last executing test programs: 12.96872999s ago: executing program 1 (id=4329): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vimc1(0xffffffffffffff9c, &(0x7f0000007200), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x2, {{0x2}, 0x4}}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 11.801701633s ago: executing program 1 (id=4344): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x408002) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) signalfd4(r1, 0x0, 0xffffffffffffffac, 0x80800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x46) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "000037d7009400", "9f0000000000ffff00", "32ec00", "000400"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x90) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x1, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x10}, {0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8f}, {0xeeef0000, 0x1000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xc8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x4fff, 0xf7f53000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf6}, {0x0, 0x0, 0x0, 0xfc, 0xd1, 0x1, 0x0, 0xef, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 10.882942329s ago: executing program 2 (id=4337): syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xd811, 0x10100, 0x0, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04b10b08353efa3641776f513ae56fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87000000000000000525"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x800, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x26, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) io_uring_enter(r0, 0x7a98, 0x4, 0x41, 0x0, 0x0) mlock(&(0x7f0000775000/0x4000)=nil, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) 10.480293152s ago: executing program 2 (id=4340): syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 10.218602202s ago: executing program 2 (id=4341): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x408002) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x401}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x46) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "000037d7009400", "9f0000000000ffff00", "32ec00", "000400"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x90) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x1, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x10}, {0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8f}, {0xeeef0000, 0x1000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xc8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x4fff, 0xf7f53000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf6}, {0x0, 0x0, 0x0, 0xfc, 0xd1, 0x1, 0x0, 0xef, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 10.205109759s ago: executing program 3 (id=4342): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r3, 0x2, 0x2001) fgetxattr(0xffffffffffffffff, &(0x7f0000001f40)=@known='system.posix_acl_default\x00', 0x0, 0x0) wait4(r3, &(0x7f00000003c0), 0x40000000, 0x0) syz_open_procfs$userns(r3, &(0x7f0000000180)) socket(0x2b, 0x80801, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000004a00010200000000000000000a003303"], 0x20}}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYRES8=r3], 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000100000000000200000007000000", @ANYRES32=r8, @ANYBLOB="004000003085040014001aa0100015800c0001800800160107000000a967715fb048dcbf6d7f7a11f7c6ba32338200000000ca6840af2257390cc6753a9e01bb1e880ebf7925ce5a1623188ab2bd4ae2221fbc164335e8de72143971e48f090d60715ee74b223a869872651875b2b3e479e21bd21fd65432e8b2b506fbdec8a038290e93f5824c229dc40327f5c54c33dbb670db6ad0ff9cd8d3144fbe6857db1d07757ee1d542076a1896add0fe563dcbd4a7a9679f65a48399a3c990bbd4dc08e3be8e90bff1b7978e8c98de65d3094f770841f4aa19e58becd71d"], 0x34}, 0x1, 0x0, 0x0, 0x50005}, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_ifindex=r8, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 9.571309255s ago: executing program 3 (id=4343): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r3, 0x2, 0x2001) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs_stats_percpu\x00') fgetxattr(r4, &(0x7f0000001f40)=@known='system.posix_acl_default\x00', 0x0, 0x0) syz_open_procfs$userns(r3, &(0x7f0000000180)) socket(0x2b, 0x80801, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000004a00010200000000000000000a003303"], 0x20}}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYRES8=r3], 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000100000000000200000007000000", @ANYRES32=r9, @ANYBLOB="004000003085040014001aa0100015800c0001800800160107000000a967715fb048dcbf6d7f7a11f7c6ba32338200000000ca6840af2257390cc6753a9e01bb1e880ebf7925ce5a1623188ab2bd4ae2221fbc164335e8de72143971e48f090d60715ee74b223a869872651875b2b3e479e21bd21fd65432e8b2b506fbdec8a038290e93f5824c229dc40327f5c54c33dbb670db6ad0ff9cd8d3144fbe6857db1d07757ee1d542076a1896add0fe563dcbd4a7a9679f65a48399a3c990bbd4dc08e3be8e90bff1b7978e8c98de65d3094f770841f4aa19e58becd71d"], 0x34}, 0x1, 0x0, 0x0, 0x50005}, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_ifindex=r9, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 9.285225877s ago: executing program 3 (id=4346): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000180)=[{0x7f, 0xf, 0x8, 0x9}, {0x3, 0x72, 0x3, 0x2}, {0xfff7, 0x4, 0xf1, 0x2}, {0x1, 0x4, 0x4, 0xb9a}, {0x5, 0x47, 0x7, 0x9a}, {0x0, 0x40, 0x8}]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x8, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r7}, 0x10) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000280)={0x0, 0x0, 0x100b, 0x200000, 0x0, 0x0, 0x0, 0x1}) r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000240)='THAWED\x00', 0x7) r10 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="b5f3e833bcca8c00030487c90cbc68fa0000000403"], 0x0, 0x0, 0x0}, 0x0) 8.530008489s ago: executing program 1 (id=4347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000060}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r3, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e2c, @broadcast}}, 0x24) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x5883, 0x4, 0x0, 0xfffffdf8}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xffdffffc, 0x0, 0x4) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) fchdir(r10) mkdir(&(0x7f0000000000)='./control\x00', 0x10) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r11, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) r12 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r13 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r13, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x3, 0x0, 0x0}) socket$rxrpc(0x21, 0x2, 0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xb263, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.903501894s ago: executing program 3 (id=4349): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x2, 0x2001) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs_stats_percpu\x00') fgetxattr(r3, &(0x7f0000001f40)=@known='system.posix_acl_default\x00', 0x0, 0x0) wait4(r2, &(0x7f00000003c0), 0x40000000, 0x0) syz_open_procfs$userns(r2, &(0x7f0000000180)) socket(0x2b, 0x80801, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000004a00010200000000000000000a003303"], 0x20}}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYRES8=r2], 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000100000000000200000007000000", @ANYRES32=r8, @ANYBLOB="004000003085040014001aa0100015800c0001800800160107000000a967715fb048dcbf6d7f7a11f7c6ba32338200000000ca6840af2257390cc6753a9e01bb1e880ebf7925ce5a1623188ab2bd4ae2221fbc164335e8de72143971e48f090d60715ee74b223a869872651875b2b3e479e21bd21fd65432e8b2b506fbdec8a038290e93f5824c229dc40327f5c54c33dbb670db6ad0ff9cd8d3144fbe6857db1d07757ee1d542076a1896add0fe563dcbd4a7a9679f65a48399a3c990bbd4dc08e3be8e90bff1b7978e8c98de65d3094f770841f4aa19e58becd71d"], 0x34}, 0x1, 0x0, 0x0, 0x50005}, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_ifindex=r8, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 6.902199519s ago: executing program 2 (id=4359): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000180)=[{0x7f, 0xf, 0x8, 0x9}, {0x3, 0x72, 0x3, 0x2}, {0xfff7, 0x4, 0xf1, 0x2}, {0x1, 0x4, 0x4, 0xb9a}, {0x5, 0x47, 0x7, 0x9a}, {0x0, 0x40, 0x8}]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x8, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r7}, 0x10) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000280)={0x0, 0x0, 0x100b, 0x200000, 0x0, 0x0, 0x0, 0x1}) r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000240)='THAWED\x00', 0x7) r10 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="b5f3e833bcca8c00030487c90cbc68fa0000000403"], 0x0, 0x0, 0x0}, 0x0) 6.302947831s ago: executing program 3 (id=4351): setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11e, 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x408002) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x401}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) signalfd4(r0, 0x0, 0xffffffffffffffac, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x46) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "000037d7009400", "9f0000000000ffff00", "32ec00", "000400"}, 0x28) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x90) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x1, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x10}, {0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8f}, {0xeeef0000, 0x1000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xc8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x4fff, 0xf7f53000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf6}, {0x0, 0x0, 0x0, 0xfc, 0xd1, 0x1, 0x0, 0xef, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 6.287645369s ago: executing program 0 (id=4352): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x408002) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x401}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) signalfd4(r1, 0x0, 0xffffffffffffffac, 0x80800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x46) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "000037d7009400", "9f0000000000ffff00", "32ec00", "000400"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x90) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x1, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x10}, {0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8f}, {0xeeef0000, 0x1000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xc8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x4fff, 0xf7f53000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf6}, {0x0, 0x0, 0x0, 0xfc, 0xd1, 0x1, 0x0, 0xef, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 6.176619733s ago: executing program 4 (id=4353): syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 5.870034839s ago: executing program 4 (id=4354): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r3, 0x2, 0x2001) fgetxattr(0xffffffffffffffff, &(0x7f0000001f40)=@known='system.posix_acl_default\x00', 0x0, 0x0) wait4(r3, &(0x7f00000003c0), 0x40000000, 0x0) syz_open_procfs$userns(r3, &(0x7f0000000180)) socket(0x2b, 0x80801, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000004a00010200000000000000000a003303"], 0x20}}, 0x0) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYRES8=r3], 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000100000000000200000007000000", @ANYRES32=r8, @ANYBLOB="004000003085040014001aa0100015800c0001800800160107000000a967715fb048dcbf6d7f7a11f7c6ba32338200000000ca6840af2257390cc6753a9e01bb1e880ebf7925ce5a1623188ab2bd4ae2221fbc164335e8de72143971e48f090d60715ee74b223a869872651875b2b3e479e21bd21fd65432e8b2b506fbdec8a038290e93f5824c229dc40327f5c54c33dbb670db6ad0ff9cd8d3144fbe6857db1d07757ee1d542076a1896add0fe563dcbd4a7a9679f65a48399a3c990bbd4dc08e3be8e90bff1b7978e8c98de65d3094f770841f4aa19e58becd71d"], 0x34}, 0x1, 0x0, 0x0, 0x50005}, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_ifindex=r8, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 5.869337872s ago: executing program 1 (id=4355): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0xffffffffffffffdb, 0x24, 0x10, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x148) close(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42302) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x10}, {}, {}, @raw32={[0x1]}}], 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$sysctl(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x4008af10, &(0x7f0000002400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$netlink(r1, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) 5.489700387s ago: executing program 4 (id=4356): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x4e21, 0xf4d0, @empty, 0x400000}}}, 0x90) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@bridge_delvlan={0x18, 0x70, 0x1, 0x0, 0x100}, 0x18}, 0x1, 0x0, 0x0, 0x40000050}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x40c0) clock_gettime(0x9, &(0x7f0000000280)) 4.764654485s ago: executing program 1 (id=4357): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x408002) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) signalfd4(r1, 0x0, 0xffffffffffffffac, 0x80800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x46) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "000037d7009400", "9f0000000000ffff00", "32ec00", "000400"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x90) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x1, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x10}, {0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8f}, {0xeeef0000, 0x1000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xc8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x4fff, 0xf7f53000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf6}, {0x0, 0x0, 0x0, 0xfc, 0xd1, 0x1, 0x0, 0xef, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 4.637941723s ago: executing program 2 (id=4358): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) futex(&(0x7f0000000300), 0x5, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) getdents64(r2, &(0x7f0000000180)=""/172, 0xac) read$hidraw(0xffffffffffffffff, 0x0, 0xc) r3 = socket(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r8 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x2, 0x0, 0x0) r9 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000, 0x0, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x47ba, 0x0, 0x0, 0x0, 0x0) r12 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010102000000082505a8a440000102030109022400010194400620040091020701b6010905f91730f10999d701020002caa39109058202ff03b40107"], &(0x7f0000000500)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x4, 0x8, 0x1, 0xff, 0x1}, 0x5a, &(0x7f0000000440)={0x5, 0xf, 0x5a, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x7, 0xf, 0x6, [0x3f, 0x0, 0xffc030, 0x1bf00]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x10, 0x1, 0xf2d, 0xf00, 0x4, [0x1fe000f]}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x7fffffa, 0xf0f, 0x0, [0xc00f, 0xff3f30, 0xffc0c0, 0x30, 0x3f30]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_disconnect(r12) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r4, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x7, 0x0, 0x1, 0x5, 0x0, 0x7}, &(0x7f00000000c0)=0x20) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r14, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r15 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1], 0x0) syz_usb_control_io(r15, 0x0, 0x0) syz_usb_control_io$hid(r15, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0xa, 0x2, {0x2, 0x11}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00032cd2e6d1080000000000000000000800000000"], &(0x7f00000000c0), 0x0}, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x8}}) 3.79255367s ago: executing program 4 (id=4360): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r3, 0x2, 0x2001) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs_stats_percpu\x00') fgetxattr(r4, &(0x7f0000001f40)=@known='system.posix_acl_default\x00', 0x0, 0x0) wait4(r3, &(0x7f00000003c0), 0x40000000, 0x0) syz_open_procfs$userns(r3, &(0x7f0000000180)) socket(0x2b, 0x80801, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYRES8=r3], 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000100000000000200000007000000", @ANYRES32=r9, @ANYBLOB="004000003085040014001aa0100015800c0001800800160107000000a967715fb048dcbf6d7f7a11f7c6ba32338200000000ca6840af2257390cc6753a9e01bb1e880ebf7925ce5a1623188ab2bd4ae2221fbc164335e8de72143971e48f090d60715ee74b223a869872651875b2b3e479e21bd21fd65432e8b2b506fbdec8a038290e93f5824c229dc40327f5c54c33dbb670db6ad0ff9cd8d3144fbe6857db1d07757ee1d542076a1896add0fe563dcbd4a7a9679f65a48399a3c990bbd4dc08e3be8e90bff1b7978e8c98de65d3094f770841f4aa19e58becd71d"], 0x34}, 0x1, 0x0, 0x0, 0x50005}, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_ifindex=r9, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 3.628969944s ago: executing program 0 (id=4361): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000200)=""/4112, &(0x7f00000000c0)=0x8c9) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1f5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) dup3(r3, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 2.75992249s ago: executing program 4 (id=4362): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0xfffffffd, {0x0, 0x4, 0x0, 0x0, {0x4e22, 0x4e23, [0x0, 0x8005, 0x0, 0x4000000], [0x1], 0x0, [0x7]}, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000010c0)=@polexpire={0xcc, 0x1b, 0x3b20e3ebc64d8b45, 0x70bd2d, 0x25dfdbfd, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0x5, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x87}, {0xe36, 0x1, 0xfffffffffffffff8, 0xff, 0x39fb, 0x80000001, 0x1ab, 0x5}, {0x5, 0x1, 0x0, 0x48a}, 0x5, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, 0x2c}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44814) r2 = getpgid(0x0) syz_clone3(&(0x7f00000001c0)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x20}, &(0x7f00000000c0)=""/62, 0x3e, &(0x7f0000000100)=""/76, &(0x7f0000000180)=[r2, r2, r2, r2, r2, r2, r2], 0x7}, 0x58) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_usb_connect(0x5, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b2010202019405240600"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x40, 0x2c, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0x9}, {0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r7 = syz_pidfd_open(r2, 0x0) process_madvise(r7, &(0x7f0000000340)=[{&(0x7f0000000240)="da20", 0x2}], 0x1, 0x15, 0x0) openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x84000, 0x0) 2.603065418s ago: executing program 3 (id=4363): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x408002) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x401}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x46) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "000037d7009400", "9f0000000000ffff00", "32ec00", "000400"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x90) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x1, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x10}, {0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8f}, {0xeeef0000, 0x1000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xc8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x4fff, 0xf7f53000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf6}, {0x0, 0x0, 0x0, 0xfc, 0xd1, 0x1, 0x0, 0xef, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 1.709780286s ago: executing program 0 (id=4364): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000cff500000000ffffffff00000700", @ANYRES32=0x0, @ANYBLOB="0000000001400600300012800800010068737200240002800500070001000000", @ANYRES32=r4, @ANYRES32=r2], 0x50}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x238}}, 0x4000) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r6) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000040)) 1.496252135s ago: executing program 0 (id=4365): syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 1.140291183s ago: executing program 2 (id=4366): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11e, 0x1, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x408002) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x401}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) signalfd4(r1, 0x0, 0xffffffffffffffac, 0x80800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x46) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "000037d7009400", "9f0000000000ffff00", "32ec00", "000400"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x90) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x1, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x10}, {0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8f}, {0xeeef0000, 0x1000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xc8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x4fff, 0xf7f53000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf6}, {0x0, 0x0, 0x0, 0xfc, 0xd1, 0x1, 0x0, 0xef, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 1.096276004s ago: executing program 0 (id=4367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000060}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08012dbd7000fbdbdf25210007024e22000008000500ac14141114000200766972745f776966693000000000000006000400c1fa00000500fcb98000000006"], 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r3, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e2c, @broadcast}}, 0x24) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x5883, 0x4, 0x0, 0xfffffdf8}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xffdffffc, 0x0, 0x4) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) fchdir(r10) mkdir(&(0x7f0000000000)='./control\x00', 0x10) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r11, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) r12 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r12, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r13 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r13, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x3, 0x0, 0x0}) socket$rxrpc(0x21, 0x2, 0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xb263, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 548.404563ms ago: executing program 1 (id=4368): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0xffffffffffffffdb, 0x24, 0x10, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x148) close(r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42302) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x10}, {}, {}, @raw32={[0x1]}}], 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$sysctl(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x4008af10, &(0x7f0000002400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$netlink(r1, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) 509.141205ms ago: executing program 4 (id=4369): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000180)=[{0x7f, 0xf, 0x8, 0x9}, {0x3, 0x72, 0x3, 0x2}, {0xfff7, 0x4, 0xf1, 0x2}, {0x1, 0x4, 0x4, 0xb9a}, {0x5, 0x47, 0x7, 0x9a}, {0x0, 0x40, 0x8}]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x8, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r7}, 0x10) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000280)={0x0, 0x0, 0x100b, 0x200000, 0x0, 0x0, 0x0, 0x1}) r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000240)='THAWED\x00', 0x7) r10 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="b5f3e833bcca8c00030487c90cbc68fa0000000403"], 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=4370): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(0x0, &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@bridge_delvlan={0x18, 0x70, 0x1, 0x0, 0x100}, 0x18}, 0x1, 0x0, 0x0, 0x40000050}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x40c0) clock_gettime(0x9, &(0x7f0000000280)) kernel console output (not intermixed with test programs): ing ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.164996][T12752] usb 3-1: device descriptor read/64, error -71 [ 1009.279998][ T3079] usb 1-1: USB disconnect, device number 42 [ 1009.392346][T18734] syz_tun: entered allmulticast mode [ 1009.405651][T12752] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1009.536596][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1009.623804][T18733] syz_tun: left allmulticast mode [ 1009.646215][T12752] usb 3-1: config 0 has no interfaces? [ 1009.674283][T12752] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1009.723825][T12752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.759286][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3889'. [ 1009.769140][T12752] usb 3-1: Product: syz [ 1009.780488][T12752] usb 3-1: Manufacturer: syz [ 1009.816758][T12752] usb 3-1: SerialNumber: syz [ 1009.858071][T12752] usb 3-1: config 0 descriptor?? [ 1010.004063][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1010.842032][T18766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.852700][T18766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.951052][T18770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1010.960839][T12752] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1011.205332][ T5880] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1011.355350][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 1011.375503][ T5880] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1011.399990][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.428396][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.453672][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1011.498144][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.550449][ T5880] usb 2-1: Product: syz [ 1011.568240][ T5880] usb 2-1: Manufacturer: syz [ 1011.583214][ T5880] usb 2-1: SerialNumber: syz [ 1011.585209][ T9726] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1011.625439][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3899'. [ 1011.871701][ T9726] usb 4-1: config 0 has no interfaces? [ 1011.882260][ T9726] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1011.891706][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.924173][ T9726] usb 4-1: Product: syz [ 1011.941252][ T9726] usb 4-1: Manufacturer: syz [ 1011.994051][ T9726] usb 4-1: SerialNumber: syz [ 1012.010779][ T9726] usb 4-1: config 0 descriptor?? [ 1012.032284][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3900'. [ 1012.096940][ T9726] usb 3-1: USB disconnect, device number 23 [ 1012.261259][T18786] syz_tun: entered allmulticast mode [ 1012.388920][T18793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1012.496123][T18785] syz_tun: left allmulticast mode [ 1013.009624][T18804] binder: 18803:18804 ioctl c0306201 800003c0 returned -14 [ 1013.446481][T18809] netlink: 'syz.2.3908': attribute type 8 has an invalid length. [ 1013.472749][T18809] FAULT_INJECTION: forcing a failure. [ 1013.472749][T18809] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.498538][T18809] CPU: 0 UID: 0 PID: 18809 Comm: syz.2.3908 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1013.498571][T18809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1013.498586][T18809] Call Trace: [ 1013.498595][T18809] [ 1013.498605][T18809] dump_stack_lvl+0x189/0x250 [ 1013.498646][T18809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1013.498678][T18809] ? __pfx__printk+0x10/0x10 [ 1013.498697][T18809] ? __lock_acquire+0xaac/0xd20 [ 1013.498744][T18809] should_fail_ex+0x414/0x560 [ 1013.498785][T18809] should_failslab+0xa8/0x100 [ 1013.498816][T18809] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1013.498842][T18809] ? skb_clone+0x212/0x3a0 [ 1013.498877][T18809] skb_clone+0x212/0x3a0 [ 1013.498915][T18809] __netlink_deliver_tap+0x404/0x850 [ 1013.498953][T18809] ? netlink_deliver_tap+0x2e/0x1b0 [ 1013.498978][T18809] netlink_deliver_tap+0x19c/0x1b0 [ 1013.499028][T18809] netlink_sendskb+0x68/0x140 [ 1013.499065][T18809] netlink_rcv_skb+0x2a0/0x490 [ 1013.499089][T18809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1013.499115][T18809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1013.499165][T18809] ? netlink_deliver_tap+0x2e/0x1b0 [ 1013.499188][T18809] ? netlink_deliver_tap+0x2e/0x1b0 [ 1013.499217][T18809] netlink_unicast+0x758/0x8d0 [ 1013.499263][T18809] netlink_sendmsg+0x805/0xb30 [ 1013.499297][T18809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1013.499325][T18809] ? __import_iovec+0x5d4/0x7f0 [ 1013.499351][T18809] ? aa_sock_msg_perm+0x94/0x160 [ 1013.499376][T18809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1013.499399][T18809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1013.499424][T18809] __sock_sendmsg+0x219/0x270 [ 1013.499473][T18809] ____sys_sendmsg+0x505/0x830 [ 1013.499506][T18809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1013.499549][T18809] ___sys_sendmsg+0x21f/0x2a0 [ 1013.499578][T18809] ? __pfx____sys_sendmsg+0x10/0x10 [ 1013.499644][T18809] ? __fget_files+0x2a/0x420 [ 1013.499670][T18809] ? __fget_files+0x3a0/0x420 [ 1013.499707][T18809] __sys_sendmsg+0x164/0x220 [ 1013.499737][T18809] ? __pfx___sys_sendmsg+0x10/0x10 [ 1013.499779][T18809] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1013.499806][T18809] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.499832][T18809] __do_fast_syscall_32+0xb4/0x110 [ 1013.499858][T18809] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.499886][T18809] do_fast_syscall_32+0x34/0x80 [ 1013.499911][T18809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1013.499936][T18809] RIP: 0023:0xf707e539 [ 1013.499954][T18809] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1013.499972][T18809] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1013.499994][T18809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1013.500010][T18809] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1013.500023][T18809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1013.500034][T18809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1013.500046][T18809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1013.500075][T18809] [ 1013.812257][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.987259][ T5880] usb 2-1: 0:2 : does not exist [ 1014.063615][ T5880] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1014.199844][ T5880] usb 2-1: USB disconnect, device number 36 [ 1014.430535][T18817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.442629][T18817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.565383][ T3079] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1015.087683][ T5882] usb 4-1: USB disconnect, device number 51 [ 1015.313896][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1015.542585][T18834] syz_tun: entered allmulticast mode [ 1015.815755][ T3079] usb 3-1: device descriptor read/64, error -71 [ 1015.849684][T18829] syz_tun: left allmulticast mode [ 1016.095023][ T3079] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1016.193315][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3918'. [ 1016.302434][ T3079] usb 3-1: config 0 has no interfaces? [ 1016.331616][ T3079] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1016.344327][ T3079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.364527][ T3079] usb 3-1: Product: syz [ 1016.373831][ T3079] usb 3-1: Manufacturer: syz [ 1016.378598][ T9726] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1016.389827][ T3079] usb 3-1: SerialNumber: syz [ 1016.422846][ T3079] usb 3-1: config 0 descriptor?? [ 1016.535276][ T9726] usb 1-1: Using ep0 maxpacket: 16 [ 1016.636037][ T9726] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1016.649956][ T9726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.661351][ T9726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1016.680809][ T9726] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1016.694566][ T9726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.859644][ T9726] usb 1-1: Product: syz [ 1016.863989][ T9726] usb 1-1: Manufacturer: syz [ 1016.868886][ T9726] usb 1-1: SerialNumber: syz [ 1017.082739][ T9726] usb 1-1: 0:2 : does not exist [ 1017.102908][ T9726] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1017.156087][ T9726] usb 1-1: USB disconnect, device number 43 [ 1017.217724][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1017.419843][T18863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.475634][T18863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.545101][ T3079] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1017.745586][ T9726] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1017.928972][ T9726] usb 2-1: config 0 has no interfaces? [ 1017.940414][ T9726] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1017.952272][ T9726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.967424][ T9726] usb 2-1: Product: syz [ 1017.972689][ T9726] usb 2-1: Manufacturer: syz [ 1017.984298][ T9726] usb 2-1: SerialNumber: syz [ 1018.041049][ T9726] usb 2-1: config 0 descriptor?? [ 1018.356879][ T9726] usb 3-1: USB disconnect, device number 25 [ 1018.625889][T18878] syz_tun: entered allmulticast mode [ 1018.917536][T18877] syz_tun: left allmulticast mode [ 1019.656702][T18897] misc userio: The device must be registered before sending interrupts [ 1020.125049][ T5884] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1020.285110][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 1020.298095][ T5884] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1020.313125][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.323805][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.336633][ T5884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1020.346183][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.355233][ T5884] usb 4-1: Product: syz [ 1020.359846][ T5884] usb 4-1: Manufacturer: syz [ 1020.374213][ T5884] usb 4-1: SerialNumber: syz [ 1020.651707][ T5884] usb 4-1: 0:2 : does not exist [ 1020.673130][ T5884] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1020.760161][ T5884] usb 4-1: USB disconnect, device number 53 [ 1020.880312][ T5886] usb 2-1: USB disconnect, device number 37 [ 1020.882307][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.905267][ T3079] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1021.142018][T18924] syz_tun: entered allmulticast mode [ 1021.535867][T18923] syz_tun: left allmulticast mode [ 1021.564184][ T3079] usb 3-1: config 0 has no interfaces? [ 1021.595978][ T3079] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1021.700235][ T3079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.709124][ T3079] usb 3-1: Product: syz [ 1021.713358][ T3079] usb 3-1: Manufacturer: syz [ 1021.718152][ T3079] usb 3-1: SerialNumber: syz [ 1021.727503][ T3079] usb 3-1: config 0 descriptor?? [ 1022.708202][ T5884] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1022.866828][ T5884] usb 4-1: config 0 has no interfaces? [ 1022.886223][ T5884] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1022.943391][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.960226][T18956] netlink: 'syz.0.3951': attribute type 10 has an invalid length. [ 1022.969674][ T5884] usb 4-1: Product: syz [ 1022.980525][ T5884] usb 4-1: Manufacturer: syz [ 1022.995038][ T5884] usb 4-1: SerialNumber: syz [ 1023.019132][ T5884] usb 4-1: config 0 descriptor?? [ 1023.555024][ T5882] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1023.595019][ T5884] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1023.788867][ T5884] usb 2-1: config 0 has no interfaces? [ 1023.810647][ T5884] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1023.820216][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.828987][ T5884] usb 2-1: Product: syz [ 1023.833612][ T5884] usb 2-1: Manufacturer: syz [ 1023.839120][ T5884] usb 2-1: SerialNumber: syz [ 1023.859908][ T5884] usb 2-1: config 0 descriptor?? [ 1024.027953][ T5884] usb 3-1: USB disconnect, device number 26 [ 1024.534939][ T5884] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1024.684950][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 1024.692322][ T5884] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1024.706536][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.771574][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1024.783705][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1024.794518][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.810778][T18978] syz_tun: entered allmulticast mode [ 1024.816425][ T5884] usb 5-1: Product: syz [ 1024.821535][ T5884] usb 5-1: Manufacturer: syz [ 1024.872181][ T5884] usb 5-1: SerialNumber: syz [ 1024.993318][ T5882] usb 4-1: USB disconnect, device number 54 [ 1025.113007][T18977] syz_tun: left allmulticast mode [ 1025.140564][ T5884] usb 5-1: 0:2 : does not exist [ 1025.158926][ T5884] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1025.206015][ T5884] usb 5-1: USB disconnect, device number 41 [ 1025.247228][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1025.445003][ T5882] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1025.603624][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1025.615271][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1025.627587][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1025.637641][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1025.646210][ T5882] usb 4-1: SerialNumber: syz [ 1025.658317][T18982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1025.668495][T18982] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1025.681775][ T5882] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1026.029937][ T5882] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1026.059111][ T5882] usb 4-1: USB disconnect, device number 55 [ 1026.295740][ T5884] usb 2-1: USB disconnect, device number 38 [ 1026.415141][ T30] audit: type=1326 audit(1746282085.426:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19006 comm="syz.2.3966" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0 [ 1026.585399][ T5880] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1026.852864][ T5880] usb 4-1: config 0 has no interfaces? [ 1026.872682][ T5880] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1026.882117][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.891378][ T5880] usb 4-1: Product: syz [ 1026.901394][ T5880] usb 4-1: Manufacturer: syz [ 1026.919166][ T5880] usb 4-1: SerialNumber: syz [ 1026.950764][ T5880] usb 4-1: config 0 descriptor?? [ 1027.075103][ T5884] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1027.117935][T19021] syz_tun: entered allmulticast mode [ 1027.352486][T19020] syz_tun: left allmulticast mode [ 1027.535643][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1027.914987][ T5882] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1028.064947][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 1028.073801][ T5882] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1028.121237][ T5882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.185516][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1028.227131][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1028.261576][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.286028][ T5882] usb 1-1: Product: syz [ 1028.300778][ T5882] usb 1-1: Manufacturer: syz [ 1028.317870][ T5882] usb 1-1: SerialNumber: syz [ 1028.571608][ T5882] usb 1-1: 0:2 : does not exist [ 1028.599967][ T5882] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1028.642161][ T5882] usb 1-1: USB disconnect, device number 45 [ 1028.762507][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1028.815040][ T5880] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1029.023898][ T5880] usb 5-1: config 0 has no interfaces? [ 1029.036152][ T5880] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1029.046496][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.054704][ T5880] usb 5-1: Product: syz [ 1029.060053][ T5880] usb 5-1: Manufacturer: syz [ 1029.089934][ T5880] usb 5-1: SerialNumber: syz [ 1029.177095][ T5880] usb 5-1: config 0 descriptor?? [ 1029.292436][ T9726] usb 4-1: USB disconnect, device number 56 [ 1029.513977][T19041] netlink: 'syz.2.3976': attribute type 7 has an invalid length. [ 1029.884066][T19041] : entered promiscuous mode [ 1029.894946][ T9726] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1030.117192][ T9726] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1030.128144][ T9726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.145612][ T9726] usb 3-1: config 0 descriptor?? [ 1031.343051][T19069] syz_tun: entered allmulticast mode [ 1031.455022][ T5880] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1031.611703][T19068] syz_tun: left allmulticast mode [ 1031.626293][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 1031.637681][ T5880] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1031.696195][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.728884][ T5880] usb 1-1: Product: syz [ 1031.760426][ T5880] usb 1-1: Manufacturer: syz [ 1031.760789][T19074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3985'. [ 1031.784440][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3985'. [ 1031.796511][ T5880] usb 1-1: SerialNumber: syz [ 1031.851867][ T5880] usb 1-1: config 0 descriptor?? [ 1032.246398][ T9726] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1032.252885][ T5880] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1032.355314][ T9726] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1032.410181][ T9726] usb 3-1: USB disconnect, device number 27 [ 1032.460916][ T3079] usb 5-1: USB disconnect, device number 42 [ 1032.858766][ T5880] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1032.879241][ T5884] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1032.888533][ T5880] usb 1-1: USB disconnect, device number 46 [ 1032.938674][ T9726] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1032.992239][T19094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.003062][T19094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.012790][ T3079] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1033.075029][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 1033.091250][ T5884] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1033.103128][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.127227][ T9726] usb 3-1: config 0 has no interfaces? [ 1033.134749][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1033.151902][ T9726] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1033.168102][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1033.182016][ T9726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.190549][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.199248][ T9726] usb 3-1: Product: syz [ 1033.212402][ T5884] usb 2-1: Product: syz [ 1033.217531][ T9726] usb 3-1: Manufacturer: syz [ 1033.225769][ T5884] usb 2-1: Manufacturer: syz [ 1033.230695][ T9726] usb 3-1: SerialNumber: syz [ 1033.252306][ T5884] usb 2-1: SerialNumber: syz [ 1033.266706][ T9726] usb 3-1: config 0 descriptor?? [ 1033.488173][ T5884] usb 2-1: 0:2 : does not exist [ 1033.512324][ T5884] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1033.586103][ T5884] usb 2-1: USB disconnect, device number 40 [ 1034.085289][ T9726] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1034.244914][ T9726] usb 1-1: Using ep0 maxpacket: 16 [ 1034.260607][ T9726] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1034.281238][ T9726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1034.300131][ T9726] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1034.312960][ T9726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.324260][ T9726] usb 1-1: Product: syz [ 1034.333120][ T9726] usb 1-1: Manufacturer: syz [ 1034.340512][ T9726] usb 1-1: SerialNumber: syz [ 1034.360091][ T9726] usb 1-1: config 0 descriptor?? [ 1034.374520][ T9726] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1034.390245][ T9726] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1034.982062][ T9726] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1034.990784][ T9726] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1035.695754][ T5884] usb 3-1: USB disconnect, device number 28 [ 1035.787275][T19120] syz_tun: entered allmulticast mode [ 1036.045323][ T9726] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1036.061193][ T9726] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1036.068494][ T9726] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1036.076198][ T9726] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1036.083660][ T9726] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1036.094040][ T9726] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1036.306343][ T9726] usb 1-1: USB disconnect, device number 47 [ 1036.319304][T19119] syz_tun: left allmulticast mode [ 1036.734935][ T3079] usb 5-1: device descriptor read/64, error -71 [ 1036.845051][ T5880] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1036.976685][ T3079] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1037.125506][ T5886] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1037.167020][ T3079] usb 5-1: config 0 has no interfaces? [ 1037.190549][ T3079] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1037.204343][ T3079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.248185][ T5880] usb 2-1: config 0 has no interfaces? [ 1037.285650][ T9726] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1037.290157][ T5880] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1037.312396][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 1037.317729][ T3079] usb 5-1: Product: syz [ 1037.324985][ T3079] usb 5-1: Manufacturer: syz [ 1037.329904][ T3079] usb 5-1: SerialNumber: syz [ 1037.342849][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.354012][ T5886] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1037.369525][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.378805][ T3079] usb 5-1: config 0 descriptor?? [ 1037.384158][ T5880] usb 2-1: Product: syz [ 1037.388686][ T5880] usb 2-1: Manufacturer: syz [ 1037.393964][ T5886] usb 4-1: Product: syz [ 1037.398866][ T5880] usb 2-1: SerialNumber: syz [ 1037.403530][ T5886] usb 4-1: Manufacturer: syz [ 1037.410472][ T5886] usb 4-1: SerialNumber: syz [ 1037.416598][ T5880] usb 2-1: config 0 descriptor?? [ 1037.465121][ T9726] usb 1-1: Using ep0 maxpacket: 16 [ 1037.481759][ T9726] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1037.508461][ T9726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.526376][ T5886] usb 4-1: config 0 descriptor?? [ 1037.628543][ T9726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1037.656139][ T9726] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1037.671888][ T9726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.701084][ T9726] usb 1-1: Product: syz [ 1037.712864][ T9726] usb 1-1: Manufacturer: syz [ 1037.728379][ T9726] usb 1-1: SerialNumber: syz [ 1037.969639][ T9726] usb 1-1: 0:2 : does not exist [ 1037.986653][ T9726] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1038.049861][ T9726] usb 1-1: USB disconnect, device number 48 [ 1038.173462][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.565558][ T5886] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 1038.600741][ T5886] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1038.717634][T19156] misc userio: The device must be registered before sending interrupts [ 1039.228828][T19167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.280648][T19167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.335205][ T9726] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1039.803558][ T5886] usb 5-1: USB disconnect, device number 44 [ 1039.860336][ T3079] usb 4-1: USB disconnect, device number 57 [ 1040.119295][T19173] syz_tun: entered allmulticast mode [ 1040.164955][ T5880] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1040.359262][ T3079] usb 2-1: USB disconnect, device number 41 [ 1040.373476][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1040.393660][ T5880] usb 1-1: not running at top speed; connect to a high speed hub [ 1040.410342][ T5880] usb 1-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 1040.423092][ T5880] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1040.434718][T19172] syz_tun: left allmulticast mode [ 1040.440568][ T5880] usb 1-1: config 1 has no interface number 1 [ 1040.452137][ T5880] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1040.465885][ T5880] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 4 [ 1040.477226][ T5880] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29436, setting to 1023 [ 1040.491696][ T5880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.502650][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.515267][ T5880] usb 1-1: Product: syz [ 1040.521847][ T5880] usb 1-1: Manufacturer: syz [ 1040.527474][ T5880] usb 1-1: SerialNumber: syz [ 1040.755277][ T5880] hub 1-1:1.0: Invalid hub with more than one config or interface [ 1040.770745][ T5880] hub 1-1:1.0: probe with driver hub failed with error -22 [ 1040.796871][ T5880] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1040.886053][ T5880] usb 1-1: USB disconnect, device number 49 [ 1040.999169][ T6198] udevd[6198]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.021829][T19187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4017'. [ 1041.044929][ C0] hrtimer: interrupt took 133285 ns [ 1041.345244][T12752] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1041.495105][T12752] usb 4-1: Using ep0 maxpacket: 16 [ 1041.502735][T12752] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1041.513169][T12752] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.533509][T12752] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1041.560089][T12752] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.592781][T12752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.620851][T12752] usb 4-1: Product: syz [ 1041.635065][T12752] usb 4-1: Manufacturer: syz [ 1041.649560][T12752] usb 4-1: SerialNumber: syz [ 1041.880351][T12752] usb 4-1: 0:2 : does not exist [ 1041.937139][T12752] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1041.970273][T19202] netlink: 'syz.1.4023': attribute type 33 has an invalid length. [ 1042.041323][T12752] usb 4-1: USB disconnect, device number 58 [ 1042.206694][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.380324][T19211] syz_tun: entered allmulticast mode [ 1042.854954][ T9726] usb 3-1: device descriptor read/64, error -71 [ 1042.867205][T19209] syz_tun: left allmulticast mode [ 1042.924951][T12752] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1043.094955][ T9726] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1043.130439][T12752] usb 5-1: config 0 has no interfaces? [ 1043.214183][T12752] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1043.233872][T12752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.282246][ T9726] usb 3-1: config 0 has no interfaces? [ 1043.284928][T12752] usb 5-1: Product: syz [ 1043.320234][ T9726] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1043.330567][ T9726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.348657][ T9726] usb 3-1: Product: syz [ 1043.360341][ T9726] usb 3-1: Manufacturer: syz [ 1043.373758][T12752] usb 5-1: Manufacturer: syz [ 1043.378762][ T9726] usb 3-1: SerialNumber: syz [ 1043.401510][ T9726] usb 3-1: config 0 descriptor?? [ 1043.575274][T12752] usb 5-1: SerialNumber: syz [ 1043.623274][T12752] usb 5-1: config 0 descriptor?? [ 1043.859942][ T30] audit: type=1326 audit(1746282102.876:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19227 comm="syz.3.4029" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x0 [ 1043.881619][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.040530][T19231] netlink: 'syz.0.4030': attribute type 10 has an invalid length. [ 1045.172527][T19243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4034'. [ 1045.565117][ T9726] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1045.664947][ T5884] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1045.821796][ T5882] usb 5-1: USB disconnect, device number 45 [ 1045.828165][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 1045.844112][ T5884] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1045.865357][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.882299][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.902741][ T5884] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1045.917012][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.928058][ T5884] usb 1-1: Product: syz [ 1045.933316][ T5884] usb 1-1: Manufacturer: syz [ 1045.969746][ T5884] usb 1-1: SerialNumber: syz [ 1046.019397][T19256] syz_tun: entered allmulticast mode [ 1046.213226][ T5884] usb 1-1: 0:2 : does not exist [ 1046.241666][ T5882] usb 3-1: USB disconnect, device number 30 [ 1046.262137][ T5884] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1046.338928][T19255] syz_tun: left allmulticast mode [ 1046.387517][T19262] veth1_to_hsr: entered promiscuous mode [ 1046.530302][ T5884] usb 1-1: USB disconnect, device number 50 [ 1046.557480][T19262] vlan4: entered allmulticast mode [ 1046.562676][T19262] bond0: entered allmulticast mode [ 1046.568190][T19262] bond_slave_0: entered allmulticast mode [ 1046.574017][T19262] bond_slave_1: entered allmulticast mode [ 1046.690768][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.445037][T19295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4049'. [ 1048.459414][T19296] syz_tun: entered allmulticast mode [ 1048.635502][ T5884] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1048.724469][T19294] syz_tun: left allmulticast mode [ 1048.798622][ T5884] usb 2-1: config 0 has no interfaces? [ 1048.813020][ T5884] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1048.822663][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.841393][ T5884] usb 2-1: Product: syz [ 1048.873103][ T5884] usb 2-1: Manufacturer: syz [ 1048.883675][ T5884] usb 2-1: SerialNumber: syz [ 1048.909953][ T5884] usb 2-1: config 0 descriptor?? [ 1049.267835][ T5884] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1049.490808][ T5884] usb 1-1: config 0 has no interfaces? [ 1049.508565][ T5884] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1049.518602][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.532286][ T5884] usb 1-1: Product: syz [ 1049.542075][ T5884] usb 1-1: Manufacturer: syz [ 1049.547241][ T9726] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1049.563016][ T5884] usb 1-1: SerialNumber: syz [ 1049.618745][ T5884] usb 1-1: config 0 descriptor?? [ 1049.695114][ T5882] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1049.706616][ T9726] usb 4-1: Using ep0 maxpacket: 16 [ 1049.715273][ T9726] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1049.724665][ T9726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.750732][ T9726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1049.845615][ T9726] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.855298][ T5882] usb 3-1: device descriptor read/64, error -71 [ 1049.862146][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.871086][ T9726] usb 4-1: Product: syz [ 1049.875849][ T9726] usb 4-1: Manufacturer: syz [ 1049.883287][ T9726] usb 4-1: SerialNumber: syz [ 1050.111998][ T9726] usb 4-1: 0:2 : does not exist [ 1050.123105][ T5882] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1050.186056][ T9726] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1050.275891][ T9726] usb 4-1: USB disconnect, device number 60 [ 1050.365246][ T5882] usb 3-1: device descriptor read/64, error -71 [ 1050.491583][ T5882] usb usb3-port1: attempt power cycle [ 1050.835055][ T5882] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1050.855960][ T5882] usb 3-1: device descriptor read/8, error -71 [ 1051.125284][ T5882] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1051.151216][ T5882] usb 3-1: device descriptor read/8, error -71 [ 1051.321955][ T5882] usb usb3-port1: unable to enumerate USB device [ 1051.345731][T12752] usb 2-1: USB disconnect, device number 42 [ 1052.064904][ T5882] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1052.173842][ T5884] usb 1-1: USB disconnect, device number 51 [ 1052.342304][T19342] syz_tun: entered allmulticast mode [ 1052.547077][T19341] syz_tun: left allmulticast mode [ 1052.596902][T19349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4064'. [ 1053.015279][ T5884] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1053.025871][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4067'. [ 1053.176888][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 1053.204613][ T5884] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1053.212309][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1053.222633][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.234509][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1053.257789][ T5884] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1053.272018][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.283124][ T5884] usb 1-1: Product: syz [ 1053.295318][ T5884] usb 1-1: Manufacturer: syz [ 1053.301621][ T5884] usb 1-1: SerialNumber: syz [ 1053.609666][ T5884] usb 1-1: 0:2 : does not exist [ 1053.657150][ T5884] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1053.685800][T12752] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1053.744246][ T5884] usb 1-1: USB disconnect, device number 52 [ 1053.800273][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.888843][T12752] usb 5-1: config 0 has no interfaces? [ 1053.935130][T12752] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1053.944698][T12752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.953989][T12752] usb 5-1: Product: syz [ 1053.958884][T12752] usb 5-1: Manufacturer: syz [ 1053.963650][T12752] usb 5-1: SerialNumber: syz [ 1054.005668][T12752] usb 5-1: config 0 descriptor?? [ 1054.341151][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.347841][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.469542][T12752] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1054.706449][T12752] usb 3-1: config 0 has no interfaces? [ 1054.744292][T12752] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1054.895637][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1054.979303][T12752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.021402][T12752] usb 3-1: Product: syz [ 1055.038518][T12752] usb 3-1: Manufacturer: syz [ 1055.089165][T12752] usb 3-1: SerialNumber: syz [ 1055.121749][T12752] usb 3-1: config 0 descriptor?? [ 1055.372550][T19388] syz_tun: entered allmulticast mode [ 1055.623459][T19387] syz_tun: left allmulticast mode [ 1056.002676][T19399] batadv0: entered promiscuous mode [ 1056.008465][T19399] macsec2: entered promiscuous mode [ 1056.023071][T19399] batadv0: left promiscuous mode [ 1056.248607][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1056.536297][T12752] usb 5-1: USB disconnect, device number 46 [ 1056.579477][T19409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4080'. [ 1057.195110][ T5884] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1057.454123][ T5882] usb 3-1: USB disconnect, device number 35 [ 1057.464920][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 1057.521201][ T5884] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1057.540580][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.565240][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1057.601718][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1057.625963][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.637182][ T5884] usb 5-1: Product: syz [ 1057.641391][ T5884] usb 5-1: Manufacturer: syz [ 1057.655443][ T5884] usb 5-1: SerialNumber: syz [ 1057.734193][T19426] syz_tun: entered allmulticast mode [ 1057.824996][ T9726] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1057.900589][ T5884] usb 5-1: 0:2 : does not exist [ 1057.911504][ T5884] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1057.950522][ T5884] usb 5-1: USB disconnect, device number 47 [ 1057.963982][T19425] syz_tun: left allmulticast mode [ 1058.070959][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.746002][T19440] veth1_to_hsr: entered promiscuous mode [ 1058.806637][T19440] vlan2: entered allmulticast mode [ 1058.811908][T19440] bond0: entered allmulticast mode [ 1058.817539][T19440] bond_slave_0: entered allmulticast mode [ 1058.823390][T19440] bond_slave_1: entered allmulticast mode [ 1058.829354][T19440] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 1058.933561][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4090'. [ 1059.381937][ T5880] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1059.654939][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 1059.663166][ T5880] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1059.673097][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.694975][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1059.720317][ T5880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1059.731652][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.740455][ T5880] usb 3-1: Product: syz [ 1059.752516][ T5880] usb 3-1: Manufacturer: syz [ 1059.767934][ T5880] usb 3-1: SerialNumber: syz [ 1060.277051][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4091'. [ 1060.824874][ T5884] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1061.055975][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 1061.114249][ T5884] usb 4-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 1061.209959][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.328983][ T5884] usb 4-1: config 0 descriptor?? [ 1061.370499][ T5884] usblcd 4-1:0.0: USBLCD model not supported. [ 1061.465251][ T9726] usb 1-1: device descriptor read/64, error -71 [ 1061.717038][ T5880] usb 3-1: 0:2 : does not exist [ 1061.741614][ T9726] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1061.756870][ T5880] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1061.835202][T19456] netlink: 'syz.3.4102': attribute type 3 has an invalid length. [ 1061.902578][ T5880] usb 3-1: USB disconnect, device number 36 [ 1062.009667][T19474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4096'. [ 1062.093727][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.148924][ T9726] usb 1-1: config 0 has no interfaces? [ 1062.209723][ T9726] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1062.225166][ T9726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.256836][ T9726] usb 1-1: Product: syz [ 1062.261525][ T9726] usb 1-1: Manufacturer: syz [ 1062.297910][ T9726] usb 1-1: SerialNumber: syz [ 1062.349098][ T9726] usb 1-1: config 0 descriptor?? [ 1063.025024][ T5880] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1063.025065][ T5884] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1063.276978][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 1063.337699][ T5884] usb 2-1: config 0 has no interfaces? [ 1063.344953][ T5880] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1063.346809][ T5884] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1063.373290][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.393505][ T5884] usb 2-1: Product: syz [ 1063.403812][ T5884] usb 2-1: Manufacturer: syz [ 1063.418730][ T5884] usb 2-1: SerialNumber: syz [ 1063.450694][ T5884] usb 2-1: config 0 descriptor?? [ 1063.492996][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.550213][ T5884] usb 4-1: USB disconnect, device number 61 [ 1063.562518][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1063.605794][T19488] syz_tun: entered allmulticast mode [ 1063.615770][ T5880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1063.635216][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.697303][ T5880] usb 3-1: Product: syz [ 1063.718151][ T5880] usb 3-1: Manufacturer: syz [ 1063.751500][ T5880] usb 3-1: SerialNumber: syz [ 1063.911470][T19490] syz_tun: left allmulticast mode [ 1063.998826][ T5880] usb 3-1: 0:2 : does not exist [ 1064.008720][ T5880] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1064.051965][ T5880] usb 3-1: USB disconnect, device number 37 [ 1064.136833][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.391883][ T5880] usb 1-1: USB disconnect, device number 54 [ 1064.935702][T19507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.977260][T19507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.005036][ T5884] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1066.003724][T19521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1066.061840][ T5882] usb 2-1: USB disconnect, device number 44 [ 1066.094985][ T9726] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1066.255572][ T9726] usb 1-1: config 0 has no interfaces? [ 1066.279233][ T9726] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1066.301736][ T9726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.320169][ T9726] usb 1-1: Product: syz [ 1066.337163][ T9726] usb 1-1: Manufacturer: syz [ 1066.348534][ T9726] usb 1-1: SerialNumber: syz [ 1066.373482][ T9726] usb 1-1: config 0 descriptor?? [ 1066.496925][ T30] audit: type=1326 audit(1746282125.516:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19528 comm="syz.4.4113" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0 [ 1066.934929][ T5882] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1067.174309][ T5882] usb 2-1: config 0 has no interfaces? [ 1067.442156][T19535] fuse: Bad value for 'fd' [ 1067.458185][ T5882] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1067.477141][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.589862][ T5882] usb 2-1: Product: syz [ 1067.616400][ T5882] usb 2-1: Manufacturer: syz [ 1067.637473][ T5882] usb 2-1: SerialNumber: syz [ 1067.784893][ T9726] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1067.866797][ T5882] usb 2-1: config 0 descriptor?? [ 1067.954943][ T9726] usb 4-1: Using ep0 maxpacket: 16 [ 1067.964767][ T9726] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1067.987026][ T9726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.002977][ T9726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1068.023399][ T9726] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1068.047719][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.060265][ T9726] usb 4-1: Product: syz [ 1068.064702][ T9726] usb 4-1: Manufacturer: syz [ 1068.071209][ T9726] usb 4-1: SerialNumber: syz [ 1068.306961][ T9726] usb 4-1: 0:2 : does not exist [ 1068.323780][ T9726] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1068.492531][ T9726] usb 4-1: USB disconnect, device number 62 [ 1068.593377][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.143042][ T5882] usb 1-1: USB disconnect, device number 55 [ 1069.791913][T19564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4125'. [ 1069.835392][ T5882] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1069.884382][ T9726] usb 2-1: USB disconnect, device number 45 [ 1070.072305][ T5882] usb 3-1: config 0 has no interfaces? [ 1070.105295][ T30] audit: type=1326 audit(1746282129.106:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19570 comm="syz.3.4127" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3539 code=0x0 [ 1070.145106][T19572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.159361][ T5882] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1070.194169][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.218572][ T5882] usb 3-1: Product: syz [ 1070.225030][T19572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.230989][ T5882] usb 3-1: Manufacturer: syz [ 1070.252555][ T5882] usb 3-1: SerialNumber: syz [ 1070.255433][T12752] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1070.273346][ T5882] usb 3-1: config 0 descriptor?? [ 1071.665220][ T5882] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1071.835283][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 1071.845236][ T5882] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1071.857116][ T5882] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.870443][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1071.883129][ T5882] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1071.893257][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.901899][ T5882] usb 4-1: Product: syz [ 1071.910753][ T5882] usb 4-1: Manufacturer: syz [ 1071.916847][ T5882] usb 4-1: SerialNumber: syz [ 1072.142787][ T5882] usb 4-1: 0:2 : does not exist [ 1072.153074][ T5882] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1072.187977][ T5882] usb 4-1: USB disconnect, device number 63 [ 1072.229526][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.820931][ T5882] usb 3-1: USB disconnect, device number 39 [ 1073.305152][ T9726] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1073.503406][ T9726] usb 4-1: config 0 has no interfaces? [ 1073.524603][T19611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4139'. [ 1073.573288][ T9726] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1073.584329][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.651067][ T9726] usb 4-1: Product: syz [ 1073.657181][ T9726] usb 4-1: Manufacturer: syz [ 1073.662982][ T9726] usb 4-1: SerialNumber: syz [ 1073.725761][ T9726] usb 4-1: config 0 descriptor?? [ 1074.225117][T12752] usb 5-1: device descriptor read/64, error -71 [ 1074.465387][T12752] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1074.780795][T12752] usb 5-1: config 0 has no interfaces? [ 1074.799000][T12752] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1074.924272][T12752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.952365][T12752] usb 5-1: Product: syz [ 1074.977866][T12752] usb 5-1: Manufacturer: syz [ 1075.014076][T12752] usb 5-1: SerialNumber: syz [ 1075.067367][T12752] usb 5-1: config 0 descriptor?? [ 1075.316794][ T9726] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1075.425411][ T5882] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1075.505418][ T9726] usb 3-1: Using ep0 maxpacket: 16 [ 1075.523625][ T9726] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1075.545663][ T9726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.567987][ T9726] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.628562][ T5882] usb 2-1: config 0 has no interfaces? [ 1075.640436][ T5882] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1075.649908][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.658403][ T5882] usb 2-1: Product: syz [ 1075.668409][ T5882] usb 2-1: Manufacturer: syz [ 1075.677112][ T9726] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1075.688323][ T9726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.740424][ T5882] usb 2-1: SerialNumber: syz [ 1075.745496][ T9726] usb 3-1: Product: syz [ 1075.787413][ T5884] usb 4-1: USB disconnect, device number 64 [ 1075.867874][ T9726] usb 3-1: Manufacturer: syz [ 1075.908777][ T5882] usb 2-1: config 0 descriptor?? [ 1075.917500][ T9726] usb 3-1: SerialNumber: syz [ 1076.278286][ T9726] usb 3-1: 0:2 : does not exist [ 1076.298315][ T9726] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1076.372208][ T9726] usb 3-1: USB disconnect, device number 40 [ 1076.565548][T12752] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1076.716206][T12752] usb 1-1: device descriptor read/64, error -71 [ 1077.015353][T12752] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1077.155028][T12752] usb 1-1: device descriptor read/64, error -71 [ 1077.276309][T12752] usb usb1-port1: attempt power cycle [ 1077.325149][ T3079] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1077.574935][ T5880] usb 5-1: USB disconnect, device number 49 [ 1077.635197][T12752] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1077.665807][T12752] usb 1-1: device descriptor read/8, error -71 [ 1077.800394][T19665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4156'. [ 1077.905259][T12752] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1077.926456][T12752] usb 1-1: device descriptor read/8, error -71 [ 1078.035535][T12752] usb usb1-port1: unable to enumerate USB device [ 1078.212822][T12752] usb 2-1: USB disconnect, device number 46 [ 1079.305118][ T9726] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1079.478067][ T9726] usb 5-1: config 0 has no interfaces? [ 1079.493220][ T9726] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1079.503074][ T9726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.516105][ T9726] usb 5-1: Product: syz [ 1079.520322][ T9726] usb 5-1: Manufacturer: syz [ 1079.544329][ T9726] usb 5-1: SerialNumber: syz [ 1079.567369][ T9726] usb 5-1: config 0 descriptor?? [ 1080.075825][T12752] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1080.285042][T12752] usb 1-1: Using ep0 maxpacket: 16 [ 1080.299666][T12752] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1080.312090][T12752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.354590][T12752] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1080.403479][T12752] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1080.428315][T12752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.493440][T12752] usb 1-1: Product: syz [ 1080.525746][T12752] usb 1-1: Manufacturer: syz [ 1080.530407][T12752] usb 1-1: SerialNumber: syz [ 1080.705142][ T5880] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1080.875126][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 1080.902201][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.237986][ T5880] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1081.262533][T19711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4170'. [ 1081.294085][ T5880] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1081.325845][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.398510][ T5880] usb 2-1: Product: syz [ 1081.413755][ T5880] usb 2-1: Manufacturer: syz [ 1081.430706][ T5880] usb 2-1: SerialNumber: syz [ 1081.458825][ T5880] usb 2-1: config 0 descriptor?? [ 1081.464956][ T3079] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1081.669019][ T3079] usb 4-1: config 0 has no interfaces? [ 1081.694847][ T3079] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1081.718439][ T3079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.775129][ T3079] usb 4-1: Product: syz [ 1081.779401][ T3079] usb 4-1: Manufacturer: syz [ 1081.791384][ T3079] usb 4-1: SerialNumber: syz [ 1081.797478][ T5880] usb 2-1: USB disconnect, device number 47 [ 1081.879542][ T3079] usb 4-1: config 0 descriptor?? [ 1082.231749][T19723] binder: 19722:19723 ioctl c0306201 80001d40 returned -14 [ 1082.495236][ T9726] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 1082.686211][T12752] usb 1-1: 0:2 : does not exist [ 1082.722960][T12752] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1082.759729][ T5880] usb 5-1: USB disconnect, device number 50 [ 1082.812054][ T9726] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 1082.820209][T12752] usb 1-1: USB disconnect, device number 60 [ 1082.888195][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.944070][ T9726] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1083.050361][ T9726] usb 3-1: config 0 has no interface number 0 [ 1083.063085][ T9726] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1083.090813][ T9726] usb 3-1: config 0 interface 24 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1083.144619][ T9726] usb 3-1: config 0 interface 24 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1083.199969][ T9726] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 8 [ 1083.248448][ T9726] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0xF is Bulk; changing to Interrupt [ 1083.292967][ T9726] usb 3-1: config 0 interface 24 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1083.343561][ T9726] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt [ 1083.397239][ T9726] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 1083.442354][ T9726] usb 3-1: config 0 interface 24 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1083.494884][ T9726] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1083.508429][ T9726] usb 3-1: config 0 interface 24 altsetting 0 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 1083.520437][ T9726] usb 3-1: Dual-Role OTG device on HNP port [ 1083.535294][ T9726] usb 3-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=92.be [ 1083.560553][ T9726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.577561][ T9726] usb 3-1: config 0 descriptor?? [ 1083.584189][T19723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1083.597447][T19736] syz_tun: entered allmulticast mode [ 1083.641882][T19723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1083.654637][T19723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1083.666148][T19723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1083.693092][T19723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1083.702992][T19740] syz_tun: entered allmulticast mode [ 1083.717924][ T9726] usb 3-1: Found UVC 0.00 device (174f:8a33) [ 1083.725532][ T9726] usb 3-1: No valid video chain found. [ 1083.886647][T19735] syz_tun: left allmulticast mode [ 1083.954604][ T9726] usb 3-1: USB disconnect, device number 41 [ 1083.999008][T19738] syz_tun: left allmulticast mode [ 1084.105512][ T5884] usb 4-1: USB disconnect, device number 66 [ 1084.114664][T19746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4181'. [ 1084.178149][T19749] fuse: Unknown parameter 'ff' [ 1084.212814][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1084.844892][T12752] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1084.894922][ T5882] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1085.019673][T12752] usb 1-1: config 0 has no interfaces? [ 1085.053201][T12752] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1085.064362][T12752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.065047][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 1085.072679][T12752] usb 1-1: Product: syz [ 1085.081909][T12752] usb 1-1: Manufacturer: syz [ 1085.086756][T12752] usb 1-1: SerialNumber: syz [ 1085.120775][ T5884] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1085.136039][T12752] usb 1-1: config 0 descriptor?? [ 1085.142585][ T5882] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1085.179593][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.208695][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.225124][ T5882] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1085.234748][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.243691][ T5882] usb 2-1: Product: syz [ 1085.250103][ T5882] usb 2-1: Manufacturer: syz [ 1085.255459][ T5882] usb 2-1: SerialNumber: syz [ 1085.275018][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 1085.283928][ T5884] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1085.325375][ T5884] usb 4-1: config 0 has no interface number 0 [ 1085.435027][ T5884] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1085.488218][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.510922][ T5882] usb 2-1: 0:2 : does not exist [ 1085.540077][ T5884] usb 4-1: Product: syz [ 1085.563268][ T5884] usb 4-1: Manufacturer: syz [ 1085.575500][ T5884] usb 4-1: SerialNumber: syz [ 1085.584437][ T5882] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1085.601072][ T5884] usb 4-1: config 0 descriptor?? [ 1085.707576][ T5882] usb 2-1: USB disconnect, device number 48 [ 1085.983001][ T5884] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1086.137475][ T5884] usb 4-1: USB disconnect, device number 67 [ 1086.269761][T19783] syz_tun: entered allmulticast mode [ 1086.286263][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1086.586872][T19782] syz_tun: left allmulticast mode [ 1086.781169][T19791] FAULT_INJECTION: forcing a failure. [ 1086.781169][T19791] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.794187][T19791] CPU: 0 UID: 0 PID: 19791 Comm: syz.3.4195 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1086.794216][T19791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1086.794230][T19791] Call Trace: [ 1086.794239][T19791] [ 1086.794249][T19791] dump_stack_lvl+0x189/0x250 [ 1086.794288][T19791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1086.794317][T19791] ? __pfx__printk+0x10/0x10 [ 1086.794344][T19791] ? __pfx___might_resched+0x10/0x10 [ 1086.794363][T19791] ? fs_reclaim_acquire+0x7d/0x100 [ 1086.794397][T19791] should_fail_ex+0x414/0x560 [ 1086.794435][T19791] should_failslab+0xa8/0x100 [ 1086.794463][T19791] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1086.794487][T19791] ? __kernfs_new_node+0xd7/0x7f0 [ 1086.794520][T19791] __kernfs_new_node+0xd7/0x7f0 [ 1086.794549][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.794583][T19791] ? __pfx___kernfs_new_node+0x10/0x10 [ 1086.794612][T19791] ? kernfs_root+0x1c/0x230 [ 1086.794646][T19791] ? kernfs_root+0x1c/0x230 [ 1086.794672][T19791] ? kernfs_root+0x1c/0x230 [ 1086.794695][T19791] ? kernfs_root+0x1c/0x230 [ 1086.794727][T19791] kernfs_new_node+0x102/0x210 [ 1086.794762][T19791] __kernfs_create_file+0x4b/0x2e0 [ 1086.794790][T19791] sysfs_add_file_mode_ns+0x238/0x300 [ 1086.794822][T19791] internal_create_group+0x66d/0x1110 [ 1086.794867][T19791] ? __pfx_internal_create_group+0x10/0x10 [ 1086.794908][T19791] ? loop_update_dio+0x256/0x3a0 [ 1086.794939][T19791] loop_configure+0x8b6/0xe60 [ 1086.794978][T19791] ? __pfx_loop_configure+0x10/0x10 [ 1086.795034][T19791] lo_ioctl+0x87e/0x22e0 [ 1086.795071][T19791] ? __pfx_lo_ioctl+0x10/0x10 [ 1086.795095][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795127][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795161][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795202][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795243][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795291][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795331][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795376][T19791] ? is_bpf_text_address+0x26/0x2b0 [ 1086.795414][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795448][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795489][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795529][T19791] ? __lock_acquire+0xaac/0xd20 [ 1086.795573][T19791] ? is_bpf_text_address+0x26/0x2b0 [ 1086.795601][T19791] ? is_bpf_text_address+0x292/0x2b0 [ 1086.795623][T19791] ? is_bpf_text_address+0x26/0x2b0 [ 1086.795649][T19791] ? kernel_text_address+0xa5/0xe0 [ 1086.795674][T19791] ? __kernel_text_address+0xd/0x40 [ 1086.795699][T19791] ? unwind_get_return_address+0x4d/0x90 [ 1086.795723][T19791] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1086.795746][T19791] ? arch_stack_walk+0xfc/0x150 [ 1086.795784][T19791] ? stack_trace_save+0x9c/0xe0 [ 1086.795809][T19791] ? stack_depot_save_flags+0x40/0x910 [ 1086.795893][T19791] lo_compat_ioctl+0x298/0x330 [ 1086.795921][T19791] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1086.795947][T19791] ? kasan_quarantine_put+0xdd/0x220 [ 1086.795975][T19791] ? blkdev_common_ioctl+0xfc3/0x2450 [ 1086.796003][T19791] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1086.796036][T19791] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1086.796058][T19791] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1086.796090][T19791] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1086.796120][T19791] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1086.796153][T19791] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1086.796222][T19791] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1086.796249][T19791] compat_blkdev_ioctl+0x5ce/0x780 [ 1086.796272][T19791] ? __fget_files+0x2a/0x420 [ 1086.796303][T19791] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1086.796326][T19791] ? __fget_files+0x2a/0x420 [ 1086.796355][T19791] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1086.796385][T19791] __ia32_compat_sys_ioctl+0x551/0x840 [ 1086.796411][T19791] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1086.796434][T19791] ? __fget_files+0x3a0/0x420 [ 1086.796466][T19791] ? fput+0xa0/0xd0 [ 1086.796496][T19791] ? ksys_write+0x1f0/0x250 [ 1086.796526][T19791] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1086.796553][T19791] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.796578][T19791] __do_fast_syscall_32+0xb4/0x110 [ 1086.796604][T19791] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.796631][T19791] do_fast_syscall_32+0x34/0x80 [ 1086.796656][T19791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1086.796681][T19791] RIP: 0023:0xf7fd3539 [ 1086.796699][T19791] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1086.796717][T19791] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1086.796739][T19791] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 1086.796754][T19791] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1086.796766][T19791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.796778][T19791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1086.796790][T19791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1086.796820][T19791] [ 1087.284133][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.311940][T19791] loop2: detected capacity change from 0 to 7 [ 1087.337508][ T5881] Dev loop2: unable to read RDB block 7 [ 1087.343244][ T5881] loop2: unable to read partition table [ 1087.349506][ T5881] loop2: partition table beyond EOD, truncated [ 1087.625131][ T9726] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1087.625671][T19791] Dev loop2: unable to read RDB block 7 [ 1087.641253][ T5884] usb 1-1: USB disconnect, device number 61 [ 1087.787837][ T9726] usb 3-1: config 0 has no interfaces? [ 1087.799879][ T9726] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1087.810674][ T9726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.815423][T19791] loop2: unable to read partition table [ 1087.819340][ T9726] usb 3-1: Product: syz [ 1087.824579][T19791] loop2: partition table beyond EOD, [ 1087.828600][ T9726] usb 3-1: Manufacturer: syz [ 1087.828621][ T9726] usb 3-1: SerialNumber: syz [ 1087.831749][ T9726] usb 3-1: config 0 descriptor?? [ 1087.878090][T19791] truncated [ 1087.881511][T19791] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1088.519987][T19827] syz_tun: entered allmulticast mode [ 1088.575047][T12752] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1088.734908][T12752] usb 2-1: Using ep0 maxpacket: 16 [ 1088.742343][T12752] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1088.764076][T12752] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.792744][T19826] syz_tun: left allmulticast mode [ 1088.828613][T12752] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1088.923589][T12752] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1088.973887][T12752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.008222][T12752] usb 2-1: Product: syz [ 1089.034067][T12752] usb 2-1: Manufacturer: syz [ 1089.039260][T12752] usb 2-1: SerialNumber: syz [ 1089.285927][T12752] usb 2-1: 0:2 : does not exist [ 1089.337956][T19836] fuse: Bad value for 'fd' [ 1089.346452][T12752] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1089.423401][T12752] usb 2-1: USB disconnect, device number 49 [ 1090.005084][ T9726] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1090.132245][ T5882] usb 3-1: USB disconnect, device number 42 [ 1090.220666][ T9726] usb 5-1: config 0 has no interfaces? [ 1090.247939][ T9726] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1090.284450][ T9726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.305738][ T5884] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1090.384135][ T9726] usb 5-1: Product: syz [ 1090.413085][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'. [ 1090.425225][ T9726] usb 5-1: Manufacturer: syz [ 1090.436335][ T9726] usb 5-1: SerialNumber: syz [ 1090.484847][ T9726] usb 5-1: config 0 descriptor?? [ 1090.535261][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 1090.559241][ T5884] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1090.590584][ T5884] usb 2-1: config 179 has no interface number 0 [ 1090.622053][ T5884] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1090.657316][ T5884] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1090.757467][ T5884] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1090.782797][ T5884] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1090.804715][ T5884] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1090.836239][ T5880] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1090.854039][ T5884] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1090.877483][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.879257][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4217'. [ 1090.900162][T19845] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1090.976873][ T5880] usb 4-1: device descriptor read/64, error -71 [ 1091.145923][T19845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.173402][T19845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.225615][ T5880] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1091.226929][T19845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.261203][T19845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.355068][T12752] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1091.370694][T19864] binder: 19844:19864 ioctl c0306201 800003c0 returned -22 [ 1091.381959][ T5880] usb 4-1: device descriptor read/64, error -71 [ 1091.496324][ T5880] usb usb4-port1: attempt power cycle [ 1091.537229][T12752] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.585825][T12752] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1091.622211][T12752] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1091.650904][T12752] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1091.661925][T12752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.695718][T12752] usb 3-1: Product: syz [ 1091.699948][T12752] usb 3-1: Manufacturer: syz [ 1091.735174][T12752] usb 3-1: SerialNumber: syz [ 1091.866464][ T5880] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1091.887673][T19867] syz_tun: entered allmulticast mode [ 1091.924160][ T5880] usb 4-1: device descriptor read/8, error -71 [ 1092.138210][T19845] syz.1.4212 (19845): drop_caches: 2 [ 1092.205022][ T5880] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1092.227032][T12752] usb 3-1: USB disconnect, device number 43 [ 1092.246926][T19866] syz_tun: left allmulticast mode [ 1092.269886][ T5880] usb 4-1: device descriptor read/8, error -71 [ 1092.322841][ T5884] usb 2-1: USB disconnect, device number 50 [ 1092.329088][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1092.329124][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1092.390108][ T5880] usb usb4-port1: unable to enumerate USB device [ 1092.591195][T12752] usb 5-1: USB disconnect, device number 51 [ 1092.633165][T19872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.649384][T19872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.776059][ T9726] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1093.044915][T12752] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1093.084957][ T5880] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1093.264894][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 1093.280104][ T5880] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1093.296688][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.345172][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1093.357620][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1093.379406][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.396797][ T5880] usb 2-1: Product: syz [ 1093.401074][ T5880] usb 2-1: Manufacturer: syz [ 1093.423992][ T5880] usb 2-1: SerialNumber: syz [ 1093.660819][ T5880] usb 2-1: 0:2 : does not exist [ 1093.697075][ T5880] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1093.747956][ T5880] usb 2-1: USB disconnect, device number 51 [ 1093.891073][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1094.195506][ T3079] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1094.466208][ T3079] usb 4-1: config 0 has no interfaces? [ 1094.526086][ T3079] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1094.620285][ T3079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.698801][ T3079] usb 4-1: Product: syz [ 1094.703095][ T3079] usb 4-1: Manufacturer: syz [ 1094.745804][T19904] syz_tun: entered allmulticast mode [ 1094.751158][ T3079] usb 4-1: SerialNumber: syz [ 1094.783977][ T3079] usb 4-1: config 0 descriptor?? [ 1095.003185][T19903] syz_tun: left allmulticast mode [ 1095.172913][T19910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4231'. [ 1095.183095][T19910] FAULT_INJECTION: forcing a failure. [ 1095.183095][T19910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.224642][T19910] CPU: 0 UID: 0 PID: 19910 Comm: syz.2.4231 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1095.224673][T19910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1095.224686][T19910] Call Trace: [ 1095.224695][T19910] [ 1095.224705][T19910] dump_stack_lvl+0x189/0x250 [ 1095.224746][T19910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1095.224778][T19910] ? __pfx__printk+0x10/0x10 [ 1095.224811][T19910] should_fail_ex+0x414/0x560 [ 1095.224848][T19910] _copy_to_user+0x31/0xb0 [ 1095.224879][T19910] simple_read_from_buffer+0xe1/0x170 [ 1095.224910][T19910] proc_fail_nth_read+0x1df/0x250 [ 1095.224941][T19910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.224972][T19910] ? rw_verify_area+0x258/0x650 [ 1095.224994][T19910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.225024][T19910] vfs_read+0x1fd/0x980 [ 1095.225050][T19910] ? __pfx___mutex_lock+0x10/0x10 [ 1095.225076][T19910] ? __pfx_vfs_read+0x10/0x10 [ 1095.225100][T19910] ? __fget_files+0x2a/0x420 [ 1095.225130][T19910] ? __fget_files+0x3a0/0x420 [ 1095.225165][T19910] ? __fget_files+0x2a/0x420 [ 1095.225199][T19910] ksys_read+0x145/0x250 [ 1095.225220][T19910] ? rcu_is_watching+0x15/0xb0 [ 1095.225252][T19910] ? __pfx_ksys_read+0x10/0x10 [ 1095.225278][T19910] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1095.225304][T19910] ? lockdep_hardirqs_on+0x9c/0x150 [ 1095.225330][T19910] __do_fast_syscall_32+0xb4/0x110 [ 1095.225356][T19910] ? lockdep_hardirqs_on+0x9c/0x150 [ 1095.225383][T19910] do_fast_syscall_32+0x34/0x80 [ 1095.225409][T19910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1095.225434][T19910] RIP: 0023:0xf707e539 [ 1095.225452][T19910] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1095.225470][T19910] RSP: 002b:00000000f506e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1095.225492][T19910] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f506e620 [ 1095.225507][T19910] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 1095.225520][T19910] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1095.225532][T19910] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1095.225544][T19910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1095.225575][T19910] [ 1096.085505][T19923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.117075][T19923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.244964][ T3079] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1096.621493][T19935] syz_tun: entered allmulticast mode [ 1096.928704][T19934] syz_tun: left allmulticast mode [ 1096.955606][T12752] usb 5-1: device descriptor read/64, error -71 [ 1097.191766][T19942] syzkaller1: entered promiscuous mode [ 1097.197860][T12752] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1097.205998][T19942] syzkaller1: entered allmulticast mode [ 1097.464362][T19947] vlan2: entered allmulticast mode [ 1097.470016][T19947] batadv0: entered allmulticast mode [ 1097.527438][T12752] usb 5-1: Using ep0 maxpacket: 16 [ 1097.568602][ T3079] usb 2-1: device descriptor read/64, error -71 [ 1097.576937][T12752] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1097.599713][T12752] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.644643][T12752] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.692949][ T9726] usb 4-1: USB disconnect, device number 72 [ 1097.701731][T12752] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1097.721810][T12752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.757627][T12752] usb 5-1: Product: syz [ 1097.764004][T12752] usb 5-1: Manufacturer: syz [ 1097.785314][T12752] usb 5-1: SerialNumber: syz [ 1097.845143][ T3079] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1097.881965][T19951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1098.049589][ T3079] usb 2-1: Using ep0 maxpacket: 8 [ 1098.062230][ T3079] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 1098.070464][T12752] usb 5-1: 0:2 : does not exist [ 1098.105141][ T3079] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1098.114584][ T3079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.124814][T12752] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1098.141943][ T3079] usb 2-1: Product: syz [ 1098.154022][ T3079] usb 2-1: Manufacturer: syz [ 1098.162452][ T3079] usb 2-1: SerialNumber: syz [ 1098.190299][T12752] usb 5-1: USB disconnect, device number 53 [ 1098.218737][ T3079] usb 2-1: config 0 descriptor?? [ 1098.249689][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1098.268185][ T3079] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1098.750803][ T3079] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1098.814094][ T3079] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1098.842103][ T3079] usb 2-1: USB disconnect, device number 53 [ 1099.000936][T19971] syz_tun: entered allmulticast mode [ 1099.087936][T19976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.141735][T19976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.224904][T12752] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1099.336536][T19968] syz_tun: left allmulticast mode [ 1099.465800][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1099.545176][ T3079] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1099.632838][T19988] FAULT_INJECTION: forcing a failure. [ 1099.632838][T19988] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.646697][T19988] CPU: 0 UID: 0 PID: 19988 Comm: syz.2.4258 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1099.646732][T19988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1099.646745][T19988] Call Trace: [ 1099.646752][T19988] [ 1099.646759][T19988] dump_stack_lvl+0x189/0x250 [ 1099.646792][T19988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1099.646823][T19988] ? __pfx__printk+0x10/0x10 [ 1099.646848][T19988] ? __pfx___might_resched+0x10/0x10 [ 1099.646865][T19988] ? fs_reclaim_acquire+0x7d/0x100 [ 1099.646895][T19988] should_fail_ex+0x414/0x560 [ 1099.646921][T19988] should_failslab+0xa8/0x100 [ 1099.646947][T19988] __kmalloc_cache_noprof+0x70/0x3d0 [ 1099.646972][T19988] ? nfnetlink_rcv+0xf0f/0x2530 [ 1099.647002][T19988] nfnetlink_rcv+0xf0f/0x2530 [ 1099.647051][T19988] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1099.647117][T19988] ? skb_clone+0x246/0x3a0 [ 1099.647159][T19988] ? netlink_deliver_tap+0x2e/0x1b0 [ 1099.647181][T19988] ? netlink_deliver_tap+0x2e/0x1b0 [ 1099.647200][T19988] netlink_unicast+0x758/0x8d0 [ 1099.647230][T19988] netlink_sendmsg+0x805/0xb30 [ 1099.647264][T19988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.647288][T19988] ? __import_iovec+0x5d4/0x7f0 [ 1099.647311][T19988] ? aa_sock_msg_perm+0x94/0x160 [ 1099.647334][T19988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1099.647350][T19988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.647366][T19988] __sock_sendmsg+0x219/0x270 [ 1099.647396][T19988] ____sys_sendmsg+0x505/0x830 [ 1099.647428][T19988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.647468][T19988] ___sys_sendmsg+0x21f/0x2a0 [ 1099.647494][T19988] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.647542][T19988] ? __fget_files+0x2a/0x420 [ 1099.647567][T19988] ? __fget_files+0x3a0/0x420 [ 1099.647602][T19988] __sys_sendmsg+0x164/0x220 [ 1099.647629][T19988] ? __pfx___sys_sendmsg+0x10/0x10 [ 1099.647658][T19988] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1099.647677][T19988] ? lockdep_hardirqs_on+0x9c/0x150 [ 1099.647701][T19988] __do_fast_syscall_32+0xb4/0x110 [ 1099.647732][T19988] ? lockdep_hardirqs_on+0x9c/0x150 [ 1099.647756][T19988] do_fast_syscall_32+0x34/0x80 [ 1099.647781][T19988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1099.647798][T19988] RIP: 0023:0xf707e539 [ 1099.647811][T19988] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1099.647823][T19988] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1099.647842][T19988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 1099.647856][T19988] RDX: 000000002404c010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1099.647868][T19988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1099.647879][T19988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1099.647890][T19988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1099.647918][T19988] [ 1100.053683][ T3079] usb 5-1: config 0 has no interfaces? [ 1100.065030][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1100.079244][ T3079] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1100.161741][ T3079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.196533][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1100.204285][ T9] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 1100.216143][ T9] usb 2-1: config 93 has an invalid interface number: 27 but max is 0 [ 1100.224370][ T9] usb 2-1: config 93 has no interface number 0 [ 1100.230653][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1100.242604][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1100.258285][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1100.270098][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1100.281284][ T9] usb 2-1: config 93 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.281778][ T3079] usb 5-1: Product: syz [ 1100.351230][ T9] usb 2-1: config 93 interface 27 has no altsetting 0 [ 1100.372183][ T9] usb 2-1: config 93 has an invalid interface number: 27 but max is 0 [ 1100.380361][ T3079] usb 5-1: Manufacturer: syz [ 1100.400969][ T9] usb 2-1: config 93 has no interface number 0 [ 1100.402928][ T3079] usb 5-1: SerialNumber: syz [ 1100.429872][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1100.430187][ T3079] usb 5-1: config 0 descriptor?? [ 1100.443294][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1100.464572][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1100.482306][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1100.494427][ T9] usb 2-1: config 93 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.538417][ T9] usb 2-1: config 93 interface 27 has no altsetting 0 [ 1100.556278][ T9] usb 2-1: config 93 has an invalid interface number: 27 but max is 0 [ 1100.574968][ T9] usb 2-1: config 93 has no interface number 0 [ 1100.594919][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1100.619591][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1100.634333][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1100.648837][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1100.660769][ T9] usb 2-1: config 93 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.666628][T19995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4261'. [ 1100.674502][ T9] usb 2-1: config 93 interface 27 has no altsetting 0 [ 1100.726222][ T9] usb 2-1: config 93 has an invalid interface number: 27 but max is 0 [ 1100.734715][ T9] usb 2-1: config 93 has no interface number 0 [ 1100.752234][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1100.775728][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1100.787592][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1100.791926][T19998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1100.805673][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1100.838409][ T9] usb 2-1: config 93 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.880082][ T9] usb 2-1: config 93 interface 27 has no altsetting 0 [ 1100.891202][ T9] usb 2-1: config 93 has an invalid interface number: 27 but max is 0 [ 1100.908119][ T9] usb 2-1: config 93 has no interface number 0 [ 1100.915605][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1100.937548][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1100.949135][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1100.972585][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1100.984149][ T9] usb 2-1: config 93 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1101.001911][ T9] usb 2-1: config 93 interface 27 has no altsetting 0 [ 1101.014522][ T9] usb 2-1: config 93 has an invalid interface number: 27 but max is 0 [ 1101.038861][ T9] usb 2-1: config 93 has no interface number 0 [ 1101.046315][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1101.059803][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1101.071412][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1101.084709][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1101.096385][ T9] usb 2-1: config 93 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1101.111206][ T9] usb 2-1: config 93 interface 27 has no altsetting 0 [ 1101.119782][ T9] usb 2-1: config 93 has an invalid interface number: 27 but max is 0 [ 1101.130391][ T9] usb 2-1: config 93 has no interface number 0 [ 1101.138455][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1101.153070][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1101.164971][ T9726] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1101.177529][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1101.229266][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1101.272020][ T9] usb 2-1: config 93 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1101.289674][ T9] usb 2-1: config 93 interface 27 has no altsetting 0 [ 1101.298923][ T9] usb 2-1: config 93 has an invalid interface number: 27 but max is 0 [ 1101.308676][ T9] usb 2-1: config 93 has no interface number 0 [ 1101.315716][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1101.330460][ T9726] usb 3-1: Using ep0 maxpacket: 16 [ 1101.336987][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1101.349670][ T9726] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1101.358757][ T9726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.374531][ T9726] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1101.384490][ T9] usb 2-1: config 93 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1101.400622][ T9] usb 2-1: config 93 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1101.413729][ T9726] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1101.423217][ T9726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.431813][ T9726] usb 3-1: Product: syz [ 1101.436828][ T9726] usb 3-1: Manufacturer: syz [ 1101.441912][ T9] usb 2-1: config 93 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1101.460227][ T9726] usb 3-1: SerialNumber: syz [ 1101.469303][ T9] usb 2-1: config 93 interface 27 has no altsetting 0 [ 1101.506325][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1101.520882][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.530341][ T9] usb 2-1: Product: syz [ 1101.534602][ T9] usb 2-1: Manufacturer: syz [ 1101.540274][ T9] usb 2-1: SerialNumber: syz [ 1101.550858][T19981] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1101.683607][T20012] syz_tun: entered allmulticast mode [ 1101.691033][ T9726] usb 3-1: 0:2 : does not exist [ 1101.712484][ T9726] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1101.771648][ T9726] usb 3-1: USB disconnect, device number 44 [ 1101.821672][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1101.845325][ T9] hub 2-1:93.27: Invalid hub with more than one config or interface [ 1101.853401][ T9] hub 2-1:93.27: probe with driver hub failed with error -22 [ 1101.870182][ T9] sierra 2-1:93.27: Sierra USB modem converter detected [ 1101.899849][ T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1101.921940][ T9] usb 2-1: USB disconnect, device number 54 [ 1101.937437][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1101.960808][ T9] sierra 2-1:93.27: device disconnected [ 1101.971087][T20013] syz_tun: left allmulticast mode [ 1102.184471][ T3079] usb 5-1: USB disconnect, device number 54 [ 1102.275310][T12752] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1102.339565][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4270'. [ 1102.845234][T20035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4277'. [ 1102.858642][T20036] syz_tun: entered allmulticast mode [ 1103.065376][T20040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1103.109603][T20040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1103.187523][T20039] syz_tun: left allmulticast mode [ 1103.784954][ T5884] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1103.842669][T20037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.145280][ T5884] usb 2-1: config 0 has no interfaces? [ 1104.156104][ T5884] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1104.175009][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1104.192179][T20060] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1104.208498][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.220560][T20060] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1104.241818][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4284'. [ 1104.266546][ T5884] usb 2-1: Product: syz [ 1104.270796][ T5884] usb 2-1: Manufacturer: syz [ 1104.302039][ T5884] usb 2-1: SerialNumber: syz [ 1104.342585][ T5884] usb 2-1: config 0 descriptor?? [ 1104.405013][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1104.427158][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1104.477237][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.544169][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1104.583145][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1104.668287][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.683120][ T9] usb 3-1: Product: syz [ 1104.693695][ T9] usb 3-1: Manufacturer: syz [ 1104.701843][ T9] usb 3-1: SerialNumber: syz [ 1104.951849][ T9] usb 3-1: 0:2 : does not exist [ 1104.962323][ T9] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1105.024418][ T9] usb 3-1: USB disconnect, device number 45 [ 1105.419081][T20074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.491653][T20077] syz_tun: entered allmulticast mode [ 1105.501112][T20074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.554931][ T5884] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1105.820619][T20078] syz_tun: left allmulticast mode [ 1105.998897][T20089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4294'. [ 1106.077025][T20093] FAULT_INJECTION: forcing a failure. [ 1106.077025][T20093] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.090903][T20093] CPU: 0 UID: 0 PID: 20093 Comm: syz.2.4296 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1106.090935][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1106.090948][T20093] Call Trace: [ 1106.090957][T20093] [ 1106.090966][T20093] dump_stack_lvl+0x189/0x250 [ 1106.091002][T20093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1106.091032][T20093] ? __pfx__printk+0x10/0x10 [ 1106.091059][T20093] ? __pfx___might_resched+0x10/0x10 [ 1106.091075][T20093] ? fs_reclaim_acquire+0x7d/0x100 [ 1106.091119][T20093] should_fail_ex+0x414/0x560 [ 1106.091157][T20093] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 1106.091185][T20093] should_failslab+0xa8/0x100 [ 1106.091211][T20093] __kvmalloc_node_noprof+0x168/0x5e0 [ 1106.091237][T20093] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 1106.091272][T20093] alloc_netdev_mqs+0x8e5/0x11e0 [ 1106.091310][T20093] rtnl_create_link+0x31f/0xd10 [ 1106.091345][T20093] rtnl_newlink_create+0x258/0xaf0 [ 1106.091376][T20093] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1106.091404][T20093] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1106.091426][T20093] ? rtnl_newlink+0x8db/0x1c70 [ 1106.091449][T20093] ? __pfx___mutex_lock+0x10/0x10 [ 1106.091483][T20093] ? ns_capable+0x8a/0xf0 [ 1106.091505][T20093] rtnl_newlink+0x16d6/0x1c70 [ 1106.091542][T20093] ? __pfx_rtnl_newlink+0x10/0x10 [ 1106.091561][T20093] ? preempt_schedule_common+0x83/0xd0 [ 1106.091588][T20093] ? __pfx___schedule+0x10/0x10 [ 1106.091626][T20093] ? preempt_schedule+0xae/0xc0 [ 1106.091645][T20093] ? __dev_queue_xmit+0x27e/0x3a70 [ 1106.091675][T20093] ? preempt_schedule_common+0x83/0xd0 [ 1106.091697][T20093] ? preempt_schedule+0xae/0xc0 [ 1106.091717][T20093] ? __pfx_preempt_schedule+0x10/0x10 [ 1106.091741][T20093] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1106.091769][T20093] ? preempt_schedule_thunk+0x16/0x30 [ 1106.091799][T20093] ? __local_bh_enable_ip+0x13e/0x1c0 [ 1106.091831][T20093] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1106.091871][T20093] ? aa_get_newest_label+0xf7/0x5d0 [ 1106.091896][T20093] ? __lock_acquire+0xaac/0xd20 [ 1106.091949][T20093] ? __pfx_rtnl_newlink+0x10/0x10 [ 1106.091970][T20093] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1106.091995][T20093] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1106.092016][T20093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.092056][T20093] netlink_rcv_skb+0x219/0x490 [ 1106.092081][T20093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.092111][T20093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1106.092154][T20093] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.092184][T20093] netlink_unicast+0x758/0x8d0 [ 1106.092228][T20093] netlink_sendmsg+0x805/0xb30 [ 1106.092260][T20093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.092286][T20093] ? __import_iovec+0x5d4/0x7f0 [ 1106.092311][T20093] ? aa_sock_msg_perm+0x94/0x160 [ 1106.092334][T20093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1106.092356][T20093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.092379][T20093] __sock_sendmsg+0x219/0x270 [ 1106.092414][T20093] ____sys_sendmsg+0x505/0x830 [ 1106.092446][T20093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.092490][T20093] ___sys_sendmsg+0x21f/0x2a0 [ 1106.092519][T20093] ? __pfx____sys_sendmsg+0x10/0x10 [ 1106.092586][T20093] ? __fget_files+0x2a/0x420 [ 1106.092611][T20093] ? __fget_files+0x3a0/0x420 [ 1106.092649][T20093] __sys_sendmsg+0x164/0x220 [ 1106.092677][T20093] ? __pfx___sys_sendmsg+0x10/0x10 [ 1106.092720][T20093] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1106.092747][T20093] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.092773][T20093] __do_fast_syscall_32+0xb4/0x110 [ 1106.092799][T20093] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.092826][T20093] do_fast_syscall_32+0x34/0x80 [ 1106.092852][T20093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1106.092877][T20093] RIP: 0023:0xf707e539 [ 1106.092895][T20093] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1106.092912][T20093] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1106.092934][T20093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1106.092949][T20093] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1106.092962][T20093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1106.092974][T20093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1106.092987][T20093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1106.093017][T20093] [ 1107.096931][ T9] usb 2-1: USB disconnect, device number 55 [ 1107.285433][ T3079] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1107.334325][T20099] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1107.368071][T20099] FAULT_INJECTION: forcing a failure. [ 1107.368071][T20099] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.405057][T20099] CPU: 0 UID: 0 PID: 20099 Comm: syz.2.4297 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1107.405087][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1107.405101][T20099] Call Trace: [ 1107.405110][T20099] [ 1107.405119][T20099] dump_stack_lvl+0x189/0x250 [ 1107.405156][T20099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.405186][T20099] ? __pfx__printk+0x10/0x10 [ 1107.405208][T20099] ? __pfx___might_resched+0x10/0x10 [ 1107.405227][T20099] ? fs_reclaim_acquire+0x7d/0x100 [ 1107.405265][T20099] should_fail_ex+0x414/0x560 [ 1107.405301][T20099] should_failslab+0xa8/0x100 [ 1107.405330][T20099] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1107.405354][T20099] ? ovs_flow_alloc+0x24/0x1f0 [ 1107.405379][T20099] ovs_flow_alloc+0x24/0x1f0 [ 1107.405403][T20099] ovs_packet_cmd_execute+0x4f5/0xbd0 [ 1107.405425][T20099] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1107.405443][T20099] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1107.405470][T20099] genl_family_rcv_msg_doit+0x212/0x300 [ 1107.405495][T20099] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1107.405523][T20099] ? bpf_lsm_capable+0x9/0x20 [ 1107.405543][T20099] ? security_capable+0x7e/0x2e0 [ 1107.405563][T20099] genl_rcv_msg+0x60e/0x790 [ 1107.405587][T20099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1107.405605][T20099] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1107.405621][T20099] ? ref_tracker_free+0x63a/0x7d0 [ 1107.405635][T20099] ? __copy_skb_header+0xa7/0x550 [ 1107.405660][T20099] netlink_rcv_skb+0x219/0x490 [ 1107.405675][T20099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1107.405695][T20099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1107.405726][T20099] ? down_read+0x1ad/0x2e0 [ 1107.405753][T20099] genl_rcv+0x28/0x40 [ 1107.405771][T20099] netlink_unicast+0x758/0x8d0 [ 1107.405801][T20099] netlink_sendmsg+0x805/0xb30 [ 1107.405822][T20099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.405840][T20099] ? __import_iovec+0x5d4/0x7f0 [ 1107.405857][T20099] ? aa_sock_msg_perm+0x94/0x160 [ 1107.405874][T20099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1107.405890][T20099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.405906][T20099] __sock_sendmsg+0x219/0x270 [ 1107.405931][T20099] ____sys_sendmsg+0x505/0x830 [ 1107.405953][T20099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.405982][T20099] ___sys_sendmsg+0x21f/0x2a0 [ 1107.406004][T20099] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.406048][T20099] ? __fget_files+0x2a/0x420 [ 1107.406065][T20099] ? __fget_files+0x3a0/0x420 [ 1107.406090][T20099] __sys_sendmsg+0x164/0x220 [ 1107.406121][T20099] ? __pfx___sys_sendmsg+0x10/0x10 [ 1107.406147][T20099] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1107.406164][T20099] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.406180][T20099] __do_fast_syscall_32+0xb4/0x110 [ 1107.406197][T20099] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.406214][T20099] do_fast_syscall_32+0x34/0x80 [ 1107.406230][T20099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1107.406266][T20099] RIP: 0023:0xf707e539 [ 1107.406278][T20099] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1107.406291][T20099] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1107.406306][T20099] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1107.406316][T20099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1107.406324][T20099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.406333][T20099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1107.406341][T20099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.406373][T20099] [ 1107.829602][ T3079] usb 4-1: config 0 has no interfaces? [ 1107.893112][ T3079] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1107.914926][ T3079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.923066][ T3079] usb 4-1: Product: syz [ 1107.970651][ T3079] usb 4-1: Manufacturer: syz [ 1107.992859][ T3079] usb 4-1: SerialNumber: syz [ 1108.110710][ T3079] usb 4-1: config 0 descriptor?? [ 1108.137064][T20110] FAULT_INJECTION: forcing a failure. [ 1108.137064][T20110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.211412][T20110] CPU: 1 UID: 0 PID: 20110 Comm: syz.0.4302 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1108.211446][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1108.211457][T20110] Call Trace: [ 1108.211463][T20110] [ 1108.211470][T20110] dump_stack_lvl+0x189/0x250 [ 1108.211495][T20110] ? __lock_acquire+0xaac/0xd20 [ 1108.211518][T20110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.211539][T20110] ? __pfx__printk+0x10/0x10 [ 1108.211554][T20110] ? __might_fault+0xb0/0x130 [ 1108.211580][T20110] should_fail_ex+0x414/0x560 [ 1108.211607][T20110] _copy_from_iter+0x1db/0x15a0 [ 1108.211630][T20110] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1108.211646][T20110] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1108.211666][T20110] ? __pfx__copy_from_iter+0x10/0x10 [ 1108.211684][T20110] ? __build_skb_around+0x257/0x3e0 [ 1108.211705][T20110] ? netlink_sendmsg+0x642/0xb30 [ 1108.211720][T20110] ? skb_put+0x11b/0x210 [ 1108.211740][T20110] netlink_sendmsg+0x6b2/0xb30 [ 1108.211762][T20110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.211780][T20110] ? __import_iovec+0x5d4/0x7f0 [ 1108.211798][T20110] ? aa_sock_msg_perm+0x94/0x160 [ 1108.211815][T20110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1108.211831][T20110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.211848][T20110] __sock_sendmsg+0x219/0x270 [ 1108.211873][T20110] ____sys_sendmsg+0x505/0x830 [ 1108.211896][T20110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.211944][T20110] ___sys_sendmsg+0x21f/0x2a0 [ 1108.211965][T20110] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.212009][T20110] ? __fget_files+0x2a/0x420 [ 1108.212027][T20110] ? __fget_files+0x3a0/0x420 [ 1108.212053][T20110] __sys_sendmsg+0x164/0x220 [ 1108.212072][T20110] ? __pfx___sys_sendmsg+0x10/0x10 [ 1108.212101][T20110] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1108.212120][T20110] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.212138][T20110] __do_fast_syscall_32+0xb4/0x110 [ 1108.212156][T20110] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.212175][T20110] do_fast_syscall_32+0x34/0x80 [ 1108.212193][T20110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1108.212211][T20110] RIP: 0023:0xf7f48539 [ 1108.212224][T20110] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1108.212237][T20110] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1108.212252][T20110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900 [ 1108.212262][T20110] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1108.212271][T20110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.212279][T20110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1108.212288][T20110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1108.212308][T20110] [ 1108.945044][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1108.960059][T20136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4310'. [ 1109.095005][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1109.109905][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1109.134744][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.203007][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.234259][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1109.250150][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.272765][ T9] usb 3-1: Product: syz [ 1109.284976][ T9] usb 3-1: Manufacturer: syz [ 1109.344411][ T9] usb 3-1: SerialNumber: syz [ 1109.576605][ T9] usb 3-1: 0:2 : does not exist [ 1109.614108][ T9] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1109.693887][ T9] usb 3-1: USB disconnect, device number 46 [ 1109.801886][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1109.953837][ T3079] usb 4-1: USB disconnect, device number 74 [ 1110.267347][T20162] syz_tun: entered allmulticast mode [ 1110.611055][T20168] : entered promiscuous mode [ 1110.671830][T20161] syz_tun: left allmulticast mode [ 1110.677520][ T3079] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1110.755179][ T5884] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1110.865115][ T9726] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1110.894602][ T3079] usb 1-1: config 0 has no interfaces? [ 1110.915496][ T3079] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1110.925044][ T3079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.933086][ T3079] usb 1-1: Product: syz [ 1110.984885][ T3079] usb 1-1: Manufacturer: syz [ 1111.000584][ T3079] usb 1-1: SerialNumber: syz [ 1111.030467][ T5884] usb 3-1: config 0 has no interfaces? [ 1111.043592][ T3079] usb 1-1: config 0 descriptor?? [ 1111.057740][ T5884] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1111.074974][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.112713][ T5884] usb 3-1: Product: syz [ 1111.117846][ T5884] usb 3-1: Manufacturer: syz [ 1111.122525][ T5884] usb 3-1: SerialNumber: syz [ 1111.136823][ T9726] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1111.154908][ T9726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.187154][ T5884] usb 3-1: config 0 descriptor?? [ 1111.194842][ T9726] usb 4-1: config 0 has no interface number 0 [ 1111.245242][ T9726] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1111.373296][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1111.415257][ T9726] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1111.521604][T20190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1111.584178][ T9726] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ad.aa [ 1111.614284][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.783506][ T9726] usb 4-1: Product: syz [ 1111.795247][ T9726] usb 4-1: Manufacturer: syz [ 1111.806307][ T9726] usb 4-1: SerialNumber: syz [ 1111.822935][ T9726] usb 4-1: config 0 descriptor?? [ 1111.873335][ T9726] adutux 4-1:0.55: interrupt endpoints not found [ 1112.275838][ T5884] usb 4-1: USB disconnect, device number 75 [ 1113.594697][ T5884] usb 1-1: USB disconnect, device number 65 [ 1113.779659][T12752] usb 3-1: USB disconnect, device number 47 [ 1114.008932][T20216] syz_tun: entered allmulticast mode [ 1114.435347][ T9726] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1114.611726][ T9726] usb 1-1: Using ep0 maxpacket: 8 [ 1114.654724][ T9726] usb 1-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1114.673355][T20215] syz_tun: left allmulticast mode [ 1114.675198][ T5884] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1114.708649][ T9726] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1114.799218][ T9726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1114.837779][ T9726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.839278][T20228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4336'. [ 1114.885578][ T9726] usb 1-1: Product: syz [ 1114.893374][ T9726] usb 1-1: Manufacturer: syz [ 1114.929236][ T5884] usb 2-1: config 0 has no interfaces? [ 1114.941584][ T5884] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1114.953417][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.963596][ T9726] usb 1-1: SerialNumber: syz [ 1114.972496][ T5884] usb 2-1: Product: syz [ 1114.996488][ T5884] usb 2-1: Manufacturer: syz [ 1115.012146][ T5884] usb 2-1: SerialNumber: syz [ 1115.044068][ T5884] usb 2-1: config 0 descriptor?? [ 1115.243654][ T9726] usb 1-1: USB disconnect, device number 66 [ 1115.454289][T20238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1115.554576][T20244] syz_tun: entered allmulticast mode [ 1115.777041][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.783474][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.079443][T20243] syz_tun: left allmulticast mode [ 1116.154985][ T5884] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1116.194272][T20251] syz_tun: entered allmulticast mode [ 1116.266582][T12752] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1116.574017][T20252] syz_tun: left allmulticast mode [ 1116.598249][T12752] usb 3-1: config 0 has no interfaces? [ 1116.623450][T12752] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1116.632900][T12752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.648687][T12752] usb 3-1: Product: syz [ 1116.653030][T12752] usb 3-1: Manufacturer: syz [ 1116.662775][T12752] usb 3-1: SerialNumber: syz [ 1116.674629][T12752] usb 3-1: config 0 descriptor?? [ 1117.077179][ T9726] usb 2-1: USB disconnect, device number 56 [ 1117.275012][T12752] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1117.318474][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1117.343148][ T5884] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1117.369122][ T5884] usb 1-1: can't read configurations, error -71 [ 1117.448080][T12752] usb 4-1: Using ep0 maxpacket: 16 [ 1117.468657][T12752] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1117.526566][T12752] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.546546][T12752] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.566457][T12752] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.575809][T12752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.587614][T12752] usb 4-1: Product: syz [ 1117.593919][T12752] usb 4-1: Manufacturer: syz [ 1117.604862][T12752] usb 4-1: SerialNumber: syz [ 1117.894258][T12752] usb 4-1: 0:2 : does not exist [ 1117.969480][T12752] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1118.007433][T12752] usb 4-1: USB disconnect, device number 76 [ 1118.046956][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.378591][T20272] vlan2: entered allmulticast mode [ 1118.383747][T20272] batadv0: entered allmulticast mode [ 1118.572701][ T9] usb 3-1: USB disconnect, device number 48 [ 1119.046423][T20277] syz_tun: entered allmulticast mode [ 1119.253640][T20282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4350'. [ 1119.282439][T20276] syz_tun: left allmulticast mode [ 1119.640521][T12752] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1119.854413][T20296] syz_tun: entered allmulticast mode [ 1119.914914][T12752] usb 3-1: Using ep0 maxpacket: 16 [ 1119.922997][T12752] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1119.932314][T12752] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.991516][T12752] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1120.004975][ T3079] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1120.063787][T12752] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1120.077577][T12752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.086080][T12752] usb 3-1: Product: syz [ 1120.095284][T12752] usb 3-1: Manufacturer: syz [ 1120.130566][T12752] usb 3-1: SerialNumber: syz [ 1120.151484][T20301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1120.163468][T20295] syz_tun: left allmulticast mode [ 1120.239878][ T3079] usb 4-1: config 0 has no interfaces? [ 1120.313765][ T3079] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1120.374427][ T3079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.391571][ T3079] usb 4-1: Product: syz [ 1120.516542][T12752] usb 3-1: 0:2 : does not exist [ 1120.525885][ T3079] usb 4-1: Manufacturer: syz [ 1120.575251][ T3079] usb 4-1: SerialNumber: syz [ 1120.686005][T12752] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1120.707300][ T3079] usb 4-1: config 0 descriptor?? [ 1120.758874][T12752] usb 3-1: USB disconnect, device number 49 [ 1120.918680][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.465241][ T9726] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1121.544925][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1121.665025][ T9726] usb 3-1: Using ep0 maxpacket: 8 [ 1121.677674][ T9726] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1121.693251][ T9726] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1121.751324][ T9726] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1121.766629][ T9] usb 2-1: config 0 has no interfaces? [ 1121.780936][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1121.790847][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.803065][ T9726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.817819][ T9] usb 2-1: Product: syz [ 1121.824974][ T9] usb 2-1: Manufacturer: syz [ 1121.833100][ T9726] usb 3-1: Product: syz [ 1121.846162][ T9] usb 2-1: SerialNumber: syz [ 1121.940986][ T9726] usb 3-1: Manufacturer: syz [ 1122.013127][ T9726] usb 3-1: SerialNumber: syz [ 1122.032272][ T9] usb 2-1: config 0 descriptor?? [ 1122.090930][T20315] syz_tun: entered allmulticast mode [ 1122.348443][ T9726] usb 3-1: USB disconnect, device number 50 [ 1122.719643][T20314] syz_tun: left allmulticast mode [ 1122.949875][ T9] usb 4-1: USB disconnect, device number 77 [ 1123.054184][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4362'. [ 1123.105172][ T9726] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1123.585081][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1123.892227][ T9] usb 4-1: config 0 has no interfaces? [ 1123.895061][T12752] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1123.908795][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1123.927154][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.941251][ T9] usb 4-1: Product: syz [ 1123.946415][ T9] usb 4-1: Manufacturer: syz [ 1123.951496][ T9] usb 4-1: SerialNumber: syz [ 1124.006891][ T9] usb 4-1: config 0 descriptor?? [ 1124.062360][T20332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1124.067360][T12752] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.085782][T12752] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1124.101963][T12752] usb 5-1: config 2 interface 0 has no altsetting 0 [ 1124.117830][T12752] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1124.133215][T12752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.153875][T12752] usb 5-1: Product: syz [ 1124.162872][T12752] usb 5-1: Manufacturer: syz [ 1124.203456][T12752] usb 5-1: SerialNumber: syz [ 1124.471661][T12752] usb 5-1: USB disconnect, device number 55 [ 1124.520840][ T9726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1124.580352][ T9726] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1124.653544][ T9726] usb 3-1: can't read configurations, error -71 [ 1125.047411][ T9] usb 2-1: USB disconnect, device number 57 [ 1125.312898][T20348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4368'. [ 1125.325202][ T9726] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1125.503492][ T9726] usb 3-1: config 0 has no interfaces? [ 1125.515553][ T9726] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1125.532412][ T9726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.540880][ T9726] usb 3-1: Product: syz [ 1125.550765][ T9726] usb 3-1: Manufacturer: syz [ 1125.558753][ T9726] usb 3-1: SerialNumber: syz [ 1125.619026][ T9726] usb 3-1: config 0 descriptor?? [ 1125.935979][ T3079] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1126.100681][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 1126.110805][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 1126.165108][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1126.175898][ T31] task:kworker/u8:2 state:D stack:20008 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1126.188382][ T31] Workqueue: netns cleanup_net [ 1126.196678][ T31] Call Trace: [ 1126.213874][ T31] [ 1126.229217][ T31] __schedule+0x16e2/0x4cd0 [ 1126.240427][ T31] ? schedule+0x165/0x360 [ 1126.251957][ T31] ? __pfx___schedule+0x10/0x10 [ 1126.265935][ T31] ? schedule+0x91/0x360 [ 1126.274067][ T31] schedule+0x165/0x360 [ 1126.287099][ T31] afs_cell_purge+0x3d9/0x540 [ 1126.297164][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 1126.302848][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1126.308987][ T31] ? afs_net+0x45/0x270 [ 1126.325862][ T3079] usb 5-1: Using ep0 maxpacket: 16 [ 1126.384804][ T3079] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1126.398885][ T3079] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.416162][ T3079] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.430090][ T31] ? afs_net+0x45/0x270 [ 1126.440354][ T31] afs_net_exit+0x50/0x100 [ 1126.458246][ T31] cleanup_net+0x717/0xbd0 [ 1126.458622][ T3079] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1126.472993][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1126.483700][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1126.495801][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1126.501898][ T3079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.515267][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1126.529107][ T3079] usb 5-1: Product: syz [ 1126.538760][ T9] usb 4-1: USB disconnect, device number 78 [ 1126.545185][ T31] process_scheduled_works+0xadb/0x17a0 [ 1126.552208][ T3079] usb 5-1: Manufacturer: syz [ 1126.561123][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1126.577176][ T3079] usb 5-1: SerialNumber: syz [ 1126.723794][ T31] worker_thread+0x8a0/0xda0 [ 1126.784295][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1126.804615][ T31] ? __kthread_parkme+0x7b/0x200 [ 1126.810507][ T31] kthread+0x70e/0x8a0 [ 1126.814706][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1126.820712][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.829388][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.836427][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1126.858712][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1126.865145][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.872997][ T31] ret_from_fork+0x4b/0x80 [ 1126.878041][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.882918][ T31] ret_from_fork_asm+0x1a/0x30 [ 1126.893482][ T31] [ 1126.901029][ T31] [ 1126.901029][ T31] Showing all locks held in the system: [ 1126.909661][ T31] 1 lock held by khungtaskd/31: [ 1126.915377][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1126.926117][ T31] 3 locks held by kworker/u8:2/36: [ 1126.931575][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1126.943707][ T31] #1: ffffc90000ad7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1126.963641][ T31] #2: ffffffff8f2e7b90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 1126.973997][ T31] 6 locks held by kworker/1:2/3079: [ 1126.979673][ T31] #0: ffff88801beb6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1127.000983][ T31] #1: ffffc9000bd7fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1127.014236][ T31] #2: ffff8881457d3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1127.023880][ T3079] usb 5-1: 0:2 : does not exist [ 1127.064204][ T31] #3: ffff88802d10d198 [ 1127.064352][ T3079] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1127.076484][ T31] (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1127.084551][ T31] #4: ffff88805fd86160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1127.094719][ T31] #5: ffffffff8f282d68 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x390/0x1dc0 [ 1127.131671][ T3079] usb 5-1: USB disconnect, device number 56 [ 1127.145030][ T31] 2 locks held by kworker/u8:10/3547: [ 1127.160682][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1127.201638][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x318/0x6d0 [ 1127.220217][ T31] 2 locks held by getty/5584: [ 1127.225827][ T31] #0: ffff8880346e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1127.238434][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.241508][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1127.266690][ T31] 1 lock held by syz.3.4363/20328: [ 1127.274601][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1127.309664][ T31] 1 lock held by syz.1.4368/20344: [ 1127.315371][ T31] #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1127.326478][ T31] 1 lock held by syz.4.4369/20346: [ 1127.331818][ T31] #0: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 1127.343306][ T31] 1 lock held by syz.0.4370/20355: [ 1127.348965][ T31] [ 1127.358524][ T31] ============================================= [ 1127.358524][ T31] [ 1127.370166][ T31] NMI backtrace for cpu 1 [ 1127.370188][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1127.370213][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1127.370226][ T31] Call Trace: [ 1127.370235][ T31] [ 1127.370244][ T31] dump_stack_lvl+0x189/0x250 [ 1127.370277][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1127.370303][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1127.370332][ T31] ? __pfx__printk+0x10/0x10 [ 1127.370366][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1127.370401][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1127.370429][ T31] ? _printk+0xcf/0x120 [ 1127.370454][ T31] ? __pfx__printk+0x10/0x10 [ 1127.370476][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1127.370500][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1127.370534][ T31] watchdog+0xfee/0x1030 [ 1127.370562][ T31] ? watchdog+0x1de/0x1030 [ 1127.370595][ T31] kthread+0x70e/0x8a0 [ 1127.370623][ T31] ? __pfx_watchdog+0x10/0x10 [ 1127.370646][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.370671][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.370693][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1127.370714][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1127.370738][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.370772][ T31] ret_from_fork+0x4b/0x80 [ 1127.370792][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.370815][ T31] ret_from_fork_asm+0x1a/0x30 [ 1127.370849][ T31] [ 1127.370856][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1127.522636][ C0] NMI backtrace for cpu 0 [ 1127.522653][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1127.522674][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1127.522686][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1127.522711][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 fb 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1127.522726][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1127.522741][ C0] RAX: 2d8caaf9a0828d00 RBX: ffffffff81973f28 RCX: 2d8caaf9a0828d00 [ 1127.522755][ C0] RDX: 0000000000000001 RSI: ffffffff8d74a7fc RDI: ffffffff8bc1d220 [ 1127.522767][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 1127.522780][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7ed870 [ 1127.522794][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 1127.522805][ C0] FS: 0000000000000000(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 1127.522820][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1127.522832][ C0] CR2: 00000000801fd018 CR3: 00000000652ac000 CR4: 00000000003526f0 [ 1127.522847][ C0] Call Trace: [ 1127.522854][ C0] [ 1127.522861][ C0] default_idle+0x13/0x20 [ 1127.522883][ C0] default_idle_call+0x74/0xb0 [ 1127.522906][ C0] do_idle+0x1e8/0x510 [ 1127.522923][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1127.522941][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1127.522960][ C0] ? __pfx_do_idle+0x10/0x10 [ 1127.522980][ C0] ? do_idle+0xe/0x510 [ 1127.522997][ C0] cpu_startup_entry+0x44/0x60 [ 1127.523012][ C0] rest_init+0x2de/0x300 [ 1127.523034][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1127.523058][ C0] start_kernel+0x470/0x4f0 [ 1127.523078][ C0] x86_64_start_reservations+0x2a/0x30 [ 1127.523104][ C0] x86_64_start_kernel+0x66/0x70 [ 1127.523124][ C0] common_startup_64+0x13e/0x147 [ 1127.523157][ C0] [ 1127.723350][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1127.730246][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1127.742079][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1127.752145][ T31] Call Trace: [ 1127.755443][ T31] [ 1127.758385][ T31] dump_stack_lvl+0x99/0x250 [ 1127.762996][ T31] ? __asan_memcpy+0x40/0x70 [ 1127.767768][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1127.773166][ T31] ? __pfx__printk+0x10/0x10 [ 1127.777788][ T31] panic+0x2db/0x790 [ 1127.781709][ T31] ? __pfx_panic+0x10/0x10 [ 1127.786146][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1127.791986][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1127.797375][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1127.803571][ T31] watchdog+0x102d/0x1030 [ 1127.807913][ T31] ? watchdog+0x1de/0x1030 [ 1127.812349][ T31] kthread+0x70e/0x8a0 [ 1127.816432][ T31] ? __pfx_watchdog+0x10/0x10 [ 1127.821117][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.825717][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.830402][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1127.835618][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1127.840909][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.845505][ T31] ret_from_fork+0x4b/0x80 [ 1127.849928][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.854528][ T31] ret_from_fork_asm+0x1a/0x30 [ 1127.859308][ T31] [ 1127.862581][ T31] Kernel Offset: disabled [ 1127.866922][ T31] Rebooting in 86400 seconds..