last executing test programs: 14.473430433s ago: executing program 4 (id=299): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x80000001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) r5 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8947, &(0x7f0000000580)={'bond0\x00', 0x6}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x1000000, r4, {0x7, 0x0, 0x0, {0x0, 0x0, 0x52, 0x800000000000000, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0xa000}}}, 0x78) 12.963828018s ago: executing program 4 (id=307): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 12.667491172s ago: executing program 4 (id=310): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x1, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0xf6, {{0x6, 0x24, 0x6, 0x0, 0x0, "c8"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7f, 0x0, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x5, 0x5}, @obex={0x5, 0x24, 0x15, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x4, 0xb}, @mdlm_detail={0x4, 0x24, 0x13, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0xf5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x1, 0x4}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x1, 0xb3, 0x8, 0x2a}, 0x81, &(0x7f00000001c0)={0x5, 0xf, 0x81, 0x1, [@generic={0x7c, 0x10, 0x2, "3d9df7c1cef49d1a56119b8c3a6a729c19a6ed95cae6eb466d25e7d50676b59412d346ca0e859a13aa546403a659611877c1d7b3d7655a2513f2c7e757efa61eb2cfe674788f09e429173cfe975067f2ae819b59e58eae3ee9e6fdc828dfddb99658a8062e2c617b51da0d88058c746678a9ede768cc13a08e"}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2846}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x407}}, {0x74, &(0x7f0000000640)=@string={0x74, 0x3, "59460866ccee7a265e31d098942c3b2e4ac7be0274b84bdfe09237022aa8943460d17b6b765302e1b8c9ef0dd3032ef5666bd1a1dc198afd01861c4ce1cf9836e5387a342988efa79d333e53462f83fc1d80a8f238ca767f9fd51c5dd92cce38fe76983c89f7e503b8c5b3f9c1828ab4e5a3"}}]}) sched_setaffinity(r3, 0x0, 0x0) pipe2$9p(0x0, 0x80800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x3}], 0x1, 0x0, 0x0) pread64(r5, &(0x7f0000000480)=""/209, 0xd1, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 8.902723715s ago: executing program 2 (id=321): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200), &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'tgr160\x00'}}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, &(0x7f0000000200)) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x1, 0x7, 0x0, {0x7f, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x70ce, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044821}, 0x8d0) syz_open_dev$loop(&(0x7f0000000140), 0x10000, 0x2a82) getpid() 8.789200159s ago: executing program 1 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303"], 0x30}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 8.151302255s ago: executing program 1 (id=323): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xac, 0x9, 0x1}, 0x9c) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x40ead000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0xf88e7fdfa350489b, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000914b2d7a5f518cdd000008000300", @ANYRES32=r6], 0x38}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="03000000000000000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 7.68489891s ago: executing program 4 (id=325): close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 7.451594214s ago: executing program 0 (id=327): openat$kvm(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x2400, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x62}, {0x0, 0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x100000000003}, {0x7e3}, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40002}, 0x0) 7.30693242s ago: executing program 0 (id=328): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0xa00000000000000) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 6.54048247s ago: executing program 4 (id=329): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x69, 0x3, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x700, 0x8000, 0x6, 0x3602ec0}}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x50}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) creat(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041200"], 0xb) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, &(0x7f0000000000)=""/50, 0x32, &(0x7f0000000100)={&(0x7f0000000080)={'sha384\x00'}}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x21001) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd4, 0x1a, 0x7, 0x40, 0x525, 0xa4a0, 0x4f5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x55, 0x0, 0x1, 0x2a, 0xbc, 0xcb, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x20, 0x8, 0xc, 0x9}}]}}]}}]}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = syz_usb_connect$uac1(0x4, 0xf7, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x3, 0x70, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@mixer_unit={0x9, 0x24, 0x4, 0x4, 0x1, "80687636"}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x3, 0xf, "d84c2856b7"}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x0, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x5, 0x2, 0xd}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x2, 0x2, 0x40}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x4, "f42fc05777"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x9, 0x81, "2656b48b49e85d"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x6, 0x7, "71fbe0"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0xa, 0x3, "80a31bee1a92"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc5, 0x80, 0x6, {0x7, 0x25, 0x1, 0x1, 0x5, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x40}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x800, 0x8, 0xb, "63aec2"}, @as_header={0x7, 0x24, 0x1, 0xfd, 0x3, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x2, 0x4, "", 'e-'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x40, 0xf9, {0x7, 0x25, 0x1, 0x80, 0xf3, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x8, 0x80, 0xff, 0x5}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x2, &(0x7f0000000300)=@string={0x2}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000780)={0x14, &(0x7f00000005c0)={0x40, 0xc, 0x6f, {0x6f, 0x11, "80626b27aa48eeb599309140298058fb1a6f32b65fe4fb700c32db9116fb4b8b7b44574190bc240bf22d9a3d55c06c06abce9b0abd7fadd4514c153a5b17beb4fd1f6a1109eb68a60476fa3d3f8f31fd40c82c2534cac145a26ec442b0f27d36d59dba450ec4e4dc5589255a1b"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x0, 0x30, 0xb, "09f6071d30c48456aecf44"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000880)={0x20, 0x81, 0x1, "aa"}, &(0x7f00000008c0)={0x20, 0x82, 0x1, "97"}, &(0x7f0000000900)={0x20, 0x83, 0x1, '1'}, &(0x7f0000000940)={0x20, 0x84, 0x4, "b091d864"}, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r6, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) 5.77727451s ago: executing program 0 (id=332): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0x1}]) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r8, 0x0) r9 = socket(0x9, 0x2, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r9, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@RTM_NEWNSID={0x34, 0x58, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x34}}, 0x4000) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) 5.645779517s ago: executing program 3 (id=333): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x174, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x148, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x130, 0x1, [@m_mirred={0x12c, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x1, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}]}, {0x9e, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d3"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.588548016s ago: executing program 3 (id=334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011"], 0x60}}, 0x0) 5.51033543s ago: executing program 3 (id=335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xa, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x5f}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x2}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4008800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) socket(0xa, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000540), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x10, 0x148, 0x34324142, 0x4, 0xfffefffe, 0x0, 0x5, 0x10, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) socket$kcm(0xa, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x3, @loopback}, 0x10) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80000001}]}, 0x3c}}, 0x0) 4.92716496s ago: executing program 1 (id=336): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4098, 0x1002) keyctl$read(0xb, r2, &(0x7f0000000200)=""/97, 0x61) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0xdb, 0x3dac572f, 0x1, 0x3, 0x7ff, 0x3, 0x80, 0x6, 0x3, 0x3, 0x1, 0x1, 0x7, 0x2, 0x4, 0x4, {0x7, 0xffff92a3}, 0x7, 0x7}}) 4.825075723s ago: executing program 2 (id=337): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000440)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000647f215f4557e01c504e629500080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x20008880}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000000c0)={0x0, 0x6d92}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) r9 = fcntl$getown(r4, 0x9) sched_setattr(r9, &(0x7f0000000400)={0x38, 0x0, 0x10000028, 0xa, 0xfffffff7, 0x20000000000006, 0x2, 0x5, 0x1, 0xe}, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') syz_usb_control_io$uac1(r8, 0x0, 0x0) 4.627678041s ago: executing program 0 (id=338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000100001042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b020000773f9ac81800128008000100707070000c00028008000100ef"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000844) (fail_nth: 6) 4.587376628s ago: executing program 1 (id=339): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)=ANY=[]) 3.741274981s ago: executing program 1 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) (fail_nth: 8) 3.303463826s ago: executing program 0 (id=341): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30de1cee2fc8", 0x6}, {&(0x7f0000001840)="3011f0fb8b9aefc9a650fc6ee3c6edd29472412f437a8ad2386411644928cf4d70fc110d3672d68552c9", 0x2a}], 0x2, 0x0, 0x0, 0x24008000}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/57, 0x39}], 0x2}, 0x6}], 0x1, 0x28144, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r3, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) 3.207849581s ago: executing program 1 (id=342): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x1, @local}], 0x10) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000140), 0x0, 0x20008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0xc8}}, 0x40095) close(r3) syz_open_dev$video(0x0, 0x7ff000, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000240)={0x16, 0x4, 0xea}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000437000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000436000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r8 = syz_usb_connect(0x5, 0x2d, &(0x7f0000001400)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES32=r0, @ANYRESOCT=r7, @ANYRES32, @ANYRESDEC=r1, @ANYRES8=r5, @ANYRESHEX], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, &(0x7f0000001300)) openat$zero(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000000280)={0xf, {"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", 0x1000}}, 0x1006) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x10, 0x101000) 3.122723498s ago: executing program 0 (id=343): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x20000) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000000c0)=']){%%)^&!+)\x00', &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030000000000000000000001"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r10 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC, @ANYBLOB="00d7a4748ab4690bec6924691b1c5e248ce19360893b3d48d20a8b1d9dd80e26d3d37eaf5cf30b4fc1d9", @ANYBLOB="d9f27f5891fa640b31db0f20afae3864ec115afac304d6bdd9ff322d12f364300b62b20067e2c44dba9fbb98b09e464de84e2e9bf1b993994dea24be2d1b3e3902fe6519fc3d24d4b1d23d4d9b6b55893d73d14230fc18b81d4134956eaa85b88435ff2496c20c51ae895de915ff142e8c16cb5563834fb85998b3c9b5c6a8778788238a5bd11234ea1217533bb2bfb3dbe3d28487d39d49ef55754635075d1f7f43d0de1f604016b7b6a21c75119db4325fb2e16e288c44695d57bf91612bb8dc9b05175605e2f3a0130d2e9336740ca47aa78eaf773bc0b3214fc059687884", @ANYRES8=r1, @ANYRES64=r1], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000000)="0f437d633dcc", 0x6}, {0x0}], 0x2) close(r9) 3.035161969s ago: executing program 3 (id=344): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) syz_io_uring_setup(0x4279, &(0x7f0000000240)={0x0, 0x5ff8, 0x8000, 0x1, 0x275}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3b7, &(0x7f0000000340)={0x0, 0xcbe, 0x100, 0x1, 0x376}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x2, 0x1000, 0x1, {0x0, r4}}) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, &(0x7f0000002900)="9e", 0x1, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0x100, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "180cf300"}}) shmdt(r6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) capget(0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x4}]}}}]}, 0x40}}, 0x0) 2.914861542s ago: executing program 4 (id=345): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000000fc0)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x2, 0x4000000) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f746865"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={0x0, r3}, 0x18) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xde38d000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r5 = socket(0x22, 0x4, 0x22) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000680)={0x2, 0x5, 0x3, 0xffa1, 0x5, 0x0, [{0x80000000, 0x9, 0xffffffff, '\x00', 0x488}, {0x7ba7, 0xa, 0x7, '\x00', 0x2}, {0x0, 0xfffffffffffffff7, 0x2, '\x00', 0x108}, {0x9, 0x4, 0x401, '\x00', 0x180}, {0x8000000000000001, 0x1, 0x5, '\x00', 0x204}]}) bind$can_raw(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 457.117177ms ago: executing program 3 (id=346): r0 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002440)=@multiplanar_overlay={0x1, 0x9, 0x4, 0x10000, 0x8, {}, {0x1, 0x1, 0xc6, 0x5, 0x66, 0xd2, "df31255c"}, 0x8000, 0x3, {&(0x7f00000001c0)=[{0x8000, 0x6, {0xbf}, 0x3}, {0xfffffffe, 0x3, {0x1ce}, 0x580}]}, 0x3, 0x2000000}) 382.042345ms ago: executing program 2 (id=347): lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0) 218.107898ms ago: executing program 2 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000"], 0x30}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 64.831689ms ago: executing program 3 (id=349): syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) r0 = epoll_create1(0x80000) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r5 = syz_open_pts(r4, 0x42) r6 = dup3(r5, r4, 0x0) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f00000000c0)={0x2}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000060000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xa) r7 = userfaultfd(0x801) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0xf) r8 = open(0x0, 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r8, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x10c8) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r9, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}, {0x0, 0xe0ff}], 0x2) 63.199787ms ago: executing program 2 (id=350): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c"], 0x4c}}, 0x0) 0s ago: executing program 2 (id=351): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=@delchain={0x18c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x160, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x148, 0x1, [@m_mirred={0x144, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x1, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}]}, {0xb8, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 67.494384][ T5851] cgroup: Unknown subsys name 'net' [ 67.651019][ T5851] cgroup: Unknown subsys name 'cpuset' [ 67.659365][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.076686][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.368849][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.375383][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.086182][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.101741][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.110015][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.117918][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.127313][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.136049][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.144161][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.151999][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.160112][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.168449][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.176197][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.186223][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.188929][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.198276][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.200813][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.216289][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.226096][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.226215][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.236348][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.249576][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.257244][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.273302][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.276047][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.288421][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.320833][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.921609][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 73.945540][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 74.053025][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 74.186712][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 74.224693][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 74.343741][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.351536][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.359352][ T5881] bridge_slave_0: entered allmulticast mode [ 74.368069][ T5881] bridge_slave_0: entered promiscuous mode [ 74.392502][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.399775][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.407373][ T5884] bridge_slave_0: entered allmulticast mode [ 74.414306][ T5884] bridge_slave_0: entered promiscuous mode [ 74.448548][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.456101][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.463389][ T5881] bridge_slave_1: entered allmulticast mode [ 74.470687][ T5881] bridge_slave_1: entered promiscuous mode [ 74.482562][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.490061][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.497826][ T5882] bridge_slave_0: entered allmulticast mode [ 74.504871][ T5882] bridge_slave_0: entered promiscuous mode [ 74.512552][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.520159][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.527515][ T5884] bridge_slave_1: entered allmulticast mode [ 74.534435][ T5884] bridge_slave_1: entered promiscuous mode [ 74.581092][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.588512][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.595776][ T5882] bridge_slave_1: entered allmulticast mode [ 74.603154][ T5882] bridge_slave_1: entered promiscuous mode [ 74.657413][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.665084][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.672336][ T5883] bridge_slave_0: entered allmulticast mode [ 74.679736][ T5883] bridge_slave_0: entered promiscuous mode [ 74.702565][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.728173][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.740940][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.763453][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.770916][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.778602][ T5883] bridge_slave_1: entered allmulticast mode [ 74.786504][ T5883] bridge_slave_1: entered promiscuous mode [ 74.807881][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.817140][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.824317][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.831652][ T5885] bridge_slave_0: entered allmulticast mode [ 74.839902][ T5885] bridge_slave_0: entered promiscuous mode [ 74.873783][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.897837][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.904993][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.912525][ T5885] bridge_slave_1: entered allmulticast mode [ 74.920186][ T5885] bridge_slave_1: entered promiscuous mode [ 74.928557][ T5881] team0: Port device team_slave_0 added [ 74.963385][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.011623][ T5881] team0: Port device team_slave_1 added [ 75.020507][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.033214][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.058642][ T5884] team0: Port device team_slave_0 added [ 75.066777][ T5882] team0: Port device team_slave_0 added [ 75.075704][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.108265][ T5882] team0: Port device team_slave_1 added [ 75.116878][ T5884] team0: Port device team_slave_1 added [ 75.125011][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.214672][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.224117][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.250994][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.264411][ T5883] team0: Port device team_slave_0 added [ 75.273575][ T5883] team0: Port device team_slave_1 added [ 75.286089][ T5864] Bluetooth: hci3: command tx timeout [ 75.295254][ T5864] Bluetooth: hci1: command tx timeout [ 75.310482][ T5885] team0: Port device team_slave_0 added [ 75.317568][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.324505][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.350845][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.365884][ T5864] Bluetooth: hci4: command tx timeout [ 75.366096][ T50] Bluetooth: hci2: command tx timeout [ 75.377512][ T5867] Bluetooth: hci0: command tx timeout [ 75.388820][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.395849][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.421909][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.433927][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.441325][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.467407][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.480723][ T5885] team0: Port device team_slave_1 added [ 75.506674][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.513635][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.540474][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.552269][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.559265][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.585257][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.626862][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.633831][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.659812][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.672212][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.679573][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.705532][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.718492][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.725547][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.751475][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.792562][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.799635][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.826082][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.901513][ T5881] hsr_slave_0: entered promiscuous mode [ 75.909502][ T5881] hsr_slave_1: entered promiscuous mode [ 76.002384][ T5882] hsr_slave_0: entered promiscuous mode [ 76.009282][ T5882] hsr_slave_1: entered promiscuous mode [ 76.015533][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 76.021337][ T5882] Cannot create hsr debugfs directory [ 76.047387][ T5884] hsr_slave_0: entered promiscuous mode [ 76.053615][ T5884] hsr_slave_1: entered promiscuous mode [ 76.059928][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 76.066040][ T5884] Cannot create hsr debugfs directory [ 76.104373][ T5883] hsr_slave_0: entered promiscuous mode [ 76.110817][ T5883] hsr_slave_1: entered promiscuous mode [ 76.117623][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 76.123361][ T5883] Cannot create hsr debugfs directory [ 76.179205][ T5885] hsr_slave_0: entered promiscuous mode [ 76.185760][ T5885] hsr_slave_1: entered promiscuous mode [ 76.191830][ T5885] debugfs: 'hsr0' already exists in 'hsr' [ 76.197718][ T5885] Cannot create hsr debugfs directory [ 76.747363][ T5882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.768265][ T5882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.780705][ T5882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.801676][ T5882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.855871][ T5881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.872536][ T5881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.894125][ T5881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.921765][ T5881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.990818][ T5884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.007575][ T5884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.023713][ T5884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.064649][ T5884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.159348][ T5883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.172886][ T5883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.185532][ T5883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.196186][ T5883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.258862][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.364727][ T5885] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.375924][ T5867] Bluetooth: hci1: command tx timeout [ 77.375976][ T50] Bluetooth: hci3: command tx timeout [ 77.391395][ T5885] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.417446][ T5885] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.438042][ T5885] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.445690][ T50] Bluetooth: hci0: command tx timeout [ 77.445990][ T5867] Bluetooth: hci2: command tx timeout [ 77.458309][ T50] Bluetooth: hci4: command tx timeout [ 77.472288][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.484346][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.498022][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.538539][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.566949][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.574222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.600223][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.607346][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.619871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.626992][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.664068][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.671244][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.687090][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.730281][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.737413][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.777013][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.784120][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.860570][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.932567][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.968044][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.009985][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.017158][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.030594][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.037711][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.053825][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.084865][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.121354][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.178070][ T5882] veth0_vlan: entered promiscuous mode [ 78.203462][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.233294][ T5882] veth1_vlan: entered promiscuous mode [ 78.250562][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.257692][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.267735][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.274863][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.299405][ T5884] veth0_vlan: entered promiscuous mode [ 78.357347][ T5884] veth1_vlan: entered promiscuous mode [ 78.363892][ T5881] veth0_vlan: entered promiscuous mode [ 78.409911][ T5881] veth1_vlan: entered promiscuous mode [ 78.444216][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.452400][ T5882] veth0_macvtap: entered promiscuous mode [ 78.481111][ T5882] veth1_macvtap: entered promiscuous mode [ 78.508449][ T5884] veth0_macvtap: entered promiscuous mode [ 78.526251][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.554232][ T5881] veth0_macvtap: entered promiscuous mode [ 78.567861][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.584066][ T5881] veth1_macvtap: entered promiscuous mode [ 78.604549][ T5884] veth1_macvtap: entered promiscuous mode [ 78.621449][ T1119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.631067][ T1119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.659775][ T1119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.668611][ T1119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.682471][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.717885][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.728379][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.743223][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.762686][ T5883] veth0_vlan: entered promiscuous mode [ 78.782041][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.803862][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.868711][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.880535][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.908284][ T5883] veth1_vlan: entered promiscuous mode [ 78.918364][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.928057][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.966732][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.977068][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.002897][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.012637][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.023656][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.101728][ T5883] veth0_macvtap: entered promiscuous mode [ 79.120868][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.133587][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.139932][ T5883] veth1_macvtap: entered promiscuous mode [ 79.178419][ T5885] veth0_vlan: entered promiscuous mode [ 79.237379][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.251123][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.252359][ T5882] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.282799][ T5885] veth1_vlan: entered promiscuous mode [ 79.304006][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.311700][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.324225][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.382234][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.387985][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.411431][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.452762][ T50] Bluetooth: hci3: command tx timeout [ 79.458396][ T50] Bluetooth: hci1: command tx timeout [ 79.473485][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.528024][ T5867] Bluetooth: hci2: command tx timeout [ 79.533484][ T5867] Bluetooth: hci4: command tx timeout [ 79.535450][ T50] Bluetooth: hci0: command tx timeout [ 79.548305][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.575727][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.593566][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.611182][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.636835][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.655086][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.677919][ T5885] veth0_macvtap: entered promiscuous mode [ 79.729120][ T5885] veth1_macvtap: entered promiscuous mode [ 79.838016][ T5968] FAULT_INJECTION: forcing a failure. [ 79.838016][ T5968] name failslab, interval 1, probability 0, space 0, times 1 [ 79.875380][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(full) [ 79.875404][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.875420][ T5968] Call Trace: [ 79.875427][ T5968] [ 79.875434][ T5968] dump_stack_lvl+0x189/0x250 [ 79.875462][ T5968] ? __pfx____ratelimit+0x10/0x10 [ 79.875484][ T5968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.875503][ T5968] ? __pfx__printk+0x10/0x10 [ 79.875526][ T5968] ? __lock_acquire+0xab9/0xd20 [ 79.875558][ T5968] should_fail_ex+0x414/0x560 [ 79.875590][ T5968] should_failslab+0xa8/0x100 [ 79.875614][ T5968] kmem_cache_alloc_noprof+0x73/0x3c0 [ 79.875634][ T5968] ? skb_clone+0x212/0x3a0 [ 79.875657][ T5968] skb_clone+0x212/0x3a0 [ 79.875679][ T5968] __netlink_deliver_tap+0x404/0x850 [ 79.875714][ T5968] ? netlink_deliver_tap+0x2e/0x1b0 [ 79.875738][ T5968] netlink_deliver_tap+0x19c/0x1b0 [ 79.875761][ T5968] netlink_unicast+0x7fa/0x9e0 [ 79.875791][ T5968] ? __pfx_netlink_unicast+0x10/0x10 [ 79.875814][ T5968] ? netlink_sendmsg+0x642/0xb30 [ 79.875834][ T5968] ? skb_put+0x11b/0x210 [ 79.875854][ T5968] netlink_sendmsg+0x805/0xb30 [ 79.875885][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.875911][ T5968] ? aa_sock_msg_perm+0xf1/0x1d0 [ 79.875929][ T5968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 79.875946][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.875969][ T5968] __sock_sendmsg+0x21c/0x270 [ 79.875992][ T5968] ____sys_sendmsg+0x505/0x830 [ 79.876016][ T5968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.876044][ T5968] ? import_iovec+0x74/0xa0 [ 79.876067][ T5968] ___sys_sendmsg+0x21f/0x2a0 [ 79.876087][ T5968] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.876144][ T5968] ? __fget_files+0x2a/0x420 [ 79.876164][ T5968] ? __fget_files+0x3a0/0x420 [ 79.876197][ T5968] __x64_sys_sendmsg+0x19b/0x260 [ 79.876218][ T5968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 79.876246][ T5968] ? __pfx_ksys_write+0x10/0x10 [ 79.876264][ T5968] ? rcu_is_watching+0x15/0xb0 [ 79.876286][ T5968] ? do_syscall_64+0xbe/0x3b0 [ 79.876312][ T5968] do_syscall_64+0xfa/0x3b0 [ 79.876331][ T5968] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.876352][ T5968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.876368][ T5968] ? clear_bhb_loop+0x60/0xb0 [ 79.876388][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.876403][ T5968] RIP: 0033:0x7f1dfc78ebe9 [ 79.876424][ T5968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.876437][ T5968] RSP: 002b:00007f1dfa9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.876455][ T5968] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78ebe9 [ 79.876467][ T5968] RDX: 0000000020000844 RSI: 00002000000002c0 RDI: 0000000000000003 [ 79.876478][ T5968] RBP: 00007f1dfa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 79.876488][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.876498][ T5968] R13: 00007f1dfc9b6038 R14: 00007f1dfc9b5fa0 R15: 00007f1dfcadfa28 [ 79.876527][ T5968] [ 79.890234][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.009651][ T5970] Zero length message leads to an empty skb [ 80.029116][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.295043][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.309648][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.390139][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.400690][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.447585][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.457408][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.484599][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.496296][ T5870] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.540720][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.865740][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 80.884376][ T5870] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 80.917556][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.977774][ T5870] usb 5-1: config 0 descriptor?? [ 81.014238][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.026744][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.222239][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.230466][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.261299][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'. [ 81.271678][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.285920][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.387346][ T5870] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 81.486103][ T5870] asix 5-1:0.0: probe with driver asix failed with error -71 [ 81.526326][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.555350][ T50] Bluetooth: hci1: command tx timeout [ 81.560800][ T50] Bluetooth: hci3: command tx timeout [ 81.589955][ T5870] usb 5-1: USB disconnect, device number 2 [ 81.605341][ T50] Bluetooth: hci0: command tx timeout [ 81.615392][ T50] Bluetooth: hci4: command tx timeout [ 81.620821][ T5867] Bluetooth: hci2: command tx timeout [ 81.625666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 81.727212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.736505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.934967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.944101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.055336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.136035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 82.239310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.344878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.570925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.642912][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14'. [ 82.773427][ T6013] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13'. [ 82.799449][ T6012] netlink: 'syz.1.16': attribute type 10 has an invalid length. [ 83.028907][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.369342][ T6012] team0 (unregistering): Port device team_slave_0 removed [ 83.379311][ T6012] team0 (unregistering): Port device team_slave_1 removed [ 83.423356][ T6016] bond_slave_0: entered promiscuous mode [ 83.429269][ T6016] bond_slave_1: entered promiscuous mode [ 83.493465][ T6016] vlan2: entered promiscuous mode [ 83.511723][ T6016] bond0: entered promiscuous mode [ 84.002290][ T6024] kvm: pic: level sensitive irq not supported [ 84.002568][ T6024] kvm: pic: non byte read [ 84.177955][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.204767][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 84.701978][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 85.017438][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 85.315067][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.473593][ T5992] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.566715][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.566745][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.566768][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 85.566779][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.593515][ T10] usb 4-1: config 0 descriptor?? [ 85.689640][ T5992] usb 1-1: Using ep0 maxpacket: 32 [ 85.711418][ T5992] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024 [ 85.767690][ T5992] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.823938][ T5992] usb 1-1: config 1 interface 0 has no altsetting 0 [ 85.894145][ T30] audit: type=1326 audit(1756333446.038:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ba38ebe9 code=0x7ffc0000 [ 85.991655][ T30] audit: type=1326 audit(1756333446.038:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ba38ebe9 code=0x7ffc0000 [ 85.992687][ T5992] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.025842][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.034796][ T5992] usb 1-1: Product: ⡆ [ 86.047238][ T5992] usb 1-1: SerialNumber: Ї [ 86.109513][ T6051] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 86.180425][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 86.228956][ T30] audit: type=1326 audit(1756333446.058:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f13ba38ebe9 code=0x7ffc0000 [ 87.172303][ T24] cfg80211: failed to load regulatory.db [ 87.348773][ T30] audit: type=1326 audit(1756333446.058:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ba38ebe9 code=0x7ffc0000 [ 87.370724][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.437737][ T6072] nvme_fabrics: missing parameter 'transport=%s' [ 87.444509][ T6072] nvme_fabrics: missing parameter 'nqn=%s' [ 87.445835][ T30] audit: type=1326 audit(1756333446.058:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ba38ebe9 code=0x7ffc0000 [ 87.472233][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.483460][ T30] audit: type=1326 audit(1756333446.068:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13ba38e7eb code=0x7ffc0000 [ 87.505294][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.665175][ T5945] IPVS: starting estimator thread 0... [ 87.808986][ T6076] IPVS: using max 28 ests per chain, 67200 per kthread [ 87.833574][ T30] audit: type=1326 audit(1756333446.068:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13ba38e7eb code=0x7ffc0000 [ 87.855401][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.904310][ T6080] bond_slave_0: entered promiscuous mode [ 87.910173][ T6080] bond_slave_1: entered promiscuous mode [ 87.920231][ T30] audit: type=1326 audit(1756333446.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f13ba3c14a5 code=0x7ffc0000 [ 87.951223][ T6080] vlan2: entered promiscuous mode [ 87.957768][ T6080] bond0: entered promiscuous mode [ 88.062857][ T30] audit: type=1326 audit(1756333446.278:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ba38ebe9 code=0x7ffc0000 [ 88.084941][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.120029][ T30] audit: type=1326 audit(1756333446.278:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ba38ebe9 code=0x7ffc0000 [ 89.352509][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 89.375314][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 89.392747][ T10] usb 4-1: USB disconnect, device number 2 [ 89.733393][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 90.064083][ T5992] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 90.163942][ T5992] usb 1-1: USB disconnect, device number 2 [ 90.252093][ T5955] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.415219][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 90.443715][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 90.465315][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 90.505197][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.552403][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 90.615318][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 90.629393][ T5955] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 90.639918][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.655307][ T5955] usb 2-1: Product: syz [ 90.659500][ T5955] usb 2-1: Manufacturer: syz [ 90.667837][ T5955] usb 2-1: SerialNumber: syz [ 90.717794][ T5955] usb 2-1: config 0 descriptor?? [ 90.775939][ T5955] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 90.843184][ T6148] process 'syz.2.40' launched './file1' with NULL argv: empty string added [ 91.202944][ T5955] usb 2-1: USB disconnect, device number 2 [ 91.376886][ T6154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'. [ 92.556022][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.663951][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.49'. [ 92.725369][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 92.776278][ T10] usb 3-1: config 0 has an invalid interface number: 138 but max is 3 [ 92.776502][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 92.784472][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.784493][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 92.784511][ T10] usb 3-1: config 0 has no interface number 0 [ 92.822366][ T10] usb 3-1: config 0 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 92.836508][ T10] usb 3-1: config 0 interface 138 has no altsetting 0 [ 92.843332][ T10] usb 3-1: New USB device found, idVendor=12d1, idProduct=ba08, bcdDevice=7a.73 [ 92.852422][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.899966][ T10] usb 3-1: config 0 descriptor?? [ 93.505970][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.524925][ T10] usb 3-1: string descriptor 0 read error: -71 [ 93.562071][ T10] option 3-1:0.138: GSM modem (1-port) converter detected [ 93.665674][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 93.674978][ T10] usb 3-1: USB disconnect, device number 2 [ 93.678078][ T54] usb 4-1: config 0 has an invalid interface number: 137 but max is 0 [ 93.697423][ T10] option 3-1:0.138: device disconnected [ 93.743263][ T54] usb 4-1: config 0 has no interface number 0 [ 93.902716][ T54] usb 4-1: New USB device found, idVendor=049f, idProduct=8511, bcdDevice=2a.e6 [ 93.945189][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.980930][ T54] usb 4-1: Product: syz [ 93.990102][ T54] usb 4-1: Manufacturer: syz [ 93.994738][ T54] usb 4-1: SerialNumber: syz [ 94.026536][ T54] usb 4-1: config 0 descriptor?? [ 94.496861][ T6206] FAULT_INJECTION: forcing a failure. [ 94.496861][ T6206] name failslab, interval 1, probability 0, space 0, times 0 [ 94.550305][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) [ 94.550330][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.550340][ T6206] Call Trace: [ 94.550348][ T6206] [ 94.550356][ T6206] dump_stack_lvl+0x189/0x250 [ 94.550380][ T6206] ? __pfx____ratelimit+0x10/0x10 [ 94.550400][ T6206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.550412][ T6206] ? __pfx__printk+0x10/0x10 [ 94.550427][ T6206] ? __pfx___might_resched+0x10/0x10 [ 94.550436][ T6206] ? fs_reclaim_acquire+0x7d/0x100 [ 94.550454][ T6206] should_fail_ex+0x414/0x560 [ 94.550479][ T6206] should_failslab+0xa8/0x100 [ 94.550503][ T6206] __kmalloc_noprof+0xcb/0x4f0 [ 94.550523][ T6206] ? __vb2_queue_alloc+0x29d/0x15a0 [ 94.550549][ T6206] __vb2_queue_alloc+0x29d/0x15a0 [ 94.550575][ T6206] vb2_core_create_bufs+0x765/0xde0 [ 94.550589][ T6206] ? __lock_acquire+0xab9/0xd20 [ 94.550610][ T6206] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 94.550639][ T6206] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 94.550667][ T6206] vb2_create_bufs+0x5b9/0xae0 [ 94.550695][ T6206] ? __pfx_vb2_create_bufs+0x10/0x10 [ 94.550711][ T6206] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 94.550728][ T6206] vb2_ioctl_create_bufs+0x285/0x3f0 [ 94.550745][ T6206] v4l_create_bufs+0x193/0x2a0 [ 94.550764][ T6206] __video_do_ioctl+0xc9b/0xdb0 [ 94.550791][ T6206] ? __pfx___video_do_ioctl+0x10/0x10 [ 94.550822][ T6206] video_usercopy+0x86e/0x14f0 [ 94.550848][ T6206] ? __pfx___video_do_ioctl+0x10/0x10 [ 94.550858][ T6206] ? __pfx_video_usercopy+0x10/0x10 [ 94.550878][ T6206] ? __fget_files+0x2a/0x420 [ 94.550894][ T6206] ? __fget_files+0x2a/0x420 [ 94.550908][ T6206] ? __fget_files+0x3a0/0x420 [ 94.550933][ T6206] v4l2_ioctl+0x18d/0x1e0 [ 94.550951][ T6206] ? __pfx_v4l2_ioctl+0x10/0x10 [ 94.550966][ T6206] __se_sys_ioctl+0xf9/0x170 [ 94.550989][ T6206] do_syscall_64+0xfa/0x3b0 [ 94.551005][ T6206] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.551017][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.551027][ T6206] ? clear_bhb_loop+0x60/0xb0 [ 94.551038][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.551047][ T6206] RIP: 0033:0x7f0b44d8ebe9 [ 94.551058][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.551070][ T6206] RSP: 002b:00007f0b45b44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.551089][ T6206] RAX: ffffffffffffffda RBX: 00007f0b44fb5fa0 RCX: 00007f0b44d8ebe9 [ 94.551100][ T6206] RDX: 0000200000000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 94.551111][ T6206] RBP: 00007f0b45b44090 R08: 0000000000000000 R09: 0000000000000000 [ 94.551121][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.551131][ T6206] R13: 00007f0b44fb6038 R14: 00007f0b44fb5fa0 R15: 00007f0b450dfa28 [ 94.551152][ T6206] [ 95.520887][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'. [ 95.535842][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.544139][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.901876][ T6224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.053423][ T6232] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 96.095387][ T5992] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.262487][ T5992] usb 3-1: Using ep0 maxpacket: 32 [ 96.307756][ T6241] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 96.343268][ T6241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.72'. [ 96.558607][ T54] pegasus 4-1:0.137: probe with driver pegasus failed with error -71 [ 96.636139][ T54] usb 4-1: USB disconnect, device number 3 [ 98.573484][ T5992] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.593299][ T5992] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 98.632600][ T5992] usb 3-1: can't read configurations, error -71 [ 98.740466][ T6270] fuse: Unknown parameter 'group_00000000000000000000' [ 99.167743][ T6279] netlink: 'syz.2.83': attribute type 5 has an invalid length. [ 99.227053][ T6279] netlink: 'syz.2.83': attribute type 7 has an invalid length. [ 99.270273][ T6279] : entered promiscuous mode [ 100.280298][ T6295] netlink: 76 bytes leftover after parsing attributes in process `syz.0.89'. [ 100.374745][ T6297] capability: warning: `syz.2.90' uses deprecated v2 capabilities in a way that may be insecure [ 101.124656][ T6326] netlink: 408 bytes leftover after parsing attributes in process `syz.1.96'. [ 101.203360][ T6331] syz.1.96 uses obsolete (PF_INET,SOCK_PACKET) [ 101.256520][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 101.475239][ T54] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.557993][ T5865] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.651271][ T6343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.684317][ T6343] netlink: 'syz.4.103': attribute type 12 has an invalid length. [ 101.689629][ T54] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.724928][ T54] usb 1-1: config 1 interface 0 has no altsetting 0 [ 101.738425][ T54] usb 1-1: New USB device found, idVendor=0eef, idProduct=a001, bcdDevice= 0.40 [ 101.750052][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.755510][ T6343] netlink: 'syz.4.103': attribute type 29 has an invalid length. [ 101.776526][ T54] usb 1-1: Product: syz [ 101.779037][ T6343] netlink: 148 bytes leftover after parsing attributes in process `syz.4.103'. [ 101.813218][ T5865] usb 2-1: no configurations [ 101.830938][ T5865] usb 2-1: can't read configurations, error -22 [ 101.848400][ T6343] netlink: 'syz.4.103': attribute type 2 has an invalid length. [ 101.850252][ T54] usb 1-1: Manufacturer: ⱈ㇚跠㻜늂缾펹髝ࣳ钗莦炑겧掝⥉蔤߰촨먨᪄穸㙕坯㝆⌢댰⑸ଡ଼ [ 101.868529][ T6343] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 101.883802][ T54] usb 1-1: SerialNumber: syz [ 101.911599][ T6343] netlink: 11 bytes leftover after parsing attributes in process `syz.4.103'. [ 102.013058][ T5865] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.237547][ T5865] usb 2-1: no configurations [ 102.242340][ T5865] usb 2-1: can't read configurations, error -22 [ 102.299115][ T5865] usb usb2-port1: attempt power cycle [ 102.585265][ T5945] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.680000][ T6363] geneve2: entered promiscuous mode [ 102.685318][ T6363] geneve2: entered allmulticast mode [ 102.717630][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.775325][ T5955] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.790018][ T5865] usb 2-1: no configurations [ 102.796310][ T5865] usb 2-1: can't read configurations, error -22 [ 102.845191][ T54] usbhid 1-1:1.0: can't add hid device: -71 [ 102.854262][ T54] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 102.865252][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 102.909827][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.924888][ T54] usb 1-1: USB disconnect, device number 3 [ 102.945253][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 102.947772][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.950529][ T5865] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.004915][ T5955] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 103.020755][ T5955] usb 4-1: config 0 has no interface number 0 [ 103.038678][ T5945] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 103.045736][ T5955] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 103.071648][ T5955] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=c6.c2 [ 103.098265][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.101463][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.108290][ T5865] usb 2-1: no configurations [ 103.142197][ T5865] usb 2-1: can't read configurations, error -22 [ 103.163763][ T5955] usb 4-1: config 0 descriptor?? [ 103.175625][ T5865] usb usb2-port1: unable to enumerate USB device [ 103.242567][ T5945] usb 3-1: config 0 descriptor?? [ 103.244317][ T6368] FAULT_INJECTION: forcing a failure. [ 103.244317][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 103.285313][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(full) [ 103.285336][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.285345][ T6368] Call Trace: [ 103.285352][ T6368] [ 103.285360][ T6368] dump_stack_lvl+0x189/0x250 [ 103.285384][ T6368] ? __pfx____ratelimit+0x10/0x10 [ 103.285405][ T6368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.285423][ T6368] ? __pfx__printk+0x10/0x10 [ 103.285448][ T6368] ? __pfx___might_resched+0x10/0x10 [ 103.285468][ T6368] should_fail_ex+0x414/0x560 [ 103.285494][ T6368] should_failslab+0xa8/0x100 [ 103.285518][ T6368] __kmalloc_node_noprof+0xd1/0x4e0 [ 103.285538][ T6368] ? crypto_create_tfm_node+0x83/0x3f0 [ 103.285561][ T6368] crypto_create_tfm_node+0x83/0x3f0 [ 103.285581][ T6368] crypto_alloc_tfm_node+0x172/0x3f0 [ 103.285605][ T6368] __keyctl_dh_compute+0x490/0xca0 [ 103.285626][ T6368] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 103.285639][ T6368] ? __lock_acquire+0xab9/0xd20 [ 103.285664][ T6368] ? __might_fault+0xb0/0x130 [ 103.285696][ T6368] keyctl_dh_compute+0x109/0x160 [ 103.285711][ T6368] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 103.285736][ T6368] __se_sys_keyctl+0x423/0x910 [ 103.285753][ T6368] ? __pfx___se_sys_keyctl+0x10/0x10 [ 103.285771][ T6368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.285793][ T6368] ? __fget_files+0x3a0/0x420 [ 103.285815][ T6368] ? fput+0xa0/0xd0 [ 103.285828][ T6368] ? ksys_write+0x22a/0x250 [ 103.285847][ T6368] ? __pfx_ksys_write+0x10/0x10 [ 103.285859][ T6368] ? rcu_is_watching+0x15/0xb0 [ 103.285877][ T6368] ? do_syscall_64+0xbe/0x3b0 [ 103.285893][ T6368] ? __x64_sys_keyctl+0x20/0xc0 [ 103.285911][ T6368] do_syscall_64+0xfa/0x3b0 [ 103.285927][ T6368] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.285944][ T6368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.285957][ T6368] ? clear_bhb_loop+0x60/0xb0 [ 103.285973][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.285984][ T6368] RIP: 0033:0x7fbefe18ebe9 [ 103.285997][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.286007][ T6368] RSP: 002b:00007fbefef61038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 103.286022][ T6368] RAX: ffffffffffffffda RBX: 00007fbefe3b5fa0 RCX: 00007fbefe18ebe9 [ 103.286031][ T6368] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 103.286039][ T6368] RBP: 00007fbefef61090 R08: 0000200000000180 R09: 0000000000000000 [ 103.286048][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.286055][ T6368] R13: 00007fbefe3b6038 R14: 00007fbefe3b5fa0 R15: 00007fbefe4dfa28 [ 103.286076][ T6368] [ 103.289701][ T5945] pxrc 3-1:0.0: Could not find endpoint [ 103.998019][ T5945] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 104.031050][ T5945] usb 3-1: USB disconnect, device number 5 [ 104.605750][ T5955] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.818618][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 104.949493][ T5955] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 104.960469][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.973704][ T5955] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 104.984111][ T5955] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 105.034117][ T5955] usb 1-1: Manufacturer: syz [ 105.072405][ T5955] usb 1-1: config 0 descriptor?? [ 105.405425][ T5955] rc_core: IR keymap rc-hauppauge not found [ 105.413266][ T5955] Registered IR keymap rc-empty [ 105.421481][ T5955] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 105.449327][ T5955] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 105.615437][ T5865] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.797179][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 105.834222][ T5865] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.845855][ T5865] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.872933][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.879832][ T5865] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 105.891159][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.917885][ T5865] usb 3-1: config 0 descriptor?? [ 106.274570][ T5955] usb 4-1: USB disconnect, device number 4 [ 106.555360][ T5865] usb 3-1: string descriptor 0 read error: -71 [ 106.614072][ T5865] uclogic 0003:5543:0045.0001: failed retrieving string descriptor #200: -71 [ 106.649469][ T5865] uclogic 0003:5543:0045.0001: failed retrieving pen parameters: -71 [ 106.662364][ T5865] uclogic 0003:5543:0045.0001: failed probing pen v2 parameters: -71 [ 106.671633][ T5865] uclogic 0003:5543:0045.0001: failed probing parameters: -71 [ 106.715074][ T5865] uclogic 0003:5543:0045.0001: probe with driver uclogic failed with error -71 [ 106.738017][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 106.754732][ T6420] netlink: 32 bytes leftover after parsing attributes in process `syz.1.128'. [ 106.786553][ T5865] usb 3-1: USB disconnect, device number 6 [ 107.331640][ T10] usb 1-1: USB disconnect, device number 4 [ 108.115088][ T6443] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 108.885655][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.075202][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 109.092518][ T10] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 109.132271][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.309610][ T10] usb 1-1: config 0 descriptor?? [ 109.330167][ T10] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 109.344700][ T10] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 109.479397][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 109.584751][ T10] usb-storage 1-1:0.0: device ignored [ 109.697138][ T10] usb 1-1: USB disconnect, device number 5 [ 110.134287][ T6490] FAULT_INJECTION: forcing a failure. [ 110.134287][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.153273][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT(full) [ 110.153297][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.153307][ T6490] Call Trace: [ 110.153314][ T6490] [ 110.153322][ T6490] dump_stack_lvl+0x189/0x250 [ 110.153346][ T6490] ? __pfx____ratelimit+0x10/0x10 [ 110.153368][ T6490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.153387][ T6490] ? __pfx__printk+0x10/0x10 [ 110.153408][ T6490] ? __might_fault+0xb0/0x130 [ 110.153440][ T6490] should_fail_ex+0x414/0x560 [ 110.153467][ T6490] _copy_from_user+0x2d/0xb0 [ 110.153486][ T6490] snd_ctl_ioctl+0x51a/0x1bf0 [ 110.153506][ T6490] ? stack_trace_save+0x9c/0xe0 [ 110.153524][ T6490] ? __pfx_stack_trace_save+0x10/0x10 [ 110.153543][ T6490] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 110.153559][ T6490] ? stack_depot_save_flags+0x40/0x860 [ 110.153587][ T6490] ? kasan_save_track+0x4f/0x80 [ 110.153612][ T6490] ? kasan_save_track+0x3e/0x80 [ 110.153628][ T6490] ? kasan_save_free_info+0x46/0x50 [ 110.153642][ T6490] ? __kasan_slab_free+0x5b/0x80 [ 110.153659][ T6490] ? kfree+0x18e/0x440 [ 110.153676][ T6490] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 110.153694][ T6490] ? security_file_ioctl+0xcb/0x2d0 [ 110.153711][ T6490] ? __se_sys_ioctl+0x47/0x170 [ 110.153728][ T6490] ? do_syscall_64+0xfa/0x3b0 [ 110.153748][ T6490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.153802][ T6490] ? kasan_quarantine_put+0xdd/0x220 [ 110.153832][ T6490] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 110.153854][ T6490] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 110.153877][ T6490] ? do_vfs_ioctl+0xbe8/0x1430 [ 110.153899][ T6490] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.153954][ T6490] ? __fget_files+0x2a/0x420 [ 110.153978][ T6490] ? __fget_files+0x2a/0x420 [ 110.153998][ T6490] ? __fget_files+0x3a0/0x420 [ 110.154018][ T6490] ? __fget_files+0x2a/0x420 [ 110.154042][ T6490] ? bpf_lsm_file_ioctl+0x9/0x20 [ 110.154062][ T6490] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 110.154079][ T6490] __se_sys_ioctl+0xf9/0x170 [ 110.154100][ T6490] do_syscall_64+0xfa/0x3b0 [ 110.154120][ T6490] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.154141][ T6490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.154157][ T6490] ? clear_bhb_loop+0x60/0xb0 [ 110.154176][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.154192][ T6490] RIP: 0033:0x7f1dfc78ebe9 [ 110.154208][ T6490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.154221][ T6490] RSP: 002b:00007f1dfa9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.154239][ T6490] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78ebe9 [ 110.154251][ T6490] RDX: 00002000000000c0 RSI: 00000000c1105511 RDI: 0000000000000003 [ 110.154263][ T6490] RBP: 00007f1dfa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.154276][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.154286][ T6490] R13: 00007f1dfc9b6038 R14: 00007f1dfc9b5fa0 R15: 00007f1dfcadfa28 [ 110.154314][ T6490] [ 111.416308][ T5865] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 111.608530][ T5865] usb 1-1: device descriptor read/64, error -71 [ 111.704838][ T6522] random: crng reseeded on system resumption [ 111.989647][ T6529] FAULT_INJECTION: forcing a failure. [ 111.989647][ T6529] name failslab, interval 1, probability 0, space 0, times 0 [ 112.002863][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.2.149 Not tainted syzkaller #0 PREEMPT(full) [ 112.002877][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.002882][ T6529] Call Trace: [ 112.002887][ T6529] [ 112.002891][ T6529] dump_stack_lvl+0x189/0x250 [ 112.002907][ T6529] ? __pfx____ratelimit+0x10/0x10 [ 112.002923][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.002934][ T6529] ? __pfx__printk+0x10/0x10 [ 112.002950][ T6529] ? __pfx___might_resched+0x10/0x10 [ 112.002959][ T6529] ? fs_reclaim_acquire+0x7d/0x100 [ 112.002976][ T6529] should_fail_ex+0x414/0x560 [ 112.002992][ T6529] should_failslab+0xa8/0x100 [ 112.003007][ T6529] __kmalloc_noprof+0xcb/0x4f0 [ 112.003019][ T6529] ? iter_file_splice_write+0x1c6/0x10e0 [ 112.003036][ T6529] iter_file_splice_write+0x1c6/0x10e0 [ 112.003048][ T6529] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.003074][ T6529] ? __pfx_iter_file_splice_write+0x10/0x10 [ 112.003089][ T6529] ? rcu_read_lock_any_held+0xb3/0x120 [ 112.003100][ T6529] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 112.003115][ T6529] ? __pfx_iter_file_splice_write+0x10/0x10 [ 112.003129][ T6529] direct_splice_actor+0xfe/0x160 [ 112.003144][ T6529] splice_direct_to_actor+0x5a8/0xcc0 [ 112.003167][ T6529] ? __pfx_direct_splice_actor+0x10/0x10 [ 112.003180][ T6529] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 112.003205][ T6529] do_splice_direct+0x181/0x270 [ 112.003220][ T6529] ? __pfx_do_splice_direct+0x10/0x10 [ 112.003233][ T6529] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 112.003251][ T6529] ? rw_verify_area+0x255/0x4d0 [ 112.003265][ T6529] do_sendfile+0x4da/0x7e0 [ 112.003279][ T6529] ? __pfx_do_sendfile+0x10/0x10 [ 112.003295][ T6529] __se_sys_sendfile64+0xd9/0x190 [ 112.003311][ T6529] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 112.003324][ T6529] ? rcu_is_watching+0x15/0xb0 [ 112.003337][ T6529] ? do_syscall_64+0xbe/0x3b0 [ 112.003353][ T6529] do_syscall_64+0xfa/0x3b0 [ 112.003366][ T6529] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.003379][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.003388][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 112.003399][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.003408][ T6529] RIP: 0033:0x7f1dfc78ebe9 [ 112.003417][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.003425][ T6529] RSP: 002b:00007f1dfa9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 112.003435][ T6529] RAX: ffffffffffffffda RBX: 00007f1dfc9b5fa0 RCX: 00007f1dfc78ebe9 [ 112.003442][ T6529] RDX: 0000200000002700 RSI: 0000000000000004 RDI: 0000000000000005 [ 112.003447][ T6529] RBP: 00007f1dfa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.003453][ T6529] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 112.003458][ T6529] R13: 00007f1dfc9b6038 R14: 00007f1dfc9b5fa0 R15: 00007f1dfcadfa28 [ 112.003473][ T6529] [ 112.385409][ T5865] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 112.595639][ T5865] usb 1-1: device descriptor read/64, error -71 [ 112.694470][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 112.765548][ T5865] usb usb1-port1: attempt power cycle [ 112.797638][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 113.105393][ T5865] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 113.125959][ T5865] usb 1-1: device descriptor read/8, error -71 [ 113.373967][ T5865] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 113.437365][ T5865] usb 1-1: device descriptor read/8, error -71 [ 113.547488][ T5865] usb usb1-port1: unable to enumerate USB device [ 114.142760][ T6558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.157'. [ 114.500071][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.521333][ T6569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'. [ 114.586248][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.988846][ T6572] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.163' sets config #1 [ 115.289780][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.413016][ T6577] netlink: 48 bytes leftover after parsing attributes in process `syz.4.162'. [ 115.529330][ T24] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 115.540508][ T24] usb 4-1: config 0 has no interface number 0 [ 115.555763][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d [ 115.592347][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.611870][ T24] usb 4-1: Product: syz [ 115.616188][ T24] usb 4-1: Manufacturer: syz [ 115.632138][ T24] usb 4-1: SerialNumber: syz [ 115.661218][ T24] usb 4-1: config 0 descriptor?? [ 115.690305][ T24] usbtest 4-1:0.85: Linux gadget zero [ 115.707296][ T24] usbtest 4-1:0.85: high-speed {control in/out int-out} tests (+alt) [ 115.924137][ T5945] usb 4-1: USB disconnect, device number 5 [ 116.475224][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.583844][ T6596] netlink: 48 bytes leftover after parsing attributes in process `syz.3.171'. [ 116.646358][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 116.734293][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.741940][ T6600] netlink: 277 bytes leftover after parsing attributes in process `syz.0.173'. [ 116.822921][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.837511][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'. [ 116.877972][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.891361][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.907640][ T10] usb 5-1: Product: syz [ 116.915946][ T5953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.932196][ T10] usb 5-1: Manufacturer: syz [ 116.942316][ T10] usb 5-1: SerialNumber: syz [ 117.087537][ T5953] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 117.125378][ T5953] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.153232][ T5953] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.189209][ T6609] IPv6: Can't replace route, no match found [ 117.261134][ T10] usb 5-1: 0:2 : does not exist [ 117.281967][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 117.289281][ T5953] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.289308][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.474685][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 118.006559][ T10] usb 5-1: USB disconnect, device number 3 [ 118.020816][ T5953] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.044145][ T5953] usb 4-1: invalid MIDI out EP 0 [ 118.088628][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 118.178005][ T6619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.224164][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 118.343805][ T5953] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 118.354424][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.374777][ T5953] usb 4-1: USB disconnect, device number 6 [ 118.478142][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.521840][ T24] usb 3-1: no configurations [ 118.535772][ T24] usb 3-1: can't read configurations, error -22 [ 118.773900][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.975915][ T24] usb 3-1: no configurations [ 118.980733][ T24] usb 3-1: can't read configurations, error -22 [ 118.987987][ T24] usb usb3-port1: attempt power cycle [ 119.367562][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.397243][ T24] usb 3-1: no configurations [ 119.402246][ T24] usb 3-1: can't read configurations, error -22 [ 119.825328][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.876572][ T24] usb 3-1: no configurations [ 119.893840][ T24] usb 3-1: can't read configurations, error -22 [ 119.924166][ T24] usb usb3-port1: unable to enumerate USB device [ 120.292110][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 120.292128][ T30] audit: type=1326 audit(1756333480.478:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.4.192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1eedd8ebe9 code=0x0 [ 120.816062][ T6684] netlink: 68 bytes leftover after parsing attributes in process `syz.0.201'. [ 121.693157][ T6708] netlink: 52 bytes leftover after parsing attributes in process `syz.1.210'. [ 121.930673][ T6716] netlink: 68 bytes leftover after parsing attributes in process `syz.4.214'. [ 122.038018][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 122.272370][ T6726] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.312120][ T6726] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 122.332536][ T6726] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 122.341617][ T6726] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 122.355403][ T6726] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 122.370105][ T6726] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 122.378325][ T6726] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 122.414666][ T6726] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 122.427118][ T6726] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 122.439948][ T6726] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 122.862823][ T6735] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 122.996535][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.135716][ T24] usb 2-1: device descriptor read/64, error -71 [ 123.357395][ T6744] fuse: Unknown parameter 'group_i00000000000000000000' [ 123.540698][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.726070][ T24] usb 2-1: device descriptor read/64, error -71 [ 123.898824][ T24] usb usb2-port1: attempt power cycle [ 124.079031][ T6754] netlink: 68 bytes leftover after parsing attributes in process `syz.2.227'. [ 124.335326][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.379382][ T24] usb 2-1: device descriptor read/8, error -71 [ 124.625245][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.665857][ T24] usb 2-1: device descriptor read/8, error -71 [ 124.783143][ T24] usb usb2-port1: unable to enumerate USB device [ 124.886226][ T5865] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.026036][ T5865] usb 3-1: device descriptor read/64, error -71 [ 125.225866][ T5953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.265260][ T5865] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.375271][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 125.387147][ T5953] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024 [ 125.397353][ T5865] usb 3-1: device descriptor read/64, error -71 [ 125.403765][ T5953] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.418928][ T5953] usb 5-1: config 1 interface 0 has no altsetting 0 [ 125.426410][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.442002][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.452364][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.461853][ T5953] usb 5-1: Product: ⡆ [ 125.466429][ T5953] usb 5-1: SerialNumber: Ї [ 125.474999][ T6769] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 125.505481][ T5865] usb usb3-port1: attempt power cycle [ 125.585508][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 125.597710][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.613892][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.630076][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 125.640409][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.672757][ T10] usb 4-1: config 0 descriptor?? [ 125.701574][ T30] audit: type=1326 audit(1756333485.908:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6763 comm="syz.4.230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1eedd8ebe9 code=0x0 [ 125.703626][ T10] pxrc 4-1:0.0: Could not find endpoint [ 125.740402][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 125.879203][ T5865] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.908441][ T5865] usb 3-1: device descriptor read/8, error -71 [ 125.918391][ T6774] nvme_fabrics: missing parameter 'transport=%s' [ 125.926180][ T6774] nvme_fabrics: missing parameter 'nqn=%s' [ 125.980357][ T10] IPVS: starting estimator thread 0... [ 126.003003][ T24] usb 4-1: USB disconnect, device number 7 [ 126.081161][ T6781] IPVS: using max 34 ests per chain, 81600 per kthread [ 126.155341][ T5865] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 126.204513][ T5865] usb 3-1: device descriptor read/8, error -71 [ 126.316129][ T5865] usb usb3-port1: unable to enumerate USB device [ 126.785416][ T5992] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 126.947232][ T5992] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 126.955086][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.966603][ T5992] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.993464][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.036811][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.059690][ T5992] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 127.064230][ T6802] netlink: 277 bytes leftover after parsing attributes in process `syz.3.241'. [ 127.084200][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.101055][ T5992] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.131431][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.147232][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.162124][ T5992] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 127.174365][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.188204][ T5992] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.223162][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.266497][ T5992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.303425][ T5992] usb 1-1: string descriptor 0 read error: -22 [ 127.316870][ T5992] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.337446][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.396439][ T5992] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 128.384515][ T5953] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 128.433985][ T5953] usb 5-1: USB disconnect, device number 4 [ 128.689292][ T5865] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.905285][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 128.914781][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.934662][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.980349][ T5865] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 129.022302][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.034609][ T5865] usb 4-1: config 0 descriptor?? [ 129.059707][ T5865] pxrc 4-1:0.0: Could not find endpoint [ 129.071282][ T5865] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 129.348879][ T5953] usb 4-1: USB disconnect, device number 8 [ 130.131805][ T6861] kvm: pic: non byte write [ 130.189010][ T5992] usb 1-1: USB disconnect, device number 10 [ 130.286892][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 130.541696][ T6874] fuse: Bad value for 'fd' [ 130.606943][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 130.619617][ T10] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024 [ 130.637598][ T10] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.653655][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 130.720324][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.772350][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.819512][ T10] usb 3-1: Product: ⡆ [ 130.834441][ T10] usb 3-1: SerialNumber: Ї [ 130.873121][ T6859] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 130.905449][ T5992] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 131.066116][ T5992] usb 4-1: Using ep0 maxpacket: 16 [ 131.074668][ T5992] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 131.087027][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.121793][ T30] audit: type=1326 audit(1756333491.328:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.2.253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfc78ebe9 code=0x0 [ 131.155168][ T5992] usb 4-1: config 0 descriptor?? [ 131.202964][ T5992] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 131.285223][ T5865] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.373255][ T5992] usb 4-1: Detected FT232B [ 131.494305][ T849] IPVS: starting estimator thread 0... [ 131.500931][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 131.566114][ T6880] nvme_fabrics: missing parameter 'transport=%s' [ 131.582075][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 131.591488][ T6880] nvme_fabrics: missing parameter 'nqn=%s' [ 131.604026][ T6883] IPVS: using max 27 ests per chain, 64800 per kthread [ 131.611095][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.614797][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.622058][ T5865] usb 2-1: config 0 descriptor?? [ 131.690515][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.957870][ T6885] FAULT_INJECTION: forcing a failure. [ 131.957870][ T6885] name failslab, interval 1, probability 0, space 0, times 0 [ 132.066845][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.109827][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT(full) [ 132.109844][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.109850][ T6885] Call Trace: [ 132.109855][ T6885] [ 132.109860][ T6885] dump_stack_lvl+0x189/0x250 [ 132.109883][ T6885] ? __pfx____ratelimit+0x10/0x10 [ 132.109905][ T6885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.109924][ T6885] ? __pfx__printk+0x10/0x10 [ 132.109958][ T6885] should_fail_ex+0x414/0x560 [ 132.109982][ T6885] should_failslab+0xa8/0x100 [ 132.109998][ T6885] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 132.110012][ T6885] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 132.110025][ T6885] ? __alloc_skb+0x112/0x2d0 [ 132.110036][ T6885] __alloc_skb+0x112/0x2d0 [ 132.110053][ T6885] rtmsg_ifinfo_build_skb+0x84/0x260 [ 132.110073][ T6885] ? netpoll_poll_enable+0xce/0xe0 [ 132.110100][ T6885] rtmsg_ifinfo+0x8c/0x1a0 [ 132.110126][ T6885] __dev_notify_flags+0xf4/0x2e0 [ 132.110147][ T6885] ? __pfx___dev_notify_flags+0x10/0x10 [ 132.110161][ T6885] ? __dev_change_flags+0x4cc/0x6d0 [ 132.110181][ T6885] ? __pfx___dev_change_flags+0x10/0x10 [ 132.110197][ T6885] netif_change_flags+0xe8/0x1a0 [ 132.110217][ T6885] do_setlink+0xc55/0x41c0 [ 132.110237][ T6885] ? __kernel_text_address+0xd/0x40 [ 132.110261][ T6885] ? arch_stack_walk+0xfc/0x150 [ 132.110285][ T6885] ? __pfx_do_setlink+0x10/0x10 [ 132.110305][ T6885] ? __lock_acquire+0xab9/0xd20 [ 132.110323][ T6885] ? __mutex_trylock_common+0x153/0x260 [ 132.110335][ T6885] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.110347][ T6885] ? rcu_is_watching+0x15/0xb0 [ 132.110363][ T6885] ? trace_contention_end+0x39/0x120 [ 132.110381][ T6885] ? __mutex_lock+0x335/0x1350 [ 132.110417][ T6885] ? rtnl_newlink+0x8db/0x1c70 [ 132.110440][ T6885] ? __pfx___mutex_lock+0x10/0x10 [ 132.110458][ T6885] ? full_name_hash+0x92/0xe0 [ 132.110470][ T6885] ? netdev_name_node_lookup+0xdf/0x120 [ 132.110484][ T6885] rtnl_newlink+0x160b/0x1c70 [ 132.110497][ T6885] ? netlink_sendmsg+0x805/0xb30 [ 132.110537][ T6885] ? __pfx_rtnl_newlink+0x10/0x10 [ 132.110583][ T6885] ? kasan_quarantine_put+0xdd/0x220 [ 132.110596][ T6885] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.110613][ T6885] ? __pfx_do_softirq+0x10/0x10 [ 132.110636][ T6885] ? __local_bh_enable_ip+0x12d/0x1c0 [ 132.110652][ T6885] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.110674][ T6885] ? __local_bh_enable_ip+0x12d/0x1c0 [ 132.110689][ T6885] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 132.110709][ T6885] ? __dev_queue_xmit+0x27b/0x3b50 [ 132.110728][ T6885] ? __dev_queue_xmit+0x27b/0x3b50 [ 132.110744][ T6885] ? __dev_queue_xmit+0x27b/0x3b50 [ 132.110761][ T6885] ? __dev_queue_xmit+0x1d79/0x3b50 [ 132.110775][ T6885] ? __lock_acquire+0xab9/0xd20 [ 132.110806][ T6885] ? __pfx_rtnl_newlink+0x10/0x10 [ 132.110828][ T6885] rtnetlink_rcv_msg+0x7cf/0xb70 [ 132.110854][ T6885] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 132.110876][ T6885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.110892][ T6885] ? ref_tracker_free+0x63a/0x7d0 [ 132.110906][ T6885] ? __asan_memcpy+0x40/0x70 [ 132.110916][ T6885] ? __pfx_ref_tracker_free+0x10/0x10 [ 132.110928][ T6885] ? __skb_clone+0x63/0x7a0 [ 132.110943][ T6885] netlink_rcv_skb+0x205/0x470 [ 132.110965][ T6885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.110989][ T6885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.111024][ T6885] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.111046][ T6885] netlink_unicast+0x82f/0x9e0 [ 132.111063][ T6885] ? __pfx_netlink_unicast+0x10/0x10 [ 132.111076][ T6885] ? netlink_sendmsg+0x642/0xb30 [ 132.111090][ T6885] ? skb_put+0x11b/0x210 [ 132.111106][ T6885] netlink_sendmsg+0x805/0xb30 [ 132.111138][ T6885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.111162][ T6885] ? aa_sock_msg_perm+0xf1/0x1d0 [ 132.111181][ T6885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.111199][ T6885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.111221][ T6885] __sock_sendmsg+0x21c/0x270 [ 132.111237][ T6885] ____sys_sendmsg+0x505/0x830 [ 132.111251][ T6885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.111276][ T6885] ? import_iovec+0x74/0xa0 [ 132.111299][ T6885] ___sys_sendmsg+0x21f/0x2a0 [ 132.111320][ T6885] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.111362][ T6885] ? __fget_files+0x2a/0x420 [ 132.111376][ T6885] ? __fget_files+0x3a0/0x420 [ 132.111395][ T6885] __x64_sys_sendmsg+0x19b/0x260 [ 132.111411][ T6885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.111439][ T6885] ? __pfx_ksys_write+0x10/0x10 [ 132.111465][ T6885] ? do_syscall_64+0xbe/0x3b0 [ 132.111490][ T6885] do_syscall_64+0xfa/0x3b0 [ 132.111504][ T6885] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.111516][ T6885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.111525][ T6885] ? clear_bhb_loop+0x60/0xb0 [ 132.111542][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.111552][ T6885] RIP: 0033:0x7fbefe18ebe9 [ 132.111574][ T6885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.111588][ T6885] RSP: 002b:00007fbefef61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.111609][ T6885] RAX: ffffffffffffffda RBX: 00007fbefe3b5fa0 RCX: 00007fbefe18ebe9 [ 132.111622][ T6885] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 132.111632][ T6885] RBP: 00007fbefef61090 R08: 0000000000000000 R09: 0000000000000000 [ 132.111641][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.111646][ T6885] R13: 00007fbefe3b6038 R14: 00007fbefe3b5fa0 R15: 00007fbefe4dfa28 [ 132.111661][ T6885] [ 132.655977][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.665319][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.259'. [ 132.669165][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 132.674298][ T6879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.259'. [ 132.854857][ T6885] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 132.896199][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902535][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.957206][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.038934][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.261'. [ 133.198502][ T6894] netlink: 'syz.0.264': attribute type 17 has an invalid length. [ 133.219583][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.328831][ T5992] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 133.343727][ T5992] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 133.411713][ T5992] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 133.432799][ T5865] usbhid 2-1:0.0: can't add hid device: -71 [ 133.483162][ T5865] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 133.550051][ T5865] usb 2-1: USB disconnect, device number 11 [ 133.673336][ T5992] usb 4-1: USB disconnect, device number 9 [ 133.795314][ T5992] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 133.851514][ T5992] ftdi_sio 4-1:0.0: device disconnected [ 133.930349][ T10] usb 3-1: bad CDC descriptors [ 134.040320][ T10] usb 3-1: USB disconnect, device number 15 [ 134.270973][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 134.445282][ T5865] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 134.625366][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 135.329695][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.355172][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.433639][ T5865] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 135.494510][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.537911][ T5865] usb 2-1: config 0 descriptor?? [ 135.557887][ T5865] pxrc 2-1:0.0: Could not find endpoint [ 135.571691][ T5865] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 135.732864][ T6921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 135.882506][ T5865] usb 2-1: USB disconnect, device number 12 [ 136.615441][ T5865] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 136.794976][ T5865] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.831164][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.857837][ T5865] usb 3-1: Product: syz [ 136.873976][ T5865] usb 3-1: Manufacturer: syz [ 136.882389][ T5865] usb 3-1: SerialNumber: syz [ 136.911877][ T5865] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 136.973540][ T5953] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 137.148770][ T5992] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 137.307528][ T10] usb 3-1: USB disconnect, device number 16 [ 137.344048][ T5992] usb 1-1: Using ep0 maxpacket: 32 [ 137.358037][ T5992] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 137.436019][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.469462][ T5992] usb 1-1: config 0 descriptor?? [ 137.782691][ T5992] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 137.851519][ T6959] fuse: Unknown parameter 'group_id00000000000000000000' [ 137.938288][ T5992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.012950][ T5992] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 138.099081][ T5992] usb 1-1: media controller created [ 138.121912][ T5992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.249809][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.285'. [ 138.312317][ T5953] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 138.498433][ T5953] ath9k_htc: Failed to initialize the device [ 138.542684][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 139.125334][ T5953] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.289697][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.301708][ T5953] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.334385][ T5953] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 139.456268][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.479581][ T5953] usb 4-1: Product: syz [ 139.498434][ T5953] usb 4-1: Manufacturer: syz [ 139.504321][ T5953] usb 4-1: SerialNumber: syz [ 139.521353][ T5953] usb 4-1: config 0 descriptor?? [ 139.537732][ T5953] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 139.562203][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.578078][ T5953] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 139.594195][ T5953] usb 4-1: media controller created [ 139.705460][ T5992] az6027: usb out operation failed. (-71) [ 139.712030][ T5992] az6027: usb out operation failed. (-71) [ 139.719829][ T5992] stb0899_attach: Driver disabled by Kconfig [ 139.743180][ T5992] az6027: no front-end attached [ 139.743180][ T5992] [ 139.754730][ T5992] az6027: usb out operation failed. (-71) [ 139.754752][ T5992] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 139.756132][ T5992] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 139.765080][ T5992] dvb-usb: schedule remote query interval to 400 msecs. [ 139.813935][ T5992] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 139.826103][ T5992] usb 1-1: USB disconnect, device number 11 [ 139.884291][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.076669][ T5992] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 140.303392][ T5953] DVB: Unable to find symbol tda10046_attach() [ 140.319173][ T5953] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 140.412446][ T5953] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 140.719740][ T5953] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 140.773164][ T5953] usb 4-1: USB disconnect, device number 10 [ 142.315631][ T5953] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 142.486908][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.712628][ T5953] usb 2-1: config 0 has no interfaces? [ 142.782714][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 142.810518][ T5953] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 142.935432][ T5992] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.973593][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.007307][ T7053] netlink: 'syz.3.312': attribute type 27 has an invalid length. [ 143.096488][ T5992] usb 5-1: Using ep0 maxpacket: 32 [ 143.113064][ T5953] usb 2-1: config 0 descriptor?? [ 143.197862][ T5992] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024 [ 143.255216][ T5992] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.318305][ T5992] usb 5-1: config 1 interface 0 has no altsetting 0 [ 143.348990][ T5953] usb 2-1: USB disconnect, device number 13 [ 143.425288][ T5992] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.434369][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.498394][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.506763][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.546688][ T5992] usb 5-1: Product: ⡆ [ 143.567238][ T5992] usb 5-1: SerialNumber: Ї [ 143.601323][ T7048] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 143.626324][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.785300][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 143.797265][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.814714][ T24] usb 4-1: config 0 has no interface number 0 [ 143.854124][ T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 143.906990][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.943988][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.972738][ T30] audit: type=1326 audit(1756333504.178:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.4.310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1eedd8ebe9 code=0x0 [ 143.996148][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.075672][ T24] usb 4-1: Product: syz [ 144.084046][ T24] usb 4-1: Manufacturer: syz [ 144.153316][ T24] usb 4-1: SerialNumber: syz [ 144.226254][ T24] usb 4-1: config 0 descriptor?? [ 144.299426][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 144.676374][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.783493][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.796342][ T7063] nvme_fabrics: missing parameter 'transport=%s' [ 144.862404][ T7063] nvme_fabrics: missing parameter 'nqn=%s' [ 144.864634][ T24] gspca_spca1528: reg_w err -110 [ 144.918759][ T7058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.935891][ T7058] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.938971][ T24] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 144.975461][ T5932] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 145.334991][ T7058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.572440][ T6112] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.594241][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.629317][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.639674][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.710707][ T30] audit: type=1326 audit(1756333505.918:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7077 comm="syz.2.318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dfc78ebe9 code=0x0 [ 146.177140][ T7085] syzkaller0: entered allmulticast mode [ 146.802031][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 147.362123][ T24] usb 4-1: USB disconnect, device number 11 [ 147.412521][ T5992] usb 5-1: bad CDC descriptors [ 147.464946][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 147.470049][ T5992] usb 5-1: USB disconnect, device number 5 [ 147.946440][ T7115] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 147.953121][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 147.985808][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 148.097739][ T7115] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.113936][ T7115] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 148.120546][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.136767][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 148.144108][ T7118] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 148.150722][ T7118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.167789][ T849] vhci_hcd: vhci_device speed not set [ 148.187755][ T7118] vhci_hcd vhci_hcd.0: Device attached [ 148.194775][ T7123] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 148.201571][ T7123] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 148.235501][ T849] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 148.244734][ T7123] vhci_hcd vhci_hcd.0: Device attached [ 148.245808][ T7115] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.269054][ T7115] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(21) [ 148.275660][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 148.326572][ T7118] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.350505][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 148.534804][ T7115] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(23) [ 148.541451][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 148.685397][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 148.708431][ T7124] vhci_hcd: connection closed [ 148.709013][ T7121] vhci_hcd: connection closed [ 148.713778][ T7119] vhci_hcd: connection closed [ 148.718695][ T7116] vhci_hcd: connection reset by peer [ 148.739791][ T12] vhci_hcd: stop threads [ 148.748940][ T7126] vhci_hcd: connection closed [ 148.750212][ T7132] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.329' sets config #1 [ 148.775873][ T12] vhci_hcd: release socket [ 148.783397][ T12] vhci_hcd: disconnect device [ 148.812881][ T12] vhci_hcd: stop threads [ 148.829441][ T12] vhci_hcd: release socket [ 148.845057][ T7128] vhci_hcd: connection closed [ 148.854250][ T12] vhci_hcd: disconnect device [ 148.899102][ T12] vhci_hcd: stop threads [ 148.909647][ T12] vhci_hcd: release socket [ 148.919905][ T12] vhci_hcd: disconnect device [ 148.932559][ T12] vhci_hcd: stop threads [ 148.944715][ T12] vhci_hcd: release socket [ 148.955684][ T12] vhci_hcd: disconnect device [ 148.972298][ T12] vhci_hcd: stop threads [ 148.986935][ T12] vhci_hcd: release socket [ 149.005759][ T12] vhci_hcd: disconnect device [ 149.011401][ T12] vhci_hcd: stop threads [ 149.017589][ T12] vhci_hcd: release socket [ 149.026487][ T12] vhci_hcd: disconnect device [ 149.032480][ T7134] FAULT_INJECTION: forcing a failure. [ 149.032480][ T7134] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 149.049362][ T7134] CPU: 1 UID: 0 PID: 7134 Comm: syz.3.330 Not tainted syzkaller #0 PREEMPT(full) [ 149.049386][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.049396][ T7134] Call Trace: [ 149.049404][ T7134] [ 149.049412][ T7134] dump_stack_lvl+0x189/0x250 [ 149.049437][ T7134] ? __pfx____ratelimit+0x10/0x10 [ 149.049458][ T7134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.049477][ T7134] ? __pfx__printk+0x10/0x10 [ 149.049500][ T7134] ? fs_reclaim_acquire+0x7d/0x100 [ 149.049532][ T7134] should_fail_ex+0x414/0x560 [ 149.049557][ T7134] prepare_alloc_pages+0x213/0x610 [ 149.049582][ T7134] __alloc_frozen_pages_noprof+0x123/0x370 [ 149.049602][ T7134] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 149.049627][ T7134] ? policy_nodemask+0x27c/0x720 [ 149.049645][ T7134] ? __lock_acquire+0xab9/0xd20 [ 149.049672][ T7134] alloc_pages_mpol+0x232/0x4a0 [ 149.049698][ T7134] vma_alloc_folio_noprof+0xe4/0x200 [ 149.049719][ T7134] ? page_table_check_set+0x18d/0x730 [ 149.049741][ T7134] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 149.049775][ T7134] folio_prealloc+0x30/0x180 [ 149.049799][ T7134] __handle_mm_fault+0x2ab9/0x5440 [ 149.049836][ T7134] ? __pfx___handle_mm_fault+0x10/0x10 [ 149.049877][ T7134] ? follow_page_pte+0x7ef/0x13e0 [ 149.049907][ T7134] handle_mm_fault+0x40a/0x8e0 [ 149.049938][ T7134] __get_user_pages+0x1699/0x2ce0 [ 149.049955][ T7134] ? __lock_acquire+0xab9/0xd20 [ 149.050011][ T7134] __gup_longterm_locked+0xde9/0x1660 [ 149.050044][ T7134] ? sanity_check_pinned_pages+0x1241/0x1300 [ 149.050066][ T7134] ? gup_fast_fallback+0x195f/0x2010 [ 149.050085][ T7134] gup_fast_fallback+0x1e6a/0x2010 [ 149.050131][ T7134] ? __pfx_gup_fast_fallback+0x10/0x10 [ 149.050158][ T7134] ? rcu_is_watching+0x15/0xb0 [ 149.050172][ T7134] ? is_valid_gup_args+0x11f/0x200 [ 149.050194][ T7134] ? pin_user_pages_fast+0x4d/0xb0 [ 149.050216][ T7134] rds_info_getsockopt+0x1fb/0x470 [ 149.050238][ T7134] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 149.050260][ T7134] ? __might_fault+0xb0/0x130 [ 149.050285][ T7134] ? rds_getsockopt+0x2b4/0x500 [ 149.050301][ T7134] ? __pfx_rds_getsockopt+0x10/0x10 [ 149.050319][ T7134] do_sock_getsockopt+0x36f/0x450 [ 149.050341][ T7134] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 149.050358][ T7134] ? write_ibpb+0x30/0x40 [ 149.050378][ T7134] ? __fget_files+0x3a0/0x420 [ 149.050399][ T7134] ? __fget_files+0x2a/0x420 [ 149.050427][ T7134] __x64_sys_getsockopt+0x1a5/0x250 [ 149.050444][ T7134] ? write_ibpb+0x30/0x40 [ 149.050466][ T7134] ? write_ibpb+0x30/0x40 [ 149.050490][ T7134] do_syscall_64+0xfa/0x3b0 [ 149.050510][ T7134] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.050530][ T7134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.050546][ T7134] ? clear_bhb_loop+0x60/0xb0 [ 149.050567][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.050583][ T7134] RIP: 0033:0x7f13ba38ebe9 [ 149.050599][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.050612][ T7134] RSP: 002b:00007f13bb202038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 149.050629][ T7134] RAX: ffffffffffffffda RBX: 00007f13ba5b5fa0 RCX: 00007f13ba38ebe9 [ 149.050640][ T7134] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 149.050651][ T7134] RBP: 00007f13bb202090 R08: 0000200000000000 R09: 0000000000000000 [ 149.050661][ T7134] R10: 0000200000032580 R11: 0000000000000246 R12: 0000000000000002 [ 149.050672][ T7134] R13: 00007f13ba5b6038 R14: 00007f13ba5b5fa0 R15: 00007f13ba6dfa28 [ 149.050701][ T7134] [ 149.055209][ T5992] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.186717][ T5992] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 150.200148][ T5992] usb 5-1: config 0 has no interface number 0 [ 150.264351][ T5992] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d [ 150.291927][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.322352][ T5992] usb 5-1: Product: syz [ 150.338529][ T5992] usb 5-1: Manufacturer: syz [ 150.374549][ T7152] tipc: Started in network mode [ 150.379684][ T7152] tipc: Node identity 7f000001, cluster identity 4711 [ 150.388511][ T7152] tipc: Enabled bearer , priority 10 [ 150.395026][ T5992] usb 5-1: SerialNumber: syz [ 150.427959][ T5992] usb 5-1: config 0 descriptor?? [ 150.438268][ T5992] usbtest 5-1:0.85: Linux gadget zero [ 150.462654][ T5992] usbtest 5-1:0.85: high-speed {control in/out int-out} tests (+alt) [ 150.626801][ T7162] FAULT_INJECTION: forcing a failure. [ 150.626801][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 150.700434][ T7153] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x328 (0x34324142, 5, 0, 0, 0) [ 150.713716][ T7162] CPU: 1 UID: 0 PID: 7162 Comm: syz.0.338 Not tainted syzkaller #0 PREEMPT(full) [ 150.713736][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.713745][ T7162] Call Trace: [ 150.713752][ T7162] [ 150.713759][ T7162] dump_stack_lvl+0x189/0x250 [ 150.713783][ T7162] ? __pfx____ratelimit+0x10/0x10 [ 150.713803][ T7162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.713821][ T7162] ? __pfx__printk+0x10/0x10 [ 150.713843][ T7162] ? __pfx___might_resched+0x10/0x10 [ 150.713858][ T7162] ? fs_reclaim_acquire+0x7d/0x100 [ 150.713883][ T7162] should_fail_ex+0x414/0x560 [ 150.713908][ T7162] should_failslab+0xa8/0x100 [ 150.713930][ T7162] __kmalloc_cache_noprof+0x70/0x3d0 [ 150.713949][ T7162] ? rtnl_newlink+0xed/0x1c70 [ 150.713969][ T7162] ? kasan_save_free_info+0x46/0x50 [ 150.713987][ T7162] rtnl_newlink+0xed/0x1c70 [ 150.714005][ T7162] ? netlink_sendmsg+0x805/0xb30 [ 150.714025][ T7162] ? __sock_sendmsg+0x21c/0x270 [ 150.714043][ T7162] ? ____sys_sendmsg+0x505/0x830 [ 150.714058][ T7162] ? ___sys_sendmsg+0x21f/0x2a0 [ 150.714072][ T7162] ? __x64_sys_sendmsg+0x19b/0x260 [ 150.714088][ T7162] ? do_syscall_64+0xfa/0x3b0 [ 150.714107][ T7162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.714130][ T7162] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.714171][ T7162] ? kasan_quarantine_put+0xdd/0x220 [ 150.714190][ T7162] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.714217][ T7162] ? nlmon_xmit+0xb0/0x100 [ 150.714231][ T7162] ? kmem_cache_free+0x18f/0x400 [ 150.714269][ T7162] ? __local_bh_enable_ip+0x12d/0x1c0 [ 150.714285][ T7162] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.714305][ T7162] ? __local_bh_enable_ip+0x12d/0x1c0 [ 150.714321][ T7162] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 150.714339][ T7162] ? __dev_queue_xmit+0x27b/0x3b50 [ 150.714355][ T7162] ? __dev_queue_xmit+0x27b/0x3b50 [ 150.714370][ T7162] ? __dev_queue_xmit+0x27b/0x3b50 [ 150.714389][ T7162] ? __dev_queue_xmit+0x1d79/0x3b50 [ 150.714411][ T7162] ? __lock_acquire+0xab9/0xd20 [ 150.714454][ T7162] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.714475][ T7162] rtnetlink_rcv_msg+0x7cf/0xb70 [ 150.714500][ T7162] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 150.714520][ T7162] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.714540][ T7162] ? ref_tracker_free+0x63a/0x7d0 [ 150.714561][ T7162] ? __asan_memcpy+0x40/0x70 [ 150.714578][ T7162] ? __pfx_ref_tracker_free+0x10/0x10 [ 150.714595][ T7162] ? __skb_clone+0x63/0x7a0 [ 150.714621][ T7162] netlink_rcv_skb+0x205/0x470 [ 150.714650][ T7162] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.714673][ T7162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.714703][ T7162] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.714732][ T7162] netlink_unicast+0x82f/0x9e0 [ 150.714764][ T7162] ? __pfx_netlink_unicast+0x10/0x10 [ 150.714785][ T7162] ? netlink_sendmsg+0x642/0xb30 [ 150.714802][ T7162] ? skb_put+0x11b/0x210 [ 150.714820][ T7162] netlink_sendmsg+0x805/0xb30 [ 150.714849][ T7162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.714874][ T7162] ? aa_sock_msg_perm+0xf1/0x1d0 [ 150.714892][ T7162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.714909][ T7162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.714929][ T7162] __sock_sendmsg+0x21c/0x270 [ 150.714951][ T7162] ____sys_sendmsg+0x505/0x830 [ 150.714972][ T7162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.714998][ T7162] ? import_iovec+0x74/0xa0 [ 150.715019][ T7162] ___sys_sendmsg+0x21f/0x2a0 [ 150.715039][ T7162] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.715089][ T7162] ? __fget_files+0x2a/0x420 [ 150.715109][ T7162] ? __fget_files+0x3a0/0x420 [ 150.715136][ T7162] __x64_sys_sendmsg+0x19b/0x260 [ 150.715155][ T7162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.715178][ T7162] ? __pfx_ksys_write+0x10/0x10 [ 150.715194][ T7162] ? rcu_is_watching+0x15/0xb0 [ 150.715214][ T7162] ? do_syscall_64+0xbe/0x3b0 [ 150.715239][ T7162] do_syscall_64+0xfa/0x3b0 [ 150.715258][ T7162] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.715278][ T7162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.715294][ T7162] ? clear_bhb_loop+0x60/0xb0 [ 150.715314][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.715329][ T7162] RIP: 0033:0x7fbefe18ebe9 [ 150.715344][ T7162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.715357][ T7162] RSP: 002b:00007fbefef61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.715373][ T7162] RAX: ffffffffffffffda RBX: 00007fbefe3b5fa0 RCX: 00007fbefe18ebe9 [ 150.715384][ T7162] RDX: 0000000020000844 RSI: 00002000000002c0 RDI: 0000000000000003 [ 150.715393][ T7162] RBP: 00007fbefef61090 R08: 0000000000000000 R09: 0000000000000000 [ 150.715402][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.715411][ T7162] R13: 00007fbefe3b6038 R14: 00007fbefe3b5fa0 R15: 00007fbefe4dfa28 [ 150.715437][ T7162] [ 150.729079][ T5992] usb 5-1: USB disconnect, device number 6 [ 150.995193][ T5865] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 151.201219][ T7163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.395570][ T7166] FAULT_INJECTION: forcing a failure. [ 151.395570][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 151.409331][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.1.340 Not tainted syzkaller #0 PREEMPT(full) [ 151.409346][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.409352][ T7166] Call Trace: [ 151.409356][ T7166] [ 151.409361][ T7166] dump_stack_lvl+0x189/0x250 [ 151.409380][ T7166] ? __pfx____ratelimit+0x10/0x10 [ 151.409396][ T7166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.409407][ T7166] ? __pfx__printk+0x10/0x10 [ 151.409424][ T7166] ? __pfx___might_resched+0x10/0x10 [ 151.409433][ T7166] ? fs_reclaim_acquire+0x7d/0x100 [ 151.409451][ T7166] should_fail_ex+0x414/0x560 [ 151.409466][ T7166] should_failslab+0xa8/0x100 [ 151.409481][ T7166] __kmalloc_noprof+0xcb/0x4f0 [ 151.409493][ T7166] ? kfree+0x4d/0x440 [ 151.409503][ T7166] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.409515][ T7166] tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.409530][ T7166] ? tomoyo_mount_permission+0x27a/0x970 [ 151.409546][ T7166] tomoyo_mount_permission+0x377/0x970 [ 151.409562][ T7166] ? tomoyo_mount_permission+0x27a/0x970 [ 151.409577][ T7166] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 151.409620][ T7166] security_sb_mount+0xec/0x350 [ 151.409637][ T7166] path_mount+0xbc/0xfe0 [ 151.409651][ T7166] ? user_path_at+0x44/0x60 [ 151.409660][ T7166] ? kmem_cache_free+0x18f/0x400 [ 151.409677][ T7166] __se_sys_mount+0x317/0x410 [ 151.409694][ T7166] ? __pfx___se_sys_mount+0x10/0x10 [ 151.409707][ T7166] ? rcu_is_watching+0x15/0xb0 [ 151.409719][ T7166] ? do_syscall_64+0xbe/0x3b0 [ 151.409733][ T7166] ? __x64_sys_mount+0x20/0xc0 [ 151.409748][ T7166] do_syscall_64+0xfa/0x3b0 [ 151.409761][ T7166] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.409774][ T7166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.409783][ T7166] ? clear_bhb_loop+0x60/0xb0 [ 151.409795][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.409804][ T7166] RIP: 0033:0x7f0b44d8ebe9 [ 151.409813][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.409820][ T7166] RSP: 002b:00007f0b45b44038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.409831][ T7166] RAX: ffffffffffffffda RBX: 00007f0b44fb5fa0 RCX: 00007f0b44d8ebe9 [ 151.409838][ T7166] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 151.409844][ T7166] RBP: 00007f0b45b44090 R08: 0000200000002140 R09: 0000000000000000 [ 151.409850][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.409855][ T7166] R13: 00007f0b44fb6038 R14: 00007f0b44fb5fa0 R15: 00007f0b450dfa28 [ 151.409870][ T7166] [ 151.409884][ T7166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.675827][ T5932] tipc: Node number set to 2130706433 [ 151.945333][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 152.022970][ T5865] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.056041][ T5865] usb 3-1: config 0 has no interface number 0 [ 152.103404][ T5865] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 152.112845][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.121825][ T5865] usb 3-1: Product: syz [ 152.126684][ T5865] usb 3-1: Manufacturer: syz [ 152.131291][ T5865] usb 3-1: SerialNumber: syz [ 152.158984][ T5865] usb 3-1: config 0 descriptor?? [ 152.179207][ T5865] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 152.376541][ T7184] fuse: Unknown parameter '00000000000000000000' [ 152.392793][ T5992] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 152.741729][ T5992] usb 2-1: Using ep0 maxpacket: 16 [ 152.759800][ T5992] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 152.778711][ T5992] usb 2-1: config 0 has no interface number 0 [ 152.789430][ T5992] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.875464][ T5953] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 152.939686][ T5992] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 153.029664][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 153.050090][ T5953] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.059081][ T5953] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 153.070652][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.075467][ T5992] usb 2-1: Product: syz [ 153.152831][ T5992] usb 2-1: SerialNumber: syz [ 153.152877][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 153.181652][ T5992] usb 2-1: config 0 descriptor?? [ 153.206359][ T5992] cm109 2-1:0.8: invalid payload size 3, expected 4 [ 153.231666][ T5992] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input9 [ 153.388242][ T849] vhci_hcd: vhci_device speed not set [ 153.416146][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 153.474816][ T5953] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.484571][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.500276][ T5953] usb 1-1: Product: syz [ 153.517735][ T5953] usb 1-1: Manufacturer: syz [ 153.548885][ T5953] cdc_wdm 1-1:1.0: skipping garbage [ 153.573617][ T5953] cdc_wdm 1-1:1.0: skipping garbage [ 153.597429][ T5953] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 153.620078][ T5953] cdc_wdm 1-1:1.0: Unknown control protocol [ 153.877163][ T5865] gspca_spca1528: reg_w err -110 [ 153.888494][ T5865] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 154.706312][ T5992] usb 3-1: USB disconnect, device number 17 [ 154.926547][ T24] usb usb34-port1: attempt power cycle [ 154.994481][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 155.145123][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 155.152173][ C0] ------------[ cut here ]------------ [ 155.157809][ C0] URB ffff888077403600 submitted while active [ 155.164324][ C0] WARNING: CPU: 0 PID: 7188 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830 [ 155.173864][ C0] Modules linked in: [ 155.177902][ C0] CPU: 0 UID: 0 PID: 7188 Comm: syz.1.342 Not tainted syzkaller #0 PREEMPT(full) [ 155.187135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.197200][ C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 155.202757][ C0] Code: 44 89 f2 e8 e1 bf 00 fa e9 13 fc ff ff e8 f7 d6 93 fa c6 05 4e ad 61 08 01 90 48 c7 c7 c0 fc 34 8c 48 89 de e8 80 75 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 d1 d6 93 fa eb 11 e8 ca d6 93 fa bd [ 155.222347][ C0] RSP: 0018:ffffc90000007868 EFLAGS: 00010046 [ 155.228411][ C0] RAX: be887edf7a445f00 RBX: ffff888077403600 RCX: 0000000000040000 [ 155.236369][ C0] RDX: ffffc90002161000 RSI: 0000000000007aa2 RDI: 0000000000007aa3 [ 155.244346][ C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a [ 155.252308][ C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 155.260376][ C0] R13: ffff888063a30030 R14: ffff888077403608 R15: 0000000000000820 [ 155.268354][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 155.277271][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.283843][ C0] CR2: 00007f13ba6dfca8 CR3: 0000000030880000 CR4: 00000000003526f0 [ 155.291801][ C0] Call Trace: [ 155.295065][ C0] [ 155.297889][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 155.303781][ C0] ? kcov_remote_start+0x97/0x7f0 [ 155.308791][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 155.314498][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 155.319870][ C0] dummy_timer+0x862/0x4550 [ 155.324368][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.329733][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 155.335465][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 155.340414][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 155.345331][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 155.350247][ C0] __hrtimer_run_queues+0x529/0xc60 [ 155.355437][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 155.361138][ C0] ? read_tsc+0x9/0x20 [ 155.365213][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 155.371007][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 155.376095][ C0] handle_softirqs+0x283/0x870 [ 155.380842][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 155.385585][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 155.390867][ C0] __irq_exit_rcu+0xca/0x1f0 [ 155.395463][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 155.400649][ C0] irq_exit_rcu+0x9/0x30 [ 155.404892][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 155.410525][ C0] [ 155.413455][ C0] [ 155.416366][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.422325][ C0] RIP: 0010:unwind_next_frame+0xb13/0x2390 [ 155.428117][ C0] Code: 78 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 48 89 df e8 ad 4d b0 00 <48> 89 9c 24 88 00 00 00 49 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 [ 155.447708][ C0] RSP: 0018:ffffc9001e576e98 EFLAGS: 00000246 [ 155.453776][ C0] RAX: dffffc0000000000 RBX: ffffc9001e576f78 RCX: ffffffff8fbf7420 [ 155.461741][ C0] RDX: ffffffff903f749c RSI: 0000000000000002 RDI: ffffffff8be33720 [ 155.469719][ C0] RBP: 1ffff92003caedee R08: 0000000000000014 R09: ffffffff8172c195 [ 155.477671][ C0] R10: ffffc9001e576fb8 R11: ffffffff81ac3820 R12: ffffc9001e5772e0 [ 155.485623][ C0] R13: 1ffff92003caedef R14: ffffc9001e576f68 R15: ffffc9001e570000 [ 155.493579][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.499715][ C0] ? unwind_next_frame+0xa5/0x2390 [ 155.504811][ C0] ? unwind_next_frame+0xd4/0x2390 [ 155.509914][ C0] ? unwind_next_frame+0xa5/0x2390 [ 155.515002][ C0] ? post_alloc_hook+0x240/0x2a0 [ 155.519921][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.526051][ C0] arch_stack_walk+0x11c/0x150 [ 155.530794][ C0] ? post_alloc_hook+0x240/0x2a0 [ 155.535712][ C0] stack_trace_save+0x9c/0xe0 [ 155.540369][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 155.545730][ C0] save_stack+0xf5/0x1f0 [ 155.549959][ C0] ? __pfx_save_stack+0x10/0x10 [ 155.554792][ C0] ? post_alloc_hook+0x240/0x2a0 [ 155.559716][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 155.565943][ C0] __set_page_owner+0x8d/0x4a0 [ 155.570696][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 155.576049][ C0] post_alloc_hook+0x240/0x2a0 [ 155.580815][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 155.586344][ C0] ? unwind_get_return_address+0x4d/0x90 [ 155.591968][ C0] ? stack_trace_save+0x9c/0xe0 [ 155.596805][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 155.602674][ C0] ? prepare_alloc_pages+0x213/0x610 [ 155.608024][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 155.613807][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 155.620114][ C0] ? ___slab_alloc+0x236/0x1410 [ 155.624972][ C0] alloc_pages_mpol+0x232/0x4a0 [ 155.629805][ C0] allocate_slab+0x8a/0x370 [ 155.634287][ C0] ___slab_alloc+0xbeb/0x1410 [ 155.638966][ C0] ? kobject_uevent_env+0x27c/0x8c0 [ 155.644143][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 155.649495][ C0] ? kobject_uevent_env+0x27c/0x8c0 [ 155.654669][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 155.659943][ C0] kobject_uevent_env+0x27c/0x8c0 [ 155.665000][ C0] ? gadget_unbind_driver+0x315/0x430 [ 155.670358][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 155.676059][ C0] device_release_driver_internal+0x46c/0x800 [ 155.682107][ C0] driver_detach+0x1f3/0x2d0 [ 155.686677][ C0] bus_remove_driver+0x226/0x2f0 [ 155.691595][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 155.697306][ C0] raw_release+0xd7/0x260 [ 155.701632][ C0] ? __pfx_raw_release+0x10/0x10 [ 155.706561][ C0] __fput+0x44c/0xa70 [ 155.710534][ C0] task_work_run+0x1d4/0x260 [ 155.715135][ C0] ? __pfx_task_work_run+0x10/0x10 [ 155.720241][ C0] do_exit+0x6b5/0x2300 [ 155.724380][ C0] ? do_raw_spin_lock+0x121/0x290 [ 155.729384][ C0] ? __pfx_do_exit+0x10/0x10 [ 155.733965][ C0] do_group_exit+0x21c/0x2d0 [ 155.738533][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.743713][ C0] get_signal+0x1286/0x1340 [ 155.748206][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 155.753738][ C0] ? count_memcg_event_mm+0x21/0x260 [ 155.759013][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 155.765162][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 155.770609][ C0] exit_to_user_mode_loop+0x75/0x110 [ 155.775874][ C0] do_syscall_64+0x2bd/0x3b0 [ 155.780465][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.785656][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.791704][ C0] ? clear_bhb_loop+0x60/0xb0 [ 155.796363][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.802235][ C0] RIP: 0033:0x7f0b44d8ebe9 [ 155.806626][ C0] Code: Unable to access opcode bytes at 0x7f0b44d8ebbf. [ 155.813616][ C0] RSP: 002b:00007f0b45b23038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.822006][ C0] RAX: fffffffffffffe00 RBX: 00007f0b44fb6090 RCX: 00007f0b44d8ebe9 [ 155.829955][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 155.837906][ C0] RBP: 00007f0b44e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 155.845856][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 155.853802][ C0] R13: 00007f0b44fb6128 R14: 00007f0b44fb6090 R15: 00007f0b450dfa28 [ 155.861762][ C0] [ 155.864770][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.872066][ C0] CPU: 0 UID: 0 PID: 7188 Comm: syz.1.342 Not tainted syzkaller #0 PREEMPT(full) [ 155.881241][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.891287][ C0] Call Trace: [ 155.894571][ C0] [ 155.897406][ C0] dump_stack_lvl+0x99/0x250 [ 155.902007][ C0] ? __asan_memcpy+0x40/0x70 [ 155.906578][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.911757][ C0] ? __pfx__printk+0x10/0x10 [ 155.916332][ C0] vpanic+0x281/0x750 [ 155.920293][ C0] ? __pfx__printk+0x10/0x10 [ 155.924865][ C0] ? __pfx_vpanic+0x10/0x10 [ 155.929353][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 155.934539][ C0] panic+0xb9/0xc0 [ 155.938249][ C0] ? __pfx_panic+0x10/0x10 [ 155.942699][ C0] __warn+0x31b/0x4b0 [ 155.946689][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 155.951609][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 155.956523][ C0] report_bug+0x2be/0x4f0 [ 155.960834][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 155.965747][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 155.970664][ C0] ? usb_submit_urb+0xfc3/0x1830 [ 155.975585][ C0] handle_bug+0x84/0x160 [ 155.979815][ C0] exc_invalid_op+0x1a/0x50 [ 155.984292][ C0] asm_exc_invalid_op+0x1a/0x20 [ 155.989118][ C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 155.994641][ C0] Code: 44 89 f2 e8 e1 bf 00 fa e9 13 fc ff ff e8 f7 d6 93 fa c6 05 4e ad 61 08 01 90 48 c7 c7 c0 fc 34 8c 48 89 de e8 80 75 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 d1 d6 93 fa eb 11 e8 ca d6 93 fa bd [ 156.014222][ C0] RSP: 0018:ffffc90000007868 EFLAGS: 00010046 [ 156.020268][ C0] RAX: be887edf7a445f00 RBX: ffff888077403600 RCX: 0000000000040000 [ 156.028217][ C0] RDX: ffffc90002161000 RSI: 0000000000007aa2 RDI: 0000000000007aa3 [ 156.036184][ C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a [ 156.044140][ C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 156.052109][ C0] R13: ffff888063a30030 R14: ffff888077403608 R15: 0000000000000820 [ 156.060082][ C0] ? usb_submit_urb+0xfc0/0x1830 [ 156.065001][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 156.070879][ C0] ? kcov_remote_start+0x97/0x7f0 [ 156.075891][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 156.081259][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 156.086620][ C0] dummy_timer+0x862/0x4550 [ 156.091143][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.096505][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 156.102220][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 156.107144][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 156.112067][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 156.117005][ C0] __hrtimer_run_queues+0x529/0xc60 [ 156.122195][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 156.127888][ C0] ? read_tsc+0x9/0x20 [ 156.131939][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 156.137730][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 156.142823][ C0] handle_softirqs+0x283/0x870 [ 156.147582][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 156.152342][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 156.157610][ C0] __irq_exit_rcu+0xca/0x1f0 [ 156.162177][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 156.167360][ C0] irq_exit_rcu+0x9/0x30 [ 156.171633][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 156.177277][ C0] [ 156.180194][ C0] [ 156.183104][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.189069][ C0] RIP: 0010:unwind_next_frame+0xb13/0x2390 [ 156.194857][ C0] Code: 78 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 48 89 df e8 ad 4d b0 00 <48> 89 9c 24 88 00 00 00 49 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 [ 156.214440][ C0] RSP: 0018:ffffc9001e576e98 EFLAGS: 00000246 [ 156.220505][ C0] RAX: dffffc0000000000 RBX: ffffc9001e576f78 RCX: ffffffff8fbf7420 [ 156.228455][ C0] RDX: ffffffff903f749c RSI: 0000000000000002 RDI: ffffffff8be33720 [ 156.236407][ C0] RBP: 1ffff92003caedee R08: 0000000000000014 R09: ffffffff8172c195 [ 156.244358][ C0] R10: ffffc9001e576fb8 R11: ffffffff81ac3820 R12: ffffc9001e5772e0 [ 156.252320][ C0] R13: 1ffff92003caedef R14: ffffc9001e576f68 R15: ffffc9001e570000 [ 156.260275][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.266413][ C0] ? unwind_next_frame+0xa5/0x2390 [ 156.271512][ C0] ? unwind_next_frame+0xd4/0x2390 [ 156.276606][ C0] ? unwind_next_frame+0xa5/0x2390 [ 156.281705][ C0] ? post_alloc_hook+0x240/0x2a0 [ 156.286633][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.292766][ C0] arch_stack_walk+0x11c/0x150 [ 156.297550][ C0] ? post_alloc_hook+0x240/0x2a0 [ 156.302474][ C0] stack_trace_save+0x9c/0xe0 [ 156.307137][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 156.312497][ C0] save_stack+0xf5/0x1f0 [ 156.316724][ C0] ? __pfx_save_stack+0x10/0x10 [ 156.321554][ C0] ? post_alloc_hook+0x240/0x2a0 [ 156.326499][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 156.332811][ C0] __set_page_owner+0x8d/0x4a0 [ 156.337573][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 156.342952][ C0] post_alloc_hook+0x240/0x2a0 [ 156.347720][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 156.353256][ C0] ? unwind_get_return_address+0x4d/0x90 [ 156.358878][ C0] ? stack_trace_save+0x9c/0xe0 [ 156.363720][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 156.369596][ C0] ? prepare_alloc_pages+0x213/0x610 [ 156.374862][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 156.380650][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.386972][ C0] ? ___slab_alloc+0x236/0x1410 [ 156.391812][ C0] alloc_pages_mpol+0x232/0x4a0 [ 156.396661][ C0] allocate_slab+0x8a/0x370 [ 156.401159][ C0] ___slab_alloc+0xbeb/0x1410 [ 156.405839][ C0] ? kobject_uevent_env+0x27c/0x8c0 [ 156.411028][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 156.416394][ C0] ? kobject_uevent_env+0x27c/0x8c0 [ 156.421580][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 156.426853][ C0] kobject_uevent_env+0x27c/0x8c0 [ 156.431861][ C0] ? gadget_unbind_driver+0x315/0x430 [ 156.437234][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 156.442962][ C0] device_release_driver_internal+0x46c/0x800 [ 156.449050][ C0] driver_detach+0x1f3/0x2d0 [ 156.453648][ C0] bus_remove_driver+0x226/0x2f0 [ 156.458578][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 156.464288][ C0] raw_release+0xd7/0x260 [ 156.468616][ C0] ? __pfx_raw_release+0x10/0x10 [ 156.473562][ C0] __fput+0x44c/0xa70 [ 156.477558][ C0] task_work_run+0x1d4/0x260 [ 156.482154][ C0] ? __pfx_task_work_run+0x10/0x10 [ 156.487265][ C0] do_exit+0x6b5/0x2300 [ 156.491415][ C0] ? do_raw_spin_lock+0x121/0x290 [ 156.496440][ C0] ? __pfx_do_exit+0x10/0x10 [ 156.501026][ C0] do_group_exit+0x21c/0x2d0 [ 156.505618][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.510798][ C0] get_signal+0x1286/0x1340 [ 156.515289][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 156.520818][ C0] ? count_memcg_event_mm+0x21/0x260 [ 156.526089][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 156.532243][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 156.537701][ C0] exit_to_user_mode_loop+0x75/0x110 [ 156.542985][ C0] do_syscall_64+0x2bd/0x3b0 [ 156.547573][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.552774][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.558896][ C0] ? clear_bhb_loop+0x60/0xb0 [ 156.563571][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.569453][ C0] RIP: 0033:0x7f0b44d8ebe9 [ 156.573852][ C0] Code: Unable to access opcode bytes at 0x7f0b44d8ebbf. [ 156.580856][ C0] RSP: 002b:00007f0b45b23038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 156.589277][ C0] RAX: fffffffffffffe00 RBX: 00007f0b44fb6090 RCX: 00007f0b44d8ebe9 [ 156.597245][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 156.605209][ C0] RBP: 00007f0b44e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 156.613162][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 156.621114][ C0] R13: 00007f0b44fb6128 R14: 00007f0b44fb6090 R15: 00007f0b450dfa28 [ 156.629077][ C0] [ 156.632332][ C0] Kernel Offset: disabled [ 156.636644][ C0] Rebooting in 86400 seconds..