last executing test programs: 7m21.259022959s ago: executing program 4 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000018000100000000ef307c4b00020000000030e40800eec0fbe9547731000008001e000500000014001680100008800c01038008000100b8000000"], 0x38}}, 0x0) 7m20.621489681s ago: executing program 4 (id=612): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x20, &(0x7f0000000440)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x61}, 0x44) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x4, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x5}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d4622d4b72e204000000a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m19.977727698s ago: executing program 4 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) (async) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) (async) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x40, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0x103], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x21, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {0x0, 0xfffffff8}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {0x0, 0x2000000}, {0xf}, {0xfffffffd}, {0xd4}], '\x00', 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24008000) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x151040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = epoll_create(0x4000100) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000300)={0xb0000004}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ac008ac5ab41a2361d3e86d1", 0xc, 0x20040045, &(0x7f00000000c0)={0xa, 0x4e21, 0x5ed1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) (async) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r4, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002100010000000000000000000200000000000000000000000a30cad8b96ed2a7436b6c8b895bbed8fc388f106553a335585c81ca2204a40a90b4349c75d05203238535335b310a2f70f43a9f14cbba26d79429c17b89da7e67886c27bf0aeb5d6558a7da06e178752a2309d09a3477849a34cf1a7fac37f38788a4"], 0x1c}}, 0x44044) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) (async) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) (async) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) 7m18.059060565s ago: executing program 4 (id=621): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0xcfa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f0000000300)={0x1f, 0x400000, "6d59da60ac72b12cbe3ad6b98999cac6dfde9166ca5171ed", {0x6, 0x1}, 0x200}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000050}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001400000000000"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x48}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r6, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x0) 7m13.886845021s ago: executing program 4 (id=634): r0 = socket(0x2b, 0x80801, 0x1) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) (async, rerun: 32) r1 = fanotify_init(0x200, 0x0) (rerun: 32) fanotify_mark(r1, 0x161, 0x40000867, 0xffffffffffffffff, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x20040840}, 0x20008800) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) 7m13.57723512s ago: executing program 4 (id=635): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="5c0000007a006bcd9e3fe3dc6e08000007200000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1931fe71197ef", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x1) r8 = dup(r6) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000440)={0xf010000, 0x0, 0x1, r8, 0x0, 0x0}) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000400)={0xc, 0x1}) fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, r9, &(0x7f0000000300)='./file0\x00') r10 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'some'}, 0x2f) r11 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r14, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r15, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r14, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r11, 0x261e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000007b01"]) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000000020108000000000000000005572af90fa0ada9ee0000022000a00a060003400002000014000180080001000000000008000200ac14143f0600034005348e4db075dc5940c00002"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0x4dc, 0x21c1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 6m58.296139213s ago: executing program 32 (id=635): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="5c0000007a006bcd9e3fe3dc6e08000007200000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1931fe71197ef", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x1) r8 = dup(r6) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000440)={0xf010000, 0x0, 0x1, r8, 0x0, 0x0}) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000400)={0xc, 0x1}) fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, r9, &(0x7f0000000300)='./file0\x00') r10 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'some'}, 0x2f) r11 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r14, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r15, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r14, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r11, 0x261e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000007b01"]) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000000020108000000000000000005572af90fa0ada9ee0000022000a00a060003400002000014000180080001000000000008000200ac14143f0600034005348e4db075dc5940c00002"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0x4dc, 0x21c1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 12.303047815s ago: executing program 2 (id=1893): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x6, 0xb49, 0x6, 0x100000000a, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = getpgid(0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x7, 0x400000) kcmp(r3, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0) syz_io_uring_setup(0x304, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000280), &(0x7f0000000300), 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) 10.890818739s ago: executing program 5 (id=1897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x84c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x818, 0x2, [@TCA_FW_POLICE={0x814, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x9, 0x4, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x81, 0x1, 0x9, 0x8, 0x1, 0x4, 0x7, 0x3e, 0x10001, 0x7fffffff, 0x1, 0x6, 0x0, 0xef, 0x7, 0x1000, 0x9, 0x7, 0x1778a66f, 0x6, 0xa34, 0x7, 0x3, 0x3, 0xffffffff, 0x1, 0x1b5, 0x3, 0xe5, 0xfffffff5, 0xfc46, 0xffff, 0x7, 0x4, 0x6, 0x9, 0x1, 0x64, 0xfffffffa, 0x7368, 0x2e, 0x0, 0x1, 0x3, 0x4, 0x6, 0x3, 0x3, 0x80000000, 0x6, 0x800, 0x9, 0x6, 0xfffffffd, 0x80000001, 0x40, 0x3, 0x8f, 0x7, 0x1, 0x5, 0x4, 0xc, 0x3, 0x10001, 0x80000000, 0x4007008, 0x200, 0x1, 0x5, 0x1000, 0x0, 0xaaf5, 0x2, 0x0, 0x0, 0x1, 0x9, 0xb, 0xd3, 0x5, 0x9, 0x1, 0x9, 0x2, 0x6, 0x10001, 0x3ff, 0x0, 0xa, 0x101, 0x8, 0x5, 0xb, 0x4, 0x1, 0xb3f4, 0xc8, 0x6a41, 0xde, 0x400, 0x54, 0x0, 0x2, 0xe6c, 0x7c77a153, 0x5, 0x9, 0x2, 0x8001, 0x1ff, 0x0, 0x401, 0x1, 0x8, 0x47, 0x7, 0x1, 0x5, 0x4, 0xc, 0x9, 0xff, 0x8006, 0x3ff, 0x6, 0x10, 0x3, 0x2, 0xe0000, 0x1, 0x7, 0xfffffff7, 0xfff, 0x2, 0x5, 0x8, 0x9, 0x5, 0xfffff801, 0x0, 0x9e76, 0x8, 0x8, 0xfff, 0x3034, 0xe, 0x200, 0x2, 0x1ff, 0x2, 0x9, 0x0, 0x80000001, 0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffb24, 0x4, 0x7ff, 0x6, 0x4, 0x8, 0x8, 0x1400, 0xfbac, 0xa, 0x81, 0x7, 0x3, 0x4, 0x6, 0x0, 0x0, 0x565e975e, 0xbac8, 0x0, 0xffff8001, 0x0, 0x0, 0x248, 0x9, 0x7, 0xfffffffc, 0x400, 0x80, 0x8, 0x14f8, 0x10, 0x8, 0x9, 0x0, 0x101, 0x0, 0x101, 0x40, 0x101, 0x294, 0x6, 0xfff, 0x3, 0x5c0a, 0x9, 0x7fffffff, 0xfffffff7, 0x9, 0xa5, 0x8, 0x7, 0x5f, 0x4, 0x825, 0xf592, 0x2, 0x8, 0x800, 0x1, 0x4, 0x3, 0x5, 0x2, 0x1, 0x5, 0xffffffff, 0x9, 0x7f, 0xa, 0x9e, 0x7, 0xef1, 0x800, 0x6, 0x4, 0x10000, 0x400, 0x9, 0x8, 0x38f, 0x5b7f0f1c, 0x7, 0x80, 0x2, 0xffffffff, 0x7273, 0x5, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x1c, 0x1ff, 0x800, 0x2, 0xa4000000, 0xbcb, 0x422, 0x4, 0x1, 0x400, 0xe326, 0x0, 0x6, 0x4, 0x1, 0x6, 0x200, 0x3, 0x2, 0x7, 0xe89b, 0x7c0, 0x6, 0x9, 0x3, 0xc0, 0x3ff, 0x1, 0x9, 0x9, 0x7, 0x3, 0xfffffffc, 0x8, 0x3ff, 0x3, 0x6, 0x2, 0x3, 0x5, 0x0, 0x50000, 0x80, 0x9, 0x1, 0x5, 0xe60, 0x6, 0x4310, 0x5, 0x55, 0x8, 0xb, 0x0, 0x3ff, 0xcdc, 0x1, 0x1, 0xd933, 0x6, 0x0, 0xb, 0x4, 0xb, 0x4000000, 0x6, 0x3, 0x3, 0x401, 0x2, 0x6, 0xb85, 0x5, 0x5, 0x9, 0xfffffffc, 0x1, 0x1, 0x75, 0x6, 0xffffffff, 0x0, 0x3, 0x6, 0x1f, 0x3, 0x0, 0x0, 0x2, 0x9, 0x383e, 0x18, 0x3, 0x1, 0xbdb3, 0x0, 0x8001, 0x7fffffff, 0x2c3e426c, 0x3, 0x0, 0x1, 0x10, 0x0, 0x0, 0x3, 0x9, 0x7e, 0x81, 0x8, 0xffffffff, 0xe6, 0x6e, 0xd0625800, 0x100, 0x1, 0x1, 0x80000000, 0x919, 0x3, 0xa, 0xb18, 0x60b3fb30, 0xbd, 0x5, 0xb9de, 0x9, 0x0, 0x4, 0x923, 0x800, 0x80, 0xf, 0x4, 0x3, 0x5, 0x80, 0x4, 0x4, 0x0, 0x10, 0x2, 0x65e2d6b5, 0xfffffff8, 0x200, 0xfffffffa, 0x7, 0x9, 0xbb97, 0x0, 0x7fffffff, 0x7, 0xffffffff, 0x8, 0x6, 0x3d3e, 0x19c3, 0x0, 0x5, 0xfffffffd, 0x400, 0xa, 0x80000000, 0x2, 0x33, 0xb, 0x5fd4, 0x8000, 0x0, 0xc, 0xd, 0x10000, 0x0, 0xff, 0x51c, 0x18, 0x6, 0xfffffff5, 0x4, 0x7c53, 0xfb, 0x3, 0x4, 0x2, 0x7, 0x3, 0xfffffffd, 0x31, 0xffff, 0x4, 0x87d, 0x5, 0x65d, 0x3, 0x3, 0x14, 0x8, 0x81, 0x8a22, 0x9, 0x2, 0x800, 0xca5, 0x7, 0x3, 0x6, 0xe45, 0x9, 0x599, 0x3, 0x1ff, 0x200, 0xa, 0x8, 0x4f77, 0x6, 0xf6, 0x7, 0x9, 0x4, 0x9, 0xfffffffa, 0x8000, 0xff, 0x9, 0xf, 0x7fffffff, 0x1000, 0x7, 0x80000000, 0x4, 0xfffffffa, 0x460, 0xee, 0x800, 0x8, 0x7ff, 0xd66, 0xc4, 0x5, 0xf, 0x81, 0x3, 0x22, 0xfffffff7, 0x7, 0x5, 0x9, 0x3, 0x0, 0x69, 0x800, 0x13bc013c, 0x1, 0x80]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.454966927s ago: executing program 1 (id=1900): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) socket$inet(0x2, 0xa, 0x4) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x107142, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x22, 0x4, 0x0, 0x6, 0x0, 0xb, 0x40, 0x0, 0x0, 0x0, 0x2, 0x7, 0x93}, 0xe) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb000000000000c800850000002f00000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 10.412413811s ago: executing program 3 (id=1901): r0 = socket(0x10, 0x80002, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030303030303030a92099e669c00b5c9e3cb0c58c"], 0x2a, 0x0) r3 = add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000040), &(0x7f0000000500)="f1a23291ff227219eef529377dcfaab0bed6610ff7132bad4e4fb9dbf699c998aa2548a060e46bc1ac9b618d41f7a5a84c57fe348705c8d10556893b2c16f6ccbd6eda724727f3ac2a49a65b8678000000000000000a3d3c9a299fa6a23e2feb53a2bedea8c438", 0x67, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x2}, &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) socket$xdp(0x2c, 0x3, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f00000001c0)=@profile={'stack ', '#\x00'}, 0x8) keyctl$read(0xb, r3, &(0x7f0000000480)=""/117, 0x75) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) listen(r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000140)={0x0, 0x3, 0xc5a, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000, 0x6}, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002d00090027bd7000000000070400000004001800"], 0x18}}, 0x84) io_setup(0x9, &(0x7f0000000100)) write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d12", 0x26) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x198}, 0x10) r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) socket$inet_smc(0x2b, 0x1, 0x0) 10.287169123s ago: executing program 5 (id=1902): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008080}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000500", "f4bd000000801900", [0x0, 0x2000000000001]}}) 9.390911486s ago: executing program 5 (id=1903): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x2, [0xd62, 0xd67, 0x738, 0xa8d]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) mmap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x2, 0x110, 0xffffffffffffffff, 0xf08a3000) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008005) ioctl$EVIOCGMASK(r4, 0x60b, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc1105511, &(0x7f0000000040)={0xe, 0x0, 0x8, 0xb53, '\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0xc1105511, &(0x7f0000000040)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x5}, 0x1c) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 8.780379852s ago: executing program 2 (id=1904): r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4004, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r5, 0x541e, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={[0x0, &(0x7f0000000180)='/dev/video#\x00']}, &(0x7f0000000440)={[&(0x7f0000000280)=']\x00']}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) 8.321213948s ago: executing program 3 (id=1905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004050) syz_emit_ethernet(0x46, &(0x7f0000002900)=ANY=[@ANYBLOB="bbbbbbbbbbbbd06fc6a5b57481001500080600c186dd", @ANYRES64=r2, @ANYBLOB="ddc80a8640fdf37db34c0cacbd85847f0fe9246cf6e70d41af0fd044e37fd9219e7f6c6f551b3fb3db90a4a4510ff35b183a99baccbd082abaac27349de03511557080d2d7847a50814b68b1d936f7d9b0db1709a54364736e617c94313cdba5ac28cb357159440a6cd7bc51547e17d736a8cf0c45a28e7be08f7ccf0114f29f3533a33e50cb6195c78386", @ANYRESDEC=r0, @ANYRES64=r3, @ANYRESOCT=r0, @ANYRES16=r3, @ANYBLOB="a62c41d1e4d2a221097557306df96bb9b1128811f11988bb0de6b0ea6746f727182b51aae6ce2141880e515d5bae1df916d851fa4539ef52185aadbc027457a1"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000740)={0x38, 0x5, 0x0, 0x1, 0x0, 0x2, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x170, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x800000000000000}}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a00"/192], 0xc0}, 0x1, 0x0, 0x0, 0x240400c1}, 0x200000d4) r7 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fspick(r8, &(0x7f0000000340)='.\x00', 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000800)=""/4096, 0x1000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/171, 0xab}], 0x4) 6.500382845s ago: executing program 0 (id=1906): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8812, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name, &(0x7f0000000280)=0x10, 0x0) bind$tipc(r1, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0x4}}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000cc0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x3, 0x2, 0x5, 0x400, 0x40, 0x0, r4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa428100000000000000000000000000bbff02000000000000000000000000000102009078000005000250835900000000fc010000000000000000000000000000fc0200000000000000000000000000003a0100000000000007080000000000008000000000000000"], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r10 = open_tree(r9, &(0x7f0000000640)='\x00', 0x89901) r11 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x0, 0x590, 0x10001, 0x166110c, [0x0, 0x7f], [0x3, 0x2], 0x1}}) move_mount(r10, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) 6.02658656s ago: executing program 2 (id=1907): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x4000080) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x9, 0xfffffffffffffffd, 0x200000000000000, 0x110000, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) socket(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.887468316s ago: executing program 0 (id=1908): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0xb) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) migrate_pages(0x0, 0x2, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @local, 0x80000001}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) 5.845522041s ago: executing program 1 (id=1909): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x20, &(0x7f0000000440)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x61}, 0x44) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x4, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x5}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 5.486979973s ago: executing program 0 (id=1910): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, @mcast1, 0x800000, 0xa, 0x0, 0x100, 0x7ffffffe, 0x140192}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008080}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.920894144s ago: executing program 3 (id=1911): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = syz_clone(0xd0044191, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x1, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) faccessat(0xffffffffffffffff, 0x0, 0x0) munlockall() munlockall() 4.851625124s ago: executing program 0 (id=1912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca458f0f2e584421bc2541407c3498de2c8afc31232034c834cdc4586231d4cd77cc6c6ad"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffffffff390000000c0099000120000056b73210aacca1a22700018005000402000000000000000001000000"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000001080), &(0x7f00000003c0)=0xffffffffffffff6d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x6}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x9, 0x75, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x2b}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca458f0f2e584421bc2541407c3498de2c8afc31232034c834cdc4586231d4cd77cc6c6ad"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffffffff390000000c0099000120000056b73210aacca1a22700018005000402000000000000000001000000"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000001080), &(0x7f00000003c0)=0xffffffffffffff6d) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x0, 0x0, 0x6}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x9, 0x75, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x2b}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}}, 0x0) (async) 3.794290933s ago: executing program 5 (id=1913): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008080}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000600", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.715034138s ago: executing program 0 (id=1914): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010038bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r5) r6 = syz_io_uring_setup(0xb08, &(0x7f0000000140)={0x0, 0xb68a, 0x10, 0x3, 0x26a}, &(0x7f00000001c0), &(0x7f0000000200)) r7 = signalfd(r6, &(0x7f0000000240)={[0xffff]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r7, 0x400454a4, &(0x7f0000000280)=0x1) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 3.257388391s ago: executing program 0 (id=1915): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3ece, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[], 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f870c000000be0083000000000b09"], 0x0}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r9, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 3.009306594s ago: executing program 5 (id=1916): r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4004, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r5, 0x541e, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={[0x0, &(0x7f0000000180)='/dev/video#\x00']}, &(0x7f0000000440)={[&(0x7f0000000280)=']\x00']}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) 2.776914012s ago: executing program 1 (id=1917): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0xffe0, 0x8}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x80000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x40901, 0x10) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800304c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000005008d00000000daf4c23c631ca1944f3beb06e7f799319304c7d8f800"/47], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)={0x5, "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"}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) write$FUSE_DIRENT(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0) 2.215133505s ago: executing program 3 (id=1918): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000080)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) 2.190275126s ago: executing program 1 (id=1919): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000180)=0xfffffffd, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x40) (async) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r4, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) (async, rerun: 32) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0) 1.966086398s ago: executing program 2 (id=1920): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001900010000000000000000008020000000020005"], 0x38}}, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = fsopen(&(0x7f00000009c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r4) close(r3) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000000)={0x0, 0xa}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) migrate_pages(0x0, 0x2, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) 1.818937634s ago: executing program 3 (id=1921): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) unshare(0x2040400) semtimedop(r2, &(0x7f00000000c0)=[{0x4, 0x40, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) clock_adjtime(0x5, &(0x7f0000000180)={0x8, 0x2, 0x0, 0x4, 0x8, 0x103, 0x0, 0x6, 0xe3ba, 0x2, 0xffff, 0xa3, 0x6, 0x1, 0x2, 0x2, 0x8000, 0xe, 0xfa, 0x4e, 0x6, 0x8, 0x524, 0xfffffffffffffffe, 0x6, 0x4}) write(r0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0xb0, 0x0, 0x0, 0x2, 0xfd, 0x3}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) 1.114981468s ago: executing program 1 (id=1922): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, @mcast1, 0x800000, 0xa, 0x0, 0x100, 0x7ffffffe, 0x140192}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008080}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.030497536s ago: executing program 3 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x75, 0xb2, 0x1f, 0x40, 0x8086, 0xb63, 0xcaf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x1, 0xcc, 0xc8, 0xac, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0x3, 0x4}}]}}]}}]}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r7 = syz_open_pts(r6, 0x900) r8 = dup3(r7, r6, 0x0) read(r8, &(0x7f00000000c0)=""/226, 0xe2) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGLCKTRMIOS(r9, 0x5456, &(0x7f00000001c0)={0x5, 0x9, 0x2, 0xe000, 0x2, "1b95a276eca734bd0616acd191284a568602b5"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a010200000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164001c00028008000340000000b90800024000000004080004400000004b0900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) syz_usb_connect(0x0, 0x17e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000965bb108a1172801f6050102030109026c0101000000000904"], 0x0) 818.930274ms ago: executing program 2 (id=1924): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r1, &(0x7f0000000080)=""/48, 0x30, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) close(r1) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/185, 0xb9}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x4, 0x1, 0x6) ptrace(0x4208, r4) syz_usb_connect(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ef960b40a52426a99ebeeb290a3a9fca87b1134200035101020301090424000100000000090493000217c55a00010502030002ff02020905010008007f2906"], 0x0) 614.455871ms ago: executing program 1 (id=1925): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x20, &(0x7f0000000440)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x61}, 0x44) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x4, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x5}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d4622d4b72e204000000a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7", 0x31, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.281617ms ago: executing program 5 (id=1926): socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000005200)=[{{&(0x7f0000000340)=@tipc, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f0000000440)=""/70, 0x46}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/240, 0xf0}], 0x4, &(0x7f0000001700)=""/153, 0x99}, 0x7ff}, {{&(0x7f00000017c0)=@tipc=@id, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001840)=""/94, 0x5e}], 0x1}, 0xa9b}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001900)=""/204, 0xcc}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/32, 0x20}, {&(0x7f0000002a40)=""/137, 0x89}, {&(0x7f0000002b00)=""/245, 0xf5}], 0x5, &(0x7f0000002c80)=""/86, 0x56}, 0x5}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/3, 0x3}, {&(0x7f0000003d40)=""/141, 0x8d}, {&(0x7f0000003e00)=""/112, 0x70}, {&(0x7f0000003e80)=""/147, 0x93}, {&(0x7f0000003f40)=""/86, 0x56}, {&(0x7f0000003fc0)=""/236, 0xec}, {&(0x7f00000040c0)=""/142, 0x8e}], 0x8, &(0x7f0000004200)=""/4096, 0x1000}, 0x4}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000004fe) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r7, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r7, 0x0, 0x0, 0x0, 0x0, 0xd, @mcast1, @loopback, 0x40, 0x7800, 0xfffffffc}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000000)=0xffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 0s ago: executing program 2 (id=1927): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000013500)=ANY=[@ANYRES32, @ANYBLOB='\x00\b\t\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) syz_usbip_server_init(0x4) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth1_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x3, 0x1, 0x20008}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xf72}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): has an invalid length. [ 672.500001][ T7027] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 672.556035][T13025] netlink: 'syz.3.1609': attribute type 4 has an invalid length. [ 672.765400][T12918] usb 4-1: USB disconnect, device number 97 [ 672.765555][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 672.785909][ T7027] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 672.816957][T12920] usb 6-1: Firmware version (0.0) predates our first public release. [ 672.826241][ T7027] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 672.841737][T12920] usb 6-1: Please update to version 0.2 or newer [ 672.878631][ T7027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 672.890089][ T7027] usb 2-1: Product: syz [ 672.894300][ T7027] usb 2-1: Manufacturer: syz [ 672.899097][ T7027] usb 2-1: SerialNumber: syz [ 673.042389][T12920] usb 6-1: USB disconnect, device number 62 [ 673.121890][ T7027] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 125 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 673.384875][T12919] usb 1-1: device descriptor read/64, error -71 [ 673.630150][T12919] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 673.718965][T13057] loop2: detected capacity change from 0 to 7 [ 673.751725][T13057] loop2: p1 [ 673.755040][T13057] loop2: partition table partially beyond EOD, truncated [ 673.763759][T13057] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 674.078604][T12919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.146658][T12919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.184640][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 674.184798][T12919] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 674.260623][T12918] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 674.277259][T12919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.388230][T12919] usb 1-1: config 0 descriptor?? [ 674.429649][T12918] usb 4-1: device descriptor read/64, error -71 [ 674.809694][T12918] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 674.819948][ T7027] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 674.879919][T12919] uclogic 0003:256C:006D.0019: failed retrieving Huion firmware version: -71 [ 674.919914][T12919] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 674.940056][T12919] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 674.970877][ T30] kauditd_printk_skb: 2828 callbacks suppressed [ 674.970897][ T30] audit: type=1326 audit(1752032881.680:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13041 comm="syz.1.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bde78e929 code=0x7fc00000 [ 675.005488][ T7027] usb 6-1: Using ep0 maxpacket: 16 [ 675.009018][T12919] usb 1-1: USB disconnect, device number 102 [ 675.089871][ T7027] usb 6-1: config 0 has no interfaces? [ 675.106038][ T7027] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 675.129822][T12918] usb 4-1: device descriptor read/64, error -71 [ 675.136717][ T7027] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 675.151895][ T7027] usb 6-1: Manufacturer: syz [ 675.159903][ T7027] usb 6-1: config 0 descriptor?? [ 675.252202][T12918] usb usb4-port1: attempt power cycle [ 675.590438][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 675.633578][T12918] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 675.856163][T12918] usb 4-1: device descriptor read/8, error -71 [ 675.889666][ T7027] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 676.041978][ T7027] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 676.051963][ T7027] usb 1-1: config 0 has no interface number 0 [ 676.063364][ T7027] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 676.086844][ T7027] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 676.113009][ T7027] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.119586][T12918] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 676.141894][ T7027] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 676.152271][T12918] usb 4-1: device descriptor read/8, error -71 [ 676.161594][ T7027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.203558][ T7027] usb 1-1: config 0 descriptor?? [ 676.238387][ T7027] gspca_main: spca561-2.14.0 probing abcd:cdee [ 676.279827][T12918] usb usb4-port1: unable to enumerate USB device [ 676.467541][ T7027] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 676.486607][ T7027] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 676.504772][ T7027] usb 1-1: MIDIStreaming interface descriptor not found [ 676.630850][ T7027] usb 1-1: USB disconnect, device number 103 [ 677.422695][T13095] tipc: Started in network mode [ 677.427640][T13095] tipc: Node identity 027791173e5f, cluster identity 4711 [ 677.435328][T13095] tipc: Enabled bearer , priority 0 [ 677.475134][T13095] syzkaller0: entered promiscuous mode [ 677.494784][T13095] syzkaller0: entered allmulticast mode [ 677.529229][T12918] usb 6-1: USB disconnect, device number 63 [ 677.853387][T13095] tipc: Resetting bearer [ 677.882657][T13092] tipc: Resetting bearer [ 678.166166][T13092] tipc: Disabling bearer [ 678.338187][T13101] bridge1: entered promiscuous mode [ 679.062352][T13118] loop2: detected capacity change from 0 to 7 [ 679.141751][ T5865] loop2: p1 [ 679.152773][ T5865] loop2: partition table partially beyond EOD, truncated [ 679.440582][ T5865] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 679.554092][T13118] loop2: p1 [ 679.557669][T13118] loop2: partition table partially beyond EOD, truncated [ 679.598244][T13118] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 679.683829][ T5218] loop2: p1 [ 679.697044][ T5218] loop2: partition table partially beyond EOD, truncated [ 679.791665][ T5218] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 679.934774][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 679.996347][ T7027] usb 2-1: USB disconnect, device number 125 [ 680.046170][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 680.063828][ T7027] usblp0: removed [ 680.071313][T13121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1629'. [ 680.191158][T13121] bond0: (slave bridge_slave_1): Releasing backup interface [ 680.255012][T13121] bond2: (slave gretap1): Releasing backup interface [ 680.263272][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 680.358251][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 680.631725][T13130] pim6reg: entered allmulticast mode [ 680.798309][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 681.075298][T13126] pim6reg: left allmulticast mode [ 681.425092][T13144] netlink: 'syz.0.1635': attribute type 7 has an invalid length. [ 681.464286][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 681.931402][T13158] input: syz0 as /devices/virtual/input/input34 [ 683.416220][T13152] trusted_key: encrypted_key: insufficient parameters specified [ 683.488395][T13161] mÐZ`Ô€@: entered promiscuous mode [ 683.638552][T13166] loop2: detected capacity change from 0 to 7 [ 683.657594][T13166] loop2: [ 683.676499][T13166] loop2: partition table partially beyond EOD, truncated [ 684.091638][ T7027] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 684.317652][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1644'. [ 684.331430][ T7027] usb 3-1: Using ep0 maxpacket: 8 [ 684.506690][ T7027] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.620868][ T7027] usb 3-1: config 0 has no interfaces? [ 684.705904][ T7027] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 684.765803][ T7027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.954686][ T7027] usb 3-1: Product: syz [ 684.969667][T12919] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 685.062171][ T7027] usb 3-1: Manufacturer: syz [ 685.082278][ T7027] usb 3-1: SerialNumber: syz [ 685.102418][ T7027] usb 3-1: config 0 descriptor?? [ 685.174588][T12919] usb 2-1: config 0 has no interfaces? [ 685.249605][T12918] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 685.642198][T12918] usb 1-1: device descriptor read/64, error -71 [ 685.680418][T12919] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 685.768868][T12919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.804536][T12919] usb 2-1: Product: syz [ 685.861351][T12919] usb 2-1: Manufacturer: syz [ 685.866044][T12919] usb 2-1: SerialNumber: syz [ 685.949738][T12918] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 685.958598][T12919] usb 2-1: config 0 descriptor?? [ 686.169688][T12918] usb 1-1: device descriptor read/64, error -71 [ 686.290163][T12918] usb usb1-port1: attempt power cycle [ 686.382027][T13214] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2498598387 (4997196774 ns) > initial count (3467504496 ns). Using initial count to start timer. [ 686.771865][T12918] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 686.817649][T12918] usb 1-1: device descriptor read/8, error -71 [ 687.109661][T12918] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 687.147438][T12918] usb 1-1: device descriptor read/8, error -71 [ 687.174349][T13220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.376493][T12918] usb usb1-port1: unable to enumerate USB device [ 687.882138][ T7027] usb 3-1: USB disconnect, device number 114 [ 687.965364][T13227] IPVS: Unknown mcast interface: veth0_macvtap [ 688.499383][T12918] usb 2-1: USB disconnect, device number 126 [ 688.782123][T13245] netlink: 'syz.1.1657': attribute type 1 has an invalid length. [ 688.841036][T13245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 688.980556][ T7027] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 689.166955][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1659'. [ 689.185626][ T7027] usb 4-1: Using ep0 maxpacket: 32 [ 689.195531][ T7027] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 689.221752][ T7027] usb 4-1: config 0 has no interface number 0 [ 689.248357][ T7027] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 689.259873][ T7027] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 689.274416][ T7027] usb 4-1: config 0 interface 126 has no altsetting 0 [ 689.287190][ T7027] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 689.297825][ T7027] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.315174][ T7027] usb 4-1: Product: syz [ 689.325126][ T7027] usb 4-1: Manufacturer: syz [ 689.528217][ T7027] usb 4-1: SerialNumber: syz [ 689.551421][ T7027] usb 4-1: config 0 descriptor?? [ 689.557902][T13244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.565361][T12342] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 689.575450][T13244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.879863][T12342] usb 1-1: Using ep0 maxpacket: 16 [ 689.886552][T13244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.899995][T12342] usb 1-1: too many configurations: 10, using maximum allowed: 8 [ 689.931193][T12342] usb 1-1: config index 0 descriptor too short (expected 48191, got 18) [ 689.959264][T13244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.971110][T13262] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1662'. [ 689.984170][T13262] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 689.995650][T12342] usb 1-1: config 255 has an invalid descriptor of length 41, skipping remainder of the config [ 690.046530][T12342] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 17 [ 690.081214][T12342] usb 1-1: config index 1 descriptor too short (expected 48191, got 18) [ 690.096055][T12342] usb 1-1: config 255 has an invalid descriptor of length 41, skipping remainder of the config [ 690.114520][T12342] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 17 [ 690.134490][T12342] usb 1-1: config index 2 descriptor too short (expected 48191, got 18) [ 690.144373][T12342] usb 1-1: config 255 has an invalid descriptor of length 41, skipping remainder of the config [ 690.157534][T12342] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 17 [ 690.199708][ T7027] ir_usb 4-1:0.126: IR Dongle converter detected [ 690.228378][T12342] usb 1-1: config index 3 descriptor too short (expected 48191, got 18) [ 690.271091][T12342] usb 1-1: config 255 has an invalid descriptor of length 41, skipping remainder of the config [ 690.350970][T12342] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 17 [ 690.602150][T13266] block device autoloading is deprecated and will be removed. [ 690.620002][ T7027] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 690.644364][T12342] usb 1-1: config index 4 descriptor too short (expected 48191, got 18) [ 690.670525][T12342] usb 1-1: config 255 has an invalid descriptor of length 41, skipping remainder of the config [ 690.697358][ T7027] usb 4-1: USB disconnect, device number 102 [ 690.720820][ T7027] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 690.731152][T12342] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 17 [ 690.751071][ T7027] ir_usb 4-1:0.126: device disconnected [ 690.770057][T12342] usb 1-1: config index 5 descriptor too short (expected 48191, got 18) [ 690.816426][T12342] usb 1-1: config 255 has an invalid descriptor of length 41, skipping remainder of the config [ 690.877626][T12342] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 17 [ 690.927653][T12342] usb 1-1: config index 6 descriptor too short (expected 48191, got 18) [ 690.943315][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.949790][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.960707][T12342] usb 1-1: config 255 has an invalid descriptor of length 41, skipping remainder of the config [ 691.009567][T12342] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 17 [ 691.060819][T12342] usb 1-1: config index 7 descriptor too short (expected 48191, got 18) [ 691.069219][T12342] usb 1-1: config 255 has an invalid descriptor of length 41, skipping remainder of the config [ 691.145375][T12342] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 17 [ 691.188016][T12342] usb 1-1: New USB device found, idVendor=07cf, idProduct=1167, bcdDevice= 1.00 [ 691.217983][T12342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.272968][T12342] usb 1-1: Product: syz [ 691.309615][T12342] usb 1-1: Manufacturer: syz [ 691.335978][T12342] usb 1-1: SerialNumber: syz [ 691.491807][ T7027] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 691.599950][T12342] usb 1-1: USB disconnect, device number 108 [ 691.672434][ T7027] usb 2-1: not running at top speed; connect to a high speed hub [ 691.697552][ T7027] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 691.728409][ T7027] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.750465][ T7027] usb 2-1: config 1 interface 0 has no altsetting 0 [ 691.777723][ T7027] usb 2-1: New USB device found, idVendor=046d, idProduct=0049, bcdDevice= 0.40 [ 691.792474][ T7027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.829869][ T7027] usb 2-1: Manufacturer: ᭿➚蓷æ‘꥗楕䴒྿讆쥯覘贌펳ê§å„œì¢ì£¨ã½³éšºï³£ã咽⮩矔ç—밅鑬摠늚ᕫ巾쿮홞ᄸ㢂㾈慄싂챠懓⼚蒀꽓麼찊㑽⹚ਊǵ⼰榬ê„紥᪂㡼 [ 691.873790][T13269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 692.342211][ T5906] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 692.438042][T13290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.470996][T13290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.509650][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 692.561423][ T5906] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 692.573782][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.594134][ T5906] usb 3-1: Product: syz [ 692.599873][ T5906] usb 3-1: Manufacturer: syz [ 692.606951][ T5906] usb 3-1: SerialNumber: syz [ 692.661611][ T5906] usb 3-1: config 0 descriptor?? [ 692.795093][T13299] FAULT_INJECTION: forcing a failure. [ 692.795093][T13299] name failslab, interval 1, probability 0, space 0, times 0 [ 692.810388][T13299] CPU: 1 UID: 0 PID: 13299 Comm: syz.0.1671 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 692.810419][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.810430][T13299] Call Trace: [ 692.810437][T13299] [ 692.810449][T13299] dump_stack_lvl+0x189/0x250 [ 692.810473][T13299] ? __pfx____ratelimit+0x10/0x10 [ 692.810499][T13299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.810518][T13299] ? __pfx__printk+0x10/0x10 [ 692.810541][T13299] ? __pfx___might_resched+0x10/0x10 [ 692.810560][T13299] ? fs_reclaim_acquire+0x7d/0x100 [ 692.810587][T13299] should_fail_ex+0x414/0x560 [ 692.810613][T13299] should_failslab+0xa8/0x100 [ 692.810635][T13299] __kmalloc_noprof+0xcb/0x4f0 [ 692.810660][T13299] ? tomoyo_encode+0x28b/0x550 [ 692.810679][T13299] tomoyo_encode+0x28b/0x550 [ 692.810698][T13299] tomoyo_realpath_from_path+0x58d/0x5d0 [ 692.810716][T13299] ? tomoyo_domain+0xd9/0x130 [ 692.810736][T13299] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 692.810758][T13299] tomoyo_path_number_perm+0x1e8/0x5a0 [ 692.810782][T13299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 692.810816][T13299] ? __lock_acquire+0xab9/0xd20 [ 692.810848][T13299] ? __fget_files+0x2a/0x420 [ 692.810871][T13299] ? __fget_files+0x2a/0x420 [ 692.810891][T13299] ? __fget_files+0x3a0/0x420 [ 692.810911][T13299] ? __fget_files+0x2a/0x420 [ 692.810935][T13299] security_file_ioctl+0xcb/0x2d0 [ 692.810957][T13299] __se_sys_ioctl+0x47/0x170 [ 692.810976][T13299] do_syscall_64+0xfa/0x3b0 [ 692.810991][T13299] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.811015][T13299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.811031][T13299] ? clear_bhb_loop+0x60/0xb0 [ 692.811050][T13299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.811066][T13299] RIP: 0033:0x7f5b81f8e929 [ 692.811080][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.811094][T13299] RSP: 002b:00007f5b82e79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.811112][T13299] RAX: ffffffffffffffda RBX: 00007f5b821b6080 RCX: 00007f5b81f8e929 [ 692.811125][T13299] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 692.811134][T13299] RBP: 00007f5b82e79090 R08: 0000000000000000 R09: 0000000000000000 [ 692.811144][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.811154][T13299] R13: 0000000000000000 R14: 00007f5b821b6080 R15: 00007f5b822dfa28 [ 692.811177][T13299] [ 692.811635][T13299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 692.908710][ T5906] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 693.218119][T13304] netlink: 'syz.0.1673': attribute type 1 has an invalid length. [ 693.218119][T13303] netlink: 'syz.0.1673': attribute type 1 has an invalid length. [ 693.349570][T12918] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 693.589630][T12918] usb 4-1: Using ep0 maxpacket: 16 [ 693.597033][T12918] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 693.619290][T12918] usb 4-1: config 8 has no interface number 0 [ 693.625848][T12918] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 693.638518][T12918] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 693.653286][T12918] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 693.663428][T12918] usb 4-1: config 8 interface 39 has no altsetting 0 [ 693.685998][T12918] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 693.704752][T13313] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 693.770690][T12918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.798834][T13313] 8021q: adding VLAN 0 to HW filter on device bond8 [ 693.816252][T12918] usb 4-1: Product: syz [ 693.825687][T12918] usb 4-1: Manufacturer: syz [ 693.841653][T12918] usb 4-1: SerialNumber: syz [ 694.379999][T12918] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 694.397651][T12918] ipheth 4-1:8.39: probe with driver ipheth failed with error -22 [ 694.518823][ T7027] usbhid 2-1:1.0: can't add hid device: -71 [ 694.531164][ T7027] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 694.545734][ T7027] usb 2-1: USB disconnect, device number 127 [ 694.842435][ T5906] usb write operation failed. (-71) [ 694.850261][ T5906] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 694.865498][ T5906] dvbdev: DVB: registering new adapter (Terratec H7) [ 694.872760][ T5906] usb 3-1: media controller created [ 694.880428][ T5906] usb read operation failed. (-71) [ 694.889797][ T5906] usb write operation failed. (-71) [ 694.898683][ T5906] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 694.924622][ T5906] usb 3-1: USB disconnect, device number 115 [ 695.670026][ T5906] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 695.840865][ T5906] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 695.882076][ T5906] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 695.924698][ T5906] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 695.934170][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.956272][ T5906] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 695.994641][T12918] usb 4-1: USB disconnect, device number 103 [ 696.111172][ T5906] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 696.132069][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.179810][ T30] audit: type=1326 audit(1752032902.870:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 696.287710][ T30] audit: type=1326 audit(1752032902.870:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 696.410982][ T30] audit: type=1326 audit(1752032902.870:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 696.712212][ T30] audit: type=1326 audit(1752032902.870:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 696.742250][ T30] audit: type=1326 audit(1752032902.870:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 696.765746][ T30] audit: type=1326 audit(1752032902.870:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 696.815348][ T30] audit: type=1326 audit(1752032902.870:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 696.979218][ T30] audit: type=1326 audit(1752032902.870:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 697.003091][ T30] audit: type=1326 audit(1752032902.880:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 697.026115][ T30] audit: type=1326 audit(1752032902.880:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13332 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc318e929 code=0x7ffc0000 [ 697.894656][T12919] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 698.062141][T12919] usb 1-1: config index 0 descriptor too short (expected 32786, got 18) [ 698.133987][T12919] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 698.160450][T13374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1690'. [ 698.176364][T12919] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 698.227243][T12919] usb 1-1: Manufacturer: syz [ 698.253218][T12919] usb 1-1: config 0 descriptor?? [ 698.279574][T12919] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 698.343115][ T5906] usb 6-1: USB disconnect, device number 64 [ 698.343784][T12919] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 698.372452][T13332] delete_channel: no stack [ 698.881563][T13380] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 698.966009][T13380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 699.342031][T13390] netpci0: tun_chr_ioctl cmd 1074812118 [ 699.694105][T12919] usb 1-1: USB disconnect, device number 109 [ 699.713398][T12919] ftdi_sio 1-1:0.0: device disconnected [ 699.725759][T13402] loop2: detected capacity change from 0 to 7 [ 699.741016][T13402] loop2: [ 699.744144][T13402] loop2: partition table partially beyond EOD, truncated [ 700.538493][T13417] syzkaller0: entered promiscuous mode [ 700.559770][T13417] syzkaller0: entered allmulticast mode [ 702.276432][T13427] loop2: detected capacity change from 0 to 7 [ 702.283504][T13427] loop2: p1 [ 702.286735][T13427] loop2: partition table partially beyond EOD, truncated [ 702.314510][T13427] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 702.412954][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 703.005175][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'. [ 703.159514][T12918] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 703.359913][T12918] usb 1-1: Using ep0 maxpacket: 16 [ 703.384200][T12918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.398363][T12918] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 703.409752][T12918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.480545][T12918] usb 1-1: config 0 descriptor?? [ 703.851905][T12919] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 703.921463][T12918] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 703.930034][T12918] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 703.938803][T12918] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 703.952180][T12918] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 703.967405][T12918] logitech-djreceiver 0003:046D:C513.001A: unknown main item tag 0x0 [ 704.131157][T12919] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.148927][T12919] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.164648][T12920] usb 1-1: USB disconnect, device number 110 [ 704.179817][T12919] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 704.193095][T12919] usb 6-1: config 0 interface 0 has no altsetting 0 [ 704.200080][T12919] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 704.209281][T12919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.239377][T12919] usb 6-1: config 0 descriptor?? [ 704.880000][T12919] usbhid 6-1:0.0: can't add hid device: -71 [ 704.906507][T12919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 704.928034][T12919] usb 6-1: USB disconnect, device number 65 [ 705.480036][T12919] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 705.551789][T13454] loop2: detected capacity change from 0 to 7 [ 705.578255][T13454] loop2: [ 705.585015][T13454] loop2: partition table partially beyond EOD, truncated [ 705.900291][T13442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.985651][T12919] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 706.022745][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1712'. [ 706.076673][T12919] usb 1-1: config 0 has no interface number 0 [ 706.165293][T12919] usb 1-1: config 0 interface 29 has no altsetting 0 [ 706.317619][T12919] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 706.434399][T12919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.473755][T12919] usb 1-1: Product: syz [ 706.477975][T12919] usb 1-1: Manufacturer: syz [ 706.563310][T12919] usb 1-1: SerialNumber: syz [ 706.654770][T13466] netlink: 'syz.1.1713': attribute type 1 has an invalid length. [ 706.663633][T12919] usb 1-1: config 0 descriptor?? [ 706.844673][T13466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.083659][T13480] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.1714'. [ 707.093458][T12919] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 707.104807][T13480] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.1714'. [ 707.114813][T13480] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1714'. [ 708.229913][ T5906] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 708.369613][ T5906] usb 3-1: device descriptor read/64, error -71 [ 708.609645][ T5906] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 708.782371][ T5906] usb 3-1: device descriptor read/64, error -71 [ 708.969575][ T5906] usb usb3-port1: attempt power cycle [ 709.231000][T12920] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 709.330311][ T5906] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 709.389974][T12920] usb 6-1: Using ep0 maxpacket: 8 [ 709.397026][ T5906] usb 3-1: device descriptor read/8, error -71 [ 709.398097][T12920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.464140][T12920] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 709.479876][T12920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.495783][T12920] usb 6-1: config 0 descriptor?? [ 709.523981][T12920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 709.719949][ T5906] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 709.743071][ T5906] usb 3-1: device descriptor read/8, error -71 [ 709.782237][T12919] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 709.859939][ T5906] usb usb3-port1: unable to enumerate USB device [ 709.879899][T12919] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 710.091572][T12919] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 710.142300][T12919] usb 1-1: USB disconnect, device number 111 [ 710.179142][T13501] loop2: detected capacity change from 0 to 7 [ 710.218029][T13501] loop2: [ 710.285384][T13501] loop2: partition table partially beyond EOD, truncated [ 710.501674][T12919] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 710.710391][T12919] usb 1-1: Using ep0 maxpacket: 8 [ 710.722006][T12919] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 710.760861][T12919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.773552][T12919] usb 1-1: config 0 descriptor?? [ 710.779549][ T5906] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 710.862828][T12920] gspca_vc032x: reg_w err -71 [ 710.869785][T12920] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 710.881503][T12920] usb 6-1: USB disconnect, device number 66 [ 710.943486][ T5906] usb 4-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 710.957982][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.972367][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.982182][ T5906] usb 4-1: Product: syz [ 710.986419][ T5906] usb 4-1: Manufacturer: syz [ 710.992736][ T5906] usb 4-1: SerialNumber: syz [ 711.410050][T12919] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 711.433118][T12919] asix 1-1:0.0: probe with driver asix failed with error -61 [ 711.829560][T12920] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 712.011568][T12920] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 712.024009][ T5906] cdc_ncm 4-1:1.0: bind() failure [ 712.036573][ T5906] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 712.045731][ T5906] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 712.055186][ T5906] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 712.071016][ T5906] usb 4-1: USB disconnect, device number 104 [ 712.073136][T12920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.118462][T12920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.136695][T12920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 712.156684][T12920] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 712.166264][T12920] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 712.174702][T12920] usb 3-1: Manufacturer: syz [ 712.189700][T12919] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 712.198653][T12920] usb 3-1: config 0 descriptor?? [ 712.329995][T12919] usb 6-1: device descriptor read/64, error -71 [ 712.571391][T12919] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 712.580996][ T5906] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 712.619231][T12920] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 712.635804][T12920] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 712.729876][T12919] usb 6-1: device descriptor read/64, error -71 [ 712.749959][ T5906] usb 2-1: config 0 has an invalid interface number: 214 but max is 2 [ 712.758224][ T5906] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 712.767316][ T5906] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 712.777549][ T5906] usb 2-1: config 0 has an invalid interface number: 131 but max is 2 [ 712.785882][ T5906] usb 2-1: config 0 has an invalid interface number: 143 but max is 2 [ 712.794202][ T5906] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 712.803492][ T5906] usb 2-1: config 0 has no interface number 0 [ 712.809688][ T5906] usb 2-1: config 0 has no interface number 1 [ 712.815780][ T5906] usb 2-1: config 0 has no interface number 2 [ 712.823121][ T5906] usb 2-1: config 0 interface 214 altsetting 210 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 712.834601][ T5906] usb 2-1: config 0 interface 214 altsetting 210 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 712.846088][ T5906] usb 2-1: config 0 interface 214 altsetting 210 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 712.851562][T12919] usb usb6-port1: attempt power cycle [ 712.857460][ T5906] usb 2-1: config 0 interface 214 altsetting 210 has a duplicate endpoint with address 0xE, skipping [ 712.862742][T12918] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 712.881624][ T5906] usb 2-1: config 0 interface 214 altsetting 210 has an invalid descriptor for endpoint zero, skipping [ 712.893211][ T5906] usb 2-1: config 0 interface 214 altsetting 210 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 712.904435][ T5906] usb 2-1: config 0 interface 214 altsetting 210 endpoint 0x3 has invalid maxpacket 16, setting to 8 [ 712.915392][ T5906] usb 2-1: config 0 interface 214 altsetting 210 endpoint 0xA has invalid maxpacket 64, setting to 0 [ 712.926726][ T5906] usb 2-1: config 0 interface 214 altsetting 210 has a duplicate endpoint with address 0xD, skipping [ 712.937719][ T5906] usb 2-1: config 0 interface 214 altsetting 210 has an endpoint descriptor with address 0x5F, changing to 0xF [ 712.950001][ T5906] usb 2-1: config 0 interface 214 altsetting 210 has a duplicate endpoint with address 0xF, skipping [ 712.960975][ T5906] usb 2-1: config 0 interface 214 altsetting 210 has a duplicate endpoint with address 0xA, skipping [ 712.971907][ T5906] usb 2-1: config 0 interface 214 altsetting 210 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 712.985732][ T5906] usb 2-1: config 0 interface 131 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 712.996708][ T5906] usb 2-1: config 0 interface 131 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 713.007468][ T5906] usb 2-1: config 0 interface 131 altsetting 7 endpoint 0x5 has invalid maxpacket 576, setting to 0 [ 713.018697][ T5906] usb 2-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0x3, skipping [ 713.021755][T12918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 713.037636][ T5906] usb 2-1: config 0 interface 143 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 713.042186][T12918] usb 4-1: config 0 has no interface number 0 [ 713.053176][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'. [ 713.061603][T12918] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 713.065747][ T5906] usb 2-1: config 0 interface 143 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 713.086810][T12918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.088244][ T5906] usb 2-1: config 0 interface 214 has no altsetting 0 [ 713.098705][T12918] usb 4-1: config 0 descriptor?? [ 713.106049][ T5906] usb 2-1: config 0 interface 131 has no altsetting 0 [ 713.113834][ T5906] usb 2-1: config 0 interface 143 has no altsetting 0 [ 713.120403][T12918] cp210x 4-1:0.1: cp210x converter detected [ 713.219666][T12919] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 713.241813][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.244765][T12919] usb 6-1: device descriptor read/8, error -71 [ 713.251457][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.429096][T13542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.438634][T13542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.480860][T12920] usb 3-1: USB disconnect, device number 120 [ 713.490713][T12919] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 713.520454][T12919] usb 6-1: device descriptor read/8, error -71 [ 713.528380][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.541662][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.554779][T12918] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 713.630384][T12919] usb usb6-port1: unable to enumerate USB device [ 713.770320][T12918] usb 4-1: cp210x converter now attached to ttyUSB0 [ 714.047099][T12918] usb 4-1: USB disconnect, device number 105 [ 714.073410][T12918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 714.100969][T12918] cp210x 4-1:0.1: device disconnected [ 714.154009][T13545] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1733'. [ 714.697578][T12918] usb 1-1: USB disconnect, device number 112 [ 715.220870][T13563] binder_alloc: 13559: binder_alloc_buf, no vma [ 715.247974][T13563] binder_alloc: 13559: binder_alloc_buf, no vma [ 715.339820][ T5906] usb 2-1: New USB device found, idVendor=1726, idProduct=1000, bcdDevice=16.fc [ 715.352627][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.383645][ T5906] usb 2-1: Product: 葨ꇥã’걸㖙Ꭾᔷ轇ᒊ헧倌껾ｲ梿᫖醴ì¡ê²ë¶¼ë¸Ÿê“᩾맘ã®é´¬çŒšåª…ㇸ᛫狞씶å¿ìšŽæ…¼á¢¼î’°çƒ¢ç–¥ê„•ìººê¥žçºˆâ±·ä¾ªë›ë â§‚ཥíŠê˜«â¾ƒì†¸ã€‘練ì ì æ°ïª€å¬—욈鹱å¨å„¨â¤§é–¹ï•½êž¼å·¶ [ 715.419330][ T5906] usb 2-1: Manufacturer: Ц [ 715.424951][ T7027] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 715.623529][ T5906] usb 2-1: config 0 descriptor?? [ 715.679837][T12918] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 715.713307][ T5906] usb 2-1: can't set config #0, error -71 [ 715.774761][ T5906] usb 2-1: USB disconnect, device number 2 [ 715.800480][ T7027] usb 6-1: Using ep0 maxpacket: 8 [ 715.810437][ T7027] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 715.818809][ T7027] usb 6-1: config 0 has no interface number 0 [ 715.840505][T12918] usb 3-1: device descriptor read/64, error -71 [ 715.872773][ T7027] usb 6-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 715.922444][ T7027] usb 6-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 715.976388][ T7027] usb 6-1: config 0 interface 48 has no altsetting 0 [ 716.010168][ T7027] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 716.019284][ T7027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.033266][ T7027] usb 6-1: Product: syz [ 716.038909][ T7027] usb 6-1: Manufacturer: syz [ 716.046811][ T7027] usb 6-1: SerialNumber: syz [ 716.061361][ T7027] usb 6-1: config 0 descriptor?? [ 716.079553][T12918] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 716.210051][T12918] usb 3-1: device descriptor read/64, error -71 [ 716.259922][ T5906] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 716.333863][T12918] usb usb3-port1: attempt power cycle [ 716.462615][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.490013][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 716.509916][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 716.552495][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 716.573832][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 716.622362][ T5906] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 716.633627][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 716.649942][ T5906] usb 2-1: Product: syz [ 716.659220][ T5906] usb 2-1: Manufacturer: syz [ 716.666370][ T5906] usb 2-1: SerialNumber: syz [ 716.675076][ T5906] usb 2-1: config 0 descriptor?? [ 716.689878][T12918] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 716.730248][T12918] usb 3-1: device descriptor read/8, error -71 [ 716.989600][T12918] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 717.020461][T12918] usb 3-1: device descriptor read/8, error -71 [ 717.145046][T12918] usb usb3-port1: unable to enumerate USB device [ 717.158177][ T5906] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 717.182184][ T5906] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 717.220319][ T5906] usb 2-1: USB disconnect, device number 3 [ 717.389079][T12918] usb 6-1: USB disconnect, device number 71 [ 717.469891][T12920] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 717.649661][T12920] usb 4-1: Using ep0 maxpacket: 16 [ 717.669826][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 717.788186][T13606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1747'. [ 717.851194][T13606] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1747'. [ 717.890572][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 717.899686][ T7027] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 717.923009][ T5906] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 717.950097][ T5906] usb 2-1: config 0 has no interface number 0 [ 717.964831][ T5906] usb 2-1: config 0 interface 184 has no altsetting 0 [ 718.016289][ T5906] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 718.039071][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.057983][ T5906] usb 2-1: Product: syz [ 718.071446][ T5906] usb 2-1: Manufacturer: syz [ 718.079640][ T7027] usb 6-1: device descriptor read/64, error -71 [ 718.096520][ T5906] usb 2-1: SerialNumber: syz [ 718.106792][ T5906] usb 2-1: config 0 descriptor?? [ 718.236190][ T5906] smsc75xx v1.0.0 [ 718.242865][ T5906] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 718.253914][ T5906] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 718.349804][ T7027] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 718.479607][ T7027] usb 6-1: device descriptor read/64, error -71 [ 718.542639][T13597] binder: 13594:13597 ioctl c0306201 200000000100 returned -11 [ 718.579576][ T5906] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 718.599828][ T7027] usb usb6-port1: attempt power cycle [ 718.679891][T12342] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 718.734794][ T5906] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 718.744627][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.761165][ T5906] usb 3-1: Product: syz [ 718.771023][ T5906] usb 3-1: Manufacturer: syz [ 718.783776][ T5906] usb 3-1: SerialNumber: syz [ 718.805712][ T5906] usb 3-1: config 0 descriptor?? [ 718.849692][T12342] usb 1-1: Using ep0 maxpacket: 16 [ 718.865764][T12342] usb 1-1: unable to get BOS descriptor or descriptor too short [ 718.878998][T12342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.904571][T12342] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 718.949555][ T7027] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 718.957547][T12342] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 718.974201][T12342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.997033][T12342] usb 1-1: Product: syz [ 719.008405][T12342] usb 1-1: Manufacturer: syz [ 719.014464][ T7027] usb 6-1: device descriptor read/8, error -71 [ 719.040083][T12342] usb 1-1: SerialNumber: syz [ 719.116902][ T5906] usb 3-1: Firmware version (0.0) predates our first public release. [ 719.134040][ T5906] usb 3-1: Please update to version 0.2 or newer [ 719.270396][ T7027] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 719.328433][ T7027] usb 6-1: device descriptor read/8, error -71 [ 719.364069][ T5906] usb 3-1: USB disconnect, device number 125 [ 719.417959][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.444149][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.460346][ T7027] usb usb6-port1: unable to enumerate USB device [ 719.470066][T13621] pimreg: left allmulticast mode [ 720.340145][ T5906] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 720.351090][T12918] usb 2-1: USB disconnect, device number 4 [ 720.552615][ T5906] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 720.569891][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.606896][ T5906] usb 3-1: config 0 has no interface number 0 [ 720.634316][ T5906] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 720.677792][ T5906] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.745960][ T5906] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 720.784876][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.824003][ T5906] usb 3-1: Product: syz [ 720.850818][ T5906] usb 3-1: Manufacturer: syz [ 720.868286][ T5906] usb 3-1: SerialNumber: syz [ 720.869106][T12920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 720.913192][T12920] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 720.951674][T12920] usb 4-1: can't read configurations, error -71 [ 720.977133][ T5906] usb 3-1: config 0 descriptor?? [ 721.225964][T13637] sctp: [Deprecated]: syz.3.1758 (pid 13637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 721.225964][T13637] Use struct sctp_sack_info instead [ 721.391113][T12342] usb 1-1: USB disconnect, device number 113 [ 721.663076][T12342] usb 3-1: USB disconnect, device number 126 [ 722.799857][T12342] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 722.974691][T12342] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 723.001216][T12342] usb 3-1: config 0 has no interface number 0 [ 723.057930][T12342] usb 3-1: config 0 interface 29 has no altsetting 0 [ 723.147462][T12342] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 723.189145][T12342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.215439][T12342] usb 3-1: Product: syz [ 723.232767][T12342] usb 3-1: Manufacturer: syz [ 723.237446][T12342] usb 3-1: SerialNumber: syz [ 723.251913][T13656] netlink: 'syz.5.1762': attribute type 2 has an invalid length. [ 723.349296][T12342] usb 3-1: config 0 descriptor?? [ 723.531416][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'. [ 723.549552][T12920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 723.726186][T12342] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 723.947867][ T5906] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 723.977131][T12920] usb 2-1: config 0 has no interfaces? [ 723.990727][T12920] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 724.000710][T12920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.030112][T12920] usb 2-1: Product: syz [ 724.034772][T12920] usb 2-1: Manufacturer: syz [ 724.041107][T12920] usb 2-1: SerialNumber: syz [ 724.052788][T12920] usb 2-1: config 0 descriptor?? [ 724.130468][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 724.140854][ T5906] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 724.150935][ T5906] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 724.161319][ T5906] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 724.428983][ T7027] usb 2-1: USB disconnect, device number 5 [ 724.456579][ T5906] usb 1-1: config 1 interface 0 has no altsetting 0 [ 724.538208][ T5906] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 724.578866][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.671357][T13675] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1765'. [ 724.691708][T13675] bond0: (slave bridge_slave_1): Releasing backup interface [ 724.803164][ T5906] usb 1-1: Product: syz [ 724.820582][ T5906] usb 1-1: Manufacturer: syz [ 724.846611][T13677] usb usb8: usbfs: process 13677 (syz.5.1766) did not claim interface 0 before use [ 724.989554][ T7027] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 725.073998][ T5906] usb 1-1: SerialNumber: syz [ 725.242976][ T7027] usb 2-1: device descriptor read/64, error -71 [ 725.415043][ T5906] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 725.519649][ T7027] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 725.709633][ T7027] usb 2-1: device descriptor read/64, error -71 [ 725.825209][ T7027] usb usb2-port1: attempt power cycle [ 726.159993][ T5906] usb 1-1: USB disconnect, device number 114 [ 726.174646][T13666] usblp0:failed reading printer status (-71) [ 726.471109][T12342] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 726.488860][T12342] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 726.510085][ T7027] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 726.554727][ T7027] usb 2-1: device descriptor read/8, error -71 [ 726.573420][T12342] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 726.637357][T12342] usb 3-1: USB disconnect, device number 127 [ 726.819854][ T7027] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 726.862925][ T7027] usb 2-1: device descriptor read/8, error -71 [ 726.980361][ T7027] usb usb2-port1: unable to enumerate USB device [ 727.618904][T13662] usblp0: removed [ 729.339707][T12920] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 729.509531][T12920] usb 6-1: Using ep0 maxpacket: 8 [ 729.554892][T12920] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 729.649521][T12920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.684108][T12920] usb 6-1: config 0 descriptor?? [ 729.799543][T12919] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 729.952420][T12920] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 729.967680][T13738] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 729.974259][T13738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 729.981994][T12920] asix 6-1:0.0: probe with driver asix failed with error -71 [ 730.011605][T12919] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 730.021105][T12919] usb 4-1: config 0 has no interface number 0 [ 730.024670][T13738] vhci_hcd vhci_hcd.0: Device attached [ 730.027889][T12919] usb 4-1: config 0 interface 29 has no altsetting 0 [ 730.052242][T12920] usb 6-1: USB disconnect, device number 76 [ 730.135401][T12919] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 730.204467][T12919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.204917][T13748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.228398][T12919] usb 4-1: Product: syz [ 730.238676][T13748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.259902][ T7027] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 730.287518][T12919] usb 4-1: Manufacturer: syz [ 730.308901][T13751] xt_l2tp: invalid flags combination: 8 [ 730.329804][ T7021] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 730.346463][T12919] usb 4-1: SerialNumber: syz [ 730.396350][T12919] usb 4-1: config 0 descriptor?? [ 730.439900][T12342] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 730.487550][ T7021] usb 2-1: device descriptor read/64, error -71 [ 730.768712][ T7021] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 730.863140][T12919] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 730.943644][T13764] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1788'. [ 730.952947][ T7021] usb 2-1: device descriptor read/64, error -71 [ 730.974039][T13764] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 730.990315][T13764] CPU: 1 UID: 0 PID: 13764 Comm: syz.0.1788 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 730.990345][T13764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.990359][T13764] Call Trace: [ 730.990368][T13764] [ 730.990379][T13764] dump_stack_lvl+0x189/0x250 [ 730.990414][T13764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.990442][T13764] ? __pfx__printk+0x10/0x10 [ 730.990475][T13764] ? __rcu_read_unlock+0x84/0xe0 [ 730.990507][T13764] ? kernfs_path_from_node+0x2c/0x260 [ 730.990540][T13764] ? kernfs_path_from_node+0x22c/0x260 [ 730.990569][T13764] ? kernfs_path_from_node+0x2c/0x260 [ 730.990604][T13764] sysfs_warn_dup+0x8e/0xa0 [ 730.990633][T13764] sysfs_do_create_link_sd+0xc0/0x110 [ 730.990667][T13764] device_add_class_symlinks+0x1cf/0x240 [ 730.990700][T13764] device_add+0x475/0xb50 [ 730.990731][T13764] wiphy_register+0x199a/0x26b0 [ 730.990775][T13764] ? __pfx_wiphy_register+0x10/0x10 [ 730.990806][T13764] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 730.990840][T13764] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 730.990883][T13764] ieee80211_register_hw+0x33e1/0x4120 [ 730.990933][T13764] ? ieee80211_register_hw+0x1451/0x4120 [ 730.990973][T13764] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 730.991008][T13764] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 730.991048][T13764] ? __hrtimer_setup+0x187/0x210 [ 730.991072][T13764] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 730.991106][T13764] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 730.991163][T13764] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 730.991189][T13764] ? trace_kmalloc+0x1f/0xd0 [ 730.991211][T13764] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 730.991239][T13764] ? kstrndup+0xbf/0x160 [ 730.991281][T13764] hwsim_new_radio_nl+0xea4/0x1b10 [ 730.991311][T13764] ? __pfx___nla_validate_parse+0x10/0x10 [ 730.991350][T13764] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 730.991390][T13764] ? __nla_parse+0x40/0x60 [ 730.991416][T13764] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 730.991460][T13764] genl_family_rcv_msg_doit+0x215/0x300 [ 730.991502][T13764] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 730.991550][T13764] ? bpf_lsm_capable+0x9/0x20 [ 730.991574][T13764] ? security_capable+0x7e/0x2e0 [ 730.991613][T13764] genl_rcv_msg+0x60e/0x790 [ 730.991653][T13764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.991683][T13764] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 730.991723][T13764] netlink_rcv_skb+0x205/0x470 [ 730.991749][T13764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.991792][T13764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 730.991839][T13764] ? down_read+0x1ad/0x2e0 [ 730.991866][T13764] genl_rcv+0x28/0x40 [ 730.991895][T13764] netlink_unicast+0x758/0x8d0 [ 730.991928][T13764] netlink_sendmsg+0x805/0xb30 [ 730.991962][T13764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.991991][T13764] ? aa_sock_msg_perm+0x94/0x160 [ 730.992025][T13764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 730.992057][T13764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.992085][T13764] __sock_sendmsg+0x219/0x270 [ 730.992140][T13764] ____sys_sendmsg+0x505/0x830 [ 730.992176][T13764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 730.992218][T13764] ? import_iovec+0x74/0xa0 [ 730.992250][T13764] ___sys_sendmsg+0x21f/0x2a0 [ 730.992285][T13764] ? __pfx____sys_sendmsg+0x10/0x10 [ 730.992357][T13764] ? __fget_files+0x2a/0x420 [ 730.992389][T13764] ? __fget_files+0x3a0/0x420 [ 730.992432][T13764] __x64_sys_sendmsg+0x19b/0x260 [ 730.992466][T13764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 730.992510][T13764] ? rcu_is_watching+0x15/0xb0 [ 730.992542][T13764] ? do_syscall_64+0xbe/0x3b0 [ 730.992569][T13764] do_syscall_64+0xfa/0x3b0 [ 730.992588][T13764] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.992622][T13764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.992645][T13764] ? clear_bhb_loop+0x60/0xb0 [ 730.992674][T13764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.992696][T13764] RIP: 0033:0x7f5b81f8e929 [ 730.992718][T13764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.992739][T13764] RSP: 002b:00007f5b82e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.992764][T13764] RAX: ffffffffffffffda RBX: 00007f5b821b6240 RCX: 00007f5b81f8e929 [ 730.992781][T13764] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 730.992804][T13764] RBP: 00007f5b82010b39 R08: 0000000000000000 R09: 0000000000000000 [ 730.992819][T13764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.992833][T13764] R13: 0000000000000000 R14: 00007f5b821b6240 R15: 00007f5b822dfa28 [ 730.992869][T13764] [ 731.059958][ T7021] usb usb2-port1: attempt power cycle [ 731.129592][T12342] usb 3-1: device descriptor read/64, error -71 [ 731.763004][T12342] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 731.951250][T12342] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 731.960082][T12342] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 731.973118][T12342] usb 3-1: config 220 has no interface number 2 [ 731.979670][T12342] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 731.997501][T12342] usb 3-1: config 220 interface 0 has no altsetting 0 [ 732.004426][T12342] usb 3-1: config 220 interface 76 has no altsetting 0 [ 732.013852][T12342] usb 3-1: config 220 interface 1 has no altsetting 0 [ 732.024362][T12342] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 732.033707][T12342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.041792][T12342] usb 3-1: Product: syz [ 732.046060][T12342] usb 3-1: Manufacturer: syz [ 732.051083][ T5906] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 732.058863][T12342] usb 3-1: SerialNumber: syz [ 732.079704][ T7021] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 732.162970][ T7021] usb 2-1: device descriptor read/8, error -71 [ 732.227425][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 732.243161][ T5906] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 732.252454][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.260938][ T5906] usb 6-1: Product: syz [ 732.280282][ T5906] usb 6-1: Manufacturer: syz [ 732.317198][ T5906] usb 6-1: SerialNumber: syz [ 732.322762][T12342] usb 3-1: selecting invalid altsetting 0 [ 732.349113][ T5906] usb 6-1: config 0 descriptor?? [ 732.419706][ T7021] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 732.419983][T12342] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 732.440513][ T7021] usb 2-1: device descriptor read/8, error -71 [ 732.442798][T12342] usb 3-1: No valid video chain found. [ 732.543598][T12342] usb 3-1: selecting invalid altsetting 0 [ 732.564202][ T7021] usb usb2-port1: unable to enumerate USB device [ 732.579695][T12342] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 732.658995][T12342] usb 3-1: USB disconnect, device number 3 [ 732.671504][ T5906] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 732.753730][ T5906] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 732.778089][ T5906] usb 6-1: USB disconnect, device number 77 [ 733.023139][T13739] vhci_hcd: connection reset by peer [ 733.039656][T10612] vhci_hcd: stop threads [ 733.044046][T10612] vhci_hcd: release socket [ 733.099548][T10612] vhci_hcd: disconnect device [ 733.331805][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1793'. [ 733.363289][T12919] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 733.371999][T12919] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 733.511526][T12919] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 733.526995][T12919] usb 4-1: USB disconnect, device number 108 [ 733.541841][T13786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.813195][T13791] netlink: 'syz.3.1794': attribute type 8 has an invalid length. [ 733.832102][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 733.866304][T13791] bridge0: entered allmulticast mode [ 734.350064][T12919] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 734.367493][T13806] loop2: detected capacity change from 0 to 7 [ 734.384511][ T5907] loop2: p1 [ 734.387804][ T5907] loop2: partition table partially beyond EOD, truncated [ 734.422421][ T5907] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 734.447636][T13806] loop2: p1 [ 734.457900][T13806] loop2: partition table partially beyond EOD, truncated [ 734.466598][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1799'. [ 734.472002][T13806] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 734.530158][T12919] usb 4-1: Using ep0 maxpacket: 16 [ 734.555402][T12919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.578100][T12919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 734.604717][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 734.610731][T12919] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 734.657711][T12919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.666259][T12920] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 734.695326][T12919] usb 4-1: config 0 descriptor?? [ 734.723746][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 734.869147][T12920] usb 2-1: config 0 has no interfaces? [ 734.942818][T13821] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.1802'. [ 734.956659][T13821] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 734.967472][T13821] CPU: 1 UID: 0 PID: 13821 Comm: syz.0.1802 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 734.967503][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 734.967519][T13821] Call Trace: [ 734.967529][T13821] [ 734.967539][T13821] dump_stack_lvl+0x189/0x250 [ 734.967577][T13821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.967606][T13821] ? __pfx__printk+0x10/0x10 [ 734.967639][T13821] ? kernfs_path_from_node+0x2c/0x260 [ 734.967704][T13821] ? kernfs_path_from_node+0x2c/0x260 [ 734.967736][T13821] ? kernfs_path_from_node+0x2c/0x260 [ 734.967772][T13821] ? kernfs_path_from_node+0x22c/0x260 [ 734.967803][T13821] ? kernfs_path_from_node+0x2c/0x260 [ 734.967840][T13821] sysfs_warn_dup+0x8e/0xa0 [ 734.967879][T13821] sysfs_do_create_link_sd+0xc0/0x110 [ 734.967916][T13821] device_add_class_symlinks+0x1cf/0x240 [ 734.967951][T13821] device_add+0x475/0xb50 [ 734.967985][T13821] wiphy_register+0x199a/0x26b0 [ 734.968031][T13821] ? __pfx_wiphy_register+0x10/0x10 [ 734.968057][T13821] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 734.968095][T13821] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 734.968131][T13821] ieee80211_register_hw+0x33e1/0x4120 [ 734.968184][T13821] ? ieee80211_register_hw+0x1451/0x4120 [ 734.968227][T13821] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 734.968265][T13821] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 734.968308][T13821] ? __hrtimer_setup+0x187/0x210 [ 734.968334][T13821] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 734.968371][T13821] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 734.968433][T13821] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 734.968460][T13821] ? trace_kmalloc+0x1f/0xd0 [ 734.968484][T13821] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 734.968513][T13821] ? kstrndup+0xbf/0x160 [ 734.968558][T13821] hwsim_new_radio_nl+0xea4/0x1b10 [ 734.968590][T13821] ? __pfx___nla_validate_parse+0x10/0x10 [ 734.968631][T13821] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 734.968681][T13821] ? __nla_parse+0x40/0x60 [ 734.968709][T13821] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 734.968756][T13821] genl_family_rcv_msg_doit+0x215/0x300 [ 734.968802][T13821] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 734.968861][T13821] ? bpf_lsm_capable+0x9/0x20 [ 734.968888][T13821] ? security_capable+0x7e/0x2e0 [ 734.968930][T13821] genl_rcv_msg+0x60e/0x790 [ 734.968974][T13821] ? __pfx_genl_rcv_msg+0x10/0x10 [ 734.969008][T13821] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 734.969053][T13821] netlink_rcv_skb+0x205/0x470 [ 734.969082][T13821] ? __pfx_genl_rcv_msg+0x10/0x10 [ 734.969119][T13821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 734.969166][T13821] ? down_read+0x1ad/0x2e0 [ 734.969195][T13821] genl_rcv+0x28/0x40 [ 734.969226][T13821] netlink_unicast+0x758/0x8d0 [ 734.969264][T13821] netlink_sendmsg+0x805/0xb30 [ 734.969305][T13821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.969338][T13821] ? aa_sock_msg_perm+0x94/0x160 [ 734.969375][T13821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 734.969413][T13821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.969443][T13821] __sock_sendmsg+0x219/0x270 [ 734.969481][T13821] ____sys_sendmsg+0x505/0x830 [ 734.969517][T13821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.969557][T13821] ? import_iovec+0x74/0xa0 [ 734.969587][T13821] ___sys_sendmsg+0x21f/0x2a0 [ 734.969619][T13821] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.969698][T13821] ? __fget_files+0x2a/0x420 [ 734.969729][T13821] ? __fget_files+0x3a0/0x420 [ 734.969791][T13821] __x64_sys_sendmsg+0x19b/0x260 [ 734.969835][T13821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.969893][T13821] ? rcu_is_watching+0x15/0xb0 [ 734.969927][T13821] ? do_syscall_64+0xbe/0x3b0 [ 734.969955][T13821] do_syscall_64+0xfa/0x3b0 [ 734.969977][T13821] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.970012][T13821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.970035][T13821] ? clear_bhb_loop+0x60/0xb0 [ 734.970063][T13821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.970084][T13821] RIP: 0033:0x7f5b81f8e929 [ 734.970106][T13821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.970126][T13821] RSP: 002b:00007f5b82e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.970150][T13821] RAX: ffffffffffffffda RBX: 00007f5b821b6240 RCX: 00007f5b81f8e929 [ 734.970164][T13821] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 734.970177][T13821] RBP: 00007f5b82010b39 R08: 0000000000000000 R09: 0000000000000000 [ 734.970188][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.970200][T13821] R13: 0000000000000000 R14: 00007f5b821b6240 R15: 00007f5b822dfa28 [ 734.970228][T13821] [ 735.697415][T12920] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 735.709546][ T7027] vhci_hcd: vhci_device speed not set [ 735.731516][T12920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.740000][T12920] usb 2-1: Product: syz [ 735.748393][T12920] usb 2-1: Manufacturer: syz [ 735.759395][T13822] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1801'. [ 735.772689][T13822] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 735.783891][T13822] CPU: 0 UID: 0 PID: 13822 Comm: syz.2.1801 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 735.783924][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 735.783939][T13822] Call Trace: [ 735.783950][T13822] [ 735.783960][T13822] dump_stack_lvl+0x189/0x250 [ 735.783998][T13822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.784029][T13822] ? __pfx__printk+0x10/0x10 [ 735.784060][T13822] ? kernfs_path_from_node+0x2c/0x260 [ 735.784087][T13822] ? kernfs_path_from_node+0x2c/0x260 [ 735.784112][T13822] ? kernfs_path_from_node+0x2c/0x260 [ 735.784139][T13822] ? kernfs_path_from_node+0x22c/0x260 [ 735.784163][T13822] ? kernfs_path_from_node+0x2c/0x260 [ 735.784192][T13822] sysfs_warn_dup+0x8e/0xa0 [ 735.784217][T13822] sysfs_do_create_link_sd+0xc0/0x110 [ 735.784244][T13822] device_add_class_symlinks+0x1cf/0x240 [ 735.784272][T13822] device_add+0x475/0xb50 [ 735.784298][T13822] wiphy_register+0x199a/0x26b0 [ 735.784345][T13822] ? __pfx_wiphy_register+0x10/0x10 [ 735.784365][T13822] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 735.784406][T13822] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 735.784431][T13822] ieee80211_register_hw+0x33e1/0x4120 [ 735.784467][T13822] ? ieee80211_register_hw+0x1451/0x4120 [ 735.784497][T13822] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 735.784523][T13822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 735.784554][T13822] ? __hrtimer_setup+0x187/0x210 [ 735.784572][T13822] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 735.784597][T13822] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 735.784648][T13822] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 735.784668][T13822] ? trace_kmalloc+0x1f/0xd0 [ 735.784686][T13822] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 735.784707][T13822] ? kstrndup+0xbf/0x160 [ 735.784740][T13822] hwsim_new_radio_nl+0xea4/0x1b10 [ 735.784763][T13822] ? __pfx___nla_validate_parse+0x10/0x10 [ 735.784792][T13822] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 735.784823][T13822] ? __nla_parse+0x40/0x60 [ 735.784842][T13822] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 735.784876][T13822] genl_family_rcv_msg_doit+0x215/0x300 [ 735.784908][T13822] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 735.784944][T13822] ? bpf_lsm_capable+0x9/0x20 [ 735.784962][T13822] ? security_capable+0x7e/0x2e0 [ 735.784992][T13822] genl_rcv_msg+0x60e/0x790 [ 735.785022][T13822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.785045][T13822] ? ref_tracker_free+0x63a/0x7d0 [ 735.785070][T13822] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 735.785091][T13822] ? __pfx_ref_tracker_free+0x10/0x10 [ 735.785124][T13822] netlink_rcv_skb+0x205/0x470 [ 735.785145][T13822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.785171][T13822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.785205][T13822] ? down_read+0x1ad/0x2e0 [ 735.785224][T13822] genl_rcv+0x28/0x40 [ 735.785247][T13822] netlink_unicast+0x758/0x8d0 [ 735.785274][T13822] netlink_sendmsg+0x805/0xb30 [ 735.785301][T13822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.785325][T13822] ? aa_sock_msg_perm+0x94/0x160 [ 735.785352][T13822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.785378][T13822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.785399][T13822] __sock_sendmsg+0x219/0x270 [ 735.785428][T13822] ____sys_sendmsg+0x505/0x830 [ 735.785454][T13822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.785484][T13822] ? import_iovec+0x74/0xa0 [ 735.785506][T13822] ___sys_sendmsg+0x21f/0x2a0 [ 735.785529][T13822] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.785581][T13822] ? __fget_files+0x2a/0x420 [ 735.785602][T13822] ? __fget_files+0x3a0/0x420 [ 735.785639][T13822] __x64_sys_sendmsg+0x19b/0x260 [ 735.785663][T13822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.785693][T13822] ? rcu_is_watching+0x15/0xb0 [ 735.785717][T13822] ? do_syscall_64+0xbe/0x3b0 [ 735.785737][T13822] do_syscall_64+0xfa/0x3b0 [ 735.785753][T13822] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.785778][T13822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.785794][T13822] ? clear_bhb_loop+0x60/0xb0 [ 735.785814][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.785830][T13822] RIP: 0033:0x7ff10af8e929 [ 735.785846][T13822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.785861][T13822] RSP: 002b:00007ff10bd2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.785880][T13822] RAX: ffffffffffffffda RBX: 00007ff10b1b6240 RCX: 00007ff10af8e929 [ 735.785894][T13822] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 735.785905][T13822] RBP: 00007ff10b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 735.785915][T13822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.785925][T13822] R13: 0000000000000000 R14: 00007ff10b1b6240 R15: 00007ff10b2dfa28 [ 735.785951][T13822] [ 736.265134][T12920] usb 2-1: SerialNumber: syz [ 736.320656][T12920] usb 2-1: config 0 descriptor?? [ 737.194474][T12919] usbhid 4-1:0.0: can't add hid device: -71 [ 737.228648][T12919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 737.323857][T12919] usb 4-1: USB disconnect, device number 109 [ 737.542235][T13828] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 737.548798][T13828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 737.590396][T13828] vhci_hcd vhci_hcd.0: Device attached [ 737.666300][T13829] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 737.683853][ T7027] usb 2-1: USB disconnect, device number 14 [ 737.714951][ T49] vhci_hcd: stop threads [ 737.765433][ T49] vhci_hcd: release socket [ 737.809931][ T49] vhci_hcd: disconnect device [ 737.852903][T12920] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 737.896304][T12920] usb 39-1: enqueue for inactive port 0 [ 737.950531][T12919] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 738.010110][T12920] vhci_hcd: vhci_device speed not set [ 738.161948][ T7021] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 738.316545][T12919] usb 4-1: device descriptor read/64, error -71 [ 738.403200][ T7021] usb 6-1: device descriptor read/64, error -71 [ 738.606418][T12919] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 738.726318][T13860] netlink: 'syz.0.1808': attribute type 7 has an invalid length. [ 738.809662][T12919] usb 4-1: device descriptor read/64, error -71 [ 738.818150][ T7021] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 738.819301][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 738.948205][T12919] usb usb4-port1: attempt power cycle [ 739.010522][ T7021] usb 6-1: device descriptor read/64, error -71 [ 739.119899][ T7021] usb usb6-port1: attempt power cycle [ 739.299559][T12919] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 739.320364][T12919] usb 4-1: device descriptor read/8, error -71 [ 739.469620][ T7021] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 739.559540][T12919] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 739.628353][ T7021] usb 6-1: device descriptor read/8, error -71 [ 739.979739][T12919] usb 4-1: device descriptor read/8, error -71 [ 740.109145][ T7021] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 740.123260][T12919] usb usb4-port1: unable to enumerate USB device [ 740.161105][ T7021] usb 6-1: device descriptor read/8, error -71 [ 740.203647][T13871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1810'. [ 740.213332][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 740.334330][ T7021] usb usb6-port1: unable to enumerate USB device [ 740.479837][T12342] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 740.769632][ T7027] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 740.919588][ T7027] usb 3-1: Using ep0 maxpacket: 16 [ 740.946543][ T7027] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.977670][ T7027] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 741.010495][T12342] usb 2-1: Using ep0 maxpacket: 32 [ 741.028865][T12342] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 741.042065][ T7027] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.051660][ T7027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.069815][ T7027] usb 3-1: Product: syz [ 741.076581][ T7027] usb 3-1: Manufacturer: syz [ 741.083305][T12342] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 741.092919][T12342] usb 2-1: can't read configurations, error -61 [ 741.122722][ T7027] usb 3-1: SerialNumber: syz [ 741.253285][T12342] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 741.358120][ T7027] usb 3-1: 0:2 : does not exist [ 741.369125][ T7027] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 741.396314][ T7027] usb 3-1: USB disconnect, device number 4 [ 741.430169][T12342] usb 2-1: Using ep0 maxpacket: 32 [ 741.437725][T12342] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 741.456059][T12342] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 741.465213][T12342] usb 2-1: can't read configurations, error -61 [ 741.497523][T12342] usb usb2-port1: attempt power cycle [ 741.508597][T13885] netlink: 'syz.5.1814': attribute type 12 has an invalid length. [ 741.534474][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.855656][T13885] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2498598387 (4997196774 ns) > initial count (3467504496 ns). Using initial count to start timer. [ 741.874099][T12342] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 741.913499][T12342] usb 2-1: Using ep0 maxpacket: 32 [ 741.921589][T12342] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 741.941407][T12342] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 741.949063][T12342] usb 2-1: can't read configurations, error -61 [ 742.109923][T12342] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 742.120508][ T7027] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 742.211312][T12342] usb 2-1: Using ep0 maxpacket: 32 [ 742.231798][T12342] usb 2-1: too many configurations: 226, using maximum allowed: 8 [ 742.320590][T12342] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 742.328242][T12342] usb 2-1: can't read configurations, error -61 [ 742.346815][T13894] loop2: detected capacity change from 0 to 7 [ 742.353163][ T7027] usb 1-1: Using ep0 maxpacket: 8 [ 742.357927][T13894] loop2: p1 [ 742.361535][T13894] loop2: partition table partially beyond EOD, truncated [ 742.380913][T13894] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 742.524875][ T7027] usb 1-1: unable to get BOS descriptor or descriptor too short [ 742.533137][T12342] usb usb2-port1: unable to enumerate USB device [ 742.605536][ T7027] usb 1-1: config 245 has too many interfaces: 181, using maximum allowed: 32 [ 742.630471][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 742.656601][ T7027] usb 1-1: config 245 has an invalid descriptor of length 124, skipping remainder of the config [ 742.798808][ T7027] usb 1-1: config 245 has 0 interfaces, different from the descriptor's value: 181 [ 742.918462][ T7027] usb 1-1: New USB device found, idVendor=2019, idProduct=ed18, bcdDevice=ca.21 [ 742.955821][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 743.009517][ T7027] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.105284][ T7027] usb 1-1: Product: syz [ 743.127761][ T7027] usb 1-1: Manufacturer: syz [ 743.204371][ T7027] usb 1-1: SerialNumber: syz [ 743.834094][ T7027] usb 1-1: USB disconnect, device number 115 [ 743.970121][T13906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1821'. [ 744.138426][T13911] ip6tnl1: entered promiscuous mode [ 744.149570][T13910] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 744.156141][T13910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 744.216354][T13910] vhci_hcd vhci_hcd.0: Device attached [ 744.449805][T12342] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 744.560192][ T7027] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 744.654286][ T7021] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 744.666161][T13927] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1826'. [ 744.711052][ T7027] usb 4-1: device descriptor read/64, error -71 [ 744.809653][ T7021] usb 3-1: Using ep0 maxpacket: 16 [ 744.861120][ T7021] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 744.871786][ T7021] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 744.884901][ T7021] usb 3-1: Product: syz [ 744.889362][ T7021] usb 3-1: Manufacturer: syz [ 744.895670][ T7021] usb 3-1: SerialNumber: syz [ 744.906860][ T7021] usb 3-1: config 0 descriptor?? [ 744.990080][ T7027] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 745.189688][ T7027] usb 4-1: device descriptor read/64, error -71 [ 745.363794][ T7027] usb usb4-port1: attempt power cycle [ 745.757816][ T7027] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 745.949917][ T7027] usb 4-1: device descriptor read/8, error -71 [ 746.289563][ T7027] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 746.320820][ T7027] usb 4-1: device descriptor read/8, error -71 [ 746.440761][ T7027] usb usb4-port1: unable to enumerate USB device [ 746.589560][ T5906] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 746.757933][ T5906] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 746.776716][ T5906] usb 2-1: config 0 has no interface number 0 [ 746.803745][ T5906] usb 2-1: config 0 interface 160 has no altsetting 0 [ 746.814705][ T5906] usb 2-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 746.825170][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.835713][ T5906] usb 2-1: Product: syz [ 746.840544][ T5906] usb 2-1: Manufacturer: syz [ 746.938279][ T5906] usb 2-1: SerialNumber: syz [ 747.012882][T13961] netlink: 'syz.5.1834': attribute type 1 has an invalid length. [ 747.052081][ T5906] usb 2-1: config 0 descriptor?? [ 747.091683][ T5906] usb-storage 2-1:0.160: USB Mass Storage device detected [ 747.223616][T13913] vhci_hcd: connection reset by peer [ 747.230285][ T12] vhci_hcd: stop threads [ 747.234658][ T12] vhci_hcd: release socket [ 747.243814][ T12] vhci_hcd: disconnect device [ 747.293925][ T7027] usb 2-1: USB disconnect, device number 19 [ 747.336908][T13961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 747.422168][T13965] bond3: (slave gretap1): making interface the new active one [ 747.430685][T13965] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 747.545708][ T7021] usb 3-1: USB disconnect, device number 5 [ 747.707827][T13978] sctp: [Deprecated]: syz.0.1837 (pid 13978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.707827][T13978] Use struct sctp_sack_info instead [ 747.731868][T13976] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1838'. [ 747.751433][T13976] ip6gretap0: entered promiscuous mode [ 747.765963][T13976] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1838'. [ 748.205514][T13996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1844'. [ 748.299773][ T7021] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 748.357147][T14000] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 748.363710][T14000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 748.405049][T14000] vhci_hcd vhci_hcd.0: Device attached [ 748.451745][ T7021] usb 3-1: device descriptor read/64, error -71 [ 748.616984][T14009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.642560][T12919] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 748.689744][ T7021] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 748.709658][T12918] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 748.754444][T14013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.764228][T14013] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 748.801321][T14015] fuse: Bad value for 'user_id' [ 748.806437][T14015] fuse: Bad value for 'user_id' [ 748.884545][ T7021] usb 3-1: device descriptor read/64, error -71 [ 748.891249][T12918] usb 1-1: device descriptor read/64, error -71 [ 749.113567][ T7021] usb usb3-port1: attempt power cycle [ 749.249618][T12918] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 749.389611][T12918] usb 1-1: device descriptor read/64, error -71 [ 749.459585][ T7021] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 749.495532][ T7021] usb 3-1: device descriptor read/8, error -71 [ 749.520466][T12918] usb usb1-port1: attempt power cycle [ 749.579941][T12342] vhci_hcd: vhci_device speed not set [ 749.749510][ T7021] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 749.790470][ T7021] usb 3-1: device descriptor read/8, error -71 [ 749.869505][T12918] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 749.938880][ T7021] usb usb3-port1: unable to enumerate USB device [ 749.981193][T12918] usb 1-1: device descriptor read/8, error -71 [ 750.563232][T12918] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 750.650532][T12918] usb 1-1: device descriptor read/8, error -71 [ 750.761838][T12918] usb usb1-port1: unable to enumerate USB device [ 751.312217][T14001] vhci_hcd: connection reset by peer [ 751.329550][ T49] vhci_hcd: stop threads [ 751.345668][ T49] vhci_hcd: release socket [ 751.366346][ T49] vhci_hcd: disconnect device [ 751.859150][T12342] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 752.056525][T12342] usb 1-1: Using ep0 maxpacket: 32 [ 752.063905][T12342] usb 1-1: config 0 has an invalid interface number: 174 but max is 0 [ 752.072191][T12342] usb 1-1: config 0 has an invalid interface number: 124 but max is 0 [ 752.080480][T12342] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 752.104092][T12342] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 752.117441][T12342] usb 1-1: config 0 has no interface number 0 [ 752.201526][T14062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 752.213962][T14062] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.1859'. [ 752.225866][T14062] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.1859'. [ 752.235216][T14062] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1859'. [ 752.319550][T12342] usb 1-1: config 0 has no interface number 1 [ 752.325732][T12342] usb 1-1: config 0 interface 174 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 752.403856][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.412490][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.439565][T12342] usb 1-1: config 0 interface 174 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 752.538132][T12342] usb 1-1: config 0 interface 174 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 752.568047][T12342] usb 1-1: config 0 interface 174 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 752.610506][T12342] usb 1-1: too many endpoints for config 0 interface 124 altsetting 41: 195, using maximum allowed: 30 [ 752.634687][T12342] usb 1-1: config 0 interface 124 altsetting 41 has 2 endpoint descriptors, different from the interface descriptor's value: 195 [ 752.677392][T12342] usb 1-1: config 0 interface 124 has no altsetting 0 [ 752.745722][T12342] usb 1-1: New USB device found, idVendor=2040, idProduct=c600, bcdDevice=cf.85 [ 752.889609][T12342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.962584][T12342] usb 1-1: config 0 descriptor?? [ 752.968457][T14047] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.978482][T14047] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.220476][T12342] usb 1-1: string descriptor 0 read error: -71 [ 753.289143][T12342] usb 1-1: USB disconnect, device number 120 [ 753.554778][T14072] loop2: detected capacity change from 0 to 7 [ 753.565339][T14072] loop2: p1 [ 753.568569][T14072] loop2: partition table partially beyond EOD, truncated [ 753.607049][T14072] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 753.729551][T12919] vhci_hcd: vhci_device speed not set [ 753.738356][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 753.849069][T14080] CUSE: DEVNAME unspecified [ 753.901622][T14078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 753.908217][T14078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 753.922439][T14078] vhci_hcd vhci_hcd.0: Device attached [ 754.219829][T12918] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 754.227368][ T7021] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 754.512125][ T7021] usb 3-1: device descriptor read/64, error -71 [ 754.532186][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 754.545030][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 754.553096][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 754.561253][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 754.569193][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 754.749934][ T7021] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 754.944393][ T7021] usb 3-1: device descriptor read/64, error -71 [ 755.099128][ T7021] usb usb3-port1: attempt power cycle [ 755.227937][T14095] kernel profiling enabled (shift: 17) [ 755.246826][T14095] netlink: 'syz.5.1867': attribute type 10 has an invalid length. [ 755.279609][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1867'. [ 755.469550][ T7021] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 755.493343][ T7021] usb 3-1: device descriptor read/8, error -71 [ 755.506429][T14095] bridge0: port 1(dummy0) entered blocking state [ 755.572893][T14095] bridge0: port 1(dummy0) entered disabled state [ 755.612091][T14095] dummy0: entered allmulticast mode [ 755.645709][T14095] dummy0: entered promiscuous mode [ 755.672133][T14095] bridge0: port 1(dummy0) entered blocking state [ 755.678582][T14095] bridge0: port 1(dummy0) entered forwarding state [ 755.733759][T14091] chnl_net:caif_netlink_parms(): no params data found [ 755.741125][ T7021] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 755.772656][ T7021] usb 3-1: device descriptor read/8, error -71 [ 755.856353][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 755.856371][ T30] audit: type=1800 audit(1752032962.560:3287): pid=14102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1869" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 755.935459][ T7021] usb usb3-port1: unable to enumerate USB device [ 756.169565][T12917] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 756.364466][T12917] usb 1-1: config 0 has too many interfaces: 62, using maximum allowed: 32 [ 756.377160][T12917] usb 1-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 756.402834][T12917] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 62 [ 756.427277][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.442319][T14091] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.476874][T14091] bridge_slave_0: entered allmulticast mode [ 756.526159][T12917] usb 1-1: string descriptor 0 read error: -22 [ 756.532950][T12917] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=e5.5d [ 756.550858][T12917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.577573][T14091] bridge_slave_0: entered promiscuous mode [ 756.592268][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.604485][T14091] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.612611][T14091] bridge_slave_1: entered allmulticast mode [ 756.623290][ T5168] Bluetooth: hci2: command tx timeout [ 756.630943][T12917] usb 1-1: config 0 descriptor?? [ 756.655033][T14091] bridge_slave_1: entered promiscuous mode [ 756.785433][T14091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.806837][T14091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.903725][T14081] vhci_hcd: connection reset by peer [ 756.913694][T10612] vhci_hcd: stop threads [ 756.919593][T10612] vhci_hcd: release socket [ 756.935951][T10612] vhci_hcd: disconnect device [ 757.054062][T14091] team0: Port device team_slave_0 added [ 757.135520][T14091] team0: Port device team_slave_1 added [ 757.149294][T14113] netlink: 'syz.5.1872': attribute type 2 has an invalid length. [ 757.404621][T14113] U±Û: entered promiscuous mode [ 757.663392][T14128] loop2: detected capacity change from 0 to 7 [ 757.681270][T14128] loop2: p1 [ 757.684580][T14128] loop2: partition table partially beyond EOD, truncated [ 757.697086][T14128] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 757.706353][T14091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.717952][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.743915][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.891574][T14091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.914524][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 757.992707][T14091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.070600][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.097476][T14091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.117020][T14126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.133707][T14126] syz.3.1874 (14126) used greatest stack depth: 19272 bytes left [ 758.650917][T14091] hsr_slave_0: entered promiscuous mode [ 758.671201][T14091] hsr_slave_1: entered promiscuous mode [ 758.677529][T14091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.699740][ T5168] Bluetooth: hci2: command tx timeout [ 758.719364][T14091] Cannot create hsr debugfs directory [ 758.829867][T12342] usb 1-1: USB disconnect, device number 121 [ 759.410924][T12918] vhci_hcd: vhci_device speed not set [ 759.776393][T14091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 759.806166][T14091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 759.850381][T14091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 759.900515][T14091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 760.078446][T12342] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 760.097520][T14145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 760.102208][T14091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.122523][T14145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 760.147623][T14091] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.163109][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.170333][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.189861][T14145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 760.197259][T14145] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 760.208518][T14145] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 760.279722][T12342] usb 6-1: device descriptor read/64, error -71 [ 760.439093][T14145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 760.451100][T14145] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 760.462045][T10614] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.469195][T10614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.547324][T12342] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 760.571933][T14145] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 760.712743][T12342] usb 6-1: device descriptor read/64, error -71 [ 760.825078][T14091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.835272][T12342] usb usb6-port1: attempt power cycle [ 760.849574][ T5906] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 760.929376][T14091] veth0_vlan: entered promiscuous mode [ 761.090374][T14091] veth1_vlan: entered promiscuous mode [ 761.096824][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 761.201276][T12342] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 761.216519][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 761.333546][T12342] usb 6-1: device descriptor read/8, error -71 [ 761.388471][T14091] veth0_macvtap: entered promiscuous mode [ 761.424447][T14091] veth1_macvtap: entered promiscuous mode [ 761.442695][ T5906] usb 1-1: config 1 has too many interfaces: 70, using maximum allowed: 32 [ 761.459996][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 70 [ 761.479636][ T5906] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 761.571318][T14091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.584884][ T5906] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 761.594172][T14091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.599783][T12342] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 761.844629][T14091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.866405][T14091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.875634][ T5906] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 1024 [ 761.875666][ T5906] usb 1-1: config 1 interface 0 has no altsetting 0 [ 761.890826][T12342] usb 6-1: device descriptor read/8, error -71 [ 761.903253][T14091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.903466][ T5906] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 761.921863][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.930042][T14091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.939962][ T5906] usb 1-1: Product: syz [ 761.945338][ T5906] usb 1-1: Manufacturer: syz [ 762.024407][ T5906] usb 1-1: SerialNumber: syz [ 762.069452][ T5168] Bluetooth: hci0: command 0x0406 tx timeout [ 762.119287][T12342] usb usb6-port1: unable to enumerate USB device [ 762.140029][ T5168] Bluetooth: hci1: command 0x0406 tx timeout [ 762.171123][T14160] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 762.190906][T14160] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 762.223654][ T5168] Bluetooth: hci5: command 0x0405 tx timeout [ 762.229782][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 762.459957][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 762.708073][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.723851][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.836905][T10614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.853949][T10614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.111625][T14171] loop2: detected capacity change from 0 to 7 [ 763.175707][T14171] loop2: p1 [ 763.182101][T14171] loop2: partition table partially beyond EOD, truncated [ 763.200177][T14171] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 763.418724][ T7284] udevd[7284]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 763.500347][ T43] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 763.662244][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 763.677272][ T43] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 763.731300][T14180] netlink: 'syz.5.1885': attribute type 1 has an invalid length. [ 763.809577][ T43] usb 4-1: config 0 has no interface number 0 [ 763.873235][T12918] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 763.889851][ T43] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.920145][ T43] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.994123][T14180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.079518][T12918] usb 2-1: Using ep0 maxpacket: 16 [ 764.082972][ T43] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 764.117488][T12918] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 764.126643][T12918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.147476][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.176592][ T43] usb 4-1: config 0 descriptor?? [ 764.193596][T12918] usb 2-1: Product: syz [ 764.218092][T12918] usb 2-1: Manufacturer: syz [ 764.246454][T12918] usb 2-1: SerialNumber: syz [ 764.300311][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 764.549880][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 764.567486][T12918] usb 2-1: config 0 descriptor?? [ 764.638951][T12918] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 764.832888][T12918] gspca_sn9c2028: read1 error -32 [ 764.884172][ T5906] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 764.915311][ T7021] usb 4-1: USB disconnect, device number 118 [ 764.954335][ T5906] usb 1-1: USB disconnect, device number 122 [ 766.219713][T12918] gspca_sn9c2028: read1 error -110 [ 766.233220][T12918] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -110 [ 766.631236][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 766.849560][ T5906] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 766.924705][T14198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.969632][ T30] audit: type=1326 audit(1752032973.620:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 767.010721][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 767.133743][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 767.145966][ T5906] usb 1-1: config 7 has an invalid interface number: 48 but max is 0 [ 767.158979][ T5906] usb 1-1: config 7 has an invalid descriptor of length 47, skipping remainder of the config [ 767.172871][ T30] audit: type=1326 audit(1752032973.620:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 767.200267][ T5906] usb 1-1: config 7 has no interface number 0 [ 767.215074][ T5906] usb 1-1: config 7 interface 48 has no altsetting 0 [ 767.227774][T14190] syz.1.1861 (14190): drop_caches: 2 [ 767.243026][ T5906] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 767.253218][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.265543][ T5906] usb 1-1: Product: syz [ 767.276713][ T5906] usb 1-1: Manufacturer: syz [ 767.287509][ T30] audit: type=1326 audit(1752032973.620:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 767.324727][ T5906] usb 1-1: SerialNumber: syz [ 767.420517][ T30] audit: type=1326 audit(1752032973.630:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 767.453433][ T30] audit: type=1326 audit(1752032973.630:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 767.566448][ T43] usb 2-1: USB disconnect, device number 20 [ 767.594326][ T30] audit: type=1326 audit(1752032973.630:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 767.622997][T14188] fuse: Unknown parameter 'ÿÿ0x0000000000000007' [ 767.664636][T14205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 767.678114][T14205] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.1888'. [ 767.687946][T14205] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.1888'. [ 767.697225][T14205] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1888'. [ 767.821490][ T30] audit: type=1326 audit(1752032973.630:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 767.845540][ T30] audit: type=1326 audit(1752032973.630:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 767.877028][T14209] IPVS: set_ctl: invalid protocol: 98 100.1.1.2:20003 [ 767.902783][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 767.972373][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 768.024793][ T30] audit: type=1326 audit(1752032973.630:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 768.115105][ T30] audit: type=1326 audit(1752032973.630:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14194 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 768.249647][T14213] loop2: detected capacity change from 0 to 7 [ 768.353899][T14213] loop2: p1 [ 768.363944][T14213] loop2: partition table partially beyond EOD, truncated [ 768.387122][T14213] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 768.542678][ T7284] udevd[7284]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 768.663086][ T5906] cdc_phonet 1-1:7.48: probe with driver cdc_phonet failed with error -22 [ 768.699665][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 768.719387][ T5906] usb 1-1: USB disconnect, device number 123 [ 768.912844][T14218] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1893'. [ 768.925791][T14218] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 768.936713][T14218] CPU: 0 UID: 0 PID: 14218 Comm: syz.2.1893 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 768.936745][T14218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 768.936760][T14218] Call Trace: [ 768.936769][T14218] [ 768.936780][T14218] dump_stack_lvl+0x189/0x250 [ 768.936817][T14218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.936848][T14218] ? __pfx__printk+0x10/0x10 [ 768.936882][T14218] ? kernfs_path_from_node+0x2c/0x260 [ 768.936917][T14218] ? kernfs_path_from_node+0x2c/0x260 [ 768.936949][T14218] ? kernfs_path_from_node+0x2c/0x260 [ 768.936985][T14218] ? kernfs_path_from_node+0x22c/0x260 [ 768.937018][T14218] ? kernfs_path_from_node+0x2c/0x260 [ 768.937056][T14218] sysfs_warn_dup+0x8e/0xa0 [ 768.937088][T14218] sysfs_do_create_link_sd+0xc0/0x110 [ 768.937125][T14218] device_add_class_symlinks+0x1cf/0x240 [ 768.937161][T14218] device_add+0x475/0xb50 [ 768.937196][T14218] wiphy_register+0x199a/0x26b0 [ 768.937255][T14218] ? __pfx_wiphy_register+0x10/0x10 [ 768.937282][T14218] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 768.937321][T14218] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 768.937359][T14218] ieee80211_register_hw+0x33e1/0x4120 [ 768.937413][T14218] ? ieee80211_register_hw+0x1451/0x4120 [ 768.937457][T14218] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 768.937496][T14218] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 768.937541][T14218] ? __hrtimer_setup+0x187/0x210 [ 768.937568][T14218] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 768.937605][T14218] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 768.937670][T14218] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 768.937699][T14218] ? trace_kmalloc+0x1f/0xd0 [ 768.937724][T14218] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 768.937754][T14218] ? kstrndup+0xbf/0x160 [ 768.937801][T14218] hwsim_new_radio_nl+0xea4/0x1b10 [ 768.937834][T14218] ? __pfx___nla_validate_parse+0x10/0x10 [ 768.937877][T14218] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 768.937921][T14218] ? __nla_parse+0x40/0x60 [ 768.937950][T14218] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 768.937999][T14218] genl_family_rcv_msg_doit+0x215/0x300 [ 768.938045][T14218] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 768.938098][T14218] ? bpf_lsm_capable+0x9/0x20 [ 768.938126][T14218] ? security_capable+0x7e/0x2e0 [ 768.938169][T14218] genl_rcv_msg+0x60e/0x790 [ 768.938213][T14218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.938254][T14218] ? ref_tracker_free+0x63a/0x7d0 [ 768.938289][T14218] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 768.938320][T14218] ? __pfx_ref_tracker_free+0x10/0x10 [ 768.938371][T14218] netlink_rcv_skb+0x205/0x470 [ 768.938402][T14218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.938440][T14218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 768.938489][T14218] ? down_read+0x1ad/0x2e0 [ 768.938518][T14218] genl_rcv+0x28/0x40 [ 768.938551][T14218] netlink_unicast+0x758/0x8d0 [ 768.938590][T14218] netlink_sendmsg+0x805/0xb30 [ 768.938632][T14218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.938667][T14218] ? aa_sock_msg_perm+0x94/0x160 [ 768.938705][T14218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 768.938741][T14218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.938772][T14218] __sock_sendmsg+0x219/0x270 [ 768.938814][T14218] ____sys_sendmsg+0x505/0x830 [ 768.938853][T14218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.938896][T14218] ? import_iovec+0x74/0xa0 [ 768.938929][T14218] ___sys_sendmsg+0x21f/0x2a0 [ 768.938964][T14218] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.939040][T14218] ? __fget_files+0x2a/0x420 [ 768.939069][T14218] ? __fget_files+0x3a0/0x420 [ 768.939114][T14218] __x64_sys_sendmsg+0x19b/0x260 [ 768.939147][T14218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.939187][T14218] ? rcu_is_watching+0x15/0xb0 [ 768.939213][T14218] ? do_syscall_64+0xbe/0x3b0 [ 768.939241][T14218] do_syscall_64+0xfa/0x3b0 [ 768.939258][T14218] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.939285][T14218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.939304][T14218] ? clear_bhb_loop+0x60/0xb0 [ 768.939326][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.939344][T14218] RIP: 0033:0x7ff10af8e929 [ 768.939361][T14218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.939377][T14218] RSP: 002b:00007ff10bd4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.939404][T14218] RAX: ffffffffffffffda RBX: 00007ff10b1b6160 RCX: 00007ff10af8e929 [ 768.939421][T14218] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 768.939436][T14218] RBP: 00007ff10b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 768.939450][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.939464][T14218] R13: 0000000000000000 R14: 00007ff10b1b6160 R15: 00007ff10b2dfa28 [ 768.939511][T14218] [ 770.204353][T14236] netlink: 'syz.1.1898': attribute type 1 has an invalid length. [ 770.779921][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 771.318721][T14250] loop2: detected capacity change from 0 to 7 [ 771.362002][T14250] loop2: p1 [ 771.365371][T14250] loop2: partition table partially beyond EOD, truncated [ 771.375628][T14250] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 772.269576][T12918] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 772.651571][T12918] usb 6-1: Using ep0 maxpacket: 16 [ 773.580963][T12918] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 773.640557][T12918] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 773.840348][T12918] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.864232][T14272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.876214][T14272] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.1905'. [ 773.885785][T14272] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.1905'. [ 773.895060][T14272] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1905'. [ 773.972134][T12918] usb 6-1: config 1 interface 0 has no altsetting 0 [ 774.081578][T12918] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 774.112208][T12918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.126663][T12918] usb 6-1: Product: syz [ 774.146236][T12918] usb 6-1: Manufacturer: syz [ 774.226740][T12918] usb 6-1: SerialNumber: syz [ 774.529755][T12918] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 774.620626][T12918] usb 6-1: USB disconnect, device number 86 [ 774.655197][T12918] usblp0: removed [ 775.476640][T14283] netlink: 'syz.1.1909': attribute type 12 has an invalid length. [ 775.698986][T14287] loop2: detected capacity change from 0 to 7 [ 775.743419][T14287] loop2: [ 775.773365][T14287] loop2: partition table partially beyond EOD, truncated [ 776.198061][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 776.198080][ T30] audit: type=1326 audit(1752032982.900:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 776.319003][T14291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1912'. [ 776.389983][ T30] audit: type=1326 audit(1752032982.900:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 776.519589][ T30] audit: type=1326 audit(1752032982.910:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 776.525093][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1912'. [ 776.969547][ T30] audit: type=1326 audit(1752032982.910:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 777.078084][ T30] audit: type=1326 audit(1752032982.910:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 777.216937][ T30] audit: type=1326 audit(1752032982.910:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 777.369838][T14303] netlink: 'syz.0.1914': attribute type 10 has an invalid length. [ 777.404286][ T30] audit: type=1326 audit(1752032982.910:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 777.487725][T14305] loop2: detected capacity change from 0 to 7 [ 777.519726][ T30] audit: type=1326 audit(1752032982.910:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 777.558900][ T30] audit: type=1326 audit(1752032982.910:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 777.559611][T14305] loop2: p1 [ 777.582983][ T30] audit: type=1326 audit(1752032982.920:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaa38e929 code=0x7ffc0000 [ 777.639624][T14305] loop2: partition table partially beyond EOD, truncated [ 777.779794][T14305] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 777.868363][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 778.179802][ T7028] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 778.513641][ T7028] usb 1-1: Using ep0 maxpacket: 16 [ 778.548945][ T7028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.579449][ T7028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.599815][ T7028] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 778.623519][ T7028] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 778.660720][ T7028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.672556][ T7028] usb 1-1: config 0 descriptor?? [ 779.032155][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1919'. [ 779.110180][T14325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1920'. [ 779.743265][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 779.756670][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 779.917742][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 779.989827][T14334] loop2: detected capacity change from 0 to 7 [ 779.999851][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.020936][T14334] loop2: [ 780.023939][T14334] loop2: partition table partially beyond EOD, truncated [ 780.035598][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.055846][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.085242][ T5218] loop2: [ 780.088452][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.106601][ T5218] loop2: partition table partially beyond EOD, truncated [ 780.153036][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.155412][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'. [ 780.184970][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.222267][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.340161][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.360984][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.383500][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.460062][T12918] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 780.487269][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.520049][ T7028] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 780.577414][ T7028] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 780.606487][ T7028] microsoft 0003:045E:07DA.001D: no inputs found [ 780.615558][T14343] netlink: 'syz.1.1925': attribute type 12 has an invalid length. [ 780.637045][T12918] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 780.653262][ T7028] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 780.676198][T12918] usb 4-1: config 0 has no interface number 0 [ 780.696093][T12918] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 780.740828][T12918] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 780.770416][T12918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.771948][T14343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2498598387 (4997196774 ns) > initial count (3467504496 ns). Using initial count to start timer. [ 780.821854][T12918] usb 4-1: Product: syz [ 780.854828][T12918] usb 4-1: Manufacturer: syz [ 780.882762][T12918] usb 4-1: SerialNumber: syz [ 780.924474][T12918] usb 4-1: config 0 descriptor?? [ 780.942364][T12918] ljca 4-1:0.84: bulk endpoints not found [ 781.076090][T14348] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 781.082767][T14348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 781.123423][T14348] vhci_hcd vhci_hcd.0: Device attached [ 781.509837][ T7028] vhci_hcd: vhci_device speed not set [ 781.548025][T14357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.572299][ T7028] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 781.604907][T14360] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 781.616856][T14360] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 781.625302][T14360] CPU: 0 UID: 0 PID: 14360 Comm: syz.2.1927 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 781.637516][T14360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 781.647683][T14360] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 781.653098][T14360] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 6d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 8a 4f 3e f8 85 [ 781.672744][T14360] RSP: 0018:ffffc90003cd7070 EFLAGS: 00010206 [ 781.678863][T14360] RAX: ffffffff8981da93 RBX: 00000000000001a8 RCX: 0000000000080000 [ 781.686872][T14360] RDX: ffffc90011260000 RSI: 0000000000000335 RDI: 0000000000000336 [ 781.694881][T14360] RBP: dffffc0000000000 R08: ffff88802f089e00 R09: 0000000000000002 [ 781.702880][T14360] R10: 00000000ffffffff R11: ffffffff8981da70 R12: dffffc0000000000 [ 781.710863][T14360] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88806aea0000 [ 781.718845][T14360] FS: 00007ff10bd2e6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 781.727790][T14360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.734400][T14360] CR2: 0000001b3150aff8 CR3: 0000000079da6000 CR4: 00000000003526f0 [ 781.742399][T14360] Call Trace: [ 781.745698][T14360] [ 781.748643][T14360] qdisc_tree_reduce_backlog+0x299/0x480 [ 781.754324][T14360] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 781.760078][T14360] fq_codel_change+0xa96/0xef0 [ 781.764887][T14360] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 781.770460][T14360] ? __pfx_fq_codel_change+0x10/0x10 [ 781.775765][T14360] ? __sock_sendmsg+0x219/0x270 [ 781.780649][T14360] fq_codel_init+0x355/0x960 [ 781.785259][T14360] ? lockdep_rtnl_is_held+0x26/0x40 [ 781.790481][T14360] ? __pfx_fq_codel_init+0x10/0x10 [ 781.795624][T14360] qdisc_create+0x7a9/0xea0 [ 781.800147][T14360] tc_modify_qdisc+0x1426/0x2010 [ 781.805097][T14360] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 781.810398][T14360] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 781.815687][T14360] rtnetlink_rcv_msg+0x77c/0xb70 [ 781.820634][T14360] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 781.825756][T14360] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 781.831228][T14360] ? ref_tracker_free+0x63a/0x7d0 [ 781.836283][T14360] ? __copy_skb_header+0xa7/0x550 [ 781.841343][T14360] ? __pfx_ref_tracker_free+0x10/0x10 [ 781.846737][T14360] netlink_rcv_skb+0x205/0x470 [ 781.851522][T14360] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 781.857002][T14360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 781.862314][T14360] ? netlink_deliver_tap+0x2e/0x1b0 [ 781.867530][T14360] ? netlink_deliver_tap+0x2e/0x1b0 [ 781.872740][T14360] netlink_unicast+0x758/0x8d0 [ 781.877517][T14360] netlink_sendmsg+0x805/0xb30 [ 781.882313][T14360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.887611][T14360] ? aa_sock_msg_perm+0x94/0x160 [ 781.892570][T14360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 781.897880][T14360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.903183][T14360] __sock_sendmsg+0x219/0x270 [ 781.907891][T14360] ____sys_sendmsg+0x505/0x830 [ 781.912684][T14360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.917998][T14360] ? import_iovec+0x74/0xa0 [ 781.922520][T14360] ___sys_sendmsg+0x21f/0x2a0 [ 781.927219][T14360] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.932467][T14360] ? __fget_files+0x2a/0x420 [ 781.937079][T14360] ? __fget_files+0x3a0/0x420 [ 781.941783][T14360] __x64_sys_sendmsg+0x19b/0x260 [ 781.946740][T14360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.952224][T14360] ? rcu_is_watching+0x15/0xb0 [ 781.957011][T14360] ? do_syscall_64+0xbe/0x3b0 [ 781.961705][T14360] do_syscall_64+0xfa/0x3b0 [ 781.966224][T14360] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.971452][T14360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.977530][T14360] ? clear_bhb_loop+0x60/0xb0 [ 781.982219][T14360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.988123][T14360] RIP: 0033:0x7ff10af8e929 [ 781.992549][T14360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.012169][T14360] RSP: 002b:00007ff10bd2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.020596][T14360] RAX: ffffffffffffffda RBX: 00007ff10b1b6240 RCX: 00007ff10af8e929 [ 782.028577][T14360] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 782.036557][T14360] RBP: 00007ff10b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 782.044536][T14360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.052517][T14360] R13: 0000000000000000 R14: 00007ff10b1b6240 R15: 00007ff10b2dfa28 [ 782.060523][T14360] [ 782.063563][T14360] Modules linked in: [ 782.067621][T14360] ---[ end trace 0000000000000000 ]--- [ 782.073155][T14360] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 782.078577][T14360] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 6d 4b 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 8a 4f 3e f8 85 [ 782.098228][T14360] RSP: 0018:ffffc90003cd7070 EFLAGS: 00010206 [ 782.104316][T14360] RAX: ffffffff8981da93 RBX: 00000000000001a8 RCX: 0000000000080000 [ 782.112308][T14360] RDX: ffffc90011260000 RSI: 0000000000000335 RDI: 0000000000000336 [ 782.120298][T14360] RBP: dffffc0000000000 R08: ffff88802f089e00 R09: 0000000000000002 [ 782.128266][T14360] R10: 00000000ffffffff R11: ffffffff8981da70 R12: dffffc0000000000 [ 782.136257][T14360] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88806aea0000 [ 782.144252][T14360] FS: 00007ff10bd2e6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 782.153204][T14360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.159811][T14360] CR2: 0000001b3150aff8 CR3: 0000000079da6000 CR4: 00000000003526f0 [ 782.167793][T14360] Kernel panic - not syncing: Fatal exception in interrupt [ 782.175452][T14360] Kernel Offset: disabled [ 782.179783][T14360] Rebooting in 86400 seconds..