inject_event+0x1dd/0x340 [ 1167.747731][T27862] evdev_write+0x2fc/0x480 [ 1167.752294][T27862] vfs_write+0x27e/0xb30 [ 1167.756690][T27862] ksys_write+0x145/0x250 [ 1167.761167][T27862] do_syscall_64+0xfa/0xf80 [ 1167.765815][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.771854][T27862] [ 1167.774153][T27862] -> (&f_owner->lock){....}-{3:3} { [ 1167.779336][T27862] INITIAL USE at: [ 1167.783201][T27862] lock_acquire+0x117/0x340 [ 1167.789243][T27862] _raw_write_lock_irq+0xa2/0xf0 [ 1167.795724][T27862] __f_setown+0x67/0x370 [ 1167.801504][T27862] generic_setlease+0xe1e/0x1280 [ 1167.807982][T27862] do_fcntl_add_lease+0x34d/0x460 [ 1167.814540][T27862] fcntl_setlease+0x123/0x180 [ 1167.820752][T27862] do_fcntl+0x867/0x1a50 [ 1167.826534][T27862] __se_sys_fcntl+0xc8/0x150 [ 1167.832673][T27862] do_syscall_64+0xfa/0xf80 [ 1167.838712][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.846146][T27862] INITIAL READ USE at: [ 1167.850451][T27862] lock_acquire+0x117/0x340 [ 1167.856927][T27862] _raw_read_lock_irqsave+0xaf/0x100 [ 1167.864191][T27862] send_sigio+0x38/0x370 [ 1167.870411][T27862] kill_fasync+0x24d/0x4d0 [ 1167.876800][T27862] lease_break_callback+0x26/0x30 [ 1167.883800][T27862] __break_lease+0x730/0x1620 [ 1167.890447][T27862] vfs_truncate+0x428/0x520 [ 1167.896926][T27862] do_sys_truncate+0xdb/0x190 [ 1167.903578][T27862] __x64_sys_truncate+0x5b/0x70 [ 1167.910402][T27862] do_syscall_64+0xfa/0xf80 [ 1167.916873][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.924733][T27862] } [ 1167.927205][T27862] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1167.936031][T27862] ... acquired at: [ 1167.939803][T27862] _raw_read_lock_irqsave+0xaf/0x100 [ 1167.945246][T27862] send_sigio+0x38/0x370 [ 1167.949646][T27862] kill_fasync+0x24d/0x4d0 [ 1167.954209][T27862] lease_break_callback+0x26/0x30 [ 1167.959379][T27862] __break_lease+0x730/0x1620 [ 1167.964210][T27862] vfs_truncate+0x428/0x520 [ 1167.968876][T27862] do_sys_truncate+0xdb/0x190 [ 1167.973739][T27862] __x64_sys_truncate+0x5b/0x70 [ 1167.978745][T27862] do_syscall_64+0xfa/0xf80 [ 1167.983400][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.989448][T27862] [ 1167.991745][T27862] [ 1167.991745][T27862] the dependencies between the lock to be acquired [ 1167.991753][T27862] and SOFTIRQ-irq-unsafe lock: [ 1168.005220][T27862] -> (tasklist_lock){.+.+}-{3:3} { [ 1168.010322][T27862] HARDIRQ-ON-R at: [ 1168.014272][T27862] lock_acquire+0x117/0x340 [ 1168.020425][T27862] _raw_read_lock+0x36/0x50 [ 1168.026556][T27862] __do_wait+0xde/0x740 [ 1168.032342][T27862] do_wait+0x1e8/0x4f0 [ 1168.038042][T27862] kernel_wait+0xab/0x170 [ 1168.043999][T27862] call_usermodehelper_exec_work+0xbe/0x230 [ 1168.051518][T27862] process_scheduled_works+0xad1/0x1770 [ 1168.058691][T27862] worker_thread+0x8a0/0xda0 [ 1168.064905][T27862] kthread+0x711/0x8a0 [ 1168.070598][T27862] ret_from_fork+0x52d/0xa60 [ 1168.076814][T27862] ret_from_fork_asm+0x1a/0x30 [ 1168.083204][T27862] SOFTIRQ-ON-R at: [ 1168.087158][T27862] lock_acquire+0x117/0x340 [ 1168.093291][T27862] _raw_read_lock+0x36/0x50 [ 1168.099419][T27862] __do_wait+0xde/0x740 [ 1168.105199][T27862] do_wait+0x1e8/0x4f0 [ 1168.110888][T27862] kernel_wait+0xab/0x170 [ 1168.116844][T27862] call_usermodehelper_exec_work+0xbe/0x230 [ 1168.124362][T27862] process_scheduled_works+0xad1/0x1770 [ 1168.131534][T27862] worker_thread+0x8a0/0xda0 [ 1168.137749][T27862] kthread+0x711/0x8a0 [ 1168.143442][T27862] ret_from_fork+0x52d/0xa60 [ 1168.149656][T27862] ret_from_fork_asm+0x1a/0x30 [ 1168.156053][T27862] INITIAL USE at: [ 1168.159920][T27862] lock_acquire+0x117/0x340 [ 1168.165982][T27862] _raw_write_lock_irq+0xa2/0xf0 [ 1168.172459][T27862] copy_process+0x225c/0x3c10 [ 1168.178672][T27862] kernel_clone+0x21e/0x820 [ 1168.184712][T27862] user_mode_thread+0xdd/0x140 [ 1168.191012][T27862] rest_init+0x23/0x300 [ 1168.196706][T27862] start_kernel+0x3ae/0x410 [ 1168.202780][T27862] x86_64_start_reservations+0x24/0x30 [ 1168.209778][T27862] x86_64_start_kernel+0x143/0x1c0 [ 1168.216423][T27862] common_startup_64+0x13e/0x147 [ 1168.222897][T27862] INITIAL READ USE at: [ 1168.227197][T27862] lock_acquire+0x117/0x340 [ 1168.233676][T27862] _raw_read_lock+0x36/0x50 [ 1168.240152][T27862] __do_wait+0xde/0x740 [ 1168.246284][T27862] do_wait+0x1e8/0x4f0 [ 1168.252323][T27862] kernel_wait+0xab/0x170 [ 1168.258631][T27862] call_usermodehelper_exec_work+0xbe/0x230 [ 1168.266497][T27862] process_scheduled_works+0xad1/0x1770 [ 1168.274021][T27862] worker_thread+0x8a0/0xda0 [ 1168.280606][T27862] kthread+0x711/0x8a0 [ 1168.286645][T27862] ret_from_fork+0x52d/0xa60 [ 1168.293207][T27862] ret_from_fork_asm+0x1a/0x30 [ 1168.299945][T27862] } [ 1168.302423][T27862] ... key at: [] tasklist_lock+0x18/0x40 [ 1168.310186][T27862] ... acquired at: [ 1168.313962][T27862] _raw_read_lock+0x36/0x50 [ 1168.318624][T27862] send_sigurg+0x12b/0x420 [ 1168.323189][T27862] sk_send_sigurg+0x6c/0x2e0 [ 1168.327924][T27862] queue_oob+0x420/0x4f0 [ 1168.332314][T27862] unix_stream_sendmsg+0xc3f/0xdf0 [ 1168.337575][T27862] __sock_sendmsg+0x21c/0x270 [ 1168.342399][T27862] ____sys_sendmsg+0x505/0x820 [ 1168.347310][T27862] ___sys_sendmsg+0x21f/0x2a0 [ 1168.352162][T27862] __x64_sys_sendmsg+0x19b/0x260 [ 1168.357251][T27862] do_syscall_64+0xfa/0xf80 [ 1168.361898][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.367938][T27862] [ 1168.370237][T27862] [ 1168.370237][T27862] stack backtrace: [ 1168.376207][T27862] CPU: 0 UID: 0 PID: 27862 Comm: syz.4.7016 Not tainted syzkaller #0 PREEMPT(full) [ 1168.376225][T27862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1168.376233][T27862] Call Trace: [ 1168.376240][T27862] [ 1168.376246][T27862] dump_stack_lvl+0x189/0x250 [ 1168.376262][T27862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.376274][T27862] ? __pfx__printk+0x10/0x10 [ 1168.376291][T27862] __lock_acquire+0x2a95/0x2cf0 [ 1168.376314][T27862] ? send_sigurg+0x12b/0x420 [ 1168.376328][T27862] lock_acquire+0x117/0x340 [ 1168.376344][T27862] ? send_sigurg+0x12b/0x420 [ 1168.376358][T27862] ? _raw_read_lock_irqsave+0xbb/0x100 [ 1168.376380][T27862] _raw_read_lock+0x36/0x50 [ 1168.376395][T27862] ? send_sigurg+0x12b/0x420 [ 1168.376408][T27862] send_sigurg+0x12b/0x420 [ 1168.376423][T27862] sk_send_sigurg+0x6c/0x2e0 [ 1168.376437][T27862] queue_oob+0x420/0x4f0 [ 1168.376451][T27862] ? __pfx_queue_oob+0x10/0x10 [ 1168.376465][T27862] ? sock_def_readable+0x2ff/0x530 [ 1168.376477][T27862] ? sock_def_readable+0xae/0x530 [ 1168.376489][T27862] unix_stream_sendmsg+0xc3f/0xdf0 [ 1168.376507][T27862] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1168.376521][T27862] ? aa_sock_msg_perm+0xda/0x1b0 [ 1168.376535][T27862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1168.376547][T27862] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1168.376560][T27862] __sock_sendmsg+0x21c/0x270 [ 1168.376574][T27862] ____sys_sendmsg+0x505/0x820 [ 1168.376591][T27862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1168.376609][T27862] ? import_iovec+0x74/0xa0 [ 1168.376621][T27862] ___sys_sendmsg+0x21f/0x2a0 [ 1168.376638][T27862] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.376655][T27862] ? futex_wait+0x285/0x360 [ 1168.376669][T27862] ? __asan_memcpy+0x40/0x70 [ 1168.376688][T27862] ? f_setown+0x14f/0x300 [ 1168.376705][T27862] __x64_sys_sendmsg+0x19b/0x260 [ 1168.376721][T27862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1168.376742][T27862] ? do_syscall_64+0xbe/0xf80 [ 1168.376753][T27862] do_syscall_64+0xfa/0xf80 [ 1168.376764][T27862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.376776][T27862] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1168.376787][T27862] ? clear_bhb_loop+0x60/0xb0 [ 1168.376799][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.376810][T27862] RIP: 0033:0x7ff132f8f749 [ 1168.376821][T27862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.376832][T27862] RSP: 002b:00007ff133e0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1168.376844][T27862] RAX: ffffffffffffffda RBX: 00007ff1331e5fa0 RCX: 00007ff132f8f749 [ 1168.376853][T27862] RDX: 000000000400c9c1 RSI: 0000200000000100 RDI: 0000000000000006 [ 1168.376861][T27862] RBP: 00007ff133013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1168.376869][T27862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.376877][T27862] R13: 00007ff1331e6038 R14: 00007ff1331e5fa0 R15: 00007ff13330fa28 [ 1168.376890][T27862] [ 1168.687897][T18326] usb 4-1: USB disconnect, device number 105 [ 1168.716273][T27863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7013'.