last executing test programs: 9.624262282s ago: executing program 0 (id=1302): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYBLOB="cfb13340f04ca94004bee75be34535d7e0a1e1b55fa29e29ec4db92aa8706687cbf0cff066480f7740116c1955c9a95937cea23b9717d7a7032d81925a54e5f03972737c3979437eb588ab858961c82082c84482834ce755a5a472198939fc6dbdceecf28272a7690ce04d392f87855a0499a6297204fe1cf02d403a667d4bc2c9cc5ae262658da781cc9500475dd09926b546475cf3f5a0dac1e3ed691537d1513b4b9b26015714122416ab1ab2cae97fb3219ed4422b4c5254d7"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000140)={0xa}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x5, 0xe5, &(0x7f0000000440)="7130c4604e7368d579217ec03651a3c918cb105cc3fbc53f265a275e45776c602398ba401115462f86f1a3e8b6bba3404024e61e84c4403b9f3d8ae1d1e7262e8d9b51cda059078e710ce042f6af7a3cfa606ed258db449eab585c1209bca5811d17867328fffcb29e4cd70a26c8a37449488d0bf8d48654ac72395c647fd5de60c0d77b9bf555cd86a7a02f6be7db918ea7836564a480a1480bdf2c95f7a09c5d810fd45d7868a8afdb8b5396ecec097083efd78c1174d332e5fc6c5a75050c2bba5f3936d2cada5bf5019c6d7b0415e97e35a2a4842bc92ca57726eb8c6e410b62eec261", 0x0, 0x1}]}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) 7.703334335s ago: executing program 1 (id=1308): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000340)=')', 0x1, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2, 0xd, 0x2, 0x6, 0x9, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0x33, 0xa0, 0x0, @in={0x2, 0x4e22, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x5f, 0x0, 0x0, 0x70bd26, 0x3505}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0xb0, 0xc, 0x1, 0xe0000000}]}, 0x48}}, 0x20000001) 7.545164841s ago: executing program 2 (id=1311): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_connect(0x0, 0x24, &(0x7f0000003440)={{0x12, 0x1, 0x300, 0xdd, 0xef, 0xdf, 0x8, 0x3537, 0x3d3, 0x3c40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x45, 0x8, 0xc0, 0x4, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0xff, 0x47, 0xd0, 0xe}}]}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x8, &(0x7f0000003740)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 7.432910457s ago: executing program 1 (id=1312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x10a, 0x3}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x5, 0x0, 0x23}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x2d}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 7.302598829s ago: executing program 1 (id=1313): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) ioprio_get$pid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000001040)) io_setup(0x9, &(0x7f0000000080)=0x0) io_getevents(r3, 0x6, 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x0) 7.225513306s ago: executing program 0 (id=1314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x8dff, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.189580286s ago: executing program 1 (id=1315): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000001c0)="ed", 0x1}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001"], 0xe4}}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000001240)={0x1c, &(0x7f0000000480)={0x40, 0x14, 0x2, 'I\b'}, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x24, 0x3c, 0x107, 0x70bd2b, 0x2, {0x2, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040011}, 0xc000) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x27}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) 5.933833853s ago: executing program 0 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x9, &(0x7f0000000080)=0x0) r3 = eventfd2(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) io_submit(r2, 0x1, &(0x7f00000009c0)=[&(0x7f0000000240)={0x600, 0x0, 0x0, 0x0, 0x4, r4, 0x0, 0x0, 0x3, 0x0, 0x1, r3}]) 5.657469781s ago: executing program 2 (id=1319): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000300)={0x1, 0x1, &(0x7f00000001c0)=[r2], 0x0, 0x0, 0x0, 0x0, 0x4000001000000}) 4.6675937s ago: executing program 2 (id=1320): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000340)=')', 0x1, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2, 0xd, 0x2, 0x6, 0x9, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0x33, 0xa0, 0x0, @in={0x2, 0x4e22, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x5f, 0x0, 0x0, 0x70bd26, 0x3505}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0xb0, 0xc, 0x1, 0xe0000000}]}, 0x48}}, 0x20000001) 4.412945425s ago: executing program 0 (id=1321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x10a, 0x3}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x64, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x5, 0x0, 0x23}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x2d}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 4.411872474s ago: executing program 2 (id=1322): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYBLOB="cfb13340f04ca94004bee75be34535d7e0a1e1b55fa29e29ec4db92aa8706687cbf0cff066480f7740116c1955c9a95937cea23b9717d7a7032d81925a54e5f03972737c3979437eb588ab858961c82082c84482834ce755a5a472198939fc6dbdceecf28272a7690ce04d392f87855a0499a6297204fe1cf02d403a667d4bc2c9cc5ae262658da781cc9500475dd09926b546475cf3f5a0dac1e3ed691537d1513b4b9b26015714122416ab1ab2cae97fb3219ed4422b4c5254d7"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$bt_hci(r0, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0x5, 0xe5, &(0x7f0000000440)="7130c4604e7368d579217ec03651a3c918cb105cc3fbc53f265a275e45776c602398ba401115462f86f1a3e8b6bba3404024e61e84c4403b9f3d8ae1d1e7262e8d9b51cda059078e710ce042f6af7a3cfa606ed258db449eab585c1209bca5811d17867328fffcb29e4cd70a26c8a37449488d0bf8d48654ac72395c647fd5de60c0d77b9bf555cd86a7a02f6be7db918ea7836564a480a1480bdf2c95f7a09c5d810fd45d7868a8afdb8b5396ecec097083efd78c1174d332e5fc6c5a75050c2bba5f3936d2cada5bf5019c6d7b0415e97e35a2a4842bc92ca57726eb8c6e410b62eec261", 0x0, 0x1}]}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) 3.469321873s ago: executing program 0 (id=1324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001240)=ANY=[@ANYBLOB="540000001e00090b"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x28000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0xb0, r2, 0x1, 0x70bd24, 0x0, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff00}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0102fcfffffffddbdf6503002600140006006e6963766630000000000000000000001400070000000000000000000000ffffac14140014000300fe8000000000000000000000000000aa080005007f000001c53eb0c34e600513d265d53ec750d2578214063ef9bdeb2cf295b87306e5815e4dd6d672b4ce22ea"], 0x58}, 0x8, 0x3000000000002}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28000000769ba7209c0d1404069b8b0f09c9ab5a1cfb48e1ff76367e778ef422f71bff60b1842a4da5ca6b4246f4b7565c125c6e614a85af47ef4e5ec570817981b785799bfb9353c3f8fd8d7b4edc55d24e6e8b67fdfb46a35751f94acf18d11b969799737a89d7608941d234ea379eb51812b2bb7680c1", @ANYRES16=r6, @ANYBLOB="00022abd7000fcdbdf250300000006000800a0aa00000c0009000203aaaaaaaaaaaa"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_pidfd_open(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) 3.409567397s ago: executing program 3 (id=1325): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4c", 0xe}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="512ca36543ae419e00000100000100000000d6ea77b3f121198d166d07cc4f1e1f910000"], 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c110000", @ANYRES16=r4, @ANYBLOB="00032cbd7000fedbdf25180000000800070003ee0f0000000180080003000200000008000700000000001400020067656e6576653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x112c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) socket$can_raw(0x1d, 0x3, 0x1) close(0x3) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000840)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x1) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000600)={0x0, 0x1d}) 2.58847111s ago: executing program 3 (id=1326): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000080900010073797a300000000048000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000b40000000000900030073797a320000000008000540"], 0x164}}, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6030}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e640666832b945bfe585ab6933a6f6514a0eebad4e35370a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x6, 0x14, 0x200, &(0x7f0000019900)="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"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x101, 0x400080) dup2(r6, r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000080900010073797a300000000048000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000b40000000000900030073797a320000000008000540"], 0x164}}, 0x0) (async) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6030}) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e640666832b945bfe585ab6933a6f6514a0eebad4e35370a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x6, 0x14, 0x200, &(0x7f0000019900)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d780e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f06c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812aff0f896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000180), 0x101, 0x400080) (async) dup2(r6, r4) (async) 2.491513442s ago: executing program 1 (id=1327): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000200006d5c98630800ea99991c58d01869b7000000070000001dad0248f1495e15d2af9a534fca836845eb903be743648e7ca1ec6cfb00"/67]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x82c}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f0000000380)='sched\x00') pread64(r4, &(0x7f0000000500)=""/195, 0xc3, 0x9e) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="3e1c1adaceb67a6f219b124f8d60f2f9", 0x10) r5 = accept4(r1, 0x0, 0x0, 0x80800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0xce, 0x0, 0x2}]}) sendmsg$kcm(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)='q', 0x1}], 0x1}, 0x4004885) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000800)=ANY=[@ANYRES16, @ANYBLOB="bd0dce0e5e742d42e0f795e2b313d03803b0632cd3e855cee82f8e5403c3fd13075962f3adbb5ff046320594c5c12fcfa2c9089a364702554fa825cafb58b05dd50270c72ddad0ff259ac3a14f892048f1178c6018cf0962a5aa348ff8ed790e2f8c91bfbcbb915822c7f84cb34b3e4b633b4748ae25cbb87783932f870276169b", @ANYRES8=0x0, @ANYRESHEX=r2, @ANYRES64=r3], 0xc, 0xffffffffffffffff) ioctl$TCSBRKP(r7, 0x5425, 0x3) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000480)={0xfff, 0x8, [0xac, 0xffff]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r11, 0x401) sendmsg$kcm(r10, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="6204270059023b000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x4008001) accept4$alg(r5, 0x0, 0x0, 0x800) 2.372697845s ago: executing program 2 (id=1328): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000300)={0x1, 0x1, &(0x7f00000001c0)=[r2], 0x0, 0x0, 0x0, 0x0, 0x4000001000000}) 2.115564969s ago: executing program 0 (id=1329): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) set_mempolicy_home_node(&(0x7f0000042000/0x2000)=nil, 0x2000, 0x0, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) ioctl$int_in(r1, 0x5421, 0x0) r2 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x0, r2}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0xee01, r3, r3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x1810024, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYBLOB="65de63b3f5aba398c0407c7173a97566233195e1331da2b722c31b8e711ee275097844e0c463bc0656660a669c5f34626c3747b09a4e9d1c4cf6268af1a5a4682e20f38001c63abe0c60d55e04174e678a1932c1ddefa05080836b2ebca0cea924d09701f065dc47bdca96df146a0a1750ec114ddbc5eb1e0d142d67d69c93eed376444ab38f21cd5799d2d93dde0dd81b474c34bc83d3069857", @ANYBLOB=',noxattr,access=', @ANYRESDEC=r3, @ANYBLOB="2c6e6f657874656e642c6d73697a653d3078303030301030303030303030306536662c66736e616d653d2f6465762f48fd23692afbe1b583aba74ef952"]) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x65) r5 = socket(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r4, 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="000000160084060001000f0040004519007a00640000f30c90780a0101010000000082bc6da7889a3ae3d96d949f6abc1ede6bfab2b2b80fb89637a4828bb1ef148501b5fd48181711fd91a54b00d4e96757d9508e52fa28542315debe21600d1bc3414ace6dc20ab9569d73f5b55f0a820edb27b6bd4c45dc41b1a26c7cdb95f22802187b2f8b90"], 0x88) ioctl$PPPIOCGIDLE32(r8, 0x8008743f, &(0x7f0000000540)) 2.002131697s ago: executing program 2 (id=1330): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x400) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x4000000) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001880)={&(0x7f0000000100)={0x177c, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "b0d5066d5a3069de31f4"}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "7c1cba09ff48661338c4e336111b30a0f3b96d1fbf3cae86103f5b44bfbcec2cc5a5cb4861f33957edf83ee11c62c81429148b6b43b491db164a54f43a0637e9627ac9c5e413a61652aa77c7114ed4c7902273752a54740192a199eb46fdf43f02d6fad3acf942e86e3a32a0d612273242da0d7115d40276f5a04b91c14772ef3c95f9a46a260e75c444e50a0944513eb403952052d3634af08a4c97d418670f19550a11e2df26255219a6331db35c6464ee82a0f4b2d4d9766a6f9a68aefaaebae44742d449"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x13ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "0ef9da95e043508361ac84195122166daf0535c2ee544d2d2e9bbf74c2757c7fcc795ad98930bb8e6001ccc4c6be88b306885f37cbb0917e91fc3371e556db9190a3606a29ef"}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "e2ca10d59ceeae44a00a19b74d4e53a9d978011197f37a852aea170a61b2e5e96e69d95dbe36f8fedabe3155267d4afaffee3031cdb0ab596077198fe4ab5c972999123f989e4859d88ba369c04338eac1697c406e3e0bc6106302676727800f9c5e5d2cb2e5c063b3aaadcd1752db6028d14be51aa9913ac6687de8a304f917343f9c009ec82685cc1e0ca6ed5f15c85dce15533fc8bc29"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@)\\-{}\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "c217d901770757bf52678b6e8a05f601"}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2fc}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{:*&:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x813}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "360eda3177ab1645fcb71b0f3e0a7289f5e55e7a070b4fc75dac696dbf32866b9d04b75289f1d54842d99a6a2342d736322c8a71e05c815ec6bec9a777d24cc7196cb672af1b02db211129df814dcbee8bd04aa0d06cd4a8c2e68f8011c8470b8b62e42d46b17d3d1aaea6b4b99c26c46ac36f7446babc1feff376a8d0b50d61739fc0652b2136c3635cd8f93781223449cda9ba57faf14c41dae2fdaacfd117b39e43d99f29b95bfcfd8e2016e93118aedc6dd8ffc615863bc9e91872b2ad8b33b14cb00f45a8b01b033326e4e7756c068ccfc84301775a39ee1cfa6d9f"}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x290, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xb2%}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffb}, @ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "c410cbfde9dc9d9fb7e8ed30030f737396ca450455f9ca6d22d4e07a83e8b32a67beb1e7af7f43d00ca469bb734988bbec849bbff6a5a57ad88ba8d6683b70a9964e118cd00c52f34fbeab"}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "7e5c30ef195d09e6ef9cf065aae193179924b835fae6cf31e96c55eaaa449a1132c29e5231cfcfd536b89da463b0dfc03af6213415c49f3c36517c95522d4328d481210134cdeec4bdfb6ad5dbccd5f7ff6d31ee7da1db9021a87403d2aabf7232bb90d5c75cfd19d46c44b987472df83c82abfc0cc34994a621009af023ed34d0c471883188dfa4d05f9bd6e38a149ed6569888ddf180a941f46c42d38729c2fb658dea9000fee2b04b184bc4e9668562a72521c1fe45c9e1155ee27e55f1a41cb9e16f931aa5f1b995"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "1a596720fbb28d5c2b2f9cd95842f979bb4a1fb755bd942b6fe1ee0ba12b6edda7cc1fbc79871c48f186eaa5f6407acee64bbc1005b73e795e089b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vmci\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x177c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001900)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1.978764164s ago: executing program 3 (id=1331): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48201, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaa6a69b1e2c16085a720400200000331907800001fe1e0000000e8dc0aab61d1364f69b6d88b"], 0x32) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x19d2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x1c, 0x114, 0x3, {{0x0, 0xfffffffffffffe0f}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c0002400000fe00000000060c0001"], 0xb8}}, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) open_by_handle_at(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400040005000000060000006b3e95cff4e43cf2126ddba767830000"], 0x140) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000240)=""/48, 0x30}, &(0x7f0000000280), 0x8}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r8, 0x4008586f, &(0x7f0000000140)={0x1, 0x6}) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x4, 0xffffffff80000000, 0x3}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000000000901020000000000000000030000030900010073797a3000000000240002000c0002800500010084000000140001"], 0x50}}, 0x8000) r10 = fsmount(r2, 0x0, 0x2) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r11) fchdir(r10) creat(&(0x7f0000000000)='./bus\x00', 0x14f) 722.254773ms ago: executing program 3 (id=1332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x10a, 0x3}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x64, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x5, 0x0, 0x23}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x2d}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 339.521691ms ago: executing program 3 (id=1333): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg(r1, &(0x7f0000001640)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000100)="86863c66e6", 0x5}, {&(0x7f00000003c0)="11dcc71afa4f012117", 0x9}], 0x2}}], 0x1, 0x40040) 83.659476ms ago: executing program 1 (id=1334): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001080)={0xffffffff, {{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x1, 0xa, [{{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e22, @local}}]}, 0x590) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x5c, r3, 0x5eae78d9c54e9d3f, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x4f, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) 0s ago: executing program 3 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0xd, 0x6, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8000, 0x3, 0x9}}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x60}, 0xc0) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x4, 0x10000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x3d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80001}, 0xc8c0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2001001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x41}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x42}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x487}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44014}, 0x4) write$P9_RRENAMEAT(r4, &(0x7f0000000700)={0x7, 0x4b, 0x1}, 0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x40082102, &(0x7f0000000800)=r8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000880)={{r9}, "9ed8bbf0c9fd62ad09d47808bc39deaf62a11675da2b939a73e0e7676cad919be93462be58c0c5177f3afd7176e8fa028f387c1a042d3dfdb55a0c8ba433ddc4d461bd035cfccf4ffa7a1c60251971324053dd80a71a1496b4087a23094132431d6a7c85c92dccf0c1ee6d043405c7b50adcb64b74684aab359a9a8d9957f29a01ba4bde3c4849a383b26950a10b3410da69cdbf11e42f7e603098eedac27ddc9d35b5fd82c99d2966f848315a5e221507576391224de20a9b538790953cb95ecb5646b81d41543c16f993861dffb0237598ae8f0682bd6aa3eff2ff82b495ff57d78e47fb2f7af9e08389e8c5b9c95e979e6b714a0bb569b5df71176222ec1bd3744ec8498c52fefaff5782b6a1d0176c019e7b635ded5966681aa0841d8446e50ea2662f29691c3c6c505b21d08973197705cca4a6b4eb412f69c12911348b4a4da423fe1545a690506885c109bc9196175d2700e8ce60d3f41e1991c3019310250e4fdd2c9fa39bfaac8fdafcede9d5ce2a7f54cda6b3ec83011118bd6c6e1a3e23cde885a41d0774ba05d61df6a243b05b083e50f352060d097746b65f5eead8eec4f2b50519e227d3a1a1dcbde2c475bc453e9af811fc55f63b1aff33353544b5529f3dff21d4200401d5e40a6021a45a32e0c817f03294249ddf1d4830a44879807f2a43383a5adc1dcfa3444e173fe91830c9852c3b86a6964efc018d4bd4106e03758898bdb7c10901c99a861a99bbfd97233a3f4755c483b67c5e888412e1d9dcfe9fa68405817574a3b7e8f0d825ed737ff450690a45abf77b5546713864ebd68b79bedd90a8ea5bfd929572651021e8a6f5f5a0f3c1e40ae4165a6a520827246295d7354bfcdb526f736434269ae97a71c713838262193d6c97d71e388c83401ae525eee9f577fa12bffca6965928fa2682597713ff5e38b3e2cb0301b3b8040ea0edcd226e2f90b7e9a0b1c85995df074bb9225c4adde3d420da4c41fa86730a8bb9006a5a2a40e2b43e12eb8f2abaeae935bb6fad9e58c87f0b1b6c82967b296c9ba29ce4c6a9132d239972088a64afa8a469d249b6e04d7fe283cc3d6ce1cdf2eb2584b801f5711209e4af6533bbe58024ec44475645ba2865dc6052d93eec605139dadce183669fd42032a1e85c996943957604042909a30ec07f1f211dee78d4d4f2f30b64c0d9ece4dda9aef68cf42e9e4fa80b0c4718660ac12e5aae3ba4eff4f8767885dafb835b09ce6b8412bcfc3f50ec81f8d7b55872d78cc912e48d0380d4de83e9c7dfb14f23053129f405265558aa1e882e9e09494bb9573e40cc12a9e098c168f44578e26128b4a0d26f74e1eb3bfff2924bf9c5c01736c17faae6b4cfec25d9d0bef5a877c04e5319be773d017c72e7ac50ce7c36b878af5e08f0a9767484bb4e6ac3bb7774c1e76f7c73a9ac132a7c087218fb8737fb3f6ac98acb3d74ea939e2f445740127b07d9dfee401bbfd30128a7474d99010570bb075544f0451d3b4f1b4909379332a256dc92e55d77bbffcb96441d9ab32112a0d2a39d7194d3a76d58bb4ea9974feaa21bb45b7b894207664e25c0f54bac247e24b2e65f58a9d5a7cd3200c5bec67de87beb44b87c2cf4e46280953de3aa6a24b84101c1c56124b0c0a63098c400480634f60dc57fd5ff3e0d51e9b30fdcbda3b3e3b7fd42061b1bc4116f5a6ca2fd33356d066bc5a3a57f4eafcaea884d1636a9a4c0ddc78e6f66f67f1f60aa92a888922e6916e8299171a8dc2e35fb0069393fac6132797684a7a9f664d55eb39e31b88003a9d4ad389d1a6ec46f2f78cf885c499517dba3e266a923e0541d16028b23ece7161a57beb3787c8551c685869293df599a46ffb5b566ba32ddc3bbef59f0c3c5f28e9de5ba5b37b68ccd0e5b0ef17f2ec92320cf2cee2fb7262417d1bb443c76e6287520264fdc888b16781ddd8e4038137c7eb31a6f32d426280692a4a210f62db69e64fd0caa93529efdb2dd3ab4c5219aff9294b983b337263f44d4674db806c5ee6bc8be802550b9e1efc1db09e901d1e496d82bf12e93620568b1d152335f094f4e3481ced29eb41bdda2232a657ce34a7da102aab999560d5fd333e9f5ac5fc06625bf6957ab29bc76358b1302489ad1f07022f700336724f56e5f95050c5102a423b0f2421e2c9cf36a4461609c6b3ca17e16fccfec23d04b3efc3e35d117ce362d5f6fe4f88bde95ac72d7bbd33bf4287da921f445a01a9f440ad1e1d50d2eac0584e2f0ea55731af7499a393a764aec507d17ae2a4eb57dd8819a2b42f4a0294144eab7ee2264829a461079ead1bc14506aa71c9a061d52fcccce5bf7e67da75a61bdccd62b99c199fae7013b4bf1ee804716e1268540548f701f113ddc99cb29d9d61d665838df167805bf4cd96c5cc3830c2abca0a4840a7536847243d94ae4feece7794086848c64b7b28c09def61b67829391643204588e67e2e1a9d82fe02198e79c43c031171434aabb0d837026cbf0011cac72c3ab2b99d9821e9910fdc10cab0f0f24c7a952169347136d1d6834204daec029d028d74acc263f11bcf02ee1e7583a3a06f5e3bd1cfc6087342cac7ecf8e8a336728dadbeea3fdcc66d05ad857ef460a53dff16b035a4b92d555fce8b74f9ef3a4d2774d430de7afe806be4286dea31e3dda2117b207e5d606d265253ed40425efa5862d26944290708ccdeff8e3208cafe6db2569a2f79b330d14949a90921af2b25cbfd98fd930ac49b7fda3af35e14f450e9fe9355dabc6ba5990fd427e29f42452eeece8c2fa93ac9f0b984035bd82124aae4a00f1f6f3ba17d2120f80d32b279d5ae5682a6ddb03c6fad5328f17103e0c54887de03b6ce863d4cf0edc88949965cc3b70aa794c2ea6f040bbfe9b339fb4159baa66b4723befef9f0d1577d699fb85769c9761a19f3707be01c99dccf3523dc7b071bdb2be9be77a3d65990e39dfd9697bbcc6acf495042af84b0168f33bdd238974ee3c88c85a0bbe143c78b275f678555cefb586483e07e4ec915ee934d8eaaf4a892dfe038e2eaaaeef5d3a1957e9c9d51b036541491ecab399d1627d420161896a0d19aec13599fdc0d1bab7bdfa77d0a3a1b7f0057fef03ac123c4c96f94fdac68129616628f164b3b9d1e03ae1ddd586ed0ba4117e1fa700c43a34ccd9bda5d64bfd53bca69e5e88b94ee1a6a6317e99505477e3a83da8426d250e9e96305919ee231aa8205a73e3a6805d1e916516ab6546bf813b2846bc9e0c9e251914dd073ccf3bd1ade16082a6a9d63888de83b1997127d669e0949a043a51ad117f7a8e7c0822ca982334cef65a5b351e7088a09dd4578283befe97b1226e899477ff2ded78e49720d66a0eac948d155f412285ecfe95736a1be2dbe5cbc9083e8bc27a58e9a695edc70ebcba363401fe2ac0067a5be0eae668e5b5e440f7355349510a48b0e410d8a8fe1ac1ac3d6be5fe2def3b67f106b07ca3519fc226bb174609a6f99da0a8541de3a87f8a8a90a3e0fec2cd406be744cb10a18ddae89242c7b3dc595230e3e5824497a54b675a601b4d156318ed4c9fc62b0e6e95734b499dcdb2a665e911733b589bf4cae4e72e70610562a520bd57563bc328b5204653ef11dc65bed6bdc4b9513ae0f1fb8a0edc0f70b3dcdad312e29ee295f05720397ad4766bb0433ae6eab3bfc1a29437153bed56914303f7fd283b440c02aee4b2ffacf58901a926915f46933016efa9fa3ef04b5c946925531e729eae61aa28bfc6f695c1dced34818093b875e05040a5d5ec64198ff16597b765daaf0d73fbb16fe873c515425a284c02f3efc31a61b01010fdffdeb40f0923aa660efd8a61f45aed6a7803c2fdc4c4b81c0415b99e107436be2c42dca78c40ae4291b362743fee6a2cc1d0ce9a92f2bb6ddba631d15c18e2b7429a9c4ead981c16f9238d68bcea865b2e12d923e69d86fcc825526ec219416e69976a680176e76ad74160dd370936e22fc30c49afbb09f49409f001232975fee70acf54dc6bb9167514bed448b3b35b6e06988072706a58307697fe51b81325cbe394ec778f2d20e5d0412b686f54dc7aaceb2351710be2c569213f49c9ab113b4883e44ed71be59fcf3c09bed8462d1a97651606b3a018478499320643789006e9b35715151b98f2c78e61bf2063696d3c5a8989cb855b350a42926c3a1085481c98c61926e3b3165d4daed9b03efd76e376d4e6733257fb9b12eaa317dfd9690d772d19a6a09de7cd1df72ad2ee8ea8d3d8c96e9bfc6878c6b4619e00f5e487a1bbb50377a79faed3dc851bad222b6726ab74f7abb3dec3368e7367ead9c2c320188a9f8aee26bfeee06ab4cbc03b0c0940bf85e41e67f461d103be36cb04239bab5015bf5d97cf7d9b32c8d705ce5118edb5d721025e61dc6f1ff096c817735c5338479d7ed9eda3c1e09b1e6aba8bb4f50727cf2a21ebc9b86f9bc975b7829a69437a8d343497e5b0742e5ba611d01105479da012fcd79b5a4ae5ce49f909f56b77f9a59536099fa4d3acdbbae4404a239941c8d4dd3a87ffa49dad76f5ad703358b2c410915ee3eef592182f9987f142292660b913ca050748edcafb9a91df09c9f25812e0b8a6c3d2b19aada1b55742f8aead5f167e380dc2cd1737081e99396f80d375ac76ecc266d18674baf9c9fce301066a9763c8348d962bab22091b35b497a112c1dc4d9883cd545451c5851edc4e57a7f33b798cf1deea89ed7de8b1cd003326b01a57d611f228628dd5f2363e43d02c393d014ff84aab8e4769ed679b4ef438fc82ef452b0977f2f7294d7f39d6cd9a46ff401284fadd8dd451f61cf67e0f3a01634ba7f079d2aca57b8ee418fe8381c83d88e7d49da4598e1ca066e2b357b68711956fa2fe9829b800a275dde764fdc5aca19df68cbf0086c7d4379a286fe9b9ad7bb26713f289f0a1989484c9bda6d5fb7f2338bf3e2a6be20bd69100414659e2070ec62033f71632f6f60f7c93715a6452d8c915292ab48a69ae570dc94552de0c9acde33180a4447923c23b062faab6b87e2ea0e10cbcd6918f1509e5b980f5b0760d3dd42821067ff01b28c9f90e5dee383c9bad2ebd5f3db23883eff58ec05970b7c3cd7832c055b11f68fd9c9f76cfb87511e70ce92e90a739b5eb70da0c1a866aa66dd7f66e14615e4702d2fb321062ac15e339b51841d71ec3c5f45934dfaac64fba1999de92b5a2db9c762e63344f652645d6cf4027def9d85c1a5146d9bab0aba373aaa709563e04b6b6186480b56039c6af9d1453dabd7b663deb696e813915f6798b3abcdc5f6a5290d48366eb4d3189aa0b8b0bdb0e12fef13ebbabf45293654ffb7de8537331133e1df43d51f495692d010b9e6defb412c97af9092585a4d00d6bffad02f020e2a680d9ddb0387b59272e1477d1d5864c978d8ea5ae1147d07b94ad19bab575c2f98486fdf864d7386eb9000f49e2743aaab1b420c1e9d6494fe414a13560e5e30573c7ce1c3ecefad597cbfac532f3dea9128b383689fc85a105b32a74a93f2082d3a241a71c95518fe011a3c8f9005ac4af49cb9430016a35ff3a361e26766ab830d2c1d189b0d9a796818f5fb6d5024d91853a45418d89d2abc1766622c90495585295d2055c3aeadd980ea5a4323cb23807aaacbed72bbed9ea938db18b15ac3c2b7bf27c17a2cacb8157b35a6fa454f3202a56641fdd2e269a6f24da9193c62fc6a37f91f7edf46b9ce3ca06cbe89b4fb364df4f8dbe212da3817b5553b2d8761b9700b1"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000001880)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e22, 0x2e75, @mcast1, 0x1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e24, 0x10, @mcast2, 0x1}, @in6={0xa, 0x4e24, 0xe, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x97d}, @in={0x2, 0x4e20, @multicast1}], 0xb4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001980)={&(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) read$FUSE(r9, &(0x7f00000019c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003a00)={0x0, 0x0}, &(0x7f0000003a40)=0xc) r13 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000003a80)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000003b80)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000003bc0)={0x0, 0x0, 0x0}, &(0x7f0000003c00)=0xc) write$FUSE_DIRENTPLUS(r10, &(0x7f0000003c80)={0x218, 0x0, r11, [{{0x3, 0x2, 0x8, 0x7, 0x8a, 0x76, {0x6, 0xfff, 0xa, 0x1ff, 0x7, 0x400000000000, 0x6736df0c, 0xfffffffd, 0xdf71, 0x8000, 0x0, r12, r13, 0x6, 0x4fbb3bd8}}, {0x6, 0x2, 0x8, 0x2, 'nl80211\x00'}}, {{0x5, 0x3, 0x5, 0x200, 0x10, 0x3, {0x0, 0x8, 0x8, 0x3ff, 0x5, 0x89a, 0x34a5, 0x6, 0x180000, 0xc000, 0x4, r14, r15, 0x4, 0x3}}, {0x0, 0x3, 0x1, 0xfffffffe, '\x00'}}, {{0x3, 0x1, 0x401, 0x40, 0x5, 0xf, {0x1, 0x9, 0x5, 0xffff, 0x8001, 0x4cc, 0x3, 0x9, 0x16c, 0x8000, 0x400, 0x0, 0xffffffffffffffff, 0x3, 0xecc}}, {0x5, 0x6, 0x30, 0x3, '/sys/kernel/debug/binder/failed_transaction_log\x00'}}]}, 0x218) kernel console output (not intermixed with test programs): [ 349.863485][ T9] usb 4-1: SerialNumber: syz [ 350.147814][ T9] ftdi_sio 4-1:7.170: FTDI USB Serial Device converter detected [ 350.160158][ T9] ftdi_sio ttyUSB0: unknown device type: 0x3f89 [ 350.224944][ T9] usb 4-1: USB disconnect, device number 29 [ 350.228818][ T9473] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1083'. [ 350.228868][ T9473] openvswitch: netlink: Message has 4 unknown bytes. [ 350.277505][ T9] ftdi_sio 4-1:7.170: device disconnected [ 350.446484][ T9198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.505824][ T9198] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.556528][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.556792][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.598917][ T1380] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.599107][ T1380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.632166][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.632748][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.702506][ T5604] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 350.891754][ T5604] usb 2-1: Using ep0 maxpacket: 32 [ 350.905730][ T5604] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 350.905760][ T5604] usb 2-1: config 0 has no interface number 0 [ 350.905813][ T5604] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 350.908220][ T5604] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 350.908253][ T5604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.908281][ T5604] usb 2-1: Product: syz [ 350.908293][ T5604] usb 2-1: Manufacturer: syz [ 350.908304][ T5604] usb 2-1: SerialNumber: syz [ 350.939743][ T5604] usb 2-1: config 0 descriptor?? [ 350.978144][ T9476] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 351.051718][ T5691] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 351.208167][ T9476] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 351.243593][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 351.245708][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 351.245739][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 351.286986][ T5691] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 351.287017][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.287037][ T5691] usb 4-1: Product: syz [ 351.287052][ T5691] usb 4-1: Manufacturer: syz [ 351.287068][ T5691] usb 4-1: SerialNumber: syz [ 351.389946][ T5691] usb 4-1: config 0 descriptor?? [ 351.420249][ T5691] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 351.420287][ T5691] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 351.678524][ T5604] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 351.678814][ T5604] asix 2-1:0.188: probe with driver asix failed with error -61 [ 351.872414][ T5691] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 351.919023][ T5691] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 351.919508][ T5691] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 351.919528][ T5691] em28xx 4-1:0.0: No AC97 audio processor [ 351.963026][ T5691] usb 4-1: USB disconnect, device number 30 [ 351.966335][ T5691] em28xx 4-1:0.0: Disconnecting em28xx [ 352.051700][ T5691] em28xx 4-1:0.0: Freeing device [ 352.089154][ T37] usb 1-1: USB disconnect, device number 41 [ 352.223017][ T9473] netlink: 'syz.1.1083': attribute type 29 has an invalid length. [ 352.590034][ T9198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.229171][ T32] usb 2-1: USB disconnect, device number 43 [ 355.290016][ T9198] veth0_vlan: entered promiscuous mode [ 355.375456][ T9198] veth1_vlan: entered promiscuous mode [ 355.963581][ T9504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.127968][ T9198] veth0_macvtap: entered promiscuous mode [ 356.319385][ T9504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.416514][ T9198] veth1_macvtap: entered promiscuous mode [ 356.646477][ T9504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.965057][ T9504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.025309][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.060560][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.100097][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.100387][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.100439][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.100477][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.322662][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 357.540121][ T9505] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.595390][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.595420][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.595462][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 357.595488][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.599737][ T9505] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.618486][ T9] usb 2-1: config 0 descriptor?? [ 357.854527][ T9505] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.856251][ T9505] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.167610][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.167634][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.663312][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.663965][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.672573][ T32] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 358.758821][ T1366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.758843][ T1366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.834654][ T9532] FAULT_INJECTION: forcing a failure. [ 358.834654][ T9532] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 358.834687][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.834708][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.834720][ T9532] Call Trace: [ 358.834728][ T9532] [ 358.834736][ T9532] dump_stack_lvl+0xe8/0x150 [ 358.834765][ T9532] should_fail_ex+0x46b/0x600 [ 358.834799][ T9532] prepare_alloc_pages+0x22a/0x6b0 [ 358.834825][ T9532] __alloc_frozen_pages_noprof+0x12f/0x380 [ 358.834850][ T9532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.834870][ T9532] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 358.834892][ T9532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.834914][ T9532] ? __pfx_policy_nodemask+0x10/0x10 [ 358.834937][ T9532] __alloc_pages_noprof+0x10/0x100 [ 358.834957][ T9532] alloc_pages_bulk_noprof+0x67e/0x890 [ 358.834976][ T9532] ? alloc_pages_mpol+0x2ae/0x380 [ 358.834998][ T9532] ? alloc_pages_noprof+0x161/0x2f0 [ 358.835039][ T9532] __kasan_populate_vmalloc+0xc1/0x1d0 [ 358.835068][ T9532] ? rt_spin_unlock+0x160/0x200 [ 358.835102][ T9532] alloc_vmap_area+0xd47/0x1480 [ 358.835142][ T9532] ? __pfx_alloc_vmap_area+0x10/0x10 [ 358.835171][ T9532] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 358.835192][ T9532] ? __get_vm_area_node+0x13f/0x300 [ 358.835249][ T9532] ? copy_process+0x89b/0x4450 [ 358.835286][ T9532] __get_vm_area_node+0x1f8/0x300 [ 358.835322][ T9532] __vmalloc_node_range_noprof+0x36a/0x1750 [ 358.835352][ T9532] ? copy_process+0x89b/0x4450 [ 358.835378][ T9532] ? percpu_ref_get_many+0x19/0x140 [ 358.835439][ T9532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 358.835478][ T9532] ? rcu_is_watching+0x15/0xb0 [ 358.835511][ T9532] ? memcpy_and_pad+0x48/0x80 [ 358.835542][ T9532] __vmalloc_node_noprof+0xc2/0x100 [ 358.835568][ T9532] ? copy_process+0x89b/0x4450 [ 358.835593][ T9532] ? copy_process+0x89b/0x4450 [ 358.835620][ T9532] dup_task_struct+0x298/0x840 [ 358.835646][ T9532] ? rt_spin_unlock+0x160/0x200 [ 358.835668][ T9532] copy_process+0x89b/0x4450 [ 358.835694][ T9532] ? _parse_integer_limit+0x192/0x1e0 [ 358.835727][ T9532] ? kstrtoull+0x12f/0x1d0 [ 358.835763][ T9532] ? get_pid_task+0x20/0x1f0 [ 358.835789][ T9532] ? __pfx_copy_process+0x10/0x10 [ 358.835817][ T9532] ? get_pid_task+0x20/0x1f0 [ 358.835833][ T9532] ? get_pid_task+0x20/0x1f0 [ 358.835856][ T9532] kernel_clone+0x2d7/0x940 [ 358.835878][ T9532] ? __pfx_kernel_clone+0x10/0x10 [ 358.835893][ T9532] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.835935][ T9532] __x64_sys_clone+0x1b6/0x230 [ 358.835957][ T9532] ? __pfx___x64_sys_clone+0x10/0x10 [ 358.835989][ T9532] ? __pfx_ksys_write+0x10/0x10 [ 358.836014][ T9532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.836035][ T9532] do_syscall_64+0x15f/0xf80 [ 358.836067][ T9532] ? trace_irq_disable+0x3b/0x140 [ 358.836099][ T9532] ? clear_bhb_loop+0x40/0x90 [ 358.836123][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.836144][ T9532] RIP: 0033:0x7fb3f5ddce59 [ 358.836165][ T9532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.836182][ T9532] RSP: 002b:00007fb3f4035fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 358.836203][ T9532] RAX: ffffffffffffffda RBX: 00007fb3f6055fa0 RCX: 00007fb3f5ddce59 [ 358.836218][ T9532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000b21e0000 [ 358.836230][ T9532] RBP: 00007fb3f4036090 R08: 0000000000000000 R09: 0000000000000000 [ 358.836242][ T9532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 358.836253][ T9532] R13: 00007fb3f6056038 R14: 00007fb3f6055fa0 R15: 00007ffe8bbd9f48 [ 358.836281][ T9532] [ 358.837476][ T9532] syz.3.1095: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 358.838397][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 358.879029][ T9532] /,mems_allowed=0-1 [ 358.879217][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.879280][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.879299][ T9532] Call Trace: [ 358.879309][ T9532] [ 358.879319][ T9532] dump_stack_lvl+0xe8/0x150 [ 358.879409][ T9532] warn_alloc+0x24c/0x270 [ 358.879453][ T9532] ? kasan_quarantine_put+0xbb/0x1f0 [ 358.879500][ T9532] ? __pfx_warn_alloc+0x10/0x10 [ 358.879557][ T9532] ? __get_vm_area_node+0x211/0x300 [ 358.879623][ T9532] ? __get_vm_area_node+0x13f/0x300 [ 358.879659][ T9532] ? copy_process+0x89b/0x4450 [ 358.879742][ T9532] ? __get_vm_area_node+0x211/0x300 [ 358.879804][ T9532] __vmalloc_node_range_noprof+0x38f/0x1750 [ 358.879862][ T9532] ? percpu_ref_get_many+0x19/0x140 [ 358.879963][ T9532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 358.880026][ T9532] ? rcu_is_watching+0x15/0xb0 [ 358.880094][ T9532] ? memcpy_and_pad+0x48/0x80 [ 358.880142][ T9532] __vmalloc_node_noprof+0xc2/0x100 [ 358.880205][ T9532] ? copy_process+0x89b/0x4450 [ 358.880272][ T9532] ? copy_process+0x89b/0x4450 [ 358.880309][ T9532] dup_task_struct+0x298/0x840 [ 358.880372][ T9532] ? rt_spin_unlock+0x160/0x200 [ 358.880450][ T9532] copy_process+0x89b/0x4450 [ 358.880491][ T9532] ? _parse_integer_limit+0x192/0x1e0 [ 358.880610][ T9532] ? kstrtoull+0x12f/0x1d0 [ 358.880655][ T9532] ? get_pid_task+0x20/0x1f0 [ 358.880709][ T9532] ? __pfx_copy_process+0x10/0x10 [ 358.880798][ T9532] ? get_pid_task+0x20/0x1f0 [ 358.880820][ T9532] ? get_pid_task+0x20/0x1f0 [ 358.880861][ T9532] kernel_clone+0x2d7/0x940 [ 358.880936][ T9532] ? __pfx_kernel_clone+0x10/0x10 [ 358.880970][ T9532] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.881037][ T9532] __x64_sys_clone+0x1b6/0x230 [ 358.881103][ T9532] ? __pfx___x64_sys_clone+0x10/0x10 [ 358.881156][ T9532] ? __pfx_ksys_write+0x10/0x10 [ 358.881208][ T9532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.881259][ T9532] do_syscall_64+0x15f/0xf80 [ 358.881314][ T9532] ? trace_irq_disable+0x3b/0x140 [ 358.881366][ T9532] ? clear_bhb_loop+0x40/0x90 [ 358.881440][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.881480][ T9532] RIP: 0033:0x7fb3f5ddce59 [ 358.881502][ T9532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.881537][ T9532] RSP: 002b:00007fb3f4035fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 358.881559][ T9532] RAX: ffffffffffffffda RBX: 00007fb3f6055fa0 RCX: 00007fb3f5ddce59 [ 358.881576][ T9532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000b21e0000 [ 358.881588][ T9532] RBP: 00007fb3f4036090 R08: 0000000000000000 R09: 0000000000000000 [ 358.881600][ T9532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 358.881613][ T9532] R13: 00007fb3f6056038 R14: 00007fb3f6055fa0 R15: 00007ffe8bbd9f48 [ 358.881645][ T9532] [ 358.882096][ T9532] Mem-Info: [ 358.882113][ T9532] active_anon:5762 inactive_anon:0 isolated_anon:0 [ 358.882113][ T9532] active_file:0 inactive_file:51743 isolated_file:0 [ 358.882113][ T9532] unevictable:768 dirty:151 writeback:0 [ 358.882113][ T9532] slab_reclaimable:11608 slab_unreclaimable:99509 [ 358.882113][ T9532] mapped:25226 shmem:1289 pagetables:1192 [ 358.882113][ T9532] sec_pagetables:0 bounce:0 [ 358.882113][ T9532] kernel_misc_reclaimable:0 [ 358.882113][ T9532] free:1332190 free_pcp:2834 free_cma:0 [ 358.882174][ T9532] Node 0 active_anon:23048kB inactive_anon:0kB active_file:0kB inactive_file:206764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100904kB dirty:600kB writeback:0kB shmem:3620kB kernel_stack:12980kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 358.882231][ T9532] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 358.882284][ T9532] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.882355][ T9532] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 358.882396][ T9532] Node 0 DMA32 free:1365988kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23048kB inactive_anon:0kB active_file:0kB inactive_file:206764kB unevictable:1536kB writepending:600kB zspages:0kB present:3129332kB managed:2552444kB mlocked:0kB bounce:0kB free_pcp:11328kB local_pcp:964kB free_cma:0kB [ 358.882477][ T9532] lowmem_reserve[]: 0 0 0 0 0 [ 358.882513][ T9532] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 358.882574][ T9532] lowmem_reserve[]: 0 0 0 0 0 [ 358.882610][ T9532] Node 1 Normal free:3947412kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.882673][ T9532] lowmem_reserve[]: 0 0 0 0 0 [ 358.882707][ T9532] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 358.882841][ T9532] Node 0 DMA32: 897*4kB (UM) 1042*8kB (UME) 420*16kB (UME) 524*32kB (UME) 204*64kB (UME) 167*128kB (UME) 117*256kB (UM) 39*512kB (UME) 15*1024kB (UME) 9*2048kB (UM) 296*4096kB (UM) = 1365972kB [ 358.883069][ T9532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 358.883380][ T9532] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 12*32kB (UM) 8*64kB (UM) 3*128kB (UM) 2*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (UM) = 3947412kB [ 358.884422][ T9532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.884479][ T9532] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.884530][ T9532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.884583][ T9532] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.884628][ T9532] 53028 total pagecache pages [ 358.884659][ T9532] 0 pages in swap cache [ 358.884680][ T9532] Free swap = 124996kB [ 358.884701][ T9532] Total swap = 124996kB [ 358.884724][ T9532] 2097051 pages RAM [ 358.884755][ T9532] 0 pages HighMem/MovableOnly [ 358.884769][ T9532] 427106 pages reserved [ 358.884791][ T9532] 0 pages cma reserved [ 358.979843][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 358.979880][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.037983][ T32] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.038015][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.038037][ T32] usb 1-1: Product: syz [ 359.038052][ T32] usb 1-1: Manufacturer: syz [ 359.038068][ T32] usb 1-1: SerialNumber: syz [ 359.802768][ T32] usb 1-1: config 0 descriptor?? [ 360.005631][ T32] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 360.005669][ T32] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 360.220081][ T9] usb 2-1: USB disconnect, device number 44 [ 360.292198][ T32] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 360.292648][ T32] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 360.306568][ T32] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 360.306592][ T32] em28xx 1-1:0.0: No AC97 audio processor [ 360.339204][ T32] usb 1-1: USB disconnect, device number 42 [ 360.371200][ T32] em28xx 1-1:0.0: Disconnecting em28xx [ 360.399563][ T32] em28xx 1-1:0.0: Freeing device [ 360.414930][ T9538] FAULT_INJECTION: forcing a failure. [ 360.414930][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 360.414966][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.1.1097 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.414992][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.415005][ T9538] Call Trace: [ 360.415014][ T9538] [ 360.415023][ T9538] dump_stack_lvl+0xe8/0x150 [ 360.415079][ T9538] should_fail_ex+0x46b/0x600 [ 360.415121][ T9538] should_failslab+0xa8/0x100 [ 360.415146][ T9538] __kmalloc_noprof+0xdf/0x7b0 [ 360.415183][ T9538] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 360.415218][ T9538] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 360.415254][ T9538] genl_family_rcv_msg_doit+0xd9/0x330 [ 360.415289][ T9538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 360.415330][ T9538] ? apparmor_capable+0x126/0x170 [ 360.415367][ T9538] ? bpf_lsm_capable+0x9/0x20 [ 360.415408][ T9538] ? security_capable+0x7e/0x2c0 [ 360.415440][ T9538] genl_rcv_msg+0x61c/0x7a0 [ 360.415473][ T9538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.415497][ T9538] ? ref_tracker_free+0x673/0x820 [ 360.415518][ T9538] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 360.415543][ T9538] ? __pfx_nl80211_set_qos_map+0x10/0x10 [ 360.415564][ T9538] ? __pfx_nl80211_post_doit+0x10/0x10 [ 360.415588][ T9538] ? ____sys_sendmsg+0x55c/0x870 [ 360.415620][ T9538] ? ___sys_sendmsg+0x2a5/0x360 [ 360.415650][ T9538] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 360.415682][ T9538] ? do_syscall_64+0x15f/0xf80 [ 360.415713][ T9538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.415746][ T9538] netlink_rcv_skb+0x232/0x4b0 [ 360.415783][ T9538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.415811][ T9538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.415860][ T9538] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.415885][ T9538] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.415913][ T9538] genl_rcv+0x28/0x40 [ 360.415930][ T9538] netlink_unicast+0x780/0x920 [ 360.415960][ T9538] netlink_sendmsg+0x813/0xb40 [ 360.415992][ T9538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.416018][ T9538] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 360.416044][ T9538] ? aa_sock_msg_perm+0x122/0x200 [ 360.416064][ T9538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.416088][ T9538] sock_sendmsg_nosec+0x112/0x150 [ 360.416109][ T9538] ____sys_sendmsg+0x55c/0x870 [ 360.416141][ T9538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.416173][ T9538] ? import_iovec+0x73/0xa0 [ 360.416195][ T9538] ___sys_sendmsg+0x2a5/0x360 [ 360.416218][ T9538] ? __lock_acquire+0x6b5/0x2d10 [ 360.416239][ T9538] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.416288][ T9538] ? __fget_files+0x2a/0x420 [ 360.416310][ T9538] ? __fget_files+0x3a6/0x420 [ 360.416339][ T9538] __x64_sys_sendmsg+0x1c3/0x2a0 [ 360.416366][ T9538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.416403][ T9538] ? __pfx_ksys_write+0x10/0x10 [ 360.416425][ T9538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.416442][ T9538] do_syscall_64+0x15f/0xf80 [ 360.416465][ T9538] ? trace_irq_disable+0x3b/0x140 [ 360.416491][ T9538] ? clear_bhb_loop+0x40/0x90 [ 360.416510][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.416527][ T9538] RIP: 0033:0x7fac47f6ce59 [ 360.416543][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.416557][ T9538] RSP: 002b:00007fac461c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.416575][ T9538] RAX: ffffffffffffffda RBX: 00007fac481e5fa0 RCX: 00007fac47f6ce59 [ 360.416587][ T9538] RDX: 0000000044040080 RSI: 0000200000000440 RDI: 0000000000000003 [ 360.416598][ T9538] RBP: 00007fac461c6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.416607][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.416617][ T9538] R13: 00007fac481e6038 R14: 00007fac481e5fa0 R15: 00007ffe81aa76b8 [ 360.416641][ T9538] [ 361.682875][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 361.866196][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.866227][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.866268][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 361.866295][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.891171][ T9] usb 1-1: config 0 descriptor?? [ 362.651740][ T5717] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 362.801720][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 362.804630][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.807777][ T5717] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 362.807809][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 362.807832][ T5717] usb 2-1: Product: syz [ 362.807848][ T5717] usb 2-1: Manufacturer: syz [ 362.807865][ T5717] usb 2-1: SerialNumber: syz [ 362.896548][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.897182][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.905899][ T5717] usb 2-1: config 0 descriptor?? [ 363.115469][ T5717] usb 2-1: USB disconnect, device number 45 [ 363.811674][ T8324] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 363.961728][ T8324] usb 4-1: Invalid ep0 maxpacket: 16 [ 364.091835][ T8324] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 364.221788][ T5717] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 364.272179][ T8324] usb 4-1: Invalid ep0 maxpacket: 16 [ 364.279893][ T8324] usb usb4-port1: attempt power cycle [ 364.312004][ T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 364.403850][ T5717] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.403892][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 364.403929][ T5717] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 364.403956][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.418446][ T5717] usb 2-1: config 0 descriptor?? [ 364.482634][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 364.499876][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 364.499914][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.529600][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 364.529636][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.529659][ T32] usb 3-1: Product: syz [ 364.529674][ T32] usb 3-1: Manufacturer: syz [ 364.529689][ T32] usb 3-1: SerialNumber: syz [ 364.540070][ T32] usb 3-1: config 0 descriptor?? [ 364.596164][ T32] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 364.596207][ T32] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 364.632147][ T8324] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 364.635065][ T37] usb 1-1: USB disconnect, device number 43 [ 364.655090][ T8324] usb 4-1: Invalid ep0 maxpacket: 16 [ 364.705959][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.713039][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.793397][ T8324] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 364.820900][ T8324] usb 4-1: Invalid ep0 maxpacket: 16 [ 364.821350][ T8324] usb usb4-port1: unable to enumerate USB device [ 365.036093][ T32] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 365.038857][ T32] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 365.044643][ T32] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 365.044687][ T32] em28xx 3-1:0.0: No AC97 audio processor [ 365.110735][ T9581] vxcan0: tx address claim with different name [ 365.193188][ T32] usb 3-1: USB disconnect, device number 15 [ 365.207317][ T32] em28xx 3-1:0.0: Disconnecting em28xx [ 365.240104][ T32] em28xx 3-1:0.0: Freeing device [ 365.383935][ T5717] usbhid 2-1:0.0: can't add hid device: -71 [ 365.384061][ T5717] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 365.403425][ T37] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 365.452986][ T5717] usb 2-1: USB disconnect, device number 46 [ 365.562063][ T37] usb 1-1: device descriptor read/64, error -71 [ 365.801771][ T37] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 365.941711][ T37] usb 1-1: device descriptor read/64, error -71 [ 366.021600][ T9594] tmpfs: Bad value for 'mpol' [ 366.053105][ T37] usb usb1-port1: attempt power cycle [ 366.391766][ T37] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 366.412992][ T37] usb 1-1: device descriptor read/8, error -71 [ 366.469843][ T9596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1114'. [ 366.651821][ T37] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 366.673728][ T37] usb 1-1: device descriptor read/8, error -71 [ 366.761702][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 366.782060][ T37] usb usb1-port1: unable to enumerate USB device [ 366.911699][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 366.920836][ T32] usb 3-1: config 2 has an invalid interface number: 186 but max is 2 [ 366.920867][ T32] usb 3-1: config 2 has an invalid interface number: 35 but max is 2 [ 366.920891][ T32] usb 3-1: config 2 has an invalid interface number: 10 but max is 2 [ 366.920913][ T32] usb 3-1: config 2 has an invalid interface number: 63 but max is 2 [ 366.920935][ T32] usb 3-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 366.920958][ T32] usb 3-1: config 2 has no interface number 0 [ 366.920976][ T32] usb 3-1: config 2 has no interface number 1 [ 366.920994][ T32] usb 3-1: config 2 has no interface number 2 [ 366.921012][ T32] usb 3-1: config 2 has no interface number 3 [ 366.921096][ T32] usb 3-1: config 2 interface 186 altsetting 56 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 366.921145][ T32] usb 3-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 366.921172][ T32] usb 3-1: config 2 interface 35 altsetting 2 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 366.921203][ T32] usb 3-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 366.921228][ T32] usb 3-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 366.921253][ T32] usb 3-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 366.921277][ T32] usb 3-1: config 2 interface 35 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 366.921316][ T32] usb 3-1: config 2 interface 10 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 366.921345][ T32] usb 3-1: config 2 interface 10 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.921374][ T32] usb 3-1: too many endpoints for config 2 interface 63 altsetting 143: 46, using maximum allowed: 30 [ 366.921415][ T32] usb 3-1: config 2 interface 63 altsetting 143 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 366.921444][ T32] usb 3-1: config 2 interface 63 altsetting 143 has 2 endpoint descriptors, different from the interface descriptor's value: 46 [ 366.921473][ T32] usb 3-1: config 2 interface 186 has no altsetting 0 [ 366.921493][ T32] usb 3-1: config 2 interface 35 has no altsetting 0 [ 366.921513][ T32] usb 3-1: config 2 interface 10 has no altsetting 0 [ 366.921905][ T32] usb 3-1: config 2 interface 63 has no altsetting 0 [ 366.961925][ T32] usb 3-1: New USB device found, idVendor=1293, idProduct=0002, bcdDevice=75.e4 [ 366.962019][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.962116][ T32] usb 3-1: Product: ы [ 366.962161][ T32] usb 3-1: Manufacturer:   [ 366.962204][ T32] usb 3-1: SerialNumber: ⮄ [ 366.981227][ T5717] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 367.221716][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 367.239606][ T5717] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 367.239638][ T5717] usb 4-1: config 0 has no interface number 0 [ 367.239689][ T5717] usb 4-1: config 0 interface 184 has no altsetting 0 [ 367.263049][ T5717] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 367.263085][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.263108][ T5717] usb 4-1: Product: syz [ 367.263124][ T5717] usb 4-1: Manufacturer: syz [ 367.263141][ T5717] usb 4-1: SerialNumber: syz [ 367.326417][ T5717] usb 4-1: config 0 descriptor?? [ 367.720148][ T32] usb 3-1: USB disconnect, device number 16 [ 367.969741][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 367.969773][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 368.130299][ T9604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1117'. [ 368.130324][ T9604] tipc: Invalid UDP bearer configuration [ 368.130452][ T9604] tipc: Enabling of bearer rejected, failed to enable media [ 368.380831][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 368.380869][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 368.380892][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 368.380914][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 368.381232][ T5717] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 368.459030][ T5717] usb 4-1: USB disconnect, device number 35 [ 368.498107][ T9607] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1119'. [ 368.801716][ T8324] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 368.931713][ T32] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 368.978955][ T8324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.978985][ T8324] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.979027][ T8324] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 368.979054][ T8324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.026281][ T8324] usb 3-1: config 0 descriptor?? [ 369.053320][ T9612] vxcan0: tx address claim with dest, not broadcast [ 369.101848][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 369.106391][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 369.106429][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.110843][ T32] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 369.110876][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.110899][ T32] usb 1-1: Product: syz [ 369.110915][ T32] usb 1-1: Manufacturer: syz [ 369.110931][ T32] usb 1-1: SerialNumber: syz [ 369.196925][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 369.197883][ T9616] FAULT_INJECTION: forcing a failure. [ 369.197883][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 369.197934][ T9616] CPU: 1 UID: 0 PID: 9616 Comm: syz.1.1122 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.197960][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.197979][ T9616] Call Trace: [ 369.197992][ T9616] [ 369.198002][ T9616] dump_stack_lvl+0xe8/0x150 [ 369.198033][ T9616] should_fail_ex+0x46b/0x600 [ 369.198079][ T9616] should_failslab+0xa8/0x100 [ 369.198104][ T9616] __kmalloc_cache_noprof+0x84/0x690 [ 369.198124][ T9616] ? alloc_pipe_info+0xe8/0x4d0 [ 369.198152][ T9616] alloc_pipe_info+0xe8/0x4d0 [ 369.198179][ T9616] splice_direct_to_actor+0xa19/0xc80 [ 369.198219][ T9616] ? kstrtouint+0x6e/0xe0 [ 369.198255][ T9616] ? __pfx_direct_splice_actor+0x10/0x10 [ 369.198292][ T9616] ? __pfx_aa_file_perm+0x10/0x10 [ 369.198323][ T9616] ? __lock_acquire+0x6b5/0x2d10 [ 369.198345][ T9616] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 369.198387][ T9616] do_splice_direct+0x19b/0x2a0 [ 369.198421][ T9616] ? __pfx_do_splice_direct+0x10/0x10 [ 369.198453][ T9616] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 369.198513][ T9616] ? rw_verify_area+0x25b/0x4e0 [ 369.198551][ T9616] do_sendfile+0x547/0x7e0 [ 369.198586][ T9616] ? __pfx_do_sendfile+0x10/0x10 [ 369.198625][ T9616] __se_sys_sendfile64+0xdf/0x1a0 [ 369.198655][ T9616] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 369.198689][ T9616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.198712][ T9616] do_syscall_64+0x15f/0xf80 [ 369.198744][ T9616] ? trace_irq_disable+0x3b/0x140 [ 369.198778][ T9616] ? clear_bhb_loop+0x40/0x90 [ 369.198805][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.198828][ T9616] RIP: 0033:0x7fac47f6ce59 [ 369.198848][ T9616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.198868][ T9616] RSP: 002b:00007fac461c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 369.198891][ T9616] RAX: ffffffffffffffda RBX: 00007fac481e5fa0 RCX: 00007fac47f6ce59 [ 369.198907][ T9616] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 369.198921][ T9616] RBP: 00007fac461c6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.198934][ T9616] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 369.198947][ T9616] R13: 00007fac481e6038 R14: 00007fac481e5fa0 R15: 00007ffe81aa76b8 [ 369.198979][ T9616] [ 369.337167][ T32] usb 1-1: config 0 descriptor?? [ 369.518997][ T32] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 369.519036][ T32] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 369.814182][ T5691] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 369.892648][ T32] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 369.892986][ T32] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 369.893664][ T32] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 369.893709][ T32] em28xx 1-1:0.0: No AC97 audio processor [ 369.937119][ T32] usb 1-1: USB disconnect, device number 48 [ 369.939857][ T32] em28xx 1-1:0.0: Disconnecting em28xx [ 369.976153][ T5691] usb 2-1: config index 0 descriptor too short (expected 6930, got 18) [ 369.978510][ T32] em28xx 1-1:0.0: Freeing device [ 369.978914][ T5691] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 369.978941][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.978969][ T5691] usb 2-1: Product: syz [ 369.978980][ T5691] usb 2-1: Manufacturer: syz [ 369.978991][ T5691] usb 2-1: SerialNumber: syz [ 370.050927][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.064589][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.257025][ T9628] tipc: Invalid UDP bearer configuration [ 370.257069][ T9628] tipc: Enabling of bearer rejected, failed to enable media [ 370.259056][ T5691] gspca_main: spca508-2.14.0 probing 041e:4018 [ 370.656013][ T5691] gspca_spca508: reg_read err -32 [ 370.657291][ T5691] gspca_spca508: reg_read err -71 [ 370.657701][ T5691] gspca_spca508: reg_read err -71 [ 370.672860][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 370.690496][ T5691] gspca_spca508: reg_read err -71 [ 370.697781][ T5691] gspca_spca508: reg write: error -71 [ 370.698057][ T5691] spca508 2-1:143.0: probe with driver spca508 failed with error -71 [ 370.741869][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 370.758308][ T5691] usb 2-1: USB disconnect, device number 47 [ 370.792176][ T9637] vxcan0: tx address claim with dest, not broadcast [ 370.883672][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 371.061802][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 371.064945][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.064981][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.065010][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 371.065028][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.069182][ T9] usb 1-1: config 0 descriptor?? [ 371.123891][ T9] hub 1-1:0.0: USB hub found [ 371.489221][ T5717] usb 3-1: USB disconnect, device number 17 [ 371.697653][ T9653] tipc: Invalid UDP bearer configuration [ 371.697700][ T9653] tipc: Enabling of bearer rejected, failed to enable media [ 372.111800][ T5717] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 372.281693][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 372.286339][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 372.286422][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 372.290315][ T5717] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 372.290350][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.290432][ T5717] usb 4-1: Product: syz [ 372.290450][ T5717] usb 4-1: Manufacturer: syz [ 372.290466][ T5717] usb 4-1: SerialNumber: syz [ 372.408867][ T5717] usb 4-1: config 0 descriptor?? [ 372.426557][ T5717] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 372.426649][ T5717] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 372.493326][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 372.534074][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 372.537465][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 372.608424][ T9] usb 1-1: USB disconnect, device number 49 [ 372.749874][ T9671] vxcan0: tx address claim with dest, not broadcast [ 372.925489][ T5717] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 372.927423][ T5717] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 372.927805][ T5717] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 372.927822][ T5717] em28xx 4-1:0.0: No AC97 audio processor [ 372.970725][ T5717] usb 4-1: USB disconnect, device number 36 [ 372.987700][ T5717] em28xx 4-1:0.0: Disconnecting em28xx [ 373.052737][ T5691] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 373.077587][ T5717] em28xx 4-1:0.0: Freeing device [ 373.206982][ T5691] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 373.207019][ T5691] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 373.207048][ T5691] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 373.209503][ T5691] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 373.209532][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.209550][ T5691] usb 3-1: Product: syz [ 373.209563][ T5691] usb 3-1: Manufacturer: syz [ 373.209577][ T5691] usb 3-1: SerialNumber: syz [ 373.297849][ T5691] usb 3-1: config 0 descriptor?? [ 373.329398][ T9674] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 373.329599][ T9674] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 373.351862][ T5691] usb 3-1: ucan: probing device on interface #0 [ 373.443573][ T9682] binder: BINDER_SET_CONTEXT_MGR already set [ 373.443590][ T9682] binder: 9680:9682 ioctl 4018620d 200000000340 returned -16 [ 373.709599][ T9691] binder: 9689:9691 ioctl 4018620d 0 returned -22 [ 373.852141][ T5815] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 373.989335][ T9695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1147'. [ 374.025352][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.025416][ T5815] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 374.025498][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.047401][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 374.086101][ T5691] ucan 3-1:0.0: probe with driver ucan failed with error -22 [ 374.105958][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'. [ 374.128921][ T5815] usb 2-1: config 0 descriptor?? [ 374.151158][ T5815] pwc: Askey VC010 type 2 USB webcam detected. [ 374.338775][ T32] usb 3-1: USB disconnect, device number 18 [ 374.405351][ T9704] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 374.585365][ T5815] pwc: recv_control_msg error -32 req 02 val 2b00 [ 374.587384][ T5815] pwc: recv_control_msg error -32 req 02 val 2700 [ 374.588849][ T5815] pwc: recv_control_msg error -32 req 02 val 2c00 [ 374.590647][ T5815] pwc: recv_control_msg error -32 req 04 val 1000 [ 374.618233][ T5815] pwc: recv_control_msg error -32 req 04 val 1300 [ 374.619509][ T5815] pwc: recv_control_msg error -32 req 04 val 1400 [ 374.620214][ T5815] pwc: recv_control_msg error -32 req 02 val 2000 [ 374.621065][ T5815] pwc: recv_control_msg error -32 req 02 val 2100 [ 374.659023][ T8324] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 374.813801][ T8324] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.813842][ T8324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 374.813879][ T8324] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 374.813904][ T8324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.839067][ T8324] usb 1-1: config 0 descriptor?? [ 374.868964][ T5815] pwc: recv_control_msg error -71 req 02 val 2500 [ 374.869486][ T5815] pwc: recv_control_msg error -71 req 02 val 2400 [ 374.869952][ T5815] pwc: recv_control_msg error -71 req 02 val 2600 [ 374.870441][ T5815] pwc: recv_control_msg error -71 req 02 val 2900 [ 374.876319][ T5815] pwc: recv_control_msg error -71 req 02 val 2800 [ 374.907610][ T5815] pwc: recv_control_msg error -71 req 04 val 1100 [ 374.908131][ T5815] pwc: recv_control_msg error -71 req 04 val 1200 [ 374.933083][ T5815] pwc: Registered as video103. [ 374.963588][ T5815] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 375.035009][ T5815] usb 2-1: USB disconnect, device number 48 [ 375.126106][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.126740][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.709619][ T9731] binder: BINDER_SET_CONTEXT_MGR already set [ 375.709637][ T9731] binder: 9730:9731 ioctl 4018620d 200000000340 returned -16 [ 375.710604][ T9731] binder: 9730:9731 ioctl c0306201 0 returned -14 [ 375.859442][ T8324] usbhid 1-1:0.0: can't add hid device: -71 [ 375.859575][ T8324] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 375.906372][ T37] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 376.010720][ T8324] usb 1-1: USB disconnect, device number 50 [ 376.052735][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 376.056269][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 376.056308][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 376.089152][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.089186][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.089208][ T37] usb 3-1: Product: syz [ 376.089223][ T37] usb 3-1: Manufacturer: syz [ 376.089238][ T37] usb 3-1: SerialNumber: syz [ 376.214425][ T37] usb 3-1: config 0 descriptor?? [ 376.236636][ T37] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 376.236674][ T37] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 376.693847][ T37] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 376.694492][ T37] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 376.694915][ T37] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 376.694934][ T37] em28xx 3-1:0.0: No AC97 audio processor [ 376.813145][ T37] usb 3-1: USB disconnect, device number 19 [ 376.864109][ T37] em28xx 3-1:0.0: Disconnecting em28xx [ 376.866582][ T37] em28xx 3-1:0.0: Freeing device [ 377.045608][ T9740] fuse: Bad value for 'user_id' [ 377.045624][ T9740] fuse: Bad value for 'user_id' [ 377.601146][ T8324] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 377.645829][ T9754] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 377.732682][ T9758] FAULT_INJECTION: forcing a failure. [ 377.732682][ T9758] name failslab, interval 1, probability 0, space 0, times 0 [ 377.732745][ T9758] CPU: 1 UID: 0 PID: 9758 Comm: syz.2.1162 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 377.732779][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.732793][ T9758] Call Trace: [ 377.732803][ T9758] [ 377.732813][ T9758] dump_stack_lvl+0xe8/0x150 [ 377.732847][ T9758] should_fail_ex+0x46b/0x600 [ 377.732890][ T9758] should_failslab+0xa8/0x100 [ 377.732916][ T9758] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 377.732956][ T9758] ? preload_this_cpu_lock+0x49/0xc0 [ 377.732989][ T9758] preload_this_cpu_lock+0x49/0xc0 [ 377.733016][ T9758] alloc_vmap_area+0x3dc/0x1480 [ 377.733072][ T9758] ? __pfx_alloc_vmap_area+0x10/0x10 [ 377.733109][ T9758] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 377.733136][ T9758] ? __get_vm_area_node+0x13f/0x300 [ 377.733168][ T9758] ? copy_process+0x89b/0x4450 [ 377.733203][ T9758] __get_vm_area_node+0x1f8/0x300 [ 377.733244][ T9758] __vmalloc_node_range_noprof+0x36a/0x1750 [ 377.733281][ T9758] ? copy_process+0x89b/0x4450 [ 377.733313][ T9758] ? percpu_ref_get_many+0x19/0x140 [ 377.733372][ T9758] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 377.733412][ T9758] ? rcu_is_watching+0x15/0xb0 [ 377.733441][ T9758] ? memcpy_and_pad+0x48/0x80 [ 377.733502][ T9758] __vmalloc_node_noprof+0xc2/0x100 [ 377.733539][ T9758] ? copy_process+0x89b/0x4450 [ 377.733571][ T9758] ? copy_process+0x89b/0x4450 [ 377.733607][ T9758] dup_task_struct+0x298/0x840 [ 377.733641][ T9758] ? rt_spin_unlock+0x160/0x200 [ 377.733672][ T9758] copy_process+0x89b/0x4450 [ 377.733741][ T9758] ? __pfx_copy_process+0x10/0x10 [ 377.733797][ T9758] vhost_task_create+0x1f9/0x380 [ 377.733823][ T9758] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 377.733857][ T9758] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 377.733894][ T9758] ? __pfx_vhost_task_create+0x10/0x10 [ 377.733929][ T9758] ? __pfx_vhost_task_fn+0x10/0x10 [ 377.733956][ T9758] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.733987][ T9758] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.734017][ T9758] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.734048][ T9758] ? mutex_lock_nested+0x152/0x1d0 [ 377.734071][ T9758] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 377.734114][ T9758] kvm_mmu_post_init_vm+0x147/0x2d0 [ 377.734155][ T9758] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 377.734195][ T9758] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 377.734224][ T9758] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.734272][ T9758] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.734307][ T9758] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.734341][ T9758] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.734373][ T9758] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 377.734412][ T9758] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 377.734440][ T9758] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.734473][ T9758] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.734506][ T9758] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.734551][ T9758] ? rt_write_unlock+0x190/0x230 [ 377.734581][ T9758] kvm_vcpu_ioctl+0xa65/0xfe0 [ 377.734623][ T9758] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.734680][ T9758] ? __fget_files+0x2a/0x420 [ 377.734715][ T9758] ? __fget_files+0x2a/0x420 [ 377.734746][ T9758] ? __fget_files+0x3a6/0x420 [ 377.734784][ T9758] ? __fget_files+0x2a/0x420 [ 377.734819][ T9758] ? bpf_lsm_file_ioctl+0x9/0x20 [ 377.734847][ T9758] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.734882][ T9758] __se_sys_ioctl+0xff/0x170 [ 377.734906][ T9758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.734933][ T9758] do_syscall_64+0x15f/0xf80 [ 377.734966][ T9758] ? trace_irq_disable+0x3b/0x140 [ 377.735002][ T9758] ? clear_bhb_loop+0x40/0x90 [ 377.735030][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.735053][ T9758] RIP: 0033:0x7f088256ce59 [ 377.735074][ T9758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.735096][ T9758] RSP: 002b:00007f08807a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.735121][ T9758] RAX: ffffffffffffffda RBX: 00007f08827e6090 RCX: 00007f088256ce59 [ 377.735139][ T9758] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 377.735152][ T9758] RBP: 00007f08807a5090 R08: 0000000000000000 R09: 0000000000000000 [ 377.735167][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.735180][ T9758] R13: 00007f08827e6128 R14: 00007f08827e6090 R15: 00007ffe574abaa8 [ 377.735217][ T9758] [ 377.869769][ T8324] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 377.869984][ T8324] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 377.870188][ T8324] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 378.284212][ T9761] binder: BINDER_SET_CONTEXT_MGR already set [ 378.284227][ T9761] binder: 9760:9761 ioctl 4018620d 200000000340 returned -16 [ 378.307794][ T9761] binder: 9760:9761 ioctl c0306201 0 returned -14 [ 378.308124][ T8324] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 378.308152][ T8324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.308174][ T8324] usb 1-1: Product: syz [ 378.308194][ T8324] usb 1-1: Manufacturer: syz [ 378.308548][ T8324] usb 1-1: SerialNumber: syz [ 378.381475][ T8324] usb 1-1: config 0 descriptor?? [ 378.382550][ T9752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 378.382719][ T9752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 378.390585][ T8324] usb 1-1: ucan: probing device on interface #0 [ 378.854862][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.855790][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.930910][ T5815] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 379.009765][ T8324] usb 1-1: ucan: failed to retrieve device info [ 379.009790][ T8324] usb 1-1: ucan: probe failed; try to update the device firmware [ 379.049728][ T8324] usb 1-1: USB disconnect, device number 51 [ 379.084248][ T5815] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 379.084306][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.086617][ T5815] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 379.086649][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3 [ 379.086672][ T5815] usb 4-1: Product: syz [ 379.086688][ T5815] usb 4-1: SerialNumber: syz [ 379.147956][ T5815] usb 4-1: config 0 descriptor?? [ 379.263288][ T9766] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 379.374444][ T5815] usb 4-1: USB disconnect, device number 37 [ 379.550889][ T5348] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 379.725081][ T5348] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.725121][ T5348] usb 3-1: config 0 interface 0 has no altsetting 0 [ 379.725158][ T5348] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 379.725184][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.775751][ T9771] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1168'. [ 379.775797][ T9771] openvswitch: netlink: Message has 4 unknown bytes. [ 379.838921][ T5348] usb 3-1: config 0 descriptor?? [ 379.890932][ T9773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'. [ 380.060834][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.062865][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.150814][ T5815] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 380.271017][ T8324] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 380.300678][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 380.310444][ T5815] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 380.310700][ T5815] usb 2-1: config 0 has no interface number 0 [ 380.310752][ T5815] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 380.327570][ T5815] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 380.327604][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.327628][ T5815] usb 2-1: Product: syz [ 380.327645][ T5815] usb 2-1: Manufacturer: syz [ 380.327661][ T5815] usb 2-1: SerialNumber: syz [ 380.387171][ T5815] usb 2-1: config 0 descriptor?? [ 380.388587][ T9775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 380.470159][ T8324] usb 1-1: Using ep0 maxpacket: 32 [ 380.485464][ T8324] usb 1-1: config 2 has an invalid interface number: 186 but max is 2 [ 380.485497][ T8324] usb 1-1: config 2 has an invalid interface number: 35 but max is 2 [ 380.485522][ T8324] usb 1-1: config 2 has an invalid interface number: 10 but max is 2 [ 380.485543][ T8324] usb 1-1: config 2 has an invalid interface number: 63 but max is 2 [ 380.485621][ T8324] usb 1-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 380.485666][ T8324] usb 1-1: config 2 has no interface number 0 [ 380.485684][ T8324] usb 1-1: config 2 has no interface number 1 [ 380.485702][ T8324] usb 1-1: config 2 has no interface number 2 [ 380.485720][ T8324] usb 1-1: config 2 has no interface number 3 [ 380.485869][ T8324] usb 1-1: config 2 interface 186 altsetting 56 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 380.485974][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 380.486022][ T8324] usb 1-1: config 2 interface 35 altsetting 2 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 380.486054][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 380.486081][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 380.486164][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 380.486211][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 380.486253][ T8324] usb 1-1: config 2 interface 10 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 380.486347][ T8324] usb 1-1: config 2 interface 10 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 380.486386][ T8324] usb 1-1: too many endpoints for config 2 interface 63 altsetting 143: 46, using maximum allowed: 30 [ 380.486445][ T8324] usb 1-1: config 2 interface 63 altsetting 143 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 380.486530][ T8324] usb 1-1: config 2 interface 63 altsetting 143 has 2 endpoint descriptors, different from the interface descriptor's value: 46 [ 380.486571][ T8324] usb 1-1: config 2 interface 186 has no altsetting 0 [ 380.486592][ T8324] usb 1-1: config 2 interface 35 has no altsetting 0 [ 380.486611][ T8324] usb 1-1: config 2 interface 10 has no altsetting 0 [ 380.486631][ T8324] usb 1-1: config 2 interface 63 has no altsetting 0 [ 380.507240][ T8324] usb 1-1: New USB device found, idVendor=1293, idProduct=0002, bcdDevice=75.e4 [ 380.507384][ T8324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.507470][ T8324] usb 1-1: Product: ы [ 380.507568][ T8324] usb 1-1: Manufacturer:   [ 380.507614][ T8324] usb 1-1: SerialNumber: ⮄ [ 380.511710][ T1244] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 380.835454][ T9775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 380.940578][ T1244] usb 4-1: Using ep0 maxpacket: 16 [ 380.947882][ T1244] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 380.947916][ T1244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 380.982894][ T1244] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 380.982986][ T1244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.983009][ T1244] usb 4-1: Product: syz [ 380.983024][ T1244] usb 4-1: Manufacturer: syz [ 380.983040][ T1244] usb 4-1: SerialNumber: syz [ 381.051392][ T1244] usb 4-1: config 0 descriptor?? [ 381.086553][ T1244] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.086650][ T1244] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 381.296173][ T5815] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 381.331996][ T5815] asix 2-1:0.188: probe with driver asix failed with error -61 [ 381.555819][ T1244] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 381.556294][ T1244] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 381.558083][ T1244] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 381.558102][ T1244] em28xx 4-1:0.0: No AC97 audio processor [ 381.651938][ T1244] usb 4-1: USB disconnect, device number 38 [ 381.654509][ T1244] em28xx 4-1:0.0: Disconnecting em28xx [ 381.709319][ T1244] em28xx 4-1:0.0: Freeing device [ 381.899543][ T8324] usb 1-1: USB disconnect, device number 52 [ 381.972083][ T5624] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 381.999541][ T5348] usbhid 3-1:0.0: can't add hid device: -71 [ 381.999640][ T5348] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 382.121914][ T5348] usb 3-1: USB disconnect, device number 20 [ 382.357588][ T9788] binder: BINDER_SET_CONTEXT_MGR already set [ 382.357606][ T9788] binder: 9787:9788 ioctl 4018620d 200000000340 returned -16 [ 382.359013][ T9788] binder: 9787:9788 ioctl c0306201 0 returned -14 [ 382.708131][ T5624] Bluetooth: hci4: Unable to find connection for big 0x00 [ 382.800383][ T5348] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 383.035779][ T5348] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.035837][ T5348] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 383.035863][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.050810][ T5348] usb 4-1: config 0 descriptor?? [ 383.099783][ T5348] pwc: Askey VC010 type 2 USB webcam detected. [ 383.207016][ T1244] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 383.291892][ T9] usb 2-1: USB disconnect, device number 49 [ 383.460909][ T32] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 383.488188][ T1244] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.506727][ T1244] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 383.506761][ T1244] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3 [ 383.506784][ T1244] usb 3-1: Product: syz [ 383.506799][ T1244] usb 3-1: SerialNumber: syz [ 383.571663][ T5348] pwc: recv_control_msg error -32 req 02 val 2b00 [ 383.572616][ T1244] usb 3-1: config 0 descriptor?? [ 383.572723][ T5348] pwc: recv_control_msg error -32 req 02 val 2700 [ 383.640291][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 383.642759][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 383.642795][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 383.646102][ T32] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.646132][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.646154][ T32] usb 1-1: Product: syz [ 383.646178][ T32] usb 1-1: Manufacturer: syz [ 383.646194][ T32] usb 1-1: SerialNumber: syz [ 383.718723][ T32] usb 1-1: config 0 descriptor?? [ 383.742788][ T32] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.742829][ T32] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 383.796998][ T1244] usb 3-1: USB disconnect, device number 21 [ 383.797737][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.833391][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.927368][ T9790] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 383.963509][ T9790] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 384.247552][ T5348] pwc: recv_control_msg error -71 req 04 val 1000 [ 384.248044][ T5348] pwc: recv_control_msg error -71 req 04 val 1300 [ 384.248469][ T5348] pwc: recv_control_msg error -71 req 04 val 1400 [ 384.248886][ T5348] pwc: recv_control_msg error -71 req 02 val 2000 [ 384.249303][ T5348] pwc: recv_control_msg error -71 req 02 val 2100 [ 384.249714][ T5348] pwc: recv_control_msg error -71 req 04 val 1500 [ 384.253742][ T5348] pwc: recv_control_msg error -71 req 02 val 2500 [ 384.254253][ T5348] pwc: recv_control_msg error -71 req 02 val 2400 [ 384.255007][ T5348] pwc: recv_control_msg error -71 req 02 val 2600 [ 384.257351][ T5348] pwc: recv_control_msg error -71 req 02 val 2900 [ 384.258186][ T5348] pwc: recv_control_msg error -71 req 02 val 2800 [ 384.259877][ T5348] pwc: recv_control_msg error -71 req 04 val 1100 [ 384.264471][ T5348] pwc: recv_control_msg error -71 req 04 val 1200 [ 384.357700][ T9808] binder: BINDER_SET_CONTEXT_MGR already set [ 384.357718][ T9808] binder: 9807:9808 ioctl 4018620d 200000000340 returned -16 [ 384.401730][ T32] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 384.402217][ T32] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 384.402655][ T32] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 384.402673][ T32] em28xx 1-1:0.0: No AC97 audio processor [ 384.427947][ T5348] pwc: Registered as video103. [ 384.468423][ T5348] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 384.529185][ T9810] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 384.550254][ T32] usb 1-1: USB disconnect, device number 53 [ 384.554808][ T32] em28xx 1-1:0.0: Disconnecting em28xx [ 384.558271][ T5348] usb 4-1: USB disconnect, device number 39 [ 384.640412][ T32] em28xx 1-1:0.0: Freeing device [ 384.901208][ T6826] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 384.993607][ T5807] udevd[5807]: setting owner of /dev/video103 to uid=0, gid=28 failed: No such file or directory [ 384.996879][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 384.996920][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 385.065491][ T6826] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.065531][ T6826] usb 3-1: config 0 interface 0 has no altsetting 0 [ 385.065568][ T6826] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 385.065594][ T6826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.085781][ T5758] udevd[5758]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 385.124364][ T6826] usb 3-1: config 0 descriptor?? [ 385.343032][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.343679][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.766415][ T6826] usbhid 3-1:0.0: can't add hid device: -71 [ 385.766534][ T6826] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 385.808047][ T6826] usb 3-1: USB disconnect, device number 22 [ 386.028853][ T5624] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 386.079083][ T5624] Bluetooth: hci2: Injecting HCI hardware error event [ 386.087034][ T4931] Bluetooth: hci2: hardware error 0x00 [ 386.127011][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1190'. [ 386.127034][ T9836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1190'. [ 386.127052][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1190'. [ 386.231648][ T9830] TCP: TCP_TX_DELAY enabled [ 386.679962][ T9841] binder: BINDER_SET_CONTEXT_MGR already set [ 386.679979][ T9841] binder: 9839:9841 ioctl 4018620d 200000000340 returned -16 [ 386.714086][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1193'. [ 387.396661][ T5624] Bluetooth: hci1: unexpected event for opcode 0x007f [ 387.435772][ T9863] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 387.669789][ T1244] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 387.821854][ T1244] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.821890][ T1244] usb 2-1: config 0 interface 0 has no altsetting 0 [ 387.821915][ T1244] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 387.821932][ T1244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.826715][ T1244] usb 2-1: config 0 descriptor?? [ 387.839741][ T8324] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 387.971755][ T5348] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 388.033715][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.043738][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.050297][ T8324] usb 3-1: Using ep0 maxpacket: 32 [ 388.068407][ T8324] usb 3-1: config 53 has an invalid descriptor of length 1, skipping remainder of the config [ 388.068438][ T8324] usb 3-1: config 53 has 1 interface, different from the descriptor's value: 25 [ 388.068491][ T8324] usb 3-1: config 53 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.068520][ T8324] usb 3-1: config 53 interface 0 has no altsetting 0 [ 388.068558][ T8324] usb 3-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00 [ 388.068610][ T8324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.144937][ T5348] usb 4-1: Using ep0 maxpacket: 8 [ 388.147769][ T5348] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.147864][ T5348] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.147892][ T5348] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.147921][ T5348] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.148033][ T5348] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.148059][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.312396][ T9863] vxcan0: tx address claim with different name [ 388.370369][ T8324] usb 3-1: string descriptor 0 read error: -71 [ 388.424065][ T4931] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 388.444858][ T1244] usbhid 2-1:0.0: can't add hid device: -71 [ 388.444971][ T1244] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 388.491097][ T8324] usbhid 3-1:53.0: couldn't find an input interrupt endpoint [ 388.491109][ T1244] usb 2-1: USB disconnect, device number 50 [ 388.498383][ T5348] usb 4-1: GET_CAPABILITIES returned 0 [ 388.498418][ T5348] usbtmc 4-1:16.0: can't read capabilities [ 388.614411][ T8324] usb 3-1: USB disconnect, device number 23 [ 388.709359][ T5348] usb 4-1: USB disconnect, device number 40 [ 388.979721][ T32] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 389.027346][ T9875] binder: BINDER_SET_CONTEXT_MGR already set [ 389.027364][ T9875] binder: 9874:9875 ioctl 4018620d 200000000340 returned -16 [ 389.036393][ T9875] binder: 9874:9875 ioctl c0306201 0 returned -14 [ 389.130579][ T32] usb 1-1: too many configurations: 226, using maximum allowed: 8 [ 389.155933][ T32] usb 1-1: config index 0 descriptor too short (expected 65505, got 72) [ 389.157410][ T32] usb 1-1: config index 1 descriptor too short (expected 65505, got 72) [ 389.175481][ T32] usb 1-1: config index 2 descriptor too short (expected 65505, got 72) [ 389.187649][ T32] usb 1-1: config index 3 descriptor too short (expected 65505, got 72) [ 389.188828][ T32] usb 1-1: config index 4 descriptor too short (expected 65505, got 72) [ 389.209201][ T32] usb 1-1: config index 5 descriptor too short (expected 65505, got 72) [ 389.219114][ T32] usb 1-1: config index 6 descriptor too short (expected 65505, got 72) [ 389.237318][ T32] usb 1-1: config index 7 descriptor too short (expected 65505, got 72) [ 389.254637][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 389.254675][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.254698][ T32] usb 1-1: Product: syz [ 389.254714][ T32] usb 1-1: Manufacturer: syz [ 389.254731][ T32] usb 1-1: SerialNumber: syz [ 389.306825][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 389.450049][ T1244] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 389.535294][ T9881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1207'. [ 389.670535][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.671881][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.722846][ T8324] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 389.869625][ T32] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 389.886896][ T8324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.886976][ T8324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.887029][ T8324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 389.887172][ T8324] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.887219][ T8324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.901152][ T8324] usb 2-1: config 0 descriptor?? [ 390.019589][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 390.024551][ T32] usb 4-1: config 2 has an invalid interface number: 186 but max is 2 [ 390.024582][ T32] usb 4-1: config 2 has an invalid interface number: 35 but max is 2 [ 390.024605][ T32] usb 4-1: config 2 has an invalid interface number: 10 but max is 2 [ 390.024790][ T32] usb 4-1: config 2 has an invalid interface number: 63 but max is 2 [ 390.024812][ T32] usb 4-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 390.024927][ T32] usb 4-1: config 2 has no interface number 0 [ 390.024947][ T32] usb 4-1: config 2 has no interface number 1 [ 390.024964][ T32] usb 4-1: config 2 has no interface number 2 [ 390.024983][ T32] usb 4-1: config 2 has no interface number 3 [ 390.025158][ T32] usb 4-1: config 2 interface 186 altsetting 56 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 390.025209][ T32] usb 4-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 390.025323][ T32] usb 4-1: config 2 interface 35 altsetting 2 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 390.025346][ T32] usb 4-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 390.025364][ T32] usb 4-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 390.025412][ T32] usb 4-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 390.025518][ T32] usb 4-1: config 2 interface 35 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 390.025563][ T32] usb 4-1: config 2 interface 10 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 390.025594][ T32] usb 4-1: config 2 interface 10 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 390.025626][ T32] usb 4-1: too many endpoints for config 2 interface 63 altsetting 143: 46, using maximum allowed: 30 [ 390.025748][ T32] usb 4-1: config 2 interface 63 altsetting 143 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 390.025780][ T32] usb 4-1: config 2 interface 63 altsetting 143 has 2 endpoint descriptors, different from the interface descriptor's value: 46 [ 390.025809][ T32] usb 4-1: config 2 interface 186 has no altsetting 0 [ 390.025829][ T32] usb 4-1: config 2 interface 35 has no altsetting 0 [ 390.025929][ T32] usb 4-1: config 2 interface 10 has no altsetting 0 [ 390.025952][ T32] usb 4-1: config 2 interface 63 has no altsetting 0 [ 390.029597][ T5348] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 390.118074][ T6826] usb 1-1: USB disconnect, device number 54 [ 390.206332][ T32] usb 4-1: New USB device found, idVendor=1293, idProduct=0002, bcdDevice=75.e4 [ 390.206366][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.206390][ T32] usb 4-1: Product: ы [ 390.206406][ T32] usb 4-1: Manufacturer:   [ 390.206423][ T32] usb 4-1: SerialNumber: ⮄ [ 390.321336][ T5348] usb 3-1: Using ep0 maxpacket: 16 [ 390.404307][ T4931] Bluetooth: hci4: unexpected subevent 0x03 length: 244 > 9 [ 390.404469][ T5348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 390.404558][ T5348] usb 3-1: no configurations [ 390.404573][ T5348] usb 3-1: can't read configurations, error -22 [ 390.581164][ T1244] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 390.659665][ T1244] ath9k_htc: Failed to initialize the device [ 390.703910][ T6826] usb 1-1: ath9k_htc: USB layer deinitialized [ 390.764709][ T32] usb 4-1: USB disconnect, device number 41 [ 390.813654][ T8324] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 391.331384][ T9898] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 391.395988][ T9901] binder: BINDER_SET_CONTEXT_MGR already set [ 391.396010][ T9901] binder: 9900:9901 ioctl 4018620d 200000000340 returned -16 [ 391.397507][ T9901] binder: 9900:9901 ioctl c0306201 0 returned -14 [ 391.459713][ T5348] usb 2-1: USB disconnect, device number 51 [ 391.569450][ T1244] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 391.743919][ T1244] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.743963][ T1244] usb 4-1: config 0 interface 0 has no altsetting 0 [ 391.744001][ T1244] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 391.744031][ T1244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.800120][ T1244] usb 4-1: config 0 descriptor?? [ 392.020913][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.022386][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.241919][ T9898] vxcan0: tx address claim with different name [ 392.264282][ T1244] usbhid 4-1:0.0: can't add hid device: -71 [ 392.264424][ T1244] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 392.316724][ T9909] FAULT_INJECTION: forcing a failure. [ 392.316724][ T9909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.316752][ T9909] CPU: 0 UID: 0 PID: 9909 Comm: syz.1.1216 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.316771][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 392.316782][ T9909] Call Trace: [ 392.316788][ T9909] [ 392.316796][ T9909] dump_stack_lvl+0xe8/0x150 [ 392.316821][ T9909] should_fail_ex+0x46b/0x600 [ 392.316852][ T9909] _copy_from_user+0x2d/0xb0 [ 392.316874][ T9909] kstrtouint_from_user+0xd6/0x180 [ 392.316896][ T9909] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 392.316925][ T9909] proc_fail_nth_write+0x8e/0x210 [ 392.316949][ T9909] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 392.316976][ T9909] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 392.317001][ T9909] vfs_write+0x2a3/0xba0 [ 392.317023][ T9909] ? __pfx_vfs_write+0x10/0x10 [ 392.317051][ T9909] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 392.317076][ T9909] ? lockdep_hardirqs_on+0x7a/0x110 [ 392.317099][ T9909] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 392.317123][ T9909] ? mutex_lock_nested+0x152/0x1d0 [ 392.317142][ T9909] ? fdget_pos+0x252/0x320 [ 392.317171][ T9909] ksys_write+0x156/0x270 [ 392.317187][ T9909] ? __pfx_ksys_write+0x10/0x10 [ 392.317208][ T9909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.317226][ T9909] do_syscall_64+0x15f/0xf80 [ 392.317249][ T9909] ? trace_irq_disable+0x3b/0x140 [ 392.317275][ T9909] ? clear_bhb_loop+0x40/0x90 [ 392.317295][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.317311][ T9909] RIP: 0033:0x7fac47f2d68e [ 392.317326][ T9909] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 392.317340][ T9909] RSP: 002b:00007fac461a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.317357][ T9909] RAX: ffffffffffffffda RBX: 00007fac461a56c0 RCX: 00007fac47f2d68e [ 392.317369][ T9909] RDX: 0000000000000001 RSI: 00007fac461a50a0 RDI: 0000000000000006 [ 392.317387][ T9909] RBP: 00007fac461a5090 R08: 0000000000000000 R09: 0000000000000000 [ 392.317397][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.317406][ T9909] R13: 00007fac481e6128 R14: 00007fac481e6090 R15: 00007ffe81aa76b8 [ 392.317431][ T9909] [ 392.556910][ T1244] usb 4-1: USB disconnect, device number 42 [ 392.929802][ T9918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1220'. [ 393.050733][ T9922] binder: BINDER_SET_CONTEXT_MGR already set [ 393.050750][ T9922] binder: 9921:9922 ioctl 4018620d 200000000340 returned -16 [ 393.052149][ T9922] binder: 9921:9922 ioctl c0306201 0 returned -14 [ 393.210321][ T6826] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 393.347261][ T9925] sctp: [Deprecated]: syz.3.1224 (pid 9925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.347261][ T9925] Use struct sctp_sack_info instead [ 393.369732][ T6826] usb 1-1: Using ep0 maxpacket: 32 [ 393.373119][ T6826] usb 1-1: config 2 has an invalid interface number: 186 but max is 2 [ 393.373151][ T6826] usb 1-1: config 2 has an invalid interface number: 35 but max is 2 [ 393.373173][ T6826] usb 1-1: config 2 has an invalid interface number: 10 but max is 2 [ 393.373199][ T6826] usb 1-1: config 2 has an invalid interface number: 63 but max is 2 [ 393.373214][ T6826] usb 1-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 393.373230][ T6826] usb 1-1: config 2 has no interface number 0 [ 393.373242][ T6826] usb 1-1: config 2 has no interface number 1 [ 393.373254][ T6826] usb 1-1: config 2 has no interface number 2 [ 393.373265][ T6826] usb 1-1: config 2 has no interface number 3 [ 393.373322][ T6826] usb 1-1: config 2 interface 186 altsetting 56 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 393.373355][ T6826] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 393.373372][ T6826] usb 1-1: config 2 interface 35 altsetting 2 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 393.373393][ T6826] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 393.373410][ T6826] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 393.373427][ T6826] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 393.373444][ T6826] usb 1-1: config 2 interface 35 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 393.373469][ T6826] usb 1-1: config 2 interface 10 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 393.373488][ T6826] usb 1-1: config 2 interface 10 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 393.373507][ T6826] usb 1-1: too many endpoints for config 2 interface 63 altsetting 143: 46, using maximum allowed: 30 [ 393.373542][ T6826] usb 1-1: config 2 interface 63 altsetting 143 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 393.373562][ T6826] usb 1-1: config 2 interface 63 altsetting 143 has 2 endpoint descriptors, different from the interface descriptor's value: 46 [ 393.373582][ T6826] usb 1-1: config 2 interface 186 has no altsetting 0 [ 393.373595][ T6826] usb 1-1: config 2 interface 35 has no altsetting 0 [ 393.373608][ T6826] usb 1-1: config 2 interface 10 has no altsetting 0 [ 393.373621][ T6826] usb 1-1: config 2 interface 63 has no altsetting 0 [ 393.377941][ T6826] usb 1-1: New USB device found, idVendor=1293, idProduct=0002, bcdDevice=75.e4 [ 393.377975][ T6826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.377990][ T6826] usb 1-1: Product: ы [ 393.378001][ T6826] usb 1-1: Manufacturer:   [ 393.378011][ T6826] usb 1-1: SerialNumber: ⮄ [ 393.952802][ T6826] usb 1-1: USB disconnect, device number 55 [ 396.258843][ T4931] Bluetooth: hci1: command 0x0405 tx timeout [ 408.341546][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1229'. [ 408.504978][ T9946] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 408.505015][ T9946] overlayfs: missing 'lowerdir' [ 408.607344][ T32] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 408.645068][ T9949] Bluetooth: MGMT ver 1.23 [ 408.736990][ T9951] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 408.760284][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 408.776045][ T32] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 408.776072][ T32] usb 3-1: config 0 has no interface number 0 [ 408.776126][ T32] usb 3-1: config 0 interface 184 has no altsetting 0 [ 408.804124][ T32] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 408.804156][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.804176][ T32] usb 3-1: Product: syz [ 408.804190][ T32] usb 3-1: Manufacturer: syz [ 408.804204][ T32] usb 3-1: SerialNumber: syz [ 408.819091][ T6826] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 408.854805][ T32] usb 3-1: config 0 descriptor?? [ 408.969518][ T6826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.969574][ T6826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 408.975175][ T6826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.975199][ T6826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.975228][ T6826] usb 2-1: Product: syz [ 408.975245][ T6826] usb 2-1: Manufacturer: syz [ 408.975261][ T6826] usb 2-1: SerialNumber: syz [ 408.979295][ T8324] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 409.046693][ T6826] cdc_mbim 2-1:1.0: skipping garbage [ 409.151959][ T8324] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.151996][ T8324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 409.152100][ T8324] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 409.152128][ T8324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.201748][ T8324] usb 4-1: config 0 descriptor?? [ 409.259487][ T9933] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 409.411610][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.413779][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.660147][ T9951] vxcan0: tx address claim with different name [ 409.686236][ T9955] binder: BINDER_SET_CONTEXT_MGR already set [ 409.686316][ T9955] binder: 9954:9955 ioctl 4018620d 200000000340 returned -16 [ 409.734810][ T8324] usbhid 4-1:0.0: can't add hid device: -71 [ 409.739299][ T8324] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 409.900269][ T6826] cdc_mbim 2-1:1.0: bind() failure [ 409.978088][ T8324] usb 4-1: USB disconnect, device number 43 [ 409.989888][ T6826] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 409.989966][ T6826] cdc_ncm 2-1:1.1: bind() failure [ 410.011457][ T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 410.011505][ T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 410.037403][ T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 410.037635][ T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 410.037670][ T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 410.037690][ T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 410.042611][ T32] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 410.096449][ T6826] usb 2-1: USB disconnect, device number 52 [ 410.137589][ T32] usb 3-1: USB disconnect, device number 26 [ 410.285807][ T9962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1236'. [ 410.419074][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 410.511619][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 410.537099][ T8324] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 410.560410][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 410.560442][ T9967] netlink: 'syz.3.1238': attribute type 2 has an invalid length. [ 410.560453][ T9967] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 410.706437][ T8324] usb 1-1: Using ep0 maxpacket: 32 [ 410.718482][ T8324] usb 1-1: config 2 has an invalid interface number: 186 but max is 2 [ 410.718515][ T8324] usb 1-1: config 2 has an invalid interface number: 35 but max is 2 [ 410.718543][ T8324] usb 1-1: config 2 has an invalid interface number: 10 but max is 2 [ 410.718558][ T8324] usb 1-1: config 2 has an invalid interface number: 63 but max is 2 [ 410.718574][ T8324] usb 1-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 410.718589][ T8324] usb 1-1: config 2 has no interface number 0 [ 410.718601][ T8324] usb 1-1: config 2 has no interface number 1 [ 410.718612][ T8324] usb 1-1: config 2 has no interface number 2 [ 410.718624][ T8324] usb 1-1: config 2 has no interface number 3 [ 410.718679][ T8324] usb 1-1: config 2 interface 186 altsetting 56 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 410.718719][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 410.718737][ T8324] usb 1-1: config 2 interface 35 altsetting 2 endpoint 0x2 has invalid maxpacket 991, setting to 64 [ 410.718758][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 410.718774][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 410.718791][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 410.718808][ T8324] usb 1-1: config 2 interface 35 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 410.718833][ T8324] usb 1-1: config 2 interface 10 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 410.718852][ T8324] usb 1-1: config 2 interface 10 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 410.718873][ T8324] usb 1-1: too many endpoints for config 2 interface 63 altsetting 143: 46, using maximum allowed: 30 [ 410.718912][ T8324] usb 1-1: config 2 interface 63 altsetting 143 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 410.718933][ T8324] usb 1-1: config 2 interface 63 altsetting 143 has 2 endpoint descriptors, different from the interface descriptor's value: 46 [ 410.718953][ T8324] usb 1-1: config 2 interface 186 has no altsetting 0 [ 410.718967][ T8324] usb 1-1: config 2 interface 35 has no altsetting 0 [ 410.718980][ T8324] usb 1-1: config 2 interface 10 has no altsetting 0 [ 410.718993][ T8324] usb 1-1: config 2 interface 63 has no altsetting 0 [ 410.803357][ T8324] usb 1-1: New USB device found, idVendor=1293, idProduct=0002, bcdDevice=75.e4 [ 410.803461][ T8324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.803524][ T8324] usb 1-1: Product: ы [ 410.803567][ T8324] usb 1-1: Manufacturer:   [ 410.803602][ T8324] usb 1-1: SerialNumber: ⮄ [ 411.297241][ T823] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 411.400224][ T9978] binder: BINDER_SET_CONTEXT_MGR already set [ 411.400242][ T9978] binder: 9977:9978 ioctl 4018620d 200000000340 returned -16 [ 411.417870][ T8324] usb 1-1: USB disconnect, device number 56 [ 411.492895][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.492916][ T823] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 411.492955][ T823] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 411.492973][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.556986][ T823] usb 2-1: config 0 descriptor?? [ 411.601475][ T823] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 411.601544][ T823] dvb-usb: bulk message failed: -22 (3/0) [ 411.993818][ T823] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 411.999849][ T823] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 411.999939][ T823] usb 2-1: media controller created [ 412.065930][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 412.145965][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.248875][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 412.288527][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 412.288573][ T9988] netlink: 'syz.0.1248': attribute type 2 has an invalid length. [ 412.288603][ T9988] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 412.575489][ T823] dvb-usb: bulk message failed: -22 (6/0) [ 412.575629][ T823] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 412.665147][ T823] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 412.693039][ T823] dvb-usb: schedule remote query interval to 150 msecs. [ 412.693066][ T823] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 412.721767][ T823] usb 2-1: USB disconnect, device number 53 [ 412.934331][ T823] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 413.326826][ T823] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 413.380075][T10008] binder: BINDER_SET_CONTEXT_MGR already set [ 413.380094][T10008] binder: 10007:10008 ioctl 4018620d 200000000340 returned -16 [ 413.494229][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 413.502788][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.502814][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.502843][ T823] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.502861][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.539519][ T823] usb 2-1: config 0 descriptor?? [ 413.563587][ T823] hub 2-1:0.0: USB hub found [ 414.373616][T10030] FAULT_INJECTION: forcing a failure. [ 414.373616][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 414.373653][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz.0.1257 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 414.373676][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.373689][T10030] Call Trace: [ 414.373696][T10030] [ 414.373705][T10030] dump_stack_lvl+0xe8/0x150 [ 414.373734][T10030] should_fail_ex+0x46b/0x600 [ 414.373777][T10030] should_failslab+0xa8/0x100 [ 414.373799][T10030] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 414.373833][T10030] ? __d_alloc+0x37/0x6f0 [ 414.373866][T10030] __d_alloc+0x37/0x6f0 [ 414.373894][T10030] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 414.373922][T10030] d_alloc_pseudo+0x21/0xc0 [ 414.373952][T10030] alloc_file_pseudo+0xdd/0x240 [ 414.373981][T10030] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 414.374023][T10030] __sys_socket+0x1bb/0x330 [ 414.374052][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.374078][T10030] __x64_sys_socket+0x7a/0x90 [ 414.374105][T10030] do_syscall_64+0x15f/0xf80 [ 414.374136][T10030] ? trace_irq_disable+0x3b/0x140 [ 414.374182][T10030] ? clear_bhb_loop+0x40/0x90 [ 414.374211][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.374234][T10030] RIP: 0033:0x7fe52e21e6c7 [ 414.374256][T10030] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.374277][T10030] RSP: 002b:00007fe52c453f68 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 414.374301][T10030] RAX: ffffffffffffffda RBX: 00007fe52e496090 RCX: 00007fe52e21e6c7 [ 414.374317][T10030] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 414.374330][T10030] RBP: 00007fe52c455090 R08: 0000000000000000 R09: 0000000000000000 [ 414.374343][T10030] R10: 00002000000002c0 R11: 0000000000000287 R12: 0000000000000001 [ 414.374358][T10030] R13: 000000000000002e R14: 0000200000000300 R15: 00002000000002c0 [ 414.374392][T10030] [ 414.566491][ T5787] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 414.776702][ T5787] usb 3-1: Using ep0 maxpacket: 16 [ 414.780632][ T5787] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 414.783856][ T5787] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 414.783890][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.783913][ T5787] usb 3-1: Product: syz [ 414.783929][ T5787] usb 3-1: Manufacturer: syz [ 414.783946][ T5787] usb 3-1: SerialNumber: syz [ 414.846259][ T5787] r8152-cfgselector 3-1: Unknown version 0x0000 [ 414.846485][ T5787] r8152-cfgselector 3-1: config 0 descriptor?? [ 415.020206][ T823] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 415.052414][ T823] usbhid 2-1:0.0: can't add hid device: -71 [ 415.052552][ T823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 415.092623][ T5787] r8152-cfgselector 3-1: Needed 1 retries to read version [ 415.092677][ T5787] r8152-cfgselector 3-1: Unknown version 0x0000 [ 415.093194][ T5787] r8152-cfgselector 3-1: No union descriptors [ 415.112652][ T823] usb 2-1: USB disconnect, device number 54 [ 415.338287][T10039] syzkaller1: entered promiscuous mode [ 415.338316][T10039] syzkaller1: entered allmulticast mode [ 415.372801][T10039] loop9: detected capacity change from 0 to 4096 [ 415.417208][T10025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.420411][T10025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.494232][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 415.522493][ T3411] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 415.681983][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 415.736695][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1261'. [ 415.736721][T10045] netlink: 'syz.3.1261': attribute type 2 has an invalid length. [ 415.736735][T10045] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 416.065913][ T3411] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 416.157981][T10055] binder: BINDER_SET_CONTEXT_MGR already set [ 416.157998][T10055] binder: 10054:10055 ioctl 4018620d 200000000340 returned -16 [ 416.339013][ T57] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.353883][ T3411] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.642800][ T57] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.715062][ T57] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.737790][ T8324] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 416.753937][ T57] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.765806][ T57] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.780468][ T57] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.795426][ T57] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.855000][ T57] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.904546][ T9505] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.905538][ T9505] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 416.906233][ T8324] usb 4-1: Using ep0 maxpacket: 32 [ 416.931580][ T8324] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 416.951171][ T8324] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 416.951204][ T8324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.951226][ T8324] usb 4-1: Product: syz [ 416.951247][ T8324] usb 4-1: Manufacturer: syz [ 416.951262][ T8324] usb 4-1: SerialNumber: syz [ 417.033901][ T9505] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 417.052839][ T9505] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 417.158093][ T9505] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 417.248139][ T3392] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1 [ 417.326915][T10072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1267'. [ 417.381688][ T6826] r8152-cfgselector 3-1: USB disconnect, device number 27 [ 417.384009][ T8324] snd-ua101 4-1:1.1: sample format descriptor not found [ 417.384047][ T8324] snd-ua101 4-1:1.0: invalid num_altsetting [ 417.591791][ T823] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 417.613600][ T9941] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 417.736110][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 417.738226][ T823] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 417.738256][ T823] usb 2-1: config 0 has no interface number 0 [ 417.738302][ T823] usb 2-1: config 0 interface 184 has no altsetting 0 [ 417.781187][ T823] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 417.781224][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.781247][ T823] usb 2-1: Product: syz [ 417.781385][ T823] usb 2-1: Manufacturer: syz [ 417.781403][ T823] usb 2-1: SerialNumber: syz [ 417.828554][ T823] usb 2-1: config 0 descriptor?? [ 417.853332][ T8324] usb 4-1: USB disconnect, device number 44 [ 418.259358][T10087] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1268'. [ 418.259387][T10087] openvswitch: netlink: Message has 4 unknown bytes. [ 418.536104][ T6826] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 418.578652][ T8324] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 418.626980][ T5348] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 418.669410][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 418.669445][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 418.670003][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 418.670033][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 418.670056][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 418.670088][ T823] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 418.670398][ T823] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 418.686020][ T6826] usb 1-1: Using ep0 maxpacket: 32 [ 418.783597][ T6826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.783639][ T6826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.783669][ T6826] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 418.783687][ T6826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.850510][ T8324] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 418.850541][ T8324] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 418.850561][ T8324] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 418.850583][ T8324] usb 4-1: config 150 has no interface number 0 [ 418.850725][ T8324] usb 4-1: config 150 interface 204 has no altsetting 0 [ 418.855931][ T5348] usb 3-1: Using ep0 maxpacket: 32 [ 418.898126][ T6826] usb 1-1: config 0 descriptor?? [ 418.927156][ T8324] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 418.927189][ T8324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.927212][ T8324] usb 4-1: Product: syz [ 418.927228][ T8324] usb 4-1: Manufacturer: syz [ 418.927244][ T8324] usb 4-1: SerialNumber: syz [ 418.981223][ T5348] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 418.981245][ T5348] usb 3-1: config 0 has no interface number 0 [ 418.981281][ T5348] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 419.022236][ T823] usb 2-1: USB disconnect, device number 55 [ 419.025308][ T5348] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 419.025341][ T5348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.025363][ T5348] usb 3-1: Product: syz [ 419.025379][ T5348] usb 3-1: Manufacturer: syz [ 419.025394][ T5348] usb 3-1: SerialNumber: syz [ 419.087388][ T6826] hub 1-1:0.0: USB hub found [ 419.136544][ T5348] usb 3-1: config 0 descriptor?? [ 419.138706][T10089] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 419.380401][T10089] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 419.431725][ T8324] usb 4-1: USB disconnect, device number 45 [ 419.536632][ T6826] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 419.570748][ T6826] usbhid 1-1:0.0: can't add hid device: -71 [ 419.570896][ T6826] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 419.607511][ T6826] usb 1-1: USB disconnect, device number 57 [ 419.803328][ T5348] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 419.803543][ T5348] asix 3-1:0.188: probe with driver asix failed with error -61 [ 419.981316][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 420.095574][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 420.148450][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 420.148480][T10094] netlink: 'syz.3.1271': attribute type 2 has an invalid length. [ 420.148496][T10094] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 420.206618][T10097] binder: BINDER_SET_CONTEXT_MGR already set [ 420.206633][T10097] binder: 10096:10097 ioctl 4018620d 200000000340 returned -16 [ 420.736174][ T5787] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 420.775869][ T32] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 420.886667][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 420.893891][ T5787] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 420.893949][ T5787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.893991][ T5787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.894018][ T5787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.894044][ T5787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.894103][ T5787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 420.894130][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.988535][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 420.990952][ T32] usb 4-1: not running at top speed; connect to a high speed hub [ 421.006282][ T32] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 421.027228][ T32] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 421.027259][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.027340][ T32] usb 4-1: Product: syz [ 421.027357][ T32] usb 4-1: Manufacturer: syz [ 421.027373][ T32] usb 4-1: SerialNumber: syz [ 421.186764][ T5787] usb 2-1: GET_CAPABILITIES returned 0 [ 421.187041][ T5787] usbtmc 2-1:16.0: can't read capabilities [ 421.294422][ T32] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 421.400790][ T823] usb 2-1: USB disconnect, device number 56 [ 421.474179][ T32] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 421.517729][ T32] usb 4-1: USB disconnect, device number 46 [ 421.579925][ T9941] udevd[9941]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.619016][ T5348] usb 3-1: USB disconnect, device number 28 [ 421.687304][ T5787] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 421.693148][T10118] binder: BINDER_SET_CONTEXT_MGR already set [ 421.693164][T10118] binder: 10117:10118 ioctl 4018620d 200000000340 returned -16 [ 421.782073][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 421.835648][ T5787] usb 1-1: Using ep0 maxpacket: 32 [ 421.837523][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.837570][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.837609][ T5787] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 421.837627][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.844688][ T5787] usb 1-1: config 0 descriptor?? [ 421.902729][ T5787] hub 1-1:0.0: USB hub found [ 421.911692][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 421.963057][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 421.963088][T10121] netlink: 'syz.2.1283': attribute type 2 has an invalid length. [ 421.963104][T10121] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 422.725432][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 422.809271][ T5787] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 422.825740][ T5787] usbhid 1-1:0.0: can't add hid device: -71 [ 422.825877][ T5787] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 422.876519][ T5787] usb 1-1: USB disconnect, device number 58 [ 423.428219][T10155] binder: BINDER_SET_CONTEXT_MGR already set [ 423.428237][T10155] binder: 10153:10155 ioctl 4018620d 200000000340 returned -16 [ 423.735122][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 423.933707][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 424.005749][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 424.005778][T10167] netlink: 'syz.0.1294': attribute type 2 has an invalid length. [ 424.005793][T10167] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 424.056148][T10166] netlink: 'syz.1.1293': attribute type 11 has an invalid length. [ 424.578219][T10174] IPVS: starting estimator thread 0... [ 424.581674][T10198] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20257 [ 424.583361][T10195] IPVS: fo: FWM 3 0x00000003 - no destination available [ 424.643218][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1299'. [ 424.666568][T10199] IPVS: using max 11 ests per chain, 26400 per kthread [ 424.803365][T10204] FAULT_INJECTION: forcing a failure. [ 424.803365][T10204] name failslab, interval 1, probability 0, space 0, times 0 [ 424.803392][T10204] CPU: 0 UID: 0 PID: 10204 Comm: syz.0.1300 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 424.803413][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.803423][T10204] Call Trace: [ 424.803429][T10204] [ 424.803436][T10204] dump_stack_lvl+0xe8/0x150 [ 424.803459][T10204] should_fail_ex+0x46b/0x600 [ 424.803490][T10204] should_failslab+0xa8/0x100 [ 424.803508][T10204] __kmalloc_noprof+0xdf/0x7b0 [ 424.803534][T10204] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 424.803559][T10204] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 424.803586][T10204] genl_family_rcv_msg_doit+0xd9/0x330 [ 424.803606][T10204] ? __asan_memcpy+0x40/0x70 [ 424.803631][T10204] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 424.803657][T10204] ? apparmor_capable+0x126/0x170 [ 424.803682][T10204] ? bpf_lsm_capable+0x9/0x20 [ 424.803703][T10204] ? security_capable+0x7e/0x2c0 [ 424.803726][T10204] genl_rcv_msg+0x61c/0x7a0 [ 424.803750][T10204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.803767][T10204] ? ref_tracker_free+0x673/0x820 [ 424.803783][T10204] ? __pfx_wg_set_device_doit+0x10/0x10 [ 424.803809][T10204] ? ____sys_sendmsg+0x55c/0x870 [ 424.803832][T10204] ? ___sys_sendmsg+0x2a5/0x360 [ 424.803854][T10204] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 424.803877][T10204] ? do_syscall_64+0x15f/0xf80 [ 424.803901][T10204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.803924][T10204] netlink_rcv_skb+0x232/0x4b0 [ 424.803949][T10204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.803970][T10204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.804004][T10204] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.804033][T10204] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.804061][T10204] genl_rcv+0x28/0x40 [ 424.804078][T10204] netlink_unicast+0x780/0x920 [ 424.804109][T10204] netlink_sendmsg+0x813/0xb40 [ 424.804141][T10204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.804175][T10204] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 424.804202][T10204] ? aa_sock_msg_perm+0x122/0x200 [ 424.804221][T10204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.804246][T10204] sock_sendmsg_nosec+0x112/0x150 [ 424.804267][T10204] ____sys_sendmsg+0x55c/0x870 [ 424.804295][T10204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.804326][T10204] ? import_iovec+0x73/0xa0 [ 424.804349][T10204] ___sys_sendmsg+0x2a5/0x360 [ 424.804373][T10204] ? __lock_acquire+0x6b5/0x2d10 [ 424.804393][T10204] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.804445][T10204] ? __fget_files+0x2a/0x420 [ 424.804466][T10204] ? __fget_files+0x3a6/0x420 [ 424.804495][T10204] __x64_sys_sendmsg+0x1c3/0x2a0 [ 424.804524][T10204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.804597][T10204] ? __pfx_ksys_write+0x10/0x10 [ 424.804627][T10204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.804652][T10204] do_syscall_64+0x15f/0xf80 [ 424.804686][T10204] ? trace_irq_disable+0x3b/0x140 [ 424.804718][T10204] ? clear_bhb_loop+0x40/0x90 [ 424.804738][T10204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.804754][T10204] RIP: 0033:0x7fe52e21ce59 [ 424.804769][T10204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.804784][T10204] RSP: 002b:00007fe52c476028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.804801][T10204] RAX: ffffffffffffffda RBX: 00007fe52e495fa0 RCX: 00007fe52e21ce59 [ 424.804814][T10204] RDX: 0000000000044000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 424.804824][T10204] RBP: 00007fe52c476090 R08: 0000000000000000 R09: 0000000000000000 [ 424.804834][T10204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.804843][T10204] R13: 00007fe52e496038 R14: 00007fe52e495fa0 R15: 00007fffdd21c398 [ 424.804868][T10204] [ 425.414784][T10207] binder: BINDER_SET_CONTEXT_MGR already set [ 425.414802][T10207] binder: 10206:10207 ioctl 4018620d 200000000340 returned -16 [ 425.817863][ T5691] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 425.946462][T10172] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 426.015588][ T5691] usb 1-1: Using ep0 maxpacket: 32 [ 426.023374][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.023410][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.023447][ T5691] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.023472][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.069364][ T5691] usb 1-1: config 0 descriptor?? [ 426.093602][ T5691] hub 1-1:0.0: USB hub found [ 426.163165][T10172] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 426.163214][T10172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.163237][T10172] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 426.163294][T10172] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.220996][T10174] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 426.229594][T10172] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 426.229627][T10172] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 426.229649][T10172] usb 3-1: Product: syz [ 426.229665][T10172] usb 3-1: Manufacturer: syz [ 426.292545][T10172] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 426.372050][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1306'. [ 426.377386][T10174] usb 2-1: Using ep0 maxpacket: 16 [ 426.381873][T10174] usb 2-1: descriptor type invalid, skip [ 426.401119][T10174] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.401157][T10174] usb 2-1: config 1 interface 0 has no altsetting 0 [ 426.433045][T10174] usb 2-1: string descriptor 0 read error: -22 [ 426.433201][T10174] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 426.433237][T10174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.470669][T10221] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 426.504027][T10172] usb 3-1: USB disconnect, device number 29 [ 426.603368][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 426.691872][T10174] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 1 proto 1 vid 0x04B8 pid 0x0202 [ 426.722128][T10174] usb 2-1: USB disconnect, device number 57 [ 426.748417][T10228] netlink: 'syz.3.1306': attribute type 2 has an invalid length. [ 426.748439][T10228] netlink: 'syz.3.1306': attribute type 1 has an invalid length. [ 426.752045][ T9941] udevd[9941]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 426.917494][T10174] usblp0: removed [ 427.155623][ T5691] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 427.171878][ T5691] usbhid 1-1:0.0: can't add hid device: -71 [ 427.172013][ T5691] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 427.218226][ T5691] usb 1-1: USB disconnect, device number 59 [ 427.378137][T10239] __nla_validate_parse: 1 callbacks suppressed [ 427.378158][T10239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1310'. [ 427.600808][T10242] binder: BINDER_SET_CONTEXT_MGR already set [ 427.600825][T10242] binder: 10240:10242 ioctl 4018620d 200000000340 returned -16 [ 428.135142][ T5691] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 428.284856][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 428.294312][ T5691] usb 3-1: config 69 has an invalid interface number: 97 but max is 0 [ 428.294343][ T5691] usb 3-1: config 69 has no interface number 0 [ 428.294377][ T5691] usb 3-1: config 69 interface 97 has no altsetting 0 [ 428.320758][ T5691] usb 3-1: New USB device found, idVendor=3537, idProduct=03d3, bcdDevice=3c.40 [ 428.320797][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.320813][ T5691] usb 3-1: Product: syz [ 428.320824][ T5691] usb 3-1: Manufacturer: syz [ 428.320837][ T5691] usb 3-1: SerialNumber: syz [ 428.622950][ T5691] usb 3-1: USB disconnect, device number 30 [ 428.867288][T10252] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1315'. [ 428.867316][T10252] openvswitch: netlink: Message has 4 unknown bytes. [ 428.989282][T10255] XFS (nbd3): no-recovery mounts must be read-only. [ 429.008417][T10254] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 429.201067][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1318'. [ 429.604143][ T5691] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 430.368458][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 430.374880][ T5691] usb 2-1: Using ep0 maxpacket: 32 [ 430.382401][ T5691] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 430.382431][ T5691] usb 2-1: config 0 has no interface number 0 [ 430.382478][ T5691] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 430.399853][ T5691] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 430.399887][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.399916][ T5691] usb 2-1: Product: syz [ 430.399932][ T5691] usb 2-1: Manufacturer: syz [ 430.399948][ T5691] usb 2-1: SerialNumber: syz [ 430.446100][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1318'. [ 430.446157][T10268] netlink: 'syz.3.1318': attribute type 2 has an invalid length. [ 430.446173][T10268] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 430.489260][ T5691] usb 2-1: config 0 descriptor?? [ 430.490597][T10259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 430.724083][T10252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 430.885425][ T1244] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 431.034518][ T1244] usb 3-1: Using ep0 maxpacket: 32 [ 431.040625][ T1244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.040661][ T1244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.040703][ T1244] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 431.040833][ T1244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.097062][ T1244] usb 3-1: config 0 descriptor?? [ 431.110669][ T1244] hub 3-1:0.0: USB hub found [ 431.142126][ T5691] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 431.142555][ T5691] asix 2-1:0.188: probe with driver asix failed with error -61 [ 431.461018][T10282] binder: BINDER_SET_CONTEXT_MGR already set [ 431.461035][T10282] binder: 10281:10282 ioctl 4018620d 200000000340 returned -16 [ 431.671641][T10286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1324'. [ 431.985453][ T1244] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 432.009766][ T1244] usbhid 3-1:0.0: can't add hid device: -71 [ 432.009897][ T1244] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 432.076371][ T1244] usb 3-1: USB disconnect, device number 31 [ 432.471698][ T32] usb 2-1: USB disconnect, device number 58 [ 432.661917][T10308] xt_HMARK: proto mask must be zero with L3 mode [ 432.937943][ T32] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 433.094529][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 433.094579][ T32] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 433.094600][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.133902][ T32] usb 2-1: config 0 descriptor?? [ 433.145301][T10306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 433.168661][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 433.314249][ T5787] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 433.401771][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 433.421775][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.422775][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.461958][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 433.461988][T10327] netlink: 'syz.3.1331': attribute type 2 has an invalid length. [ 433.462003][T10327] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 433.496760][ T5787] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 433.496793][ T5787] usb 3-1: config 0 has no interface number 0 [ 433.497059][ T5787] usb 3-1: config 0 interface 41 has no altsetting 0 [ 433.511894][ T5787] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 433.518998][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.519022][ T5787] usb 3-1: Product: syz [ 433.519035][ T5787] usb 3-1: Manufacturer: syz [ 433.519047][ T5787] usb 3-1: SerialNumber: syz [ 433.589647][ T5787] usb 3-1: config 0 descriptor?? [ 434.185939][T10315] netlink: 'syz.0.1329': attribute type 2 has an invalid length. [ 434.360755][T10346] binder: BINDER_SET_CONTEXT_MGR already set [ 434.360774][T10346] binder: 10345:10346 ioctl 4018620d 200000000340 returned -16 [ 434.386789][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 434.386968][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 434.419818][ T32] usb 2-1: USB disconnect, device number 59 [ 435.122322][ C1] [ 435.122331][ C1] ====================================================== [ 435.122338][ C1] WARNING: possible circular locking dependency detected [ 435.122352][ C1] syzkaller #0 Not tainted [ 435.122361][ C1] ------------------------------------------------------ [ 435.122367][ C1] syz.0.1329/10313 is trying to acquire lock: [ 435.122376][ C1] ffff8880605e48a0 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 435.122423][ C1] [ 435.122423][ C1] but task is already holding lock: [ 435.122429][ C1] ffff8880605e5a20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 435.122466][ C1] [ 435.122466][ C1] which lock already depends on the new lock. [ 435.122466][ C1] [ 435.122471][ C1] [ 435.122471][ C1] the existing dependency chain (in reverse order) is: [ 435.122476][ C1] [ 435.122476][ C1] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 435.122496][ C1] rt_spin_lock+0x83/0x400 [ 435.122513][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 435.122531][ C1] phonet_rcv+0x781/0xc40 [ 435.122545][ C1] process_backlog+0x5e1/0xc60 [ 435.122563][ C1] __napi_poll+0xab/0x550 [ 435.122578][ C1] net_rx_action+0x696/0xe00 [ 435.122595][ C1] handle_softirqs+0x1de/0x6d0 [ 435.122617][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 435.122637][ C1] netif_rx+0xb9/0xf0 [ 435.122659][ C1] pn_send+0x62a/0x8e0 [ 435.122672][ C1] pn_skb_send+0x218/0x530 [ 435.122686][ C1] pipe_snd_status+0x1f1/0x320 [ 435.122702][ C1] pipe_do_rcv+0xf15/0x16a0 [ 435.122719][ C1] __sk_receive_skb+0x962/0x9e0 [ 435.122736][ C1] pep_do_rcv+0x685/0xaa0 [ 435.122752][ C1] __release_sock+0x2a9/0x3d0 [ 435.122783][ C1] release_sock+0x1be/0x290 [ 435.122800][ C1] pep_sock_accept+0xd47/0x11e0 [ 435.122902][ C1] pn_socket_accept+0xc1/0x310 [ 435.122921][ C1] do_accept+0x6ca/0x930 [ 435.122947][ C1] __sys_accept4+0x139/0x230 [ 435.122975][ C1] __x64_sys_accept4+0x9a/0xb0 [ 435.123000][ C1] do_syscall_64+0x15f/0xf80 [ 435.123023][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.123038][ C1] [ 435.123038][ C1] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 435.123065][ C1] __lock_acquire+0x15a5/0x2d10 [ 435.123081][ C1] lock_acquire+0x106/0x350 [ 435.123095][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 435.123111][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 435.123129][ C1] pep_do_rcv+0x685/0xaa0 [ 435.123146][ C1] __sk_receive_skb+0x962/0x9e0 [ 435.123164][ C1] phonet_rcv+0x781/0xc40 [ 435.123179][ C1] process_backlog+0x5e1/0xc60 [ 435.123199][ C1] __napi_poll+0xab/0x550 [ 435.123214][ C1] net_rx_action+0x696/0xe00 [ 435.123232][ C1] handle_softirqs+0x1de/0x6d0 [ 435.123254][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 435.123275][ C1] netif_rx+0xb9/0xf0 [ 435.123298][ C1] pn_send+0x62a/0x8e0 [ 435.123311][ C1] pn_skb_send+0x218/0x530 [ 435.123327][ C1] pep_sock_close+0x2c1/0x5b0 [ 435.123367][ C1] pn_socket_release+0x9b/0xc0 [ 435.123399][ C1] __sock_release+0xb9/0x250 [ 435.123418][ C1] sock_close+0x1c/0x30 [ 435.123452][ C1] __fput+0x461/0xa70 [ 435.123480][ C1] task_work_run+0x1d9/0x270 [ 435.123503][ C1] exit_to_user_mode_loop+0xf3/0x4d0 [ 435.123523][ C1] do_syscall_64+0x33e/0xf80 [ 435.123555][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.123576][ C1] [ 435.123576][ C1] other info that might help us debug this: [ 435.123576][ C1] [ 435.123581][ C1] Possible unsafe locking scenario: [ 435.123581][ C1] [ 435.123586][ C1] CPU0 CPU1 [ 435.123591][ C1] ---- ---- [ 435.123595][ C1] lock(slock-AF_PHONET); [ 435.123608][ C1] lock(slock-AF_PHONET/1); [ 435.123623][ C1] lock(slock-AF_PHONET); [ 435.123634][ C1] lock(slock-AF_PHONET/1); [ 435.123649][ C1] [ 435.123649][ C1] *** DEADLOCK *** [ 435.123649][ C1] [ 435.123653][ C1] 7 locks held by syz.0.1329/10313: [ 435.123662][ C1] #0: ffff8880413753b8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 435.123712][ C1] #1: ffff8880605e5218 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 435.123751][ C1] #2: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 435.123795][ C1] #3: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 435.123858][ C1] #4: ffff8880605e5a20 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 435.123916][ C1] #5: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 435.123955][ C1] #6: ffff8880605e5ad8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 435.123992][ C1] [ 435.123992][ C1] stack backtrace: [ 435.124015][ C1] CPU: 1 UID: 0 PID: 10313 Comm: syz.0.1329 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 435.124042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.124057][ C1] Call Trace: [ 435.124067][ C1] [ 435.124077][ C1] dump_stack_lvl+0xe8/0x150 [ 435.124110][ C1] print_circular_bug+0x2e1/0x300 [ 435.124132][ C1] check_noncircular+0x12e/0x150 [ 435.124154][ C1] __lock_acquire+0x15a5/0x2d10 [ 435.124172][ C1] ? rcu_is_watching+0x15/0xb0 [ 435.124200][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 435.124221][ C1] lock_acquire+0x106/0x350 [ 435.124236][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 435.124256][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 435.124275][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 435.124294][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 435.124313][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 435.124328][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 435.124344][ C1] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 435.124364][ C1] ? rt_spin_lock+0x1e0/0x400 [ 435.124383][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 435.124406][ C1] pep_do_rcv+0x685/0xaa0 [ 435.124427][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 435.124455][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 435.124474][ C1] ? phonet_rcv+0x781/0xc40 [ 435.124490][ C1] __sk_receive_skb+0x962/0x9e0 [ 435.124513][ C1] phonet_rcv+0x781/0xc40 [ 435.124529][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 435.124556][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 435.124575][ C1] ? process_backlog+0x271/0xc60 [ 435.124595][ C1] ? process_backlog+0x271/0xc60 [ 435.124614][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 435.124630][ C1] process_backlog+0x5e1/0xc60 [ 435.124657][ C1] __napi_poll+0xab/0x550 [ 435.124675][ C1] net_rx_action+0x696/0xe00 [ 435.124700][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 435.124719][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 435.124745][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 435.124767][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 435.124787][ C1] handle_softirqs+0x1de/0x6d0 [ 435.124814][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 435.124838][ C1] netif_rx+0xb9/0xf0 [ 435.124863][ C1] pn_send+0x62a/0x8e0 [ 435.124882][ C1] pn_skb_send+0x218/0x530 [ 435.124900][ C1] pep_sock_close+0x2c1/0x5b0 [ 435.124938][ C1] pn_socket_release+0x9b/0xc0 [ 435.124973][ C1] __sock_release+0xb9/0x250 [ 435.124996][ C1] ? __pfx_sock_close+0x10/0x10 [ 435.125019][ C1] sock_close+0x1c/0x30 [ 435.125043][ C1] __fput+0x461/0xa70 [ 435.125068][ C1] task_work_run+0x1d9/0x270 [ 435.125087][ C1] ? __pfx_task_work_run+0x10/0x10 [ 435.125108][ C1] exit_to_user_mode_loop+0xf3/0x4d0 [ 435.125139][ C1] ? rcu_is_watching+0x15/0xb0 [ 435.125166][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.125190][ C1] do_syscall_64+0x33e/0xf80 [ 435.125230][ C1] ? trace_irq_disable+0x3b/0x140 [ 435.125256][ C1] ? clear_bhb_loop+0x40/0x90 [ 435.125274][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.125289][ C1] RIP: 0033:0x7fe52e21ce59 [ 435.125303][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.125318][ C1] RSP: 002b:00007fffdd21c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 435.125334][ C1] RAX: 0000000000000000 RBX: 00007fe52e497da0 RCX: 00007fe52e21ce59 [ 435.125346][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 435.125355][ C1] RBP: 00007fe52e497da0 R08: 0000000000000006 R09: 0000000000000000 [ 435.125365][ C1] R10: 00007fe52e497cb0 R11: 0000000000000246 R12: 000000000006a160 [ 435.125376][ C1] R13: 00007fe52e495fac R14: 000000000006a0e0 R15: 00007fffdd21c600 [ 435.125393][ C1] [ 435.252454][ T5787] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 435.357171][ T5787] usb 3-1: USB disconnect, device number 32 [ 435.579494][T10356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1334'. [ 440.254902][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.254992][ T1336] ieee802154 phy1 wpan1: encryption failed: -22